last executing test programs: 28m48.449670278s ago: executing program 32 (id=1303): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x5}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c000280050001009800000006000340000400003c0003800c000280050001002f0000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002"], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 27m54.706373756s ago: executing program 3 (id=1417): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 27m51.994070543s ago: executing program 3 (id=1419): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 27m51.466250826s ago: executing program 3 (id=1421): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4001c00) 27m47.783475555s ago: executing program 3 (id=1427): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 27m42.773266437s ago: executing program 3 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000004400004803c0001800b00010065787468db3336ab82044ebc38f5cf647200002c000280080003400000001908000140000000020500020007000000080006400000000208000440000000040900010073797a30000000000900020073797a3200000000140000001100010000"], 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3ff, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000440)={r6, &(0x7f0000000340)='-\x00', 0x101201, &(0x7f0000000380)={@align=0xff, {0x6, 0x5, 0x9, 0x1ff}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xfffffff6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000240)="70fbb361da4a84af4312caea1726a949e529befa370c90e9beb9495281b732b1401ae66d32b3b6b4bbb11962b5a9a472e61691f74238ba796d13ec82e6e2d24525c195912178422c5dea67dcc6622ac1632f068f6af11807ce4645deef87751908420765f035d16c07b81c5bda42c35ea27a83fd8f6944f63242ddbe5a8865f34d17119bda0532686a385b7ae7c0f2907bb46854cdbfa4c6f63e5c4e63f91f22546e634669aafda0e988ffdf5ab2f0527ebe80686d803ff6b1a3e24faf7b6e27aec99c8ed9009e8f4f80516d8c6fd10315037b04b9cc96f71b", &(0x7f0000000480)=@tcp=r9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000780), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={0x28, r11, 0x211, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r13}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x124, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x405}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x66}]}, @CTA_LABELS={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa11}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xbf, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000940), &(0x7f0000000bc0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000d80)={r14, 0x1, 0x6}, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 27m37.70275657s ago: executing program 3 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 27m35.827430966s ago: executing program 33 (id=1423): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x12b) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = dup2(r3, r3) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 27m19.887985524s ago: executing program 34 (id=1437): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r8, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 27m17.456427473s ago: executing program 35 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 26m29.381290834s ago: executing program 4 (id=1499): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 26m27.417281251s ago: executing program 4 (id=1502): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, 0x0) 26m27.002187381s ago: executing program 4 (id=1505): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000180)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c000280050001009800000006000340000400003c0003800c000280050001002f0000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff02000000000000000000000000000114"], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) 26m24.99722432s ago: executing program 4 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @auto=[0x66, 0x38, 0x63, 0x33, 0x63, 0x66, 0x38, 0x0, 0x34, 0x32, 0x38, 0x33, 0x36, 0x36, 0x37, 0x33]}, &(0x7f0000000400)={0x0, "cfe062a761e3827b24b8892afdefedeb95e601613685c3359b46736511645680f020b02d24851781ed8c7134d7fd8378d32f107e462b4542f6487e32df24b2e6", 0x40}, 0x48, 0xfffffffffffffff8) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, &(0x7f00000003c0)='/dev/vsock\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='$\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040) syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) 26m19.304610029s ago: executing program 4 (id=1512): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 26m17.523302172s ago: executing program 4 (id=1515): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 26m0.684677522s ago: executing program 36 (id=1515): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 25m2.812669771s ago: executing program 9 (id=1611): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 24m58.789814949s ago: executing program 9 (id=1614): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 24m55.161957877s ago: executing program 9 (id=1622): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 24m54.011310875s ago: executing program 9 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000004400004803c0001800b00010065787468db3336ab82044ebc38f5cf647200002c000280080003400000001908000140000000020500020007000000080006400000000208000440000000040900010073797a30000000000900020073797a3200000000140000001100010000"], 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3ff, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000440)={r6, &(0x7f0000000340)='-\x00', 0x101201, &(0x7f0000000380)={@align=0xff, {0x6, 0x5, 0x9, 0x1ff}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xfffffff6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000240)="70fbb361da4a84af4312caea1726a949e529befa370c90e9beb9495281b732b1401ae66d32b3b6b4bbb11962b5a9a472e61691f74238ba796d13ec82e6e2d24525c195912178422c5dea67dcc6622ac1632f068f6af11807ce4645deef87751908420765f035d16c07b81c5bda42c35ea27a83fd8f6944f63242ddbe5a8865f34d17119bda0532686a385b7ae7c0f2907bb46854cdbfa4c6f63e5c4e63f91f22546e634669aafda0e988ffdf5ab2f0527ebe80686d803ff6b1a3e24faf7b6e27aec99c8ed9009e8f4f80516d8c6fd10315037b04b9cc96f71b", &(0x7f0000000480)=@tcp=r9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000780), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={0x28, r11, 0x211, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r13}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x124, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x405}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x66}]}, @CTA_LABELS={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa11}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xbf, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000940), &(0x7f0000000bc0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000d80)={r14, 0x1, 0x6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@end]}}, {{0x0, 0x20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 24m51.005946457s ago: executing program 9 (id=1630): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff0700"/46, @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff008000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="640000001e00190300bd7000ffdbdf2700000000000000000000ffffac1414bb000004d40a00ff000000000000000000000000000000000122800000013500002400091a97c712b5460cd410dd6997f082c0ed7d2116662329cc52e5711fa294930324d7697f5253a49d42c12b164b95bf0f9651ada063cd8b695c7f6ac3fa6938611a84ce69533c59f7b9d59276479a5bfad4979524e01363a2a440ad51b38ee15ae4573b0a4dc448dedff3ca4e483cd64b4f3f1cc424e75580000000969b72c96d6cb5bc3e0a634643f76ff52a9dfa09abd4e7e5"], 0x64}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x18418, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0x0, 0x4ce, &(0x7f0000000500)="$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") ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000000)=0x1) 24m49.867154735s ago: executing program 9 (id=1632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 24m34.642200344s ago: executing program 37 (id=1632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 23m18.209695358s ago: executing program 6 (id=1757): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff0700"/46, @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff008000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 23m15.288557459s ago: executing program 6 (id=1760): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x1e, 0x805, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x200000000000009, 0x0, 0x80000001, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x125400, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xfff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = open(0x0, 0x0, 0x0) fcntl$lock(r0, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x1a, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x0, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_query, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0xf1, &(0x7f0000000440)=""/241, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xf, 0x4, 0x9}, 0x10, r9, r4, 0x0, &(0x7f0000000780)=[r5, r10, r5, r5, r10, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 23m13.288799997s ago: executing program 6 (id=1767): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff0700"/46, @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff008000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="640000001e00190300bd7000ffdbdf2700000000000000000000ffffac1414bb000004d40a00ff000000000000000000000000000000000122800000013500002400091a97c712b5460cd410dd6997f082c0ed7d2116662329cc52e5711fa294930324d7697f5253a49d42c12b164b95bf0f9651ada063cd8b695c7f6ac3fa6938611a84ce69533c59f7b9d59276479a5bfad4979524e01363a2a440ad51b38e"], 0x64}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 23m12.126289875s ago: executing program 6 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 23m10.949270974s ago: executing program 6 (id=1772): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x1e, 0x805, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x200000000000009, 0x0, 0x80000001, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x125400, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xfff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x0, 0x0) fcntl$lock(r0, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 23m9.495412419s ago: executing program 6 (id=1777): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 22m54.216534229s ago: executing program 38 (id=1777): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 5m42.927737378s ago: executing program 5 (id=5336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x7) r6 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) 5m39.590779359s ago: executing program 5 (id=5341): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = fsopen(0x0, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r7, &(0x7f0000001000)='syzkaller%', 0xa) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="ff1d", 0x2, 0xffffffffffffffff) 5m38.2945568s ago: executing program 5 (id=5346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x44}}, 0x850) 5m38.084575946s ago: executing program 5 (id=5348): sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x40408c0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m37.817707132s ago: executing program 5 (id=5349): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x98}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x9, 0x8000000000000001, 0x59f24867, 0x0, 0x7f, 0x80000002, 0x9, 0xfffffffffffffffe, 0x6, 0x2, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x340204}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m37.48499639s ago: executing program 5 (id=5351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m21.84354137s ago: executing program 39 (id=5351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.715614165s ago: executing program 0 (id=6602): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4.589549828s ago: executing program 8 (id=6603): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 4.51621276s ago: executing program 0 (id=6604): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), 0x0}, 0x20) 4.423276832s ago: executing program 8 (id=6606): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, 0x0, 0x0) 4.264258996s ago: executing program 8 (id=6608): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.232461067s ago: executing program 8 (id=6609): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70ad2c}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3.880085325s ago: executing program 0 (id=6612): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000340)=""/90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x46}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52765e1a97c5da42a110cfc487f25a4407", 0x39}], 0x1, 0x0, 0x0, 0x4008011}, 0x4040004) recvmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0x38}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x3, 0x40, 0x7, 0x72cf}, {0x7, 0x2, 0xe2, 0x3ff}]}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008001) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r5, 0x16, 0x8, 0x8, 0x207a}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x70bd22, 0x0, {{}, {@val={0x0, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xffffffffffffffec}]}, 0x18}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0x8402}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 3.768770348s ago: executing program 2 (id=6614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3.655964071s ago: executing program 2 (id=6616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close(0x3) 3.596975682s ago: executing program 7 (id=6617): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000001) 3.496124495s ago: executing program 2 (id=6618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(r0, 0x4, 0x400) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.479759915s ago: executing program 7 (id=6619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.352144278s ago: executing program 7 (id=6621): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x60400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000f, 0x31, r1, 0x4d8ea000) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r3 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) 3.339249089s ago: executing program 8 (id=6622): r0 = syz_open_dev$media(0x0, 0x840, 0x24002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$xdp(0x2c, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000080) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000900)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="4014180000003dadd59eeb050588a7b87316be3ddc3244874e84ae0b774c055aa40d118028b5064b77"], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/90, 0x5a, 0x9) syz_emit_ethernet(0x3b6, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000240)={0x14, 0x2f, 0x1, 0x70bd2b, 0x25dfdbfd, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x24048004) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x12) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace$setregs(0xd, r5, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.092977255s ago: executing program 1 (id=6623): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x0, 0x0, 0x8010}, 0x2004c040) sendmsg$nl_route(r3, 0x0, 0x40000c0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4845}, 0x811) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388e54507001c0068000003029078ffffffffe000000213060f00e000000135d319e4aa8ade559cb3ff41925b87857a0dfd5c3fbb1080b99d5561c5"], 0x0) 2.912121889s ago: executing program 1 (id=6624): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x480000, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast2, 0x4f23, 0xfffc, 0x4e23, 0x6, 0x2, 0x2a11bad3d5f03f84, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x20000000004, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r5 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000002, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) 2.45088933s ago: executing program 7 (id=6625): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 989.406646ms ago: executing program 1 (id=6626): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) 872.187908ms ago: executing program 1 (id=6627): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="140000000000000000000000020000008100000000000000680000000000000000000000070000004424d6a10000000000000001ac1414bb000003ff7f00000100000008e00000020000000344341151ac1414bbfffffffa0a01010000000001640101020000008cd63ef1dbf586ed3f998c000a01010280000001e000000200000000ac"], 0xc8}}], 0x1, 0x20000011) 870.352269ms ago: executing program 1 (id=6628): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x200a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x1, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 822.13898ms ago: executing program 0 (id=6629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close(0x3) 683.259833ms ago: executing program 2 (id=6630): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = fsopen(0x0, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='syzkaller%', 0xa) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="ff1d", 0x2, 0xffffffffffffffff) 608.213915ms ago: executing program 1 (id=6631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 489.752708ms ago: