last executing test programs: 1m59.478041502s ago: executing program 1 (id=2): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000019140)={'syztnl2\x00', &(0x7f0000019080)={'gre0\x00', 0x0, 0x10, 0x700, 0x3, 0x1000, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2b}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000019380)='net/snmp6\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x7) 1m59.077970694s ago: executing program 1 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1m57.418186482s ago: executing program 1 (id=13): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 1m57.293331868s ago: executing program 1 (id=14): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x1f, 0x101, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0xd41, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400, 0x10c) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, 0x5, 0x7fffffff) 1m56.400077632s ago: executing program 1 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x2, [{0xc727, 0x0, 0x34d3}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) 1m56.079549223s ago: executing program 1 (id=20): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f00000004c0)=0x1, 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffe01, &(0x7f00000000c0)=[{0x30c, 0x5, 0x4a71e6c7}, {0x4, 0xc286, 0x100000000}, {0x2, 0x100000000, 0xaee9}], 0x3, 0x7, 0x20, 0x69, 0x24, 0x2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc0000000000000003000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) write(r0, &(0x7f0000000140)="240000001e005f0214fffffffffffff807000000b80000000000000008003ea03982e384", 0x24) 1m55.850664002s ago: executing program 32 (id=20): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f00000004c0)=0x1, 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffe01, &(0x7f00000000c0)=[{0x30c, 0x5, 0x4a71e6c7}, {0x4, 0xc286, 0x100000000}, {0x2, 0x100000000, 0xaee9}], 0x3, 0x7, 0x20, 0x69, 0x24, 0x2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc0000000000000003000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) write(r0, &(0x7f0000000140)="240000001e005f0214fffffffffffff807000000b80000000000000008003ea03982e384", 0x24) 1m31.320956266s ago: executing program 4 (id=102): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x3, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 1m30.584628295s ago: executing program 4 (id=106): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1m30.262585555s ago: executing program 4 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5800000010003904feff0000feffffff000003e4", @ANYRESDEC=0x0, @ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x20000c44}, 0x8880) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001a00010029df70ecffffff07000000000000000000000800cc7ff2acf9261861c195870300000000", @ANYRES32, @ANYRESOCT=r0], 0x24}}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) accept4(r0, &(0x7f00000009c0)=@alg, &(0x7f00000001c0)=0x80, 0x80000) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x404) accept4(r4, 0x0, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x8}, 0x1c) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r7, 0x1}}, 0x18) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r8 = getpid() process_vm_readv(r8, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000000)=""/133, 0x85}], 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0xfffffff1, {r8}, {0xee01}, 0x3, 0x401}) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000700)) process_vm_readv(r9, &(0x7f0000000580)=[{&(0x7f0000000100)=""/156, 0x9c}, {0x0}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000a40)=""/25, 0x19}, {0xfffffffffffffffc}, {&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/31, 0x1f}], 0x9, &(0x7f0000001dc0)=[{&(0x7f0000000b40)=""/173, 0xad}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f0000000cc0)=""/192, 0xc0}, {&(0x7f0000000d80)=""/8, 0x8}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) 1m30.011198404s ago: executing program 4 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0xfffffffc, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x4000005) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x337}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a000000000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x33c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "ce4c527aff1813df1a7a230d62efde7a350fc254317624df30c18772a54f7295d5139a7e8e185c9c50f0fedcb187f9f082639c41d00fe103bbeb8a0e0d9e091670653cf17fa5c81a14494e4bd8b66f2b5043e4a395ce"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/{^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.,$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/:@--$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'choke\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'choke\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "e0b1d122808d9d87e8e900166d04788af05db2def7f0cfbb72b2b4063c53465ec0ef184a90d09b1cd1fbf07af9b0f8483cefd7b74760ab07e35dc59b5d597a478df3e9ff39e7f242f0c5b39996d309fcb8d18eed44cae970626d9cc03f28044df7b58f7eefdbc2cdc8e7998e5dc17d5929ba9b0071a7095a6f03e1ece7419a0e14bf2e7186f08b67f6bdf3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6ca}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52581d6a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fa7f370}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x33c}, 0x1, 0x0, 0x0, 0x11}, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@delsa={0x34, 0x11, 0x421, 0x0, 0x0, {@in=@loopback, 