executing program 7 (id=6632): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70ad2c}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 331.035352ms ago: executing program 2 (id=6633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0x12, 0x4, 0x0, 0x0) 305.820382ms ago: executing program 8 (id=6634): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0xc, 0x2, 0x86cb}, 0x30, 0x1) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r7, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0xd}, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x73, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@local, 0x8}, {@loopback, 0x5}, {@local, 0x8}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x400000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 259.704303ms ago: executing program 7 (id=6635): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x7e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c5c4e185f80066bad004edc7442402f8ff0000c7442406000000000f011c24", 0x50}], 0x1, 0x33, 0x0, 0x4c) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 192.473205ms ago: executing program 0 (id=6636): ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) socket(0xa, 0x3, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) 180.84µs ago: executing program 0 (id=6637): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f0000001040)=0x4, 0x7c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x181802, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @private=0xa010100}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x7c0, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7b2, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x6, "073b1f7435e2d867e08a5f0a53e079c941aab8d232c719c8bbfca18542f8091b7169e51ea76888a7baec8bb8a14260d887a6627449785fd038a2d73cb3703a357f7a74f5380ab154d04a643e5a20790cfd03d93245cefa49e2769abeb28d9cdbf73ea1aed966b7cfab54fa980fce43861ec88dd03d097ff2318a75e42f31faf7c8142933abcfb25953f99a0b1ae635133a5b4694a0129ba21c87fbfc130956b2944a00014895f5709e6d792a0f137dbb53280bffa81e713afeb7a3b55bfa9a7df188afac9bdc8609ba48a9c1f83e2a1cd8f68f10bb277a2fe64c39da5ad9680f327cabd24f9e6843a792aabd70b8cdfb3ab02688043a50adaf16aed7434bc8a164d7858325614e2d2c0ebf5af99e10907eaed4f00e01455be87bb4d65f934b5075d928510b788145c8cd8aa4763273d836c47f98c67124d27f7b7aa13b871d570d7ee03c57d75213b3ec59b4e1a0be1f24a222384ed7c844ccb548a619b0913ff02e5f3f1f4e83c1007aec98319610ce9b19cc332d902bba98bc72381277c4a32ef0dff2403987898943711d98854c027415fc9f0fdaaf58b4cfe03b355a3ba43c197a72d81f9af57793162da1f17e2f302e4f3ebe37e671752965409cb3099543578bdff01a5f1833e6916c0945eb5fa6d6b619fbd077698749a82e8651734f14a13d5b82ec1594ff4e87d85fb934211604c8651f64a475c13a553ebaa0d8724e003024d5f6e75cb33627b6be85b3faa386efefd94a86e80b27791a6522d8718d1177618a5cd713d4990bda4d6fb0493e117b4f2038635e560dd1691d96b34e7aa4c293d9d6b8faff67f4238d57df9ce90336018dffdf946c31118443c99dc65a4416581a273fa8ce2bc09c87927ad2e9a801920639163fbea1ff2e913ab182378137749bb638e5a62375137b724f4c4a9065296a9f0ac02c607f258ed2bbcc7ce80b34aac12e80a3190e3b5bae6739a8164bbf41d2697d6c1152c8ba3ecd766ed2dc29a5760692c570c2740ee03a275ed028c8e86f0c91a3a8cbc19d043cb374cf0962e8ad2acb632255c315bc65adaa5a36de6e1e8e311bfb4a9be1b66cc96b160510fb14d443e33a656551385b2b9a5a00d9424631e51356eb83b05902a58353328acb5f544030b5e871588f3eb0671d223288058bbe600d7365b4b67ee3c5e9e3caee897b0af100cb4122ea91edfea12cc6cd2a836811ae3e386f55f843736f875c63dc2d0ca32c8b0a2253591b752f34255a6082272482021f30d2e2efac12fa0d0b887ede0c484675610413e746b61afee5c088b86121c4b19b99c95dca2accbc00bdb2beac851461c54df2df6f9f20590c7205fb35ecbf27ececee586708556b0ec59469f858aa835eca0c688f3b050ab9d1309e4f37a9d4ebd38368183dc2680270f995d414c66347ea06b0c9706e183c9706de9b435d8a1e5061a1c725cd0efd091405c53128ec8c60e59df7ba55c348e285496c487b02185acd9e832539f0f3a25f64cca5c2f4c99bb9a97b3a6c2e5b43c9dc8ad9e46ec3cbde5252a579a41e9e998b0ce7e6d31fe8d795e78d4f032f93ff3d45463e86e2fa5de0ee2fc602bdb486379e3964fdbd23509cca625e61a7eac438331c46f12cfbc5e72dec91bf81317456c12f5d508fe01b210127611b456ee6d4ecddb2640c14528e8b094af4d49ebb881f554551087b35b361012c5abce0521ff0bd0a582a62144d2485f73b804b1ad326f68946ba66bfd701689a5ca42504520bf7873bbe104d44eac7afa1c0f2b7d7c1c44b24463b1fcdf87d662d080c3025f65339553602b78399d4a419da6b17aaf7a97fb83985890ab813e50ee16686801618f9e22b59d65370d4e4fa394e744bba2ebd89e252822b6eabee225f0034030d976660f8064f2d78849c55dc850f2cfedf9df92b287989ad8883e7c2add0b4865783c8898cb242abec9e4a1703d6e278abab8fbe3d26f73aee080949ee9a9a8d89bd1556c0c8d4effded2ac1fb2bf5ee1b8d9f806bac2c054f1e1ac40defd464349412060dc4e00ae5f250a4c179d7d4b81fd44e9e02512fb8d0181e5806cc375e8db4a701bea922e95e9036e9ecf54b7cc82dac837e897d58ab519c02733e562915b9189d566be9fb75a6e42204109a516de840d2f794fa04c6946149aa18f98675e7be1099e9f8c53a67eabacbdcab0ab4fea229e22623ba2eb08be0664d96b6d06ca427ddf1130d7ef3d375cf7ed9c19c58ad38c2668e75df9ecc6aedc3836303a95c66ba9b693113f19258960817d4faad4bffb7189ee79dd9ede363aa705b6abb498cca40ae7a9781f0d6b396e6af440f296f29a9fd01b0e72c9d4d432bf3adc4ea8bdba91d74defcaca8536640507e86b00f69440e5c2c486e8ad7b5ced28a506a5fbeffd27ef43db85e99fcbc4a07b4fadda3ac6e5ae821e3a3ffbf1e123e01ceac7ef081f6ba8dcca58fa4059c5b4bd8f89d890b814a067afa222011926df529716aab750e172c831059346eb47aa49933be58924b16bb14cbf6f1ee4cb579fd9360839d45f89a331cd2ca6e3ed77d62f3c3fbeb251ff6473cdabb9ab563df61b67606ac1af5aefca6b48d4420fd8ad364ffde59ae6a2319d7c7da7660fd5a69fa7cad2d3d16a0908341af88ce8849e47c34b319cf5f1bfdc27e8c5c512931af028250ec42007744058d5b53f014a440d3968254938878e87757caaedf916f69ffc2997ee1fbe935a1e90771e87d90166db74a540b963efce0"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 0s ago: executing program 2 (id=6638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="1435", 0x2}], 0x1}}], 0x1, 0x54) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x10, 0x5e, 0x601}, 0x10}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) kernel console output (not intermixed with test programs): [ 2142.613275][T26654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2145.410054][T10536] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2145.787839][T10536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2145.827438][T10536] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2145.914229][T10536] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2145.980295][T10536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.234417][T10536] usb 3-1: config 0 descriptor?? [ 2146.300494][T10536] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2148.326581][T25184] usb 3-1: USB disconnect, device number 10 [ 2148.375026][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5642'. [ 2148.387534][ T4232] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2148.657585][ T4232] usb 8-1: Using ep0 maxpacket: 32 [ 2148.787971][ T4232] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2148.830344][ T4232] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2151.847585][ T4232] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2151.860625][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.870940][ T4232] usb 8-1: Product: syz [ 2151.879668][ T4232] usb 8-1: Manufacturer: syz [ 2151.928612][ T4232] usb 8-1: config 0 descriptor?? [ 2151.977318][ T4232] usb 8-1: can't set config #0, error -71 [ 2152.017884][ T4232] usb 8-1: USB disconnect, device number 16 [ 2152.297591][T26757] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.5653'. [ 2152.480658][T26766] loop0: detected capacity change from 0 to 256 [ 2152.545316][T26766] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2152.623007][T26766] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5659'. [ 2156.145463][T26788] device syzkaller0 entered promiscuous mode [ 2157.875861][T24466] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2159.490817][T26830] device syzkaller0 entered promiscuous mode [ 2161.036765][T26850] loop0: detected capacity change from 0 to 256 [ 2161.043445][ T4200] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2161.748876][T26850] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2161.837929][ T4200] usb 8-1: Using ep0 maxpacket: 16 [ 2161.957776][ T4200] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.998141][ T4200] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2162.090710][ T4200] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2162.170071][ T4200] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.247036][ T4200] usb 8-1: config 0 descriptor?? [ 2162.540093][T26871] binder: 26870:26871 ioctl c0306201 2000000003c0 returned -14 [ 2162.809005][T26835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2162.927655][ T4200] usbhid 8-1:0.0: can't add hid device: -71 [ 2172.353551][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2172.360001][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.430340][ T4200] usbhid: probe of 8-1:0.0 failed with error -71 [ 2172.586799][ T4200] usb 8-1: USB disconnect, device number 17 [ 2175.071248][T26917] binder: 26916:26917 ioctl c0306201 2000000003c0 returned -14 [ 2179.218339][T26945] device syzkaller0 entered promiscuous mode [ 2180.260787][T26954] binder: 26952:26954 ioctl c0306201 2000000003c0 returned -14 [ 2180.698251][T24466] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2180.837402][ T4233] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2180.957584][T24466] usb 1-1: Using ep0 maxpacket: 32 [ 2180.977529][T18048] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2181.197521][ T4233] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2181.229125][ T4233] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2181.247555][T18048] usb 8-1: Using ep0 maxpacket: 8 [ 2181.287513][ T4233] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2181.298446][T24466] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2181.325073][ T4233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.347469][T24466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.356458][T24466] usb 1-1: Product: syz [ 2181.408320][T26960] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2181.416838][T18048] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2181.437718][T24466] usb 1-1: Manufacturer: syz [ 2181.443092][T24466] usb 1-1: SerialNumber: syz [ 2181.457436][T18048] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2181.499906][T18048] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2181.598681][T24466] usb 1-1: config 0 descriptor?? [ 2181.628136][T18048] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2181.687648][T24466] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2181.707421][ T4200] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2181.737839][T24466] dvb-usb: bulk message failed: -22 (4/0) [ 2181.745292][T24466] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2181.777529][T18048] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2181.847660][T18048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.935699][T26971] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2181.956347][T24466] dvb-usb: bulk message failed: -22 (5/0) [ 2182.028216][T24466] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2182.067661][ T4200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2182.091905][ T4200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2182.152665][ T4200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2182.188615][T24466] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2182.248186][T24466] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2182.254614][ T4200] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2182.290098][T24466] usb 1-1: media controller created [ 2182.298362][T18048] usb 8-1: GET_CAPABILITIES returned 0 [ 2182.305307][T18048] usbtmc 8-1:16.0: can't read capabilities [ 2182.324311][ T4200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.378345][ T4200] usb 3-1: config 0 descriptor?? [ 2182.453764][T10536] usb 9-1: USB disconnect, device number 21 [ 2182.473437][T24466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2182.647575][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.658942][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.668078][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.677322][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.686483][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.695616][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.704774][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.713913][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.723014][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.732120][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.741227][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.750326][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.759569][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.768672][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.777780][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.786886][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2182.798603][T26974] loop0: detected capacity change from 0 to 256 [ 2182.849624][T26974] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2182.883881][T24466] usb 1-1: selecting invalid altsetting 3 [ 2182.907557][ T4200] usbhid 3-1:0.0: can't add hid device: -71 [ 2182.914351][ T4200] usbhid: probe of 3-1:0.0 failed with error -71 [ 2182.934048][T24466] ttusb2: set interface to alts=3 failed [ 2182.982763][ T4200] usb 3-1: USB disconnect, device number 11 [ 2183.169781][T24466] DVB: Unable to find symbol tda10086_attach() [ 2183.181187][T24466] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2183.437930][T24466] dvb-usb: bulk message failed: -22 (4/0) [ 2183.449592][T24466] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2183.478763][T24466] dvb-usb: bulk message failed: -22 (5/0) [ 2183.485299][T24466] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2183.496778][T24466] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2183.549908][T24466] usb 1-1: USB disconnect, device number 18 [ 2183.758546][T24466] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2184.021841][T26992] program syz.2.5734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2184.146788][T18048] usb 8-1: USB disconnect, device number 18 [ 2184.181251][T26992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2184.256796][T26992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2184.265223][T24466] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2184.307064][T26992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2184.342577][T26992] device bridge_slave_0 left promiscuous mode [ 2184.362837][T26992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.456425][T26992] device bridge_slave_1 left promiscuous mode [ 2184.511512][T26992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.537629][T24466] usb 1-1: Using ep0 maxpacket: 8 [ 2184.650051][T26992] bond0: (slave bond_slave_0): Releasing backup interface [ 2184.774413][T26992] bond0: (slave bond_slave_1): Releasing backup interface [ 2185.150941][T26992] team0: Port device team_slave_0 removed [ 2185.231114][T26984] udc-core: couldn't find an available UDC or it's busy [ 2185.253844][T26984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2185.270502][T26992] team0: Port device team_slave_1 removed [ 2185.296882][T26992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2185.326208][T26992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2185.392998][T26992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2185.430770][T26992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2185.550090][T26999] netlink: 'syz.7.5736': attribute type 13 has an invalid length. [ 2185.584140][T26999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5736'. [ 2185.698485][T26999] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 2185.747755][T24466] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2185.769440][T24466] usb 1-1: too many configurations: 38, using maximum allowed: 8 [ 2185.907667][T24466] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2185.939030][T24466] usb 1-1: can't read configurations, error -71 [ 2186.042376][T27005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5738'. [ 2186.734427][T27013] kvm [27009]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 2186.771822][T27013] kvm [27009]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2187.078474][T27013] kvm [27009]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2188.007551][T27021] loop0: detected capacity change from 0 to 256 [ 2188.030665][T27021] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2188.523900][T27031] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5747'. [ 2188.564591][T27031] l2tp_ppp: sess 2/0: no socket in recv [ 2188.643471][T27034] input: syz1 as /devices/virtual/input/input7 [ 2190.027489][T17117] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2190.271554][T17117] usb 2-1: Using ep0 maxpacket: 32 [ 2190.402847][T27049] kvm [27048]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xff [ 2190.441232][T27055] loop0: detected capacity change from 0 to 256 [ 2190.478566][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.530487][T27055] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2190.547628][T17117] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2190.585450][T17117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.605805][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.653200][T17117] usb 