0x4d4, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002840)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='async'}]}}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x48, r12, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x10}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x1ec, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x0, 0x9, 0xfd, 0x0, 0xfd, 0x7}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xffffff47}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x275e}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x0, 0x2, 0xb, 0x3, 0xd, 0x7, 0x7, 0x7, 0x4, 0xf, 0xd, 0x3, 0x83, 0xd, 0x1, 0x3], 0x0, [0x7, 0xcb5, 0xc000, 0x3, 0x5, 0x4, 0x200, 0x4, 0x1, 0x8, 0xd65, 0x6, 0x6, 0x2, 0xfea3, 0x96f8], [0x0, 0x9, 0x5, 0x5, 0x81, 0x9, 0x3600, 0x3, 0x3, 0x7, 0x14, 0x3, 0x4, 0x4, 0x101, 0x101]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x400}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x40073, 0x6227c}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 1m29.0695875s ago: executing program 4 (id=113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(0x0, 0x6ba, 0x88243) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @private=0xa014102}, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000580)) r7 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507"], 0x0) syz_usb_control_io(r7, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m28.68363566s ago: executing program 4 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x138, 0x270, 0x270, 0x270, 0x1d0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private=0xa010100}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'ip6gre0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private=0xa010100}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1m28.356344282s ago: executing program 33 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x138, 0x270, 0x270, 0x270, 0x1d0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private=0xa010100}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'ip6gre0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private=0xa010100}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1m11.031998779s ago: executing program 5 (id=179): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000083c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000280)="f3440f09440f20c03509000000440f22c0649d31960200000066bad004b8ea3200001af08332d5c421d5144b0766bad004ed66b885000f00d00f23d0410f23950f23f80f06", 0x45}], 0xaaaaaaaaaaaad69, 0x7e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m10.132806899s ago: executing program 5 (id=181): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb15c3e9404de90ad79e3b09b15a7b21588b3803cf578f00", "6d02cd81", "066573001e000004"}, 0x38) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'pimreg1\x00', {0x5}, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="440f20c0350f000000440f22c0b8010000004f0801aab8d9d920c0350f000000440f22c066ba4100b8002c20000000f30f012e430f001fb9bd0a00000f3226d2a4470f01c8", 0x45}], 0xaac, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) fcntl$dupfd(r4, 0x406, r4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0x3d, r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xff84) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000240)="4c00000012001f15b9409b849a0100000000ffff000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbefe0758e783b68d4fee9bdb942352359a351d1ec0c", 0x4c, 0x0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 1m9.028030993s ago: executing program 5 (id=184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x3, 0x0, 0xd}]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x52}) futex(&(0x7f000000cffc)=0x2, 0x2, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m8.071573706s ago: executing program 5 (id=188): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x83f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103"], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9008, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x2d}}, {@dont_appraise}]}}, 0x1, 0x0, &(0x7f00000001c0)="4857caf3df3201e3a681a34ab431ee0287aa458ed368d82be1a5a69e4dccf9c96e97b522032eaaa4c725f4e1bac2793750c74082dde9ce2bb5d263dfe312c08b75878bd7c2305ff41c85d3a9b81d8929cc96d56081e8b66d3a31122242215c818cc069a237e87b") read(r4, &(0x7f0000000240)=""/177, 0xb1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x83f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x3ff, @void, @value}, 0x94) (async) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000380)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103"], 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) (async) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9008, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x2d}}, {@dont_appraise}]}}, 0x1, 0x0, &(0x7f00000001c0)="4857caf3df3201e3a681a34ab431ee0287aa458ed368d82be1a5a69e4dccf9c96e97b522032eaaa4c725f4e1bac2793750c74082dde9ce2bb5d263dfe312c08b75878bd7c2305ff41c85d3a9b81d8929cc96d56081e8b66d3a31122242215c818cc069a237e87b") (async) read(r4, &(0x7f0000000240)=""/177, 0xb1) (async) 1m7.056701077s ago: executing program 5 (id=197): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000039f000/0x3000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x136, 0x0, 0x1, {0x0, r3}}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket(0x2, 0x3, 0x100000001) setsockopt(r7, 0xff, 0x1, 0x0, 0x0) ioctl$KVM_CAP_PTP_KVM(r6, 0x4068aea3, &(0x7f0000000140)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1m6.715962235s ago: executing program 5 (id=203): r0 = fsopen(&(0x7f0000000140)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0) unshare(0x400) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000002400)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[{}, {}, {}, {}], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000002580)={&(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000025c0)={0x5, r3, r4, 0xcccccccc}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="00dc6626c892b6bc436a000000000000", 0x10) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0xffffffffffffffff, 0x4000000000000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0) write(r0, &(0x7f0000000000)="c3740d059b12", 0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8949, &(0x7f0000000580)={'bond0\x00'}) 1m6.440075615s ago: executing program 34 (id=203): r0 = fsopen(&(0x7f0000000140)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0) unshare(0x400) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000002400)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[{}, {}, {}, {}], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000002580)={&(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000025c0)={0x5, r3, r4, 0xcccccccc}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="00dc6626c892b6bc436a000000000000", 0x10) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0xffffffffffffffff, 0x4000000000000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0) write(r0, &(0x7f0000000000)="c3740d059b12", 0x6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8949, &(0x7f0000000580)={'bond0\x00'}) 36.788938805s ago: executing program 0 (id=348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x501001, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 35.315293196s ago: executing program 0 (id=352): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x4}}, @TCA_GRED_MAX_P={0xfffffffffffffd33, 0x4, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x26c}}, 0x0) (fail_nth: 6) 34.483872828s ago: executing program 0 (id=357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 31.281022567s ago: executing program 0 (id=371): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nl=@unspec, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, @l2={0x1f, 0x30, @any, 0x3}, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_to_team\x00', 0x6, 0x8000000000000001, 0x7fff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000002c0)={0x29, 0x6, 0x0, {0x1}}, 0x29) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 28.012067374s ago: executing program 0 (id=381): r0 = semget$private(0x0, 0x0, 0x60) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x11, 0xb4, 0x8e, 0x10, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x4, 0x29}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df"], 0x0) 27.811955857s ago: executing program 0 (id=384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x501001, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 27.438881483s ago: executing program 35 (id=384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x501001, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 13.299358879s ago: executing program 2 (id=454): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020332118000000002000010902240001000000000a0400000103000000ef2000000001220500090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 10.129868949s ago: executing program 2 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000001"], 0x0, 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18680000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r4 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r5 = io_uring_setup(0x2edd, &(0x7f0000000480)={0x0, 0x1, 0x2, 0x80003}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x17, 0x20000000, r6) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0x100006, 0x0, 0x0, {r8}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="7300040024000600200016801c00018018000c8014ec00000f000020cd0c00008700000088a80000040014"], 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x8014) 7.931636067s ago: executing program 2 (id=475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x5, 0x4, @thr={&(0x7f0000000140)="4914a07364bd692c7093dd8a45f5034fe86dbafb861bde46636351f1fbe37f26a00ed760dc4d423e2df642cdc7cbc11fe17b4d7abea13f3cbe6c8c82b8a8043e8b12aa95d452ffca8587410e7384d66d4c4565e27560d0d344d4420b630961c438bef7621a70d17a", &(0x7f0000000380)="4a789c7d64d8c8060c28ae40c1de10383032d5f8014b582cac29508f1252823a3dbd5350880fe38a0b3461098550155c1b312c8bc19aca68f8722eaab558a7bbed07955d58f2e9904538af50e810f22ae5a868c8ec3f43c84718ef09252fb3aadcafc5b26cdf2e5245cccbdd752e43854860d59c05bb227aa85c12351807a5c80db373a521f5bd75bbd4922da93a6e6cc5afadf3a85dcef1992a759ea05e479f48b1183d445da8cda71171711d46943fa95c40e2165c45406a63fb7d60e51b73f12944033ba465cecca1d57aa58b0695044d591b84da5531d3f5a592"}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000280)) write$cgroup_subtree(r1, 0x0, 0xfe33) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x93, 0xf6, 0xfe, 0x10, 0x108c, 0x159, 0xdb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x1c, 0xfa, 0x2, 0xf2, 0x78, 0x38, 0x2, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfd, 0xda, [@generic={0x7, 0x5, "fda246483e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0xf, 0xd9}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 7.399863468s ago: executing program 7 (id=480): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="c4ecf0"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x7, 0x9, 0x4, 0x2, 0xfffffffc, {0x0, 0x2710}, {0x2, 0xc, 0x8, 0x2, 0x2, 0x5, "de2398cc"}, 0x1, 0x4, {}, 0x101}) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014004000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffdd1) (async) close_range(r1, r3, 0x2) (async) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async) sendfile(r3, r4, 0x0, 0x8000002b) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000140)={0x164, 0x5, &(0x7f00000007c0)}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x10000, {0x1, 0x3, 0x2, 0xc21, 0x4, 0xf, {0x4, 0x0, 0x3, 0x7, 0x1, 0x7, 0xf62a, 0xaa, 0x3, 0x2000, 0x5, r7, r8, 0x4, 0xa6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000002c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0xfffffffe, 0x800c140, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0x0, r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000800000018120000", @ANYRES32=r2, @ANYBLOB="0000000000100000b703000000000000850009000c000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.169771562s ago: executing program 7 (id=483): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x37, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xfffffffffffffe0f, 0x1, 'BATMAN_V'}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xfe}]}, 0x48}}, 0x0) syz_usb_connect$uac1(0x1, 0xa7, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) 6.479954673s ago: executing program 6 (id=485): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x0, 0x4, "688eaa67"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 5.755876066s ago: executing program 8 (id=488): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000107d1e502d0000000000010902240001000000040904000004030002ba"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003000702030013c86f8674b99d294fc0c1d8b69333110dd1b4c08a88dd54697e5cd46898066cf194fd0b48fd538321e3f4fa037250d3f0f0e9d852a3ac3cb8fa7c7a507372bf73139371a26c6e246fc7a1858bb5211dcc047e918e4ea5681fdf3f4a229f40cc7fa94026e19d0139ed1e8545797855555112004bdf84b9f93dd29e057d86bd6cb0382bde48f742a4d35b1df9a48cc2734a807d5e0308b32b220f8b5fdf03"], 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002400)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0xc, 0xd, 0x3, 0xa, @ipv4={'\x00', '\xff\xff', @local}, @private2, 0x700, 0x40, 0xffffffff, 0xa}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x57, {0x57, 0x3b, "0cade846fd509ebefc2409dca64d414af6dff6d0ece38ec8ac6a233b7138a34859935e17a29ee90cc36421e3c5e2de74ac9f13261bce1dcacb24be56a855e804b3ad3e68d7aec788a19bf45dfca48822558d4b01e5"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x8, 0x5f, "4583cf7c96f2bd5ae685cff0ce8bd4242f3795a1067f537100cb4f2dcb1cdf2afcaf7c0c745076db7890bab7aacb5e212529226c050685ab13d756703f521991f8ac826b39e2c0834c374952a74b78af00895c4cc1d6544f31893f0a88e681"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xfd1, 0x9, 0x10000, 0x3, 0x3, 0x8, 0x0, 0x8, 0x3ff, 0x3, 0x1236, 0xa}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 5.365813996s ago: executing program 6 (id=489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x1, 0xfffffffd, 0x75}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe25e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = open(&(0x7f00000004c0)='./file0\x00', 0xea8c5, 0x73) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r10) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x34ffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(r10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e22, 0x7d58, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x87, r8, 0xee01}, {0x1, 0xdf6, 0x9, 0xd8, 0xccd3, 0x80000000, 0xd74, 0x2}, {0x7, 0x6}, 0x241, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3503, 0x1, 0x0, 0xff, 0x8, 0x0, 0x7f2}}, 0xe8) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r11, 0x0, 0x0, 0x44810, 0x0, 0x0) 5.263875555s ago: executing program 3 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x4000b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x58}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) rt_sigaction(0x30, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0, {[0x80000000000000]}}, 0x0, 0x8, &(0x7f00000000c0)) tkill(r1, 0x16) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000b80)=@getsa={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {@in=@loopback, 0x4d3, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) 4.590533184s ago: executing program 2 (id=491): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xfff1, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x4}}, @TCA_GRED_MAX_P={0xfffffffffffffd33, 0x4, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x26c}}, 0x0) 4.468146374s ago: executing program 2 (id=492): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pimreg\x00', @broadcast}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x723800, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) getsockopt(0xffffffffffffffff, 0x5, 0x8, &(0x7f00000000c0)=""/89, &(0x7f0000000140)=0x59) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1b000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x10000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x4000010, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0x379f, &(0x7f0000000240)={0x0, 0x2307, 0x80, 0x3, 0x32d}, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000001600)=@IORING_OP_SENDMSG={0x9, 0x13, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="f39b61eaad4ab93048345c61a9bcb3dca807f7e7db1dd119432db120095b988f706d98392de13971e703d9437ed7095b2d6febe97781570df0e4df1db0217f4b71d668dad27ead67b34759097a10d615348698a0d2eb37740d625d91d3daa1cfb6e9de50266e0ac3b43fcc778db7ee4f1b7aaaac88b42318e3a18ce9d1a97e6c0ec54ccae4fe6f423c4a0ebed74a1446d50c1db276949260a86bf4c16fa9e55c18533a87fb50137735c38ffbc12898bdbe2adc4bac1c54a2e88c9ea8", 0xbc}, {&(0x7f0000000400)="06668dcba668990c7f6e7fa1dac6ecdcbb26a75b58e305f161e8ae6869170c49bc29214dc9fa904ba085693395ce68c99e328a14b1a13c7cd0c1dba93af18994eb951848110919f0e1670824ce0fdc7615798b1b3864cca6c226104a2a0e2d0d66", 0x61}, {&(0x7f0000000480)="06892886260c0a67891b899c6cb53002c526fcbec70cfeb04427ebf33267ce38d6e11752f7e99a19e5bc244beb42d56a27c8a5b1bff96dc5048ddb584b33311105345b02f71cd3f7bf9a3e6b7f3dbbef369e60f9ddd7ba1dd922c1d1f8d34e698da7b4ec3fe6d4696e38283ec943304b6a7ae0f9243133ede140f6ce64a615605baaf344e4b4efcd318885de2c8a62be2de0702e8a32b363ba4a5c1eec34a005310cce050b5e", 0xa6}], 0x3, &(0x7f0000000580)=[{0x1010, 0x10b, 0x4de5, "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"}], 0x1010}, 0x0, 0x20000000, 0x1}) unlink(&(0x7f0000001640)='.