2-1: Product: syz [ 2190.682610][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.695050][T17117] usb 2-1: Manufacturer: syz [ 2190.733355][T17117] usb 2-1: SerialNumber: syz [ 2190.756501][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.803558][T17117] usb 2-1: config 0 descriptor?? [ 2190.841740][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.850867][T27049] kvm [27048]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2190.904515][T17117] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2190.948331][T17117] dvb-usb: bulk message failed: -22 (2/0) [ 2191.085959][T17117] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2191.233052][T17117] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2191.252545][T27065] fuse: Bad value for 'rootmode' [ 2191.277723][T17117] usb 2-1: media controller created [ 2191.363211][T17117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2191.520083][T17117] usb 2-1: selecting invalid altsetting 7 [ 2191.525889][T17117] cxusb: set interface failed [ 2191.572044][T17117] dvb-usb: bulk message failed: -22 (1/0) [ 2191.766388][T17117] DVB: Unable to find symbol lgdt330x_attach() [ 2191.774081][T17117] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2191.831598][T27084] tipc: Can't bind to reserved service type 2 [ 2192.027778][T17117] rc_core: IR keymap rc-dvico-portable not found [ 2192.043107][T17117] Registered IR keymap rc-empty [ 2192.078071][T17117] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2192.175825][T17117] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 2192.292799][T17117] dvb-usb: schedule remote query interval to 100 msecs. [ 2192.334566][T17117] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2192.419994][T17117] usb 2-1: USB disconnect, device number 33 [ 2192.463566][T25184] dvb-usb: bulk message failed: -22 (1/0) [ 2192.834503][T17117] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2193.092381][T27099] tipc: Enabled bearer , priority 10 [ 2193.126353][T27097] tipc: Resetting bearer [ 2193.225615][T27097] tipc: Disabling bearer [ 2193.442251][T27108] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5768'. [ 2194.399545][T27117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5772'. [ 2194.555153][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5774'. [ 2195.243559][T27155] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2195.835318][ T4233] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2196.112291][ T4233] usb 9-1: Using ep0 maxpacket: 32 [ 2196.238056][ T4233] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 2196.437562][ T4233] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 2196.504890][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5784'. [ 2196.519282][ T4233] usb 9-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 2196.555691][ T4233] usb 9-1: Product: syz [ 2196.581003][ T4233] usb 9-1: Manufacturer: syz [ 2196.585675][ T4233] usb 9-1: SerialNumber: syz [ 2196.650049][ T4233] usb 9-1: config 0 descriptor?? [ 2196.710223][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5783'. [ 2196.779061][ T4233] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2197.210140][ T4233] usb 9-1: USB disconnect, device number 22 [ 2197.220181][ T9] usb 9-1: Failed to submit usb control message: -71 [ 2197.252792][ T9] usb 9-1: unable to send the bmi data to the device: -71 [ 2197.290617][ T9] usb 9-1: unable to get target info from device [ 2197.331207][ T9] usb 9-1: could not get target info (-71) [ 2197.361712][ T9] usb 9-1: could not probe fw (-71) [ 2197.657682][ T4234] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2197.917439][ T4234] usb 8-1: Using ep0 maxpacket: 16 [ 2198.037485][ T4234] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2198.217033][ T4234] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2198.224282][ T4234] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2198.233715][ T4234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.251720][ T4234] usb 8-1: config 0 descriptor?? [ 2198.259873][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 2198.492974][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5793'. [ 2198.768063][ T4234] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2199.379389][ T4234] usb 8-1: USB disconnect, device number 19 [ 2199.425608][T27187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.662387][T27215] fido_id[27215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2199.942582][T27232] device syzkaller0 entered promiscuous mode [ 2201.156128][ T7] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2201.517564][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2201.540076][ T7] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2201.590976][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2201.632923][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 2201.750769][T27265] Invalid argument reading file caps for ./file0 [ 2201.797995][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2201.821961][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2201.867490][ T7] usb 3-1: Product: syz [ 2201.885500][ T7] usb 3-1: Manufacturer: syz [ 2201.952173][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 2201.961110][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 2201.980366][T27270] usb usb7: usbfs: process 27270 (syz.8.5813) did not claim interface 0 before use [ 2201.999947][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2202.010287][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 2202.097488][T18048] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2202.226878][T27272] device syzkaller0 entered promiscuous mode [ 2202.384362][T18048] usb 8-1: Using ep0 maxpacket: 16 [ 2202.547690][T18048] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.567428][T18048] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2202.607116][T18048] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2202.627553][T18048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.656036][T18048] usb 8-1: config 0 descriptor?? [ 2202.807546][ T4263] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2203.047552][ T4263] usb 9-1: Using ep0 maxpacket: 8 [ 2203.139186][T18048] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2203.187748][ T4263] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2203.200914][ T4263] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2203.248484][ T4263] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2203.284263][ T4263] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2203.297837][ T4263] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2203.327530][ T4263] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2203.357432][ T4263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.438071][T27267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2203.452531][T18048] usb 8-1: USB disconnect, device number 20 [ 2203.674198][ T4263] usb 9-1: GET_CAPABILITIES returned 0 [ 2203.679978][ T4263] usbtmc 9-1:16.0: can't read capabilities [ 2203.761813][T18048] usb 3-1: USB disconnect, device number 12 [ 2203.981412][ T4263] usb 9-1: USB disconnect, device number 23 [ 2205.317661][ T4263] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2205.617413][ T4263] usb 8-1: Using ep0 maxpacket: 8 [ 2205.757702][ T4263] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 2205.830354][ T4263] usb 8-1: config 0 has no interface number 0 [ 2205.836515][ T4263] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2205.878237][T27305] device syzkaller0 entered promiscuous mode [ 2205.927440][ T4263] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 2205.954681][T27207] Set syz1 is full, maxelem 65536 reached [ 2206.097543][ T4263] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2206.137394][ T4263] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2206.166601][ T4263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.264374][ T4263] usb 8-1: config 0 descriptor?? [ 2206.347564][ T4263] ldusb 8-1:0.55: Interrupt in endpoint not found [ 2206.691278][ T4263] usb 8-1: USB disconnect, device number 21 [ 2206.952340][ T26] audit: type=1326 audit(2000000879.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.114756][ T26] audit: type=1326 audit(2000000879.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.318824][ T26] audit: type=1326 audit(2000000879.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.427689][T25184] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2207.447025][ T26] audit: type=1326 audit(2000000879.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.610289][ T26] audit: type=1326 audit(2000000879.380:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.707499][T25184] usb 9-1: Using ep0 maxpacket: 16 [ 2207.744410][ T26] audit: type=1326 audit(2000000879.380:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.827686][T25184] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.827715][T25184] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2207.827737][T25184] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2207.827755][T25184] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.829700][T25184] usb 9-1: config 0 descriptor?? [ 2207.857872][ T26] audit: type=1326 audit(2000000879.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.857919][ T26] audit: type=1326 audit(2000000879.380:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.857955][ T26] audit: type=1326 audit(2000000879.390:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2207.857991][ T26] audit: type=1326 audit(2000000879.390:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27310 comm="syz.1.5827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc0d7009e99 code=0x7ffc0000 [ 2208.297392][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2208.320118][T25184] hid-generic 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 2208.581294][T18048] usb 9-1: USB disconnect, device number 24 [ 2208.611159][T27335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2208.683301][T27330] fido_id[27330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2208.697702][ T7] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 2208.697735][ T7] usb 3-1: config 2 has no interface number 0 [ 2208.697776][ T7] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2208.697804][ T7] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2208.867926][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2208.867978][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.868002][ T7] usb 3-1: Product: syz [ 2208.868019][ T7] usb 3-1: Manufacturer: syz [ 2208.868036][ T7] usb 3-1: SerialNumber: syz [ 2208.898392][T27328] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2208.898534][T27328] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2209.191460][T27328] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2209.199435][T27343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5837'. [ 2209.262814][T27328] kvm: pic: level sensitive irq not supported [ 2209.265853][T27328] kvm: pic: non byte read [ 2209.342244][T27345] device syzkaller0 entered promiscuous mode [ 2209.624377][ T7] usb 3-1: probing VID:PID(0424:012C) [ 2209.637726][ T7] usb 3-1: vub300 testing BULK IN EndPoint(0) 82 [ 2209.671630][ T7] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 2209.716896][ T7] vub300: probe of 3-1:2.174 failed with error -22 [ 2209.760028][ T7] usb 3-1: USB disconnect, device number 13 [ 2210.182454][ T4263] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2210.380298][T27375] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5849'. [ 2210.393381][T27374] loop0: detected capacity change from 0 to 256 [ 2210.407438][T27375] IPv6: Can't replace route, no match found [ 2210.417441][ T4234] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2210.449171][T27374] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 2210.607707][ T4263] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2210.624340][ T4263] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2210.667778][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 2210.680552][ T4263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2210.714226][ T4263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2210.765889][ T4263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2210.787883][ T4234] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2210.821406][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2210.937724][ T4263] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2210.952884][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2210.978976][ T4263] usb 2-1: Product: syz [ 2210.992432][ T4263] usb 2-1: Manufacturer: syz [ 2210.994278][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2211.005511][ T4234] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2211.025383][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.054912][ T4234] usb 3-1: Product: syz [ 2211.065061][ T4234] usb 3-1: Manufacturer: syz [ 2211.070676][ T4263] cdc_wdm 2-1:1.0: skipping garbage [ 2211.080565][ T4234] usb 3-1: SerialNumber: syz [ 2211.084063][ T4263] cdc_wdm 2-1:1.0: skipping garbage [ 2211.090789][T18048] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2211.102162][ T4234] usb 3-1: config 0 descriptor?? [ 2211.132356][ T4263] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2211.164795][ T4263] cdc_wdm 2-1:1.0: Unknown control protocol [ 2211.387880][ T7] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 2211.416656][ T7] usb 1-1: config 0 has no interface number 0 [ 2211.433796][ T7] usb 1-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2211.486036][ T7] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2211.519749][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.586175][ T7] usb 1-1: config 0 descriptor?? [ 2211.605236][T25184] usb 2-1: USB disconnect, device number 34 [ 2211.618019][T27379] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2211.881617][ T7] usb 1-1: USB disconnect, device number 21 [ 2212.393026][T18048] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2212.406064][T18048] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2212.416769][T18048] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2212.426186][T18048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.467873][T27397] device syzkaller0 entered promiscuous mode [ 2212.468391][T27381] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 2212.687164][ T7] usb 3-1: USB disconnect, device number 14 [ 2212.858600][T27412] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2212.970892][T18048] usb 8-1: USB disconnect, device number 22 [ 2213.027513][T10311] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 2213.451124][T10311] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2213.490963][T10311] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2213.544353][T10311] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2213.576684][T10311] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 2213.703721][ T7] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2213.739693][T10311] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2213.775584][T10311] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2213.796624][T10311] usb 9-1: Product: syz [ 2213.820181][T10311] usb 9-1: Manufacturer: syz [ 2213.864924][T27437] device syzkaller0 entered promiscuous mode [ 2213.898572][T10311] cdc_wdm 9-1:1.0: skipping garbage [ 2213.911503][T10311] cdc_wdm 9-1:1.0: skipping garbage [ 2213.957499][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 2213.959924][T10311] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2213.983835][T10311] cdc_wdm 9-1:1.0: Unknown control protocol [ 2214.080564][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2214.257640][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2214.290683][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2214.314477][ T7] usb 2-1: Product: syz [ 2214.331520][ T7] usb 2-1: Manufacturer: syz [ 2214.350465][ T7] usb 2-1: SerialNumber: syz [ 2214.379331][ T7] usb 2-1: config 0 descriptor?? [ 2214.417988][T27427] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2214.956544][T18048] usb 9-1: USB disconnect, device number 25 [ 2214.962877][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 2214.963112][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 2214.963131][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2215.710429][T27468] device syzkaller0 entered promiscuous mode [ 2216.642866][T18048] usb 2-1: USB disconnect, device number 35 [ 2216.741939][T27482] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 2216.766608][T27482] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 2219.297418][T25184] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2219.649943][T25184] usb 8-1: Using ep0 maxpacket: 32 [ 2219.808419][T25184] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2219.889023][T25184] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 2219.932106][T25184] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 2220.046811][T25184] usb 8-1: config 14 has no interface number 0 [ 2220.099024][T25184] usb 8-1: config 14 has no interface number 1 [ 2220.105381][T25184] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2220.238188][T25184] usb 8-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 