\x00') r5 = syz_usb_connect$cdc_ecm(0x1, 0x100, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x3, 0x40, 0x71, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0xeb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\n'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x1, 0x97}, [@mdlm_detail={0x82, 0x24, 0x13, 0x10, "95377de2f4086e16a8bb48b0dd2cd444c48d6bfeaad082d212760cb86d5e9ae9b2a846a247d5bc97ac5fc3fbfcb0ed1890a08a533a9b329d62a1b30b197d2bf8d3dd7604f26c80be88bb9a90a2d111b78d543a9c6b3e899d5b92da6e7518202654cdda1e8ef1f8e018dfb407dd1200de6a955e6a2ed906e4978c5da7a034"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1000, [0x611f, 0x401, 0xfeff, 0x7fff, 0x100, 0x5]}, @acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0xc, 0x24, 0x7, 0xe0, 0x88, [0x1, 0x4, 0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xa, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x3, 0x3}}}}}]}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x201, 0xbf, 0x10, 0x6, 0x8, 0x8}, 0x2d, &(0x7f00000017c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "e4c99c962087f9be1482e95af2bdc375"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x7, 0x0, 0x8000}]}, 0x5, [{0x61, &(0x7f0000001800)=@string={0x61, 0x3, "78b7eea848649652e1a086fdb2ef88990118e2568d0765f40bce103d0eb33d07072fc353c0349cfbfd8f5f63b1a46f017f780928265e9c5750077f47da2a325a75f2a41dbd96c17083de4ec5a2f92182fb1764192a5344a1b73f191c6fa395"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x183b}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x45, &(0x7f0000001900)=@string={0x45, 0x3, "b9b236e9cd1f497d777cb276ab54a4245ccbd7f1c90e7903082009db6d1b6b737fca74d989680c897f2e307f4370f6dfd0bf079300797d31394133ea76dde51347971a"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001bc0)={0x14, &(0x7f0000001a40)={0x0, 0xe, 0xfb, {0xfb, 0x30, "a8c62b30fd3a927f0db1dbc699870141d0f51e58b429ce11e242bb2acaa8960d71577236674a0f61a35815b5b99ec4488934f76bff305ec515138083b6daae7208f453d7d17d7992e130c10a95e478f5ea38a59c79e2170eecc750b067d5d0611d4789875be2d74bc045ef884ce274c2ad439c2329964306e858a4082c23387b2129d62de1bd3e29be14851e78359f27583f2cef6a2d68d824cc883b24f94dd4820deb1c61bde9a768b890839605c6bf898957969b611bbe3ceee9ffdce996e989c000db84a551129b30f2e5721cb379d9919757e28ed3d23164bdb8ed6f9a104ae677ef6ca0036b53a0f3e1b7413bf19f1e6738cadfdc52f1"}}, &(0x7f0000001b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001c00)={0x40, 0x1f, 0x6e, "783e60fa77a7eea885833a3512fa80020a59ff3d81e9f97dfeeb4dd15a91758f4e9df53de92fd692fa61fef456555a8756438eb1aaa00ab098c3f5f24f469594f37e0de4ce4c5ae99cdc73b79994cf5727f6286386dfc9494d53f6ddaae12a3cc6a7a4db6deb7b83b41b65dea760"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x5}}) r6 = syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000001d40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x89, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x401, 0xf, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7a, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x7, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x9, 0x2}}}}}}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x110, 0x2, 0xf4, 0x5, 0x10, 0x4}, 0x2a, &(0x7f0000001e00)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "39e38d50876057bfaa6914112c399d69"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x11, 0x3, 0x8, 0xff}, @ptm_cap={0x3}]}, 0x1, [{0x64, &(0x7f0000001e40)=@string={0x64, 0x3, "2aa6dd31c7c24480225fec27f392a7811325bd6c1a7263affea7a0192bd294b00312dbf58d180cfbbe660663d9a3f9c88e9e0e7c44b73b305f7dfbd3d47aca3c2c33bfe56c685667cc2cc968ca822a5cedb663b3b181982e3e3ad53190bfa9a72a04"}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001fc0)={0x14, &(0x7f0000001f00)={0x40, 0x21, 0x47, {0x47, 0x4, "a8d2113d43de0de92d562444d3f1f44db2d3f5cc5f52d5a150f4cb7e219d796c12a9ddbc16b2e0e16d3f56235e513dfd781f820f175f9e6e566956e1086a4cde98543445cb"}}, &(0x7f0000001f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002280)={0x44, &(0x7f0000002000)={0x20, 0x11, 0xa0, "6674fba790990f59df65a2e48c9051c8f76846bacd86ce864ba49004fb8aa17ad793a7e9ea66b985a1ca32a5b2a42de8e6b8d6b8161e077b10e7ff1d9c8c4236ae1b8455187a210cd9d6e24071001fea3aa985e5ccf13de0fb77f1cf9f9657390a53d9158c94ae86af16e2b93c3af22707f04e060f0158a8d2caac7ad333c075923b741f875741bb3774c1819f12de9dee0343b8873fe9790790d375f34015bf"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002140)={0x20, 0x80, 0x1c, {0x35, 0x5, 0x80000001, 0x1, 0x7, 0x40, 0x6, 0x7, 0x1, 0x5, 0x9, 0x6}}, &(0x7f0000002180)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000021c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002200)={0x20, 0x87, 0x2}, &(0x7f0000002240)={0x20, 0x89, 0x2, 0x1}}) clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) futex(&(0x7f0000002300)=0x1, 0xd, 0x1, &(0x7f0000002380)={r7, r8+60000000}, &(0x7f00000023c0)=0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000002400)={0x0, @aes128}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000002480)={0x3, 