2220.320491][T25184] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2220.480176][T25184] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2220.570437][T25184] usb 8-1: config 14 interface 57 has no altsetting 0 [ 2220.637649][T25184] usb 8-1: config 14 interface 228 has no altsetting 0 [ 2220.857657][T25184] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2220.911319][T25184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.952989][T25184] usb 8-1: Product: syz [ 2220.993346][T25184] usb 8-1: Manufacturer: syz [ 2221.178299][T25184] usb 8-1: SerialNumber: syz [ 2222.072856][T25184] legousbtower 8-1:14.57: interrupt endpoints not found [ 2222.352383][T25184] legousbtower 8-1:14.228: interrupt endpoints not found [ 2222.653439][T25184] usb 8-1: USB disconnect, device number 23 [ 2223.507443][T10311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2223.817511][T10311] usb 3-1: Using ep0 maxpacket: 32 [ 2224.138049][T10311] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2224.180740][T10311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.231474][T10311] usb 3-1: Product: syz [ 2224.235713][T10311] usb 3-1: Manufacturer: syz [ 2224.282112][T10311] usb 3-1: SerialNumber: syz [ 2224.322076][T10311] usb 3-1: config 0 descriptor?? [ 2224.411525][T10311] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2224.432503][T10311] dvb-usb: bulk message failed: -22 (2/0) [ 2224.474868][T10311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2224.547689][T10311] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2224.565672][T10311] usb 3-1: media controller created [ 2224.637739][T24466] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2224.677641][ T4263] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2224.693273][T10311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2225.613187][T10311] usb 3-1: selecting invalid altsetting 7 [ 2225.634675][T10311] cxusb: set interface failed [ 2225.651600][T10311] dvb-usb: bulk message failed: -22 (1/0) [ 2225.660033][T24466] usb 8-1: Using ep0 maxpacket: 16 [ 2225.737380][ T4263] usb 9-1: Using ep0 maxpacket: 8 [ 2225.787692][T24466] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.830914][T24466] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2225.887587][ T4263] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 2225.899577][T24466] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2225.964716][T10311] DVB: Unable to find symbol lgdt330x_attach() [ 2225.972497][T10311] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2225.988565][T24466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.077762][ T4263] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2226.098809][T24466] usb 8-1: config 0 descriptor?? [ 2226.120434][ T4263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.183811][ T4263] usb 9-1: Product: syz [ 2226.228829][ T4263] usb 9-1: Manufacturer: syz [ 2226.260352][ T4263] usb 9-1: SerialNumber: syz [ 2226.319865][ T4263] usb 9-1: config 0 descriptor?? [ 2226.380515][ T4263] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2226.457510][T10311] rc_core: IR keymap rc-dvico-portable not found [ 2226.464154][T10311] Registered IR keymap rc-empty [ 2226.478309][ T4263] usb 9-1: setting power ON [ 2226.482939][ T4263] dvb-usb: bulk message failed: -22 (2/0) [ 2226.530657][T10311] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2226.574117][T27567] dvb-usb: bulk message failed: -22 (4/0) [ 2226.620453][ T4263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2226.634321][T24466] hid-generic 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2226.662530][T10311] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 2226.747078][T10311] dvb-usb: schedule remote query interval to 100 msecs. [ 2226.755520][ T4263] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2226.778402][ T4263] usb 9-1: media controller created [ 2226.817439][T10311] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2226.870062][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2226.880105][T27591] sctp: [Deprecated]: syz.0.5916 (pid 27591) Use of int in max_burst socket option. [ 2226.880105][T27591] Use struct sctp_assoc_value instead [ 2226.886812][ T4234] usb 8-1: USB disconnect, device number 24 [ 2226.912979][T27563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2226.928365][T10311] usb 3-1: USB disconnect, device number 15 [ 2226.972105][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2226.988471][T27588] fido_id[27588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 2227.075611][ T4263] usb 9-1: selecting invalid altsetting 6 [ 2227.115973][ T4263] usb 9-1: digital interface selection failed (-22) [ 2227.136198][T10311] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2227.165941][ T4263] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2227.262636][ T4263] usb 9-1: setting power OFF [ 2227.290095][ T4263] dvb-usb: bulk message failed: -22 (2/0) [ 2227.309491][ T4263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2227.326222][ T4263] (NULL device *): no alternate interface [ 2227.546921][ T4263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2228.336050][ T4263] usb 9-1: USB disconnect, device number 26 [ 2229.647725][ T4234] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2229.897413][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 2230.017597][ T4234] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2230.066628][ T4234] usb 2-1: config 0 has no interface number 0 [ 2230.134852][ T4234] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2230.417794][ T4234] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2230.447893][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.485012][ T4234] usb 2-1: Product: syz [ 2230.489915][ T4234] usb 2-1: Manufacturer: syz [ 2230.494559][ T4234] usb 2-1: SerialNumber: syz [ 2230.547436][T18048] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2230.817540][T18048] usb 9-1: Using ep0 maxpacket: 32 [ 2231.052993][ T4234] usb 2-1: config 0 descriptor?? [ 2231.100431][ T4234] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2231.117663][T18048] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2231.135038][ T4234] em28xx 2-1:0.132: Video interface 132 found: [ 2231.147044][T18048] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.192000][T18048] usb 9-1: Product: syz [ 2231.212036][T18048] usb 9-1: Manufacturer: syz [ 2231.232486][T18048] usb 9-1: SerialNumber: syz [ 2231.294100][T18048] usb 9-1: config 0 descriptor?? [ 2231.359606][T18048] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2231.375875][T18048] dvb-usb: bulk message failed: -22 (2/0) [ 2231.417828][T18048] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2231.497890][T18048] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2231.527471][ T4234] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 2231.538778][T18048] usb 9-1: media controller created [ 2231.632922][T18048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2231.754688][T18048] usb 9-1: selecting invalid altsetting 7 [ 2231.768255][T27625] dvb-usb: bulk message failed: -22 (4/0) [ 2231.776325][T27625] cxusb: i2c read failed [ 2231.802754][T18048] cxusb: set interface failed [ 2231.808275][ T4234] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2231.838455][ T4234] em28xx 2-1:0.132: board has no eeprom [ 2231.848304][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2231.957488][ T4234] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2231.982160][ T4234] em28xx 2-1:0.132: analog set to bulk mode. [ 2231.987746][T18048] DVB: Unable to find symbol lgdt330x_attach() [ 2231.994394][T18048] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2232.055860][ T4234] usb 2-1: USB disconnect, device number 36 [ 2232.253795][ T4234] em28xx 2-1:0.132: Disconnecting em28xx [ 2232.263073][T25184] em28xx 2-1:0.132: Registering V4L2 extension [ 2232.337564][T18048] rc_core: IR keymap rc-dvico-portable not found [ 2232.355864][T18048] Registered IR keymap rc-empty [ 2232.383987][ T4232] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2232.634010][T18048] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 2232.719307][ T4232] usb 8-1: Using ep0 maxpacket: 16 [ 2232.868836][ T4232] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.948586][T18048] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input10 [ 2233.000411][ T4232] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2233.070356][ T4232] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2233.102956][T18048] dvb-usb: schedule remote query interval to 100 msecs. [ 2233.184212][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.193712][T18048] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2233.274452][ T4232] usb 8-1: config 0 descriptor?? [ 2233.341763][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2233.384335][T25184] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 2233.404339][T25184] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 2233.467374][T25184] em28xx 2-1:0.132: No AC97 audio processor [ 2233.509733][ T4263] dvb-usb: bulk message failed: -22 (1/0) [ 2233.554565][T25184] usb 2-1: Decoder not found [ 2233.610949][T25184] em28xx 2-1:0.132: failed to create media graph [ 2233.627654][ T4263] dvb-usb: bulk message failed: -22 (1/0) [ 2233.657710][T25184] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 2233.737821][ T4263] dvb-usb: bulk message failed: -22 (1/0) [ 2233.760134][T25184] em28xx 2-1:0.132: Remote control support is not available for this card. [ 2233.806152][ T4234] em28xx 2-1:0.132: Closing input extension [ 2233.810142][ T4232] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2233.951496][ T4232] dvb-usb: bulk message failed: -22 (1/0) [ 2233.955617][T25184] usb 9-1: USB disconnect, device number 27 [ 2234.083768][T27648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.104079][ T4234] em28xx 2-1:0.132: Freeing device [ 2234.205572][T27677] batman_adv: Cannot find parent device [ 2234.234759][ T7] usb 8-1: USB disconnect, device number 25 [ 2234.315630][T27675] fido_id[27675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2234.439742][T25184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2235.849527][T25184] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2236.517391][T25184] usb 9-1: Using ep0 maxpacket: 32 [ 2236.831998][T25184] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2236.847364][T25184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.855421][T25184] usb 9-1: Product: syz [ 2236.904800][T25184] usb 9-1: Manufacturer: syz [ 2236.917477][T25184] usb 9-1: SerialNumber: syz [ 2236.968282][T25184] usb 9-1: config 0 descriptor?? [ 2237.029383][T25184] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2237.037031][T25184] dvb-usb: bulk message failed: -22 (2/0) [ 2237.072030][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2237.078926][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2237.130377][T25184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2237.217599][T25184] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2237.226448][T25184] usb 9-1: media controller created [ 2237.332643][T25184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2237.428823][T25184] usb 9-1: selecting invalid altsetting 7 [ 2237.463321][T25184] cxusb: set interface failed [ 2237.482875][T25184] dvb-usb: bulk message failed: -22 (1/0) [ 2237.637659][T25184] DVB: Unable to find symbol lgdt330x_attach() [ 2237.644185][T25184] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2237.847469][T25184] rc_core: IR keymap rc-dvico-portable not found [ 2237.853883][T25184] Registered IR keymap rc-empty [ 2237.913505][T25184] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 2237.943292][T25184] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input11 [ 2238.008214][T25184] dvb-usb: schedule remote query interval to 100 msecs. [ 2238.015267][T25184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2238.554925][T25184] usb 9-1: USB disconnect, device number 28 [ 2238.674267][T25184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2238.736971][T27587] Set syz1 is full, maxelem 65536 reached [ 2239.367387][ T4263] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2239.916311][T27771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5974'. [ 2239.997526][ T4263] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.025736][ T4263] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.074271][ T4263] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2240.146854][ T4263] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2240.180792][ T4263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.242009][ T4263] usb 8-1: config 0 descriptor?? [ 2240.302651][T27771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5974'. [ 2241.038080][ T4263] usbhid 8-1:0.0: can't add hid device: -71 [ 2241.046830][ T4263] usbhid: probe of 8-1:0.0 failed with error -71 [ 2241.110616][ T4263] usb 8-1: USB disconnect, device number 26 [ 2242.647442][ T4234] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2243.357396][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 2243.677676][ T4234] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2243.692043][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.733245][ T4234] usb 2-1: Product: syz [ 2243.748735][ T4234] usb 2-1: Manufacturer: syz [ 2243.773858][ T4234] usb 2-1: SerialNumber: syz [ 2243.807559][ T4234] usb 2-1: config 0 descriptor?? [ 2243.847805][ T4232] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2243.900290][ T4234] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2243.915286][ T4234] dvb-usb: bulk message failed: -22 (2/0) [ 2243.941528][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2243.977681][ T4234] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2243.993182][ T4234] usb 2-1: media controller created [ 2244.019391][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2244.065231][ T4234] usb 2-1: selecting invalid altsetting 7 [ 2244.077155][ T4234] cxusb: set interface failed [ 2244.083433][ T4234] dvb-usb: bulk message failed: -22 (1/0) [ 2244.327761][ T4234] DVB: Unable to find symbol lgdt330x_attach() [ 2244.334241][ T4234] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2244.477677][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2244.516200][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2244.579415][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2244.597750][ T4234] rc_core: IR keymap rc-dvico-portable not found [ 2244.604654][ T4234] Registered IR keymap rc-empty [ 2244.634914][ T4234] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2244.694834][ T4232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2244.706957][ T4234] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 2244.725899][ T4234] dvb-usb: schedule remote query interval to 100 msecs. [ 2244.733947][ T4234] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2244.739277][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.766708][ T4234] usb 2-1: USB disconnect, device number 37 [ 2244.793735][ T4232] usb 1-1: config 0 descriptor?? [ 2244.946836][ T4234] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2245.617722][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 2245.624867][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 2245.736267][ T4232] usb 1-1: USB disconnect, device number 22 [ 2246.619815][T25184] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2246.877651][T25184] usb 9-1: Using ep0 maxpacket: 32 [ 2247.457524][T25184] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2247.474787][T25184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.517502][T25184] usb 9-1: Product: syz [ 2247.521742][T25184] usb 9-1: Manufacturer: syz [ 2247.535509][T25184] usb 9-1: SerialNumber: syz [ 2247.574624][T25184] usb 9-1: config 0 descriptor?? [ 2247.640838][T25184] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2247.661979][T25184] dvb-usb: bulk message failed: -22 (2/0) [ 2247.710728][T25184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2247.777629][T25184] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2247.795918][T25184] usb 9-1: media controller created [ 2247.842038][T25184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2247.937210][T25184] usb 9-1: selecting invalid altsetting 7 [ 2247.974153][T25184] cxusb: set interface failed [ 2247.984309][T25184] dvb-usb: bulk message failed: -22 (1/0) [ 2248.017437][ T4234] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2248.094568][T25184] DVB: Unable to find symbol lgdt330x_attach() [ 2248.103443][T25184] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2248.299688][T25184] rc_core: IR keymap rc-dvico-portable not found [ 2248.312939][T25184] Registered IR keymap rc-empty [ 2248.326525][T25184] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 2248.367121][T25184] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input13 [ 2248.397704][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2248.429282][T25184] dvb-usb: schedule remote query interval to 100 msecs. [ 2248.437770][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2248.462832][T25184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2248.480232][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2248.519976][T25184] usb 9-1: USB disconnect, device number 29 [ 2248.544960][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2248.601470][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.673334][ T4234] usb 3-1: config 0 descriptor?? [ 2248.769227][T25184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2249.767531][ T4234] usbhid 3-1:0.0: can't add hid device: -71 [ 2249.773583][ T4234] usbhid: probe of 3-1:0.0 failed with error -71 [ 2249.807593][ T4234] usb 3-1: USB disconnect, device number 16 [ 2253.687752][T10311] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2253.801860][T28059] device syzkaller0 entered promiscuous mode [ 2253.937416][T10311] usb 3-1: Using ep0 maxpacket: 16 [ 2254.442621][T10311] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.479358][T10311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2254.509315][T10311] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2254.654411][T10311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.673690][T10311] usb 3-1: config 0 descriptor?? [ 2255.197474][T10311] hid-generic 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2255.508371][T28077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2255.669002][T10311] usb 3-1: USB disconnect, device number 17 [ 2255.862734][T28078] fido_id[28078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2256.077722][T18980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2256.518434][T18980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.813473][T18980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.824219][T18980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2256.837675][T18980] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2256.846775][T18980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.865713][T18980] usb 1-1: config 0 descriptor?? [ 2257.048161][T28094] device syzkaller0 entered promiscuous mode [ 2258.377437][T18980] usbhid 1-1:0.0: can't add hid device: -71 [ 2258.383494][T18980] usbhid: probe of 1-1:0.0 failed with error -71 [ 2258.407452][T18980] usb 1-1: USB disconnect, device number 23 [ 2262.002971][T28167] loop0: detected capacity change from 0 to 512 [ 2262.082488][T28167] EXT4-fs (loop0): Ignoring removed nobh option [ 2262.087858][ T4234] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2262.100466][T28167] EXT4-fs (loop0): Ignoring removed nobh option [ 2262.112637][T28167] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2262.172185][T28167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2262.205631][T28167] System zones: 1-12 [ 2262.234404][T28167] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2262.270523][T28167] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6093: invalid block [ 2262.370243][T28167] EXT4-fs (loop0): Remounting filesystem read-only [ 2262.384999][T28167] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6093: couldn't read orphan inode 11 (err -117) [ 2262.418403][T28167] EXT4-fs (loop0): Remounting filesystem read-only [ 2262.425008][T28167] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2262.477628][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.521948][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.587662][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2262.647630][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2263.177785][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.208665][ T4234] usb 3-1: config 0 descriptor?? [ 2264.857991][ T4234] usbhid 3-1:0.0: can't add hid device: -71 [ 2264.864036][ T4234] usbhid: probe of 3-1:0.0 failed with error -71 [ 2264.873554][ T4234] usb 3-1: USB disconnect, device number 18 [ 2266.055532][T28207] device syzkaller0 entered promiscuous mode [ 2267.971187][T17117] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2268.337611][T17117] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.388609][T17117] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2268.467993][T17117] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2268.693104][T17117] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2268.703030][T17117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.735293][T17117] usb 9-1: config 0 descriptor?? [ 2268.756881][T28247] device syzkaller0 entered promiscuous mode [ 2269.477536][T17117] usbhid 9-1:0.0: can't add hid device: -71 [ 2269.484829][T17117] usbhid: probe of 9-1:0.0 failed with error -71 [ 2269.533484][T17117] usb 9-1: USB disconnect, device number 30 [ 2272.566457][T18048] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2272.987622][T18048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.011753][T18048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.070822][T18048] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2273.135192][T18048] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2273.169632][T18048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.303967][T18048] usb 9-1: config 0 descriptor?? [ 2273.426001][T28309] device syzkaller0 entered promiscuous mode [ 2274.027615][T18048] usbhid 9-1:0.0: can't add hid device: -71 [ 2274.039612][T18048] usbhid: probe of 9-1:0.0 failed with error -71 [ 2274.097209][T18048] usb 9-1: USB disconnect, device number 31 [ 2276.540976][T28348] device syzkaller0 entered promiscuous mode [ 2277.547716][T17117] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2277.917702][T17117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.948075][T17117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2278.003459][T17117] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2278.100951][T17117] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2278.162100][T17117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.240274][T17117] usb 8-1: config 0 descriptor?? [ 2279.107520][T17117] usbhid 8-1:0.0: can't add hid device: -71 [ 2279.113995][T17117] usbhid: probe of 8-1:0.0 failed with error -71 [ 2279.192711][T17117] usb 8-1: USB disconnect, device number 27 [ 2279.401065][T28374] loop0: detected capacity change from 0 to 512 [ 2279.987405][T28374] EXT4-fs (loop0): Ignoring removed nobh option [ 2279.994447][T28374] EXT4-fs (loop0): Ignoring removed nobh option [ 2280.051216][T28374] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2280.087632][T28374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2280.096853][T28374] System zones: 1-12 [ 2280.113767][T28374] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2280.169915][T28374] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6157: invalid block [ 2280.263311][T28374] EXT4-fs (loop0): Remounting filesystem read-only [ 2280.277783][T28374] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6157: couldn't read orphan inode 11 (err -117) [ 2280.330553][T28374] EXT4-fs (loop0): Remounting filesystem read-only [ 2280.337139][T28374] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2280.796877][T28387] device syzkaller0 entered promiscuous mode [ 2283.617401][T18048] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2283.987647][T18048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.021502][T18048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.064027][T28430] device syzkaller0 entered promiscuous mode [ 2284.087325][T18048] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2284.157360][T18048] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2284.166512][T18048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.236745][T18048] usb 3-1: config 0 descriptor?? [ 2285.007535][T18048] usbhid 3-1:0.0: can't add hid device: -71 [ 2285.013965][T18048] usbhid: probe of 3-1:0.0 failed with error -71 [ 2285.061721][T18048] usb 3-1: USB disconnect, device number 19 [ 2287.344991][T28465] device syzkaller0 entered promiscuous mode [ 2289.587433][T18048] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2290.144430][T18048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.156112][T18048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.169679][T18048] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2290.184649][T18048] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2290.196193][T18048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.216168][T18048] usb 2-1: config 0 descriptor?? [ 2291.057533][T18048] usbhid 2-1:0.0: can't add hid device: -71 [ 2291.065763][T18048] usbhid: probe of 2-1:0.0 failed with error -71 [ 2291.109506][T18048] usb 2-1: USB disconnect, device number 38 [ 2291.729169][T28514] device syzkaller0 entered promiscuous mode [ 2292.786969][T28535] loop0: detected capacity change from 0 to 512 [ 2292.811937][T28535] EXT4-fs (loop0): Ignoring removed nobh option [ 2292.835467][T28535] EXT4-fs (loop0): Ignoring removed nobh option [ 2292.856788][T28535] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2293.031549][T28535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2293.047536][T28535] System zones: 1-12 [ 2293.064374][T28535] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2293.106197][T28535] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6207: invalid block [ 2293.160112][T28535] EXT4-fs (loop0): Remounting filesystem read-only [ 2293.166752][T28535] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6207: couldn't read orphan inode 11 (err -117) [ 2293.322194][T28535] EXT4-fs (loop0): Remounting filesystem read-only [ 2293.409424][T28535] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2294.043134][T17117] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2294.290437][T28556] device syzkaller0 entered promiscuous mode [ 2294.488078][T17117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.516904][T17117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2294.548487][T17117] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2294.607975][T17117] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2294.627403][T17117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.689247][T17117] usb 3-1: config 0 descriptor?? [ 2295.457492][T17117] usbhid 3-1:0.0: can't add hid device: -71 [ 2295.464089][T17117] usbhid: probe of 3-1:0.0 failed with error -71 [ 2295.514575][T17117] usb 3-1: USB disconnect, device number 20 [ 2297.768173][T28605] device syzkaller0 entered promiscuous mode [ 2298.510831][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2298.511632][T18980] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2298.518569][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2298.907711][T18980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2298.934277][T18980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2298.966171][T18980] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2299.040684][T18980] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2299.059978][T18980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.102556][T18980] usb 8-1: config 0 descriptor?? [ 2300.052734][T18980] usbhid 8-1:0.0: can't add hid device: -71 [ 2300.060972][T18980] usbhid: probe of 8-1:0.0 failed with error -71 [ 2300.469467][T18980] usb 8-1: USB disconnect, device number 28 [ 2302.347437][T18980] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2303.277436][T18980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.297343][T18980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.307145][T18980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2303.552751][T18980] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2303.562222][T18980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.586938][T18980] usb 3-1: config 0 descriptor?? [ 2304.347445][T18980] usbhid 3-1:0.0: can't add hid device: -71 [ 2304.355313][T18980] usbhid: probe of 3-1:0.0 failed with error -71 [ 2304.421684][T18980] usb 3-1: USB disconnect, device number 21 [ 2307.087696][T17117] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2307.447802][T17117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.498231][T17117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2307.560315][T17117] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2308.077824][T17117] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2308.086976][T17117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.098093][T17117] usb 8-1: config 0 descriptor?? [ 2308.591700][T28756] device syzkaller0 entered promiscuous mode [ 2308.827639][T17117] usbhid 8-1:0.0: can't add hid device: -71 [ 2308.833676][T17117] usbhid: probe of 8-1:0.0 failed with error -71 [ 2308.878673][T17117] usb 8-1: USB disconnect, device number 29 [ 2310.064651][T28779] loop0: detected capacity change from 0 to 512 [ 2310.103624][T28779] EXT4-fs (loop0): Ignoring removed nobh option [ 2310.120820][T28779] EXT4-fs (loop0): Ignoring removed nobh option [ 2310.127198][T28779] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2310.137925][T28779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2310.157347][ T4232] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2310.173447][T28779] System zones: 1-12 [ 2310.178677][T28779] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2310.185143][T28779] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6283: invalid block [ 2310.212790][T28779] EXT4-fs (loop0): Remounting filesystem read-only [ 2310.254595][T28779] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6283: couldn't read orphan inode 11 (err -117) [ 2310.332354][T28779] EXT4-fs (loop0): Remounting filesystem read-only [ 2310.371963][T28779] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2310.471393][ T4232] usb 8-1: Using ep0 maxpacket: 16 [ 2310.669660][ T4232] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2310.740968][ T4232] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2310.808899][ T4232] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2310.877889][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.094011][ T4232] usb 8-1: config 0 descriptor?? [ 2311.116198][T28793] device syzkaller0 entered promiscuous mode [ 2311.625942][ T4232] hid-generic 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2311.872018][T28775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.896752][ T4232] usb 8-1: USB disconnect, device number 30 [ 2313.009310][ T4232] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2313.408248][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2313.437143][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2313.572434][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2313.586863][ T4232] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2313.596266][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.731797][ T4232] usb 2-1: config 0 descriptor?? [ 2314.457477][ T4232] usbhid 2-1:0.0: can't add hid device: -71 [ 2314.465793][ T4232] usbhid: probe of 2-1:0.0 failed with error -71 [ 2314.536314][ T4232] usb 2-1: USB disconnect, device number 39 [ 2315.027248][T28835] device syzkaller0 entered promiscuous mode [ 2317.197452][ T4234] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2317.457396][ T4234] usb 8-1: Using ep0 maxpacket: 16 [ 2317.487404][ T4263] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2317.577555][ T4234] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.616084][ T4234] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2317.645137][ T4234] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2317.682020][ T4234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.775657][ T4234] usb 8-1: config 0 descriptor?? [ 2317.877439][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.894157][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2317.904693][ T4263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2317.920073][ T4263] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2317.932420][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.944418][ T4263] usb 2-1: config 0 descriptor?? [ 2317.983042][T28885] device syzkaller0 entered promiscuous mode [ 2318.463937][ T4234] hid-generic 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2318.512739][T28890] loop0: detected capacity change from 0 to 512 [ 2318.589790][T28890] EXT4-fs (loop0): Ignoring removed nobh option [ 2318.613892][T28890] EXT4-fs (loop0): Ignoring removed nobh option [ 2318.624290][ T4234] usb 8-1: USB disconnect, device number 31 [ 2318.634259][T28893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2318.661839][T28890] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2318.726017][T28892] fido_id[28892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2318.741714][T28890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2318.749605][ T4263] usbhid 2-1:0.0: can't add hid device: -71 [ 2318.749726][ T4263] usbhid: probe of 2-1:0.0 failed with error -71 [ 2318.763488][ T4263] usb 2-1: USB disconnect, device number 40 [ 2318.884510][T28890] System zones: 1-12 [ 2318.908586][T28890] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2318.915100][T28890] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6319: invalid block [ 2318.972582][T28890] EXT4-fs (loop0): Remounting filesystem read-only [ 2318.987833][T28890] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6319: couldn't read orphan inode 11 (err -117) [ 2319.035285][T28890] EXT4-fs (loop0): Remounting filesystem read-only [ 2319.044734][T28890] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2321.457059][T28927] device syzkaller0 entered promiscuous mode [ 2322.207416][ T4263] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2323.197669][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.212029][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2323.224364][ T4263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2323.277325][ T4263] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2323.370089][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.429505][ T4263] usb 3-1: config 0 descriptor?? [ 2324.177537][ T4263] usbhid 3-1:0.0: can't add hid device: -71 [ 2324.183775][ T4263] usbhid: probe of 3-1:0.0 failed with error -71 [ 2324.261267][ T4263] usb 3-1: USB disconnect, device number 22 [ 2324.397690][T17117] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2324.657346][T17117] usb 8-1: Using ep0 maxpacket: 16 [ 2324.770008][T28955] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6339'. [ 2324.780081][T17117] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.802114][T17117] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2324.827425][T17117] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2324.857747][T17117] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.878660][T17117] usb 8-1: config 0 descriptor?? [ 2325.059705][T28961] device syzkaller0 entered promiscuous mode [ 2325.364808][T17117] hid-generic 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2325.819094][T17117] usb 8-1: USB disconnect, device number 32 [ 2325.852693][T28973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2328.703138][T28999] loop0: detected capacity change from 0 to 512 [ 2328.787454][T28999] EXT4-fs (loop0): Ignoring removed nobh option [ 2328.793787][T28999] EXT4-fs (loop0): Ignoring removed nobh option [ 2328.875188][T28999] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2329.224346][T28999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2329.255190][T28999] System zones: 1-12 [ 2329.288684][T28999] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2329.335782][T28999] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6354: invalid block [ 2329.425398][T28999] EXT4-fs (loop0): Remounting filesystem read-only [ 2329.483431][T28999] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6354: couldn't read orphan inode 11 (err -117) [ 2329.580775][T28999] EXT4-fs (loop0): Remounting filesystem read-only [ 2329.616341][T28999] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2329.753313][ T4233] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2329.871486][T29003] device syzkaller0 entered promiscuous mode [ 2330.273163][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2330.291888][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.302819][ T4233] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2330.316259][ T4233] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2330.325407][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.337373][T18048] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2330.617419][T18048] usb 1-1: Using ep0 maxpacket: 32 [ 2330.937571][T18048] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2331.044542][T18048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.226242][T18048] usb 1-1: Product: syz [ 2331.245591][T18048] usb 1-1: Manufacturer: syz [ 2331.283215][ T4233] usb 8-1: config 0 descriptor?? [ 2331.294617][T18048] usb 1-1: SerialNumber: syz [ 2331.307624][ T4233] usb 8-1: can't set config #0, error -71 [ 2331.317629][ T4233] usb 8-1: USB disconnect, device number 33 [ 2331.344790][T18048] usb 1-1: config 0 descriptor?? [ 2331.419554][T18048] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2331.476751][T18048] dvb-usb: bulk message failed: -22 (2/0) [ 2332.333512][T18048] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2332.377635][T18048] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2332.409124][T18048] usb 1-1: media controller created [ 2332.467369][ T4232] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2332.476068][T18048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2332.540349][T18048] usb 1-1: selecting invalid altsetting 7 [ 2332.559635][T18048] cxusb: set interface failed [ 2332.576830][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2332.694517][T18048] DVB: Unable to find symbol lgdt330x_attach() [ 2332.701720][T18048] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2332.727581][ T4232] usb 9-1: Using ep0 maxpacket: 16 [ 2332.860683][ T4232] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2332.884505][ T4232] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2332.891563][T18048] rc_core: IR keymap rc-dvico-portable not found [ 2332.899212][T18048] Registered IR keymap rc-empty [ 2332.916356][T18048] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2332.929637][ T4232] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2332.965922][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.977147][T18048] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 2333.008816][ T4232] usb 9-1: config 0 descriptor?? [ 2333.025370][T18048] dvb-usb: schedule remote query interval to 100 msecs. [ 2333.049117][T18048] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2333.157467][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2333.267421][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2333.387549][T18048] dvb-usb: bulk message failed: -22 (1/0) [ 2333.498071][ T4233] usb 1-1: USB disconnect, device number 24 [ 2333.506972][ T4232] hid-generic 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 2333.729271][ T4233] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2333.742103][T29042] loop0: detected capacity change from 0 to 512 [ 2334.801921][ T4232] usb 9-1: USB disconnect, device number 32 [ 2335.298340][T29042] EXT4-fs (loop0): Ignoring removed nobh option [ 2335.355730][T29042] EXT4-fs (loop0): Ignoring removed nobh option [ 2335.418819][T29042] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2335.488594][T29046] fido_id[29046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2335.524129][T29042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2335.578512][T29042] System zones: 1-12 [ 2335.583546][T29042] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2335.643455][T29042] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6366: invalid block [ 2335.716432][T29042] EXT4-fs (loop0): Remounting filesystem read-only [ 2335.755649][T29042] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6366: couldn't read orphan inode 11 (err -117) [ 2335.834910][T29055] device syzkaller0 entered promiscuous mode [ 2335.852629][T29042] EXT4-fs (loop0): Remounting filesystem read-only [ 2335.904117][T29042] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2337.707636][ T4263] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2337.977579][ T4263] usb 9-1: Using ep0 maxpacket: 32 [ 2338.327490][ T4263] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2338.346975][ T4263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.387294][ T4263] usb 9-1: Product: syz [ 2338.407332][ T4263] usb 9-1: Manufacturer: syz [ 2338.434106][ T4263] usb 9-1: SerialNumber: syz [ 2338.485460][ T4263] usb 9-1: config 0 descriptor?? [ 2338.495018][T29085] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6380'. [ 2338.506794][ T4233] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2338.571308][ T4263] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2338.602333][ T4263] dvb-usb: bulk message failed: -22 (2/0) [ 2338.645068][T29088] device syzkaller0 entered promiscuous mode [ 2338.664653][ T4263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2338.727695][ T4263] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2338.742085][ T4263] usb 9-1: media controller created [ 2338.792067][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2338.869479][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2338.895766][ T4263] usb 9-1: selecting invalid altsetting 7 [ 2338.912562][ T4263] cxusb: set interface failed [ 2338.923140][ T4263] dvb-usb: bulk message failed: -22 (1/0) [ 2338.940274][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2338.995422][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2339.037845][ T4263] DVB: Unable to find symbol lgdt330x_attach() [ 2339.045385][ T4263] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2339.053314][ T4233] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2339.095309][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.173911][ T4233] usb 1-1: config 0 descriptor?? [ 2339.437469][ T4233] usbhid 1-1:0.0: can't add hid device: -71 [ 2339.444852][ T4233] usbhid: probe of 1-1:0.0 failed with error -71 [ 2339.457486][ T4263] rc_core: IR keymap rc-dvico-portable not found [ 2339.465007][ T4263] Registered IR keymap rc-empty [ 2339.495630][ T4263] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 2340.357663][ T4233] usb 1-1: USB disconnect, device number 25 [ 2340.378435][ T4263] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input15 [ 2340.426011][ T4263] dvb-usb: schedule remote query interval to 100 msecs. [ 2340.481515][ T4263] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2340.597485][ T4263] dvb-usb: bulk message failed: -22 (1/0) [ 2340.627921][ T4233] usb 9-1: USB disconnect, device number 33 [ 2340.743141][ T4233] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2342.420308][T29134] device syzkaller0 entered promiscuous mode [ 2342.487603][T25184] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2342.863886][T25184] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 2342.872782][ T4233] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2342.888837][T25184] usb 1-1: config 2 has no interface number 0 [ 2342.910330][T25184] usb 1-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2342.943486][T25184] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2343.127592][T25184] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2343.143743][T25184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.190700][T25184] usb 1-1: Product: syz [ 2343.210252][T25184] usb 1-1: Manufacturer: syz [ 2343.215091][T25184] usb 1-1: SerialNumber: syz [ 2343.237907][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2343.268984][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2343.307777][T29130] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2343.335721][T29130] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2343.345729][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2343.394613][ T4233] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2343.445043][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.502563][ T4233] usb 3-1: config 0 descriptor?? [ 2343.635558][T29130] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2343.674696][T29130] kvm: pic: level sensitive irq not supported [ 2343.674828][T29130] kvm: pic: non byte read [ 2343.857343][ T4232] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2343.877462][T25184] usb 1-1: probing VID:PID(0424:012C) [ 2343.884408][T25184] usb 1-1: vub300 testing BULK IN EndPoint(0) 82 [ 2343.910921][T25184] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 2343.940237][T25184] vub300: probe of 1-1:2.174 failed with error -22 [ 2343.972389][T25184] usb 1-1: USB disconnect, device number 26 [ 2344.009893][ T4233] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 2344.070194][ T4233] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2344.148264][T29160] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2344.157518][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 2344.211734][ T4233] usb 3-1: USB disconnect, device number 23 [ 2344.272854][T29162] fido_id[29162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2344.297675][ T4232] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.324638][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2344.336331][ T4232] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2344.346182][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.356544][ T4232] usb 2-1: config 0 descriptor?? [ 2344.962671][ T4232] hid-generic 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2345.258522][ T4232] usb 2-1: USB disconnect, device number 41 [ 2345.617818][T29180] fido_id[29180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2345.662730][T29185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6408'. [ 2345.708140][T29185] netlink: 144 bytes leftover after parsing attributes in process `syz.7.6408'. [ 2347.667327][ T4263] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2347.697427][ T4233] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2347.748173][T29224] sctp: [Deprecated]: syz.7.6420 (pid 29224) Use of int in max_burst socket option. [ 2347.748173][T29224] Use struct sctp_assoc_value instead [ 2348.054610][ T4263] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 2348.067858][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2348.080863][ T4263] usb 1-1: config 2 has no interface number 0 [ 2348.100747][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2348.110360][ T4263] usb 1-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2348.128327][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2348.157478][ T4263] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2348.172731][ T4233] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2348.225513][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.275308][ T4233] usb 3-1: config 0 descriptor?? [ 2348.377659][ T4263] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2348.404517][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.437101][ T4263] usb 1-1: Product: syz [ 2348.453394][ T4263] usb 1-1: Manufacturer: syz [ 2348.487939][ T4263] usb 1-1: SerialNumber: syz [ 2348.557714][T29205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2348.565508][T29205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2349.240592][T18048] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2349.397545][ T4263] usb 1-1: probing VID:PID(0424:012C) [ 2349.408107][ T4233] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 2349.434053][ T4263] usb 1-1: vub300 testing BULK IN EndPoint(0) 82 [ 2349.434198][ T4233] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2349.454901][ T4233] usb 3-1: USB disconnect, device number 24 [ 2349.509971][ T4263] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 2349.518974][T18048] usb 2-1: Using ep0 maxpacket: 16 [ 2349.547633][ T4263] vub300: probe of 1-1:2.174 failed with error -22 [ 2349.599018][ T4263] usb 1-1: USB disconnect, device number 27 [ 2349.654289][T18048] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2349.673117][T18048] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2349.693363][T18048] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2349.740577][T18048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.747230][T29250] fido_id[29250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2349.802361][T18048] usb 2-1: config 0 descriptor?? [ 2350.021590][T29256] device macvlan0 entered promiscuous mode [ 2350.040178][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6428'. [ 2350.864458][T29262] device macvlan0 left promiscuous mode [ 2350.947486][T18048] usbhid 2-1:0.0: can't add hid device: -71 [ 2350.953539][T18048] usbhid: probe of 2-1:0.0 failed with error -71 [ 2351.000437][T18048] usb 2-1: USB disconnect, device number 42 [ 2351.033352][T29273] loop0: detected capacity change from 0 to 512 [ 2351.087204][T29273] EXT4-fs (loop0): Ignoring removed nobh option [ 2351.093749][T29273] EXT4-fs (loop0): Ignoring removed nobh option [ 2351.147354][T29273] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2351.231000][T29273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 2351.249769][T29273] System zones: 1-12 [ 2351.258937][T29279] sctp: [Deprecated]: syz.7.6433 (pid 29279) Use of int in max_burst socket option. [ 2351.258937][T29279] Use struct sctp_assoc_value instead [ 2351.297946][T29273] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2351.314809][T29273] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1042: comm syz.0.6432: invalid block [ 2351.341047][T29273] EXT4-fs (loop0): Remounting filesystem read-only [ 2352.265808][T29273] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6432: couldn't read orphan inode 11 (err -117) [ 2352.322796][T29273] EXT4-fs (loop0): Remounting filesystem read-only [ 2352.395922][T29273] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 2353.667647][ T7] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2353.833237][T29311] device syzkaller0 entered promiscuous mode [ 2354.567214][T29315] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6444'. [ 2354.918061][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.952980][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.003421][ T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2355.035673][ T7] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2355.096958][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.160930][T29336] sctp: [Deprecated]: syz.8.6448 (pid 29336) Use of int in max_burst socket option. [ 2355.160930][T29336] Use struct sctp_assoc_value instead [ 2355.191255][ T7] usb 8-1: config 0 descriptor?? [ 2355.247452][ T4232] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2356.347409][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 2356.487851][ T4232] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2356.587401][ T4263] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2356.637891][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2356.694232][ T4232] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2356.775818][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.797491][ T4263] usb 9-1: Using ep0 maxpacket: 8 [ 2358.167681][ T7] usbhid 8-1:0.0: can't add hid device: -71 [ 2358.183969][ T7] usbhid: probe of 8-1:0.0 failed with error -71 [ 2358.258542][ T4232] usb 3-1: config 0 descriptor?? [ 2358.259752][ T7] usb 8-1: USB disconnect, device number 34 [ 2358.277681][ T4232] usb 3-1: can't set config #0, error -71 [ 2358.284722][ T4232] usb 3-1: USB disconnect, device number 25 [ 2358.397415][ T4263] usb 9-1: device descriptor read/all, error -71 [ 2358.401268][T29358] device syzkaller0 entered promiscuous mode [ 2359.559785][T29385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6465'. [ 2359.623363][T29385] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.630747][T29385] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.977927][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2359.984287][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2360.639205][T24466] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2360.717510][ T4263] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2361.098751][T24466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2361.160526][T24466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2361.262004][T24466] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2361.344491][T24466] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2361.372967][ T4263] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2361.407538][T24466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.421635][ T4263] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2361.446473][T24466] usb 8-1: config 0 descriptor?? [ 2361.456136][ T4263] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2361.465857][ T4263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.517758][T29382] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2361.779234][T29382] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2362.576640][T24466] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 2362.599712][T24466] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2362.629647][T24466] usb 8-1: USB disconnect, device number 35 [ 2362.636607][ T4263] usb 9-1: USB disconnect, device number 35 [ 2362.928076][T29418] fido_id[29418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2363.387987][T24466] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2363.817631][ T4234] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2364.144362][T24466] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 2364.158308][T24466] usb 8-1: config 2 has no interface number 0 [ 2364.177852][T24466] usb 8-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2364.197574][ T4234] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 2364.212427][T24466] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2364.214487][ T4234] usb 2-1: config 2 has no interface number 0 [ 2364.256627][ T4234] usb 2-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2364.297720][ T4234] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2364.456080][T24466] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2364.473127][T24466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.487610][ T4234] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2364.499786][T24466] usb 8-1: Product: syz [ 2364.510415][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.513240][T24466] usb 8-1: Manufacturer: syz [ 2364.534314][T24466] usb 8-1: SerialNumber: syz [ 2364.539290][ T4234] usb 2-1: Product: syz [ 2364.552440][ T4234] usb 2-1: Manufacturer: syz [ 2364.567170][ T4234] usb 2-1: SerialNumber: syz [ 2364.605932][T29425] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2364.608671][T29422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2364.619063][T29425] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2364.641087][T29422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2364.973387][T29422] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2364.997184][T29425] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2365.044292][T29425] kvm: pic: level sensitive irq not supported [ 2365.045035][T29425] kvm: pic: non byte read [ 2365.227779][ T4234] usb 2-1: probing VID:PID(0424:012C) [ 2365.237647][ T4234] usb 2-1: vub300 testing BULK IN EndPoint(0) 82 [ 2365.249514][ T4234] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2365.299132][ T4234] vub300: probe of 2-1:2.174 failed with error -22 [ 2365.314076][ T4234] usb 2-1: USB disconnect, device number 43 [ 2365.827492][T24466] usb 8-1: probing VID:PID(0424:012C) [ 2365.839303][T24466] usb 8-1: vub300 testing BULK IN EndPoint(0) 82 [ 2365.878278][T24466] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 2365.957762][T24466] vub300: probe of 8-1:2.174 failed with error -22 [ 2366.014891][T24466] usb 8-1: USB disconnect, device number 36 [ 2367.708078][ T4234] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2367.977735][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 2368.071818][T18048] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2368.098156][ T4234] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.142130][ T4234] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2368.477592][ T4234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2368.491072][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.511416][ T4234] usb 1-1: Product: syz [ 2368.520662][ T4234] usb 1-1: Manufacturer: syz [ 2368.530870][ T4234] usb 1-1: SerialNumber: syz [ 2368.590578][ T4234] cdc_ncm 1-1:1.0: skipping garbage [ 2368.609391][T18048] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 2368.624380][T29528] kernel read not supported for file / 7!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 29528 comm: syz.7.6510) [ 2368.635764][T18048] usb 3-1: config 2 has no interface number 0 [ 2368.645760][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 2368.645859][ T26] audit: type=1800 audit(2000001041.070:59): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6510" name=20019C1437B3CFFCA7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=173523 res=0 errno=0 [ 2368.708814][T18048] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2368.834289][T18048] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2368.897185][T29537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6513'. [ 2368.926715][T29537] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6513'. [ 2368.999979][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6499'. [ 2369.037692][T18048] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2369.068080][T18048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.095025][T18048] usb 3-1: Product: syz [ 2369.114270][T18048] usb 3-1: Manufacturer: syz [ 2369.136855][T18048] usb 3-1: SerialNumber: syz [ 2369.209838][T29512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2369.220957][T29512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2369.357919][ T4234] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 2369.364296][ T4234] cdc_ncm 1-1:1.0: bind() failure [ 2369.394007][ T4234] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2369.408721][ T4234] cdc_ncm 1-1:1.1: bind() failure [ 2369.507087][T29512] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2371.007404][T18048] usb 3-1: probing VID:PID(0424:012C) [ 2371.016631][T18048] usb 3-1: vub300 testing BULK IN EndPoint(0) 82 [ 2371.040519][T18048] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 2371.060307][T18048] vub300: probe of 3-1:2.174 failed with error -22 [ 2371.095646][T18048] usb 3-1: USB disconnect, device number 26 [ 2371.147374][ T7] Bluetooth: hci0: command 0x201b tx timeout [ 2371.517335][T18048] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2371.565719][T24466] usb 1-1: USB disconnect, device number 28 [ 2371.927693][T18048] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2371.967336][T18048] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2372.027353][T18048] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2372.036501][T18048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.097571][ T7] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2372.127673][T29570] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2372.310767][T29603] kvm [29602]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 2372.449632][T29614] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2372.467542][ T7] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 2372.488127][ T7] usb 9-1: config 2 has no interface number 0 [ 2372.522273][ T7] usb 9-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2372.587731][ T7] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2372.807598][ T7] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2372.831932][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.894727][ T7] usb 9-1: Product: syz [ 2372.915799][ T7] usb 9-1: Manufacturer: syz [ 2372.936250][ T7] usb 9-1: SerialNumber: syz [ 2372.997946][T29597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2373.005295][T29597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2373.201055][T24466] usb 3-1: USB disconnect, device number 27 [ 2373.350840][T29597] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2373.415900][T29597] kvm: pic: level sensitive irq not supported [ 2373.415983][T29597] kvm: pic: non byte read [ 2373.617916][T18048] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2373.777700][ T7] usb 9-1: probing VID:PID(0424:012C) [ 2373.788016][ T7] usb 9-1: vub300 testing BULK IN EndPoint(0) 82 [ 2373.817328][ T7] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 2373.837949][ T7] vub300: probe of 9-1:2.174 failed with error -22 [ 2373.868569][ T7] usb 9-1: USB disconnect, device number 36 [ 2373.887518][T18048] usb 1-1: Using ep0 maxpacket: 8 [ 2373.892857][T24466] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2374.043802][T18048] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2374.077611][T18048] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2374.097349][T18048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2374.117303][T18048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2374.134537][T18048] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2374.181989][T18048] usb 1-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 2374.191643][T24466] usb 8-1: Using ep0 maxpacket: 16 [ 2374.232275][T18048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.288083][T29642] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6547'. [ 2374.318105][T24466] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2374.340799][T24466] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2374.360801][T24466] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2374.381211][T24466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.406568][T24466] usb 8-1: config 0 descriptor?? [ 2374.901122][T24466] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 2374.951772][T29640] Set syz1 is full, maxelem 65536 reached [ 2375.127584][T29658] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 2375.237330][ T7] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2375.342237][T18048] usb 1-1: USB disconnect, device number 29 [ 2375.430014][T24466] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2375.487648][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 2375.588296][ T4263] usb 8-1: USB disconnect, device number 37 [ 2375.767635][ T7] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2375.803647][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.823972][ T7] usb 2-1: Product: syz [ 2375.835252][ T7] usb 2-1: Manufacturer: syz [ 2375.854477][ T7] usb 2-1: SerialNumber: syz [ 2375.879145][T24466] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2375.896075][ T7] usb 2-1: config 0 descriptor?? [ 2375.922001][T24466] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2375.962450][T24466] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2375.980063][ T7] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2375.998793][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 2376.003186][T24466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.042890][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2376.107758][T29660] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 2376.286522][ T7] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2376.305290][ T7] usb 2-1: media controller created [ 2376.426810][T29673] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2376.473064][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2376.517849][ T7] usb 2-1: selecting invalid altsetting 7 [ 2376.523734][ T7] cxusb: set interface failed [ 2376.540861][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 2376.649579][ T7] DVB: Unable to find symbol lgdt330x_attach() [ 2376.657964][ T7] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2376.801565][ T4200] usb 3-1: USB disconnect, device number 28 [ 2376.907532][ T7] rc_core: IR keymap rc-dvico-portable not found [ 2376.915156][ T7] Registered IR keymap rc-empty [ 2377.038200][ T7] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2377.068482][ T7] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 2377.119503][ T7] dvb-usb: schedule remote query interval to 100 msecs. [ 2377.126516][ T7] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2377.215323][ T7] usb 2-1: USB disconnect, device number 44 [ 2377.316282][T29683] input: syz1 as /devices/virtual/input/input17 [ 2377.411588][ T7] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2379.117390][T24466] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2379.607441][T24466] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2379.691772][T24466] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2379.763508][T24466] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2379.820892][T24466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2379.908102][T29724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2380.355244][ T4234] usb 2-1: USB disconnect, device number 45 [ 2380.507560][T24466] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2380.822450][T24466] usb 3-1: Using ep0 maxpacket: 8 [ 2380.867660][T24466] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 2380.966548][T29752] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6578'. [ 2380.978548][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.097618][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.217618][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.518291][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.107571][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.237638][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.327755][ T4263] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2382.369828][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.417677][ T7] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2382.487721][T24466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.528741][T24466] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 2382.550153][T24466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.567521][T24466] usb 3-1: config 0 descriptor?? [ 2382.597703][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 2382.628712][T24466] cdc_acm 3-1:0.0: Zero length descriptor references [ 2382.655282][T24466] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 2382.719268][T24466] usb 3-1: USB disconnect, device number 29 [ 2382.748761][ T4263] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2382.756822][ T4263] usb 2-1: config 0 has no interface number 0 [ 2382.777892][ T7] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 2382.795357][ T7] usb 8-1: config 2 has no interface number 0 [ 2382.807765][ T7] usb 8-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 2382.827402][ T4234] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2382.875740][ T7] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 2382.906079][T29778] bridge0: port 1(bond0) entered blocking state [ 2382.923101][T29778] bridge0: port 1(bond0) entered disabled state [ 2382.939612][T29778] device bond0 entered promiscuous mode [ 2382.948407][ T4263] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2382.968967][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.997663][ T4263] usb 2-1: Product: syz [ 2383.001900][ T4263] usb 2-1: Manufacturer: syz [ 2383.016947][ T4263] usb 2-1: SerialNumber: syz [ 2383.036613][ T4263] usb 2-1: config 0 descriptor?? [ 2383.089476][ T4263] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2383.098141][ T7] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2383.111228][ T4263] usb 2-1: selecting invalid altsetting 1 [ 2383.117015][ T4263] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2383.135923][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.167743][ T7] usb 8-1: Product: syz [ 2383.172085][ T7] usb 8-1: Manufacturer: syz [ 2383.183053][ T4263] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2383.188074][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2383.217313][ T7] usb 8-1: SerialNumber: syz [ 2383.224823][ T4263] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2383.244638][ T4263] usb 2-1: media controller created [ 2383.245212][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2383.289871][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2383.291516][T29765] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2383.317935][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2383.336838][T29761] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 