0x20, '\x00', 0x0, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0]}) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4$alg(r9, 0x0, 0x0, 0x80000) fcntl$setstatus(r3, 0x4, 0x2400) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000002740)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002700)={&(0x7f0000002500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x13, 0x6, "e5623e3854ffae208d8607ad5c4f5a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa24a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x60000040}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0xa0, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x20000}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x42}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000002900)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8001, 0x0, 0x3, 0x5, 0x2d, 0x7f}, {0x10, 0x3415, 0xfffffffffffffffa, 0xe5, 0x2, 0x401}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) clock_gettime(0x0, &(0x7f0000002b00)={0x0, 0x0}) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000002b40)={r12, r13/1000+10000}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000002b80), 0x4) 4.212134593s ago: executing program 3 (id=493): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000500)="2f7cc765950ed35ad398678fcc48fc0400125210952db546c98a6e00000000000096afc879308d082f4343904d01548922823e4ef03869396e211708d215691e278baa6bb4cf6c79ffffffffe7a3b4ff4ba8da4edaa55594e0844e02c411f0ad08a408936cacf954aa7b0569d708bbc98d2173538142be00880700a112c549800decdf71a4f843584c6183f74dc770c96450bd40e8e3f458", 0x10b7fc27f61eaa73}, {&(0x7f0000000380)="f2e5a58ceb2013afcb0087e917e79051777813a66f942ff17eb4fe2700606b39d93d76ba39432e1177455d6623a6c48a2e0cd8db5310a1c78e1a16f7d318ce524cdf2b7b4ce54914d5e76ecd5417df9547012bd8afa891b8c86815964fe06d9950f312acfbb1ee10bc42c5bd6b2f28469c17607073cde0dd2a9a1cf367c6831dcfd55dddb32ee36c3be401e2803a191f8ffe8838d4d70476c0eef9b2aa07506387bdeb005890b9681f8cd7e6523dacb1948b180c1ecdbda95246647801fee274840826b74c"}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c204040000070000400000000000000029000000360000000005000000000000c2040000000b0720e597e8ca06400900050000000000000000010000000000003f0000000000000014000000000000002900000008000000000000000000000014000000000000002900000034000000800000000000feff1300000000000000290000000b00000000000401060000002000000000000000290000003700000000000000000000000a010004"], 0xf8}}], 0x1, 0x0) r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000340)=@keyring) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x1, 0x45, 0x0, &(0x7f00000001c0)) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(r4, 0x0) 4.063980137s ago: executing program 8 (id=494): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x50, 0x3, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000040)={0x30}, 0x0) (async, rerun: 32) landlock_restrict_self(r0, 0x0) (async, rerun: 32) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x4000020) (async, rerun: 64) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) (async, rerun: 64) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) (async) gettid() (async) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="4786624f872bdadf06de59751f86b3661621a95a24ad611c9f3a33382f35e039b1a38063d1252d24005dcd2d4b66e6b2a6710b6f0fa4d37a87b92953f716bb9baac65e129e08f3a9e8ed66f22df609277d875c4c6aad376815b14893a42ea805a0bb45cfc689c5e55553bc3d28f02ae554af5d34710bea02b653d97bebb894bcedf1912d06a1865d4b3e04d5066bffa5a54db4601d64f2de00fe2775824202595939be8e8059edbf5bbef1ec295ae086d5a9c262bcff7a9f44efa2459bb528aaa871", 0xc2, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="f4a463e6b6cfc6dfe4f702f17bfa8045acbb0f4ab31cb62ebbc811ceb469246919b741b294fc4d1c097194c771fa4cf909", 0x31, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000380)={0x0, r1, r2}, &(0x7f00000003c0)=""/162, 0xa2, &(0x7f0000000500)={&(0x7f0000000480)={'cbcmac(aes-aesni)\x00'}, &(0x7f00000004c0)="846b22db6190652c2959ad42de9432579f7f373fbc87b0f0482fff6d80a0dbfdafcf9948a67be6ad6ae1e67b", 0x2c}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r3, &(0x7f0000002580)) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002600), 0x2000, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000002800)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002680)=@del={0x108, 0x11, 0x300, 0x70bd2b, 0x25dfdbfd, {{'morus640\x00'}, '\x00', '\x00', 0x2200, 0x2000}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3ff}]}, 0x108}, 0x1, 0x0, 0x0, 0x4084081}, 0x4050) r5 = inotify_init1(0x0) r6 = signalfd(r5, &(0x7f0000002840), 0x8) (async) r7 = add_key(&(0x7f0000002880)='logon\x00', &(0x7f00000028c0)={'syz', 0x2}, &(0x7f0000002900)="e9109b20ed726a5ed41a423a71fb0460e7877c52c5a26d46621be634287cd5c595f1ee710bf6323a539f4aefa863571c86ee22dfef95f2c63dbba6e0dcf6c032415cf2ee97f731e355f1ae76f6a62d298c11124dee3c47e5c94ceb98753d3234b547b058e0b708b31318f852bf625541e92d60378cd1287cf3f6f7ee1617d8b08c94e43b42825149af30b7604d855537b89273a88148a754f590203da34d8596a400b738b2cde91b2001a32ad69c39dc8c8f725b68f0aca61bbd7ab8c44b1acff9489fae0fc5900b18781dfa8b4819b91710fb6fa833dc", 0xd7, r1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000002a00)) openat$dir(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x200000, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0, 0x10) socketpair(0x10, 0x3, 0x3, &(0x7f0000002ac0)={0xffffffffffffffff}) r9 = dup2(0xffffffffffffffff, r8) (async) rt_sigaction(0x4, &(0x7f0000002b80)={&(0x7f0000002b00)="c4629d0bfac4a255454673c40135eeb488c1420000c44261af5597f30f1efd8f2850ed56c30cf0441892f1802348d802c4e2f92140fbc401c115b57d3a0000", 