2383.341660][T29765] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2383.370940][ T4234] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2383.410606][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.456119][ T4234] usb 1-1: config 0 descriptor?? [ 2383.472437][ T4263] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2383.487724][ T4263] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2383.537377][ T4263] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2383.644431][ T4263] usb 2-1: USB disconnect, device number 46 [ 2383.656212][T29765] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2383.695360][T29765] kvm: pic: level sensitive irq not supported [ 2383.695443][T29765] kvm: pic: non byte read [ 2383.954217][ T7] usb 8-1: probing VID:PID(0424:012C) [ 2383.962114][ T4234] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 2383.975082][ T7] usb 8-1: vub300 testing BULK IN EndPoint(0) 82 [ 2383.997456][ T4234] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2384.005016][ T4234] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2384.027323][ T7] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 2384.068018][ T4234] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 2384.135403][ T7] vub300: probe of 8-1:2.174 failed with error -22 [ 2384.156066][ T4234] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2384.176546][ T7] usb 8-1: USB disconnect, device number 38 [ 2384.260828][ T4234] usb 1-1: USB disconnect, device number 30 [ 2384.397772][ T4263] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2384.452981][T29794] fido_id[29794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2384.907774][ T4263] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2384.941252][ T4263] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2385.011118][ T4263] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2385.063616][ T4263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.137737][T29789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2385.635718][ T4263] usb 9-1: USB disconnect, device number 37 [ 2386.925971][ T26] audit: type=1326 audit(2000001059.340:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29844 comm="syz.0.6612" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbea435e99 code=0x0 [ 2387.277348][ T4263] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2387.547336][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 2387.617325][T10311] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2387.678289][ T4263] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2387.707363][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.727781][ T4263] usb 1-1: config 0 descriptor?? [ 2387.827445][ T4232] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2387.897634][T10311] usb 3-1: Using ep0 maxpacket: 32 [ 2388.007502][T29877] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2388.097715][T10311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2388.227833][T10311] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2388.244408][T10311] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2388.274320][T10311] usb 3-1: config 14 has no interface number 0 [ 2388.297631][T10311] usb 3-1: config 14 has no interface number 1 [ 2388.320906][T10311] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2388.338593][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6612'. [ 2388.378853][T10311] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 2388.412443][T10311] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2388.437608][ T4232] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2388.449820][T10311] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2388.466589][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.488992][ T4232] usb 9-1: Product: syz [ 2388.497471][T10311] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2388.506634][ T4232] usb 9-1: Manufacturer: syz [ 2388.521957][ T4232] usb 9-1: SerialNumber: syz [ 2388.527872][T10311] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2388.552285][ T4232] usb 9-1: config 0 descriptor?? [ 2388.677437][ T4234] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2388.747619][T10311] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2388.761566][T10311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.793006][T10311] usb 3-1: Product: syz [ 2388.801863][T10311] usb 3-1: Manufacturer: syz [ 2388.812109][T10311] usb 3-1: SerialNumber: syz [ 2388.927779][ T4234] usb 8-1: Using ep0 maxpacket: 8 [ 2389.047879][ T4234] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2389.079794][ T4234] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2389.113578][ T4234] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2389.134231][ T4234] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2389.153824][ T4234] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2389.166210][ T4234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.257488][ T4232] usb 9-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -32 [ 2389.274595][ T4232] usb 9-1: Firmware version (0.0) predates our first public release. [ 2389.321513][ T4232] usb 9-1: Please update to version 0.2 or newer [ 2389.447824][ T4234] usb 8-1: GET_CAPABILITIES returned 0 [ 2389.460429][ T4234] usbtmc 8-1:16.0: can't read capabilities [ 2389.568655][T10311] legousbtower 3-1:14.57: interrupt endpoints not found [ 2389.651354][T10311] legousbtower 3-1:14.228: interrupt endpoints not found [ 2389.697510][T10311] usb 3-1: USB disconnect, device number 30 [ 2389.752920][T24466] usb 8-1: USB disconnect, device number 39 [ 2389.909267][T29888] netlink: 'syz.1.6628': attribute type 1 has an invalid length. [ 2389.955427][T29888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2389.967469][ T4263] usb 1-1: string descriptor 0 read error: -71 [ 2389.974009][ T4263] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 2389.996024][T29891] bond1: (slave geneve2): making interface the new active one [ 2390.016308][ T4263] usb 1-1: Found UVC 0.00 device (2833:0201) [ 2390.035068][T29891] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2390.060476][T13779] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 2390.074245][ T4263] usb 1-1: No valid video chain found. [ 2390.116183][T29891] syz.1.6628 (29891) used greatest stack depth: 18960 bytes left [ 2390.125084][ T4263] usb 1-1: USB disconnect, device number 31 [ 2390.197885][ T4232] usb 9-1: atusb_probe: initialization failed, error = -32 [ 2390.207555][ T4232] atusb: probe of 9-1:0.0 failed with error -32 [ 2390.291678][ T4232] usb 9-1: USB disconnect, device number 38 [ 2390.514990][T29903] device syzkaller0 entered promiscuous mode [ 2390.798075][T29915] [ 2390.802707][T29915] ============================= [ 2390.817400][T29915] WARNING: suspicious RCU usage [ 2390.837119][T29915] syzkaller #0 Not tainted [ 2390.870993][T29915] ----------------------------- [ 2390.894344][T29915] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 2390.926819][T29915] [ 2390.926819][T29915] other info that might help us debug this: [ 2390.926819][T29915] [ 2390.966696][T29915] [ 2390.966696][T29915] rcu_scheduler_active = 2, debug_locks = 1 [ 2391.001945][T29915] 1 lock held by syz.0.6637/29915: [ 2391.035572][T29915] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 2391.090838][T29915] [ 2391.090838][T29915] stack backtrace: [ 2391.096979][T29915] CPU: 1 PID: 29915 Comm: syz.0.6637 Not tainted syzkaller #0 [ 2391.104474][T29915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2391.114571][T29915] Call Trace: [ 2391.117883][T29915] [ 2391.120849][T29915] dump_stack_lvl+0x188/0x250 [ 2391.125575][T29915] ? load_image+0x410/0x410 [ 2391.130123][T29915] ? show_regs_print_info+0x20/0x20 [ 2391.135409][T29915] ? lockdep_rcu_suspicious+0x110/0x180 [ 2391.141139][T29915] ? local_bh_enable+0x20/0x20 [ 2391.145952][T29915] rhltable_lookup+0x787/0x7a0 [ 2391.150863][T29915] ? mark_lock+0x94/0x320 [ 2391.155239][T29915] ? mr_mfc_find_parent+0x190/0x190 [ 2391.160575][T29915] ? local_bh_enable+0x20/0x20 [ 2391.165393][T29915] ? preempt_schedule_common+0xa5/0xd0 [ 2391.170904][T29915] ? schedule_preempt_disabled+0x20/0x20 [ 2391.176592][T29915] ? lock_chain_count+0x20/0x20 [ 2391.181494][T29915] mr_mfc_find_any_parent+0xb7/0x1d0 [ 2391.186836][T29915] ? local_bh_enable+0x20/0x20 [ 2391.191650][T29915] ip_mr_forward+0x247/0xf60 [ 2391.196313][T29915] ipmr_mfc_add+0x2273/0x2bd0 [ 2391.201055][T29915] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 2391.206153][T29915] ? __lock_acquire+0x7b50/0x7b50 [ 2391.211255][T29915] ip_mroute_setsockopt+0xecd/0x1230 [ 2391.216605][T29915] ? ipmr_rule_default+0x70/0x70 [ 2391.221608][T29915] ? __might_sleep+0xf0/0xf0 [ 2391.226252][T29915] ip_setsockopt+0x568/0x31e0 [ 2391.231085][T29915] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 2391.236494][T29915] ? aa_sk_perm+0x7dc/0x910 [ 2391.241131][T29915] ? aa_af_perm+0x340/0x340 [ 2391.245714][T29915] ? __fget_files+0x402/0x470 [ 2391.250585][T29915] ? aa_sock_opt_perm+0x74/0x100 [ 2391.255581][T29915] ? sock_common_setsockopt+0x32/0xb0 [ 2391.261017][T29915] ? raw_setsockopt+0xc2/0x170 [ 2391.265941][T29915] ? sock_common_recvmsg+0x1c0/0x1c0 [ 2391.271268][T29915] __sys_setsockopt+0x2bf/0x3d0 [ 2391.276215][T29915] __x64_sys_setsockopt+0xb1/0xc0 [ 2391.281291][T29915] do_syscall_64+0x4c/0xa0 [ 2391.285761][T29915] ? clear_bhb_loop+0x30/0x80 [ 2391.290477][T29915] ? clear_bhb_loop+0x30/0x80 [ 2391.295194][T29915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2391.301134][T29915] RIP: 0033:0x7fcbea435e99 [ 2391.305589][T29915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2391.325465][T29915] RSP: 002b:00007fcbe868e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2391.334085][T29915] RAX: ffffffffffffffda RBX: 00007fcbea6bdfa0 RCX: 00007fcbea435e99 [ 2391.342118][T29915] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 2391.350138][T29915] RBP: 00007fcbea4cbeaf R08: 000000000000003c R09: 0000000000000000 [ 2391.358158][T29915] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 2391.366178][T29915] R13: 00007fcbea6be038 R14: 00007fcbea6bdfa0 R15: 00007ffe6e315638 [ 2391.374218][T29915] [ 2391.895953][T29915] [ 2391.899254][T29915] ============================= [ 2391.904271][T29915] WARNING: suspicious RCU usage [ 2391.909745][T29915] syzkaller #0 Not tainted [ 2391.915127][T29915] ----------------------------- [ 2391.920840][T29915] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 2391.939758][T29915] [ 2391.939758][T29915] other info that might help us debug this: [ 2391.939758][T29915] [ 2391.971873][T29915] [ 2391.971873][T29915] rcu_scheduler_active = 2, debug_locks = 1 [ 2391.980698][T29915] 1 lock held by syz.0.6637/29915: [ 2391.985866][T29915] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 2392.020436][T29915] [ 2392.020436][T29915] stack backtrace: [ 2392.026399][T29915] CPU: 0 PID: 29915 Comm: syz.0.6637 Not tainted syzkaller #0 [ 2392.033905][T29915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2392.044076][T29915] Call Trace: [ 2392.047394][T29915] [ 2392.050367][T29915] dump_stack_lvl+0x188/0x250 [ 2392.055102][T29915] ? load_image+0x410/0x410 [ 2392.059665][T29915] ? show_regs_print_info+0x20/0x20 [ 2392.064936][T29915] ? lockdep_rcu_suspicious+0x110/0x180 [ 2392.070540][T29915] ? local_bh_enable+0x20/0x20 [ 2392.075364][T29915] rhltable_lookup+0x512/0x7a0 [ 2392.080196][T29915] ? local_bh_enable+0x20/0x20 [ 2392.085013][T29915] ? mr_mfc_find_parent+0x190/0x190 [ 2392.090256][T29915] ? local_bh_enable+0x20/0x20 [ 2392.095100][T29915] ? preempt_schedule_common+0xa5/0xd0 [ 2392.100604][T29915] ? schedule_preempt_disabled+0x20/0x20 [ 2392.106824][T29915] ? lock_chain_count+0x20/0x20 [ 2392.111737][T29915] mr_mfc_find_any_parent+0xb7/0x1d0 [ 2392.117082][T29915] ? local_bh_enable+0x20/0x20 [ 2392.121903][T29915] ip_mr_forward+0x247/0xf60 [ 2392.126560][T29915] ipmr_mfc_add+0x2273/0x2bd0 [ 2392.131307][T29915] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 2392.136297][T29915] ? __lock_acquire+0x7b50/0x7b50 [ 2392.141484][T29915] ip_mroute_setsockopt+0xecd/0x1230 [ 2392.146826][T29915] ? ipmr_rule_default+0x70/0x70 [ 2392.151974][T29915] ? __might_sleep+0xf0/0xf0 [ 2392.156622][T29915] ip_setsockopt+0x568/0x31e0 [ 2392.161376][T29915] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 2392.166803][T29915] ? aa_sk_perm+0x7dc/0x910 [ 2392.171366][T29915] ? aa_af_perm+0x340/0x340 [ 2392.175919][T29915] ? __fget_files+0x402/0x470 [ 2392.180649][T29915] ? aa_sock_opt_perm+0x74/0x100 [ 2392.185635][T29915] ? sock_common_setsockopt+0x32/0xb0 [ 2392.191059][T29915] ? raw_setsockopt+0xc2/0x170 [ 2392.195874][T29915] ? sock_common_recvmsg+0x1c0/0x1c0 [ 2392.201209][T29915] __sys_setsockopt+0x2bf/0x3d0 [ 2392.206133][T29915] __x64_sys_setsockopt+0xb1/0xc0 [ 2392.211213][T29915] do_syscall_64+0x4c/0xa0 [ 2392.215683][T29915] ? clear_bhb_loop+0x30/0x80 [ 2392.220415][T29915] ? clear_bhb_loop+0x30/0x80 [ 2392.225136][T29915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2392.231074][T29915] RIP: 0033:0x7fcbea435e99 [ 2392.235531][T29915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2392.255190][T29915] RSP: 002b:00007fcbe868e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2392.263699][T29915] RAX: ffffffffffffffda RBX: 00007fcbea6bdfa0 RCX: 00007fcbea435e99 [ 2392.271721][T29915] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 2392.279747][T29915] RBP: 00007fcbea4cbeaf R08: 000000000000003c R09: 0000000000000000 [ 2392.287794][T29915] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 2392.295811][T29915] R13: 00007fcbea6be038 R14: 00007fcbea6bdfa0 R15: 00007ffe6e315638 [ 2392.303938][T29915] [ 2392.698326][T29915] [ 2392.700852][T29915] ============================= [ 2392.705740][T29915] WARNING: suspicious RCU usage [ 2392.715691][T29915] syzkaller #0 Not tainted [ 2392.747640][T29915] ----------------------------- [ 2392.752577][T29915] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 2392.773649][T29915] [ 2392.773649][T29915] other info that might help us debug this: [ 2392.773649][T29915] [ 2392.811042][T29915] [ 2392.811042][T29915] rcu_scheduler_active = 2, debug_locks = 1 [ 2392.819531][T29915] 1 lock held by syz.0.6637/29915: [ 2392.824694][T29915] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 2392.855604][T29915] [ 2392.855604][T29915] stack backtrace: [ 2392.875296][T29915] CPU: 0 PID: 29915 Comm: syz.0.6637 Not tainted syzkaller #0 [ 2392.882902][T29915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2392.893073][T29915] Call Trace: [ 2392.896406][T29915] [ 2392.899391][T29915] dump_stack_lvl+0x188/0x250 [ 2392.904135][T29915] ? load_image+0x410/0x410 [ 2392.908698][T29915] ? show_regs_print_info+0x20/0x20 [ 2392.913976][T29915] ? lockdep_rcu_suspicious+0x110/0x180 [ 2392.919678][T29915] ? local_bh_enable+0x20/0x20 [ 2392.924501][T29915] rhltable_lookup+0x5fc/0x7a0 [ 2392.929337][T29915] ? local_bh_enable+0x20/0x20 [ 2392.934151][T29915] ? mr_mfc_find_parent+0x190/0x190 [ 2392.939397][T29915] ? local_bh_enable+0x20/0x20 [ 2392.944211][T29915] ? preempt_schedule_common+0xa5/0xd0 [ 2392.949828][T29915] ? schedule_preempt_disabled+0x20/0x20 [ 2392.955635][T29915] ? lock_chain_count+0x20/0x20 [ 2392.960551][T29915] mr_mfc_find_any_parent+0xb7/0x1d0 [ 2392.965887][T29915] ? local_bh_enable+0x20/0x20 [ 2392.970718][T29915] ip_mr_forward+0x247/0xf60 [ 2392.975377][T29915] ipmr_mfc_add+0x2273/0x2bd0 [ 2392.980120][T29915] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 2392.985118][T29915] ? __lock_acquire+0x7b50/0x7b50 [ 2392.990326][T29915] ip_mroute_setsockopt+0xecd/0x1230 [ 2392.995683][T29915] ? ipmr_rule_default+0x70/0x70 [ 2393.000687][T29915] ? __might_sleep+0xf0/0xf0 [ 2393.005333][T29915] ip_setsockopt+0x568/0x31e0 [ 2393.010073][T29915] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 2393.015507][T29915] ? aa_sk_perm+0x7dc/0x910 [ 2393.020063][T29915] ? aa_af_perm+0x340/0x340 [ 2393.024620][T29915] ? __fget_files+0x402/0x470 [ 2393.029353][T29915] ? aa_sock_opt_perm+0x74/0x100 [ 2393.034337][T29915] ? sock_common_setsockopt+0x32/0xb0 [ 2393.039862][T29915] ? raw_setsockopt+0xc2/0x170 [ 2393.044675][T29915] ? sock_common_recvmsg+0x1c0/0x1c0 [ 2393.050005][T29915] __sys_setsockopt+0x2bf/0x3d0 [ 2393.054910][T29915] __x64_sys_setsockopt+0xb1/0xc0 [ 2393.059984][T29915] do_syscall_64+0x4c/0xa0 [ 2393.064450][T29915] ? clear_bhb_loop+0x30/0x80 [ 2393.069179][T29915] ? clear_bhb_loop+0x30/0x80 [ 2393.073910][T29915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2393.079851][T29915] RIP: 0033:0x7fcbea435e99 [ 2393.084309][T29915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2393.103959][T29915] RSP: 002b:00007fcbe868e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2393.112443][T29915] RAX: ffffffffffffffda RBX: 00007fcbea6bdfa0 RCX: 00007fcbea435e99 [ 2393.120475][T29915] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 2393.128490][T29915] RBP: 00007fcbea4cbeaf R08: 000000000000003c R09: 0000000000000000 [ 2393.136600][T29915] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 2393.144727][T29915] R13: 00007fcbea6be038 R14: 00007fcbea6bdfa0 R15: 00007ffe6e315638 [ 2393.152767][T29915] [ 2394.566144][T29897] Set syz1 is full, maxelem 65536 reached