0x18000000, &(0x7f0000002b40)="6426f00fb0685d42ffafd500000026f3a7c46121ef769bf3af43dfe0c403bd5e5f4bfcc401c96bf9660f381597f6ffffff660f1bea", {[0xfffffffffffffffa]}}, &(0x7f0000002c80)={&(0x7f0000002bc0)="470f1ee145dbe0c441c171f3a4c423f9608162370000008f09a89b9bb17c986ec4c11963db66660ff949090f147d58c4e385488f6d00000008c4e1257c8fffefffff", 0x0, &(0x7f0000002c40)="c421fd2b1164d2fbc4e1d9fbedf2a7430f0f6ce1039742d8874deec3cf6666410f2eb700000000660f1283ef407b6b67430f438ac0153390c4223d9034bf"}, 0x8, &(0x7f0000002cc0)) keyctl$read(0xb, r2, &(0x7f0000002d00)=""/72, 0x48) (async) sync_file_range(r5, 0x2, 0x8, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000002d80)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000002dc0)={0x1d, r10}, 0x10) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, &(0x7f0000002e00)) (async, rerun: 64) keyctl$describe(0x6, r7, &(0x7f0000002e40)=""/106, 0x6a) (async, rerun: 64) inotify_init() 3.958244393s ago: executing program 7 (id=495): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.853083422s ago: executing program 3 (id=496): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4bfa, &(0x7f0000000000)) 3.644410153s ago: executing program 8 (id=497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="780100001b0001000000000000200000ac1414aa000000000000000000000000fc0100000000000000000000000000000a000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffefff00000000000000000000000000000000000000000000000000000000000000e1ff00000000000000000000000000000000000000000000000c0008000800"], 0x178}}, 0x4000000) 3.64170064s ago: executing program 3 (id=498): mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x2) r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x910, 0x4, 0x5}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x52) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x100, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, &(0x7f0000006800)="10", 0x1) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) close_range(0xffffffffffffffff, r1, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x9, 0xa, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x4, @loopback={0x0, 0xac141400}}, 0x1c) ioctl(r1, 0x9, &(0x7f0000000600)="5dea8595426681b8ceadbe5512a53d95100398b54cec8692b984f129ba7f9f2343682a57a70f633821f70cd9d990bba63aa6482f609455d6b941fc9ea1faf1e072027cdb9d4ed27bc91dfbf561f8c41a0a") ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 3.503906261s ago: executing program 8 (id=499): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000029d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x21000, 0x1800, 0x6, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001400)) writev(r6, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc61", 0x48}, {&(0x7f0000000300)="daf97ac662b855a7fa822571ba8e6711005b919c759dd0144ff3d8db7da4622679f133c11e81e0467c22fdb38c9112", 0x2f}], 0x2) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x21a1}], 0x1, 0x0, 0x0, 0x0) close(r3) r7 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0x3, {0x6, 0x80000000, 0x400, 0x3, 0x2, 0x6}}) 3.313268658s ago: executing program 6 (id=500): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xa, 0x0, 0x5, 0xfffd, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x3, 0x80000045}}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2e, 0x6, 0x1, {0xb, @ah_ip4_spec={@remote, @local, 0xffffffff, 0x8}, {0x0, @multicast, 0x7, 0x80, [0x8001, 0x2]}, @tcp_ip6_spec={@local, @private2, 0x4e21, 0x4e24}, {0x0, @empty, 0x1, 0x0, [0xb8, 0xd]}, 0x8000000000000000, 0xe}, 0x2, [0x7, 0xe]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 3.032850593s ago: executing program 6 (id=501): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) semop(r0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) syz_usb_connect(0x0, 0x3bf, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004af96b40b822276082d2010203010902ad0301000000000904b90010020a000009050503000200074a07"], 0x0) semget$private(0x0, 0x4000000009, 0x0) (async) semop(r0, &(0x7f00000002c0)=[{0x0, 0xfff}], 0x1) (async) semop(r0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) (async) syz_usb_connect(0x0, 0x3bf, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004af96b40b822276082d2010203010902ad0301000000000904b90010020a000009050503000200074a07"], 0x0) (async) 2.672916561s ago: executing program 8 (id=502): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xffff, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "9ffe2b337685d6c62f148c806e5059b783f6f41b531d60250867ae03fd97e13d4cf520900107e5d7c0213877eb58f8279c529e67715fb04803db949412a38c6d9d02fd8b04ab2d8e666b94f36ec2af9912030e517e6b73aed0316b43df04e72844a49cea10b019fa406a1e6892e25a7549230fdd218023523aebe5cdd186008f46a0f071fb5b934ec50ede5ee2ea5a75895e2d45ac82bd20af920bce940ac6d53a80acccbf6b5a96ce439b317e645b263247372ca78dcb0e753d5b19769601a8976bfc4001a33aa241749564dd9bb04b33f84e0bc38517f6922294b8113662c67564baa978278fecb027c372dfc9dffaca502c57efc2726b2855587876a0e646"}, @TCA_GRED_DPS={0x10, 0x3, {0x4}}, @TCA_GRED_MAX_P={0xfffffffffffffd33, 0x4, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x26c}}, 0x0) 2.460008313s ago: executing program 8 (id=503): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x413, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x1, 0xffffffff, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0x2, {0x2, 0x23}}, 0x0, &(0x7f00000001c0), 0x0}, 0x0) 2.216863899s ago: executing program 7 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001002bbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="7300040024000600200016801c00018018000c8014ec00000f000020cd0c00008700000088a80000040014"], 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) memfd_secret(0x80000) 1.993786271s ago: executing program 7 (id=505): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7f00000000000, 0x102) (async) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4b, 0xa0800) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040480) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x103b82) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r5, &(0x7f00000000c0), 0x0) (async) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x10000000) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x8001000, 0xdddd1000, 0xc, 0xcf, 0xc, 0x6, 0x4, 0x7, 0x88, 0x5, 0x0, 0x7d}, {0x0, 0x2, 0x0, 0x12, 0x3, 0x0, 0x2, 0x2e, 0xe, 0x1, 0x5, 0x5}, {0x2, 0xf000, 0x0, 0x1, 0x80, 0xbd, 0x7, 0xff, 0x5, 0x8, 0xca, 0xa0}, {0x1000, 0xd000, 0x0, 0x0, 0x8, 0x4, 0x1, 0x9, 0xfa, 0x81, 0x0, 0xf6}, {0xeeee8000, 0x0, 0x4, 0x2, 0x5, 0xbe, 0x8, 0x7a, 0x3, 0xf8, 0xb, 0x8}, {0xffff1000, 0x4000, 0xd, 0xfa, 0x7f, 0xc, 0xc, 0x5a, 0x7, 0x32, 0x1, 0x2}, {0xd000, 0x4000, 0x10, 0xa1, 0x3, 0x4, 0xd, 0x8, 0x8, 0x7, 0x8, 0x1}, {0x2, 0x2000, 0x0, 0x5, 0x9, 0x10, 0x4, 0x10, 0xee, 0x7f, 0x9, 0xff}, {0xd000, 0x5}, {0x8000000, 0x6230}, 0x80000000, 0x0, 0x0, 0x400, 0x2, 0x9400, 0x6000, [0x100, 0x800, 0x4, 0x7]}) 1.558029327s ago: executing program 6 (id=506): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xc, 0xa, 0x3, "55b2c549fac4e515eddc96dfc03444c37ee97df28189fb3682a3c4a92e9dec19", 0x30314752}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872e51"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x9, 0x4, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180)=[{}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x1, 0x4, 0x2, 0x0, r4}) 1.352653968s ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x42c, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x37}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000080) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xc2, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x1fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb, 0x9, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x3, 0xe1}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x6, 0x2, 0x2, 0x20, 0x80}, 0x23, &(0x7f0000000580)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "e2e42cc3f686546c850961df088b22ba"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x4, 0x5}]}, 0xa, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x30, &(0x7f0000000600)=@string={0x30, 0x3, "27d827b7088a3ae3b8c54dc97ca1c1437c38f6e8002ca587b7c76bd2ec3f063222a1a4aa1cd31ae592734ee1ab87"}}, {0x5e, &(0x7f0000000640)=@string={0x5e, 0x3, "48624c67ba32831dfd7fc42bcd851c1c9bee483665bd23407e5418e9e3aa2944a6ce8f0c32724fb0eee8382e6846599d9968551919c306cf5999f24a9ea2daa58ccdbde754b49048c86c3788484ef44338fdc04961d2f6f4224c3c57"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1831}}, {0xec, &(0x7f0000000780)=@string={0xec, 0x3, "88abc2e633e810521be8f8d4ba379fd0ab67b4248452fa098c69d0644ccde6bc51a046f7d7649371c98ee2a45bef39e7e4b2351df7843686151e74bdfa46863bfa2514c1b36eff4cf00dbc0e64dc5761bb5c9a46ee718f548f3140f00686a70ea5f0ed78f4ac57cb9ad14e19740e85e4a96552dd675147bf6617ddd29e0f91c09aa2e73d3c67d5aea4ccb0fc59e95a4caa0d63b58164cf1a71d05c4f7e7aac98d9b3d051e09461f11e8174832b1d670be66c26b3259ac46bfcd3676779fbbe3908d32bf082cd89e790110fe72170251a4f16cab6da23210d6695d2dc1dcf1e0ffb1b02594c3297a5c86a"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x439}}, {0x6c, &(0x7f00000008c0)=@string={0x6c, 0x3, "d84adf2e7b21e75a1b1779bff238550c53bb0b39353c585b286361416eac054aa62f7c888f49fb2f7f6ac01e30cae8dd652fe259150b5fde60d03eeba9c07d537b1ce3433c2deb68c1ce39316bb9b3ab373f1782d926a49cc6d5e9327100af27f05efb167d6c41c051d4"}}, {0x32, &(0x7f0000000940)=@string={0x32, 0x3, "f943ed335b6e4b9e6069453bcb3aedce31af82fbb0aa3927c506b9d5e3aec27e6d1aa526084014455d28c0b7cbd28747"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000bc0)={0x24, &(0x7f0000000a40)={0x0, 0xb, 0x25, {0x25, 0x21, "4ae60a258abcc82845f4bc2824ece4263712c16d9a18f7a82c8cb6574ac3abbaf030c6"}}, &(0x7f0000000a80)={0x0, 0x3, 0xac, @string={0xac, 0x3, "4f68a6a146f1d03ffeddc2d4bb0931b6b903f48b0badc364ab62621b1d35ebde3528848a50931918811d78001dc2e40556e625ec5260e895fbf133c2d8a5658d29aa24ac3242e943f48cea747f8edaf2c47d7c7b04747b5fe4997a1a2b6aef87fd3d5214d3c013b0499db72aa80a4e97dc2119a0bd9fb5a09fb87359912cc67658717abb57efc5aad980cac2dde14a154124a33cbb1dc3965ad86e4d326564167a887359ae2c281ec740"}}, &(0x7f0000000b40)={0x0, 0x22, 0x25, {[@local=@item_4={0x3, 0x2, 0x0, "8e152987"}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0xa, "8e5533ba"}, @global=@item_4={0x3, 0x1, 0x1, "c3db46e9"}, @main=@item_4={0x3, 0x0, 0xb, "1f6f01f7"}, @main=@item_4={0x3, 0x0, 0xb, "9ccace15"}, @local=@item_4={0x3, 0x2, 0x4, "111c3a12"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x3, "e9d80d7b"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x3, 0x1, {0x22, 0xf19}}}}, &(0x7f0000000e80)={0x2c, &(0x7f0000000c00)={0x20, 0xe, 0xcd, "167f6a1f9f366831744e30d3be879cba96b59fbfab0dcd0724695eb4066ed9c6c215d105919ec11335a397cb1b3f323907ba8780c13dcca5cd5b610feec26cfd7c345df21273ed8663b55648d5468eea7fe6ee7a7886e18dd2316df3adfc1865e5baffff363c7278a36612e9c0686ac5d661fe972d95e4803aa7a32497098e4daa9a436f5994ce95f4fdcb4908e290466a2bca4f6030cb379cd979844520ebca2aad36b5facf80ef0d39af077dd44c0fbef1c35578ab47a974a42f3465625c355229c0fd152543f4fa068a9900"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000d80)={0x20, 0x1, 0xb3, "b02a818cca1f4885bf333181ae2af9455418ac8fa9400e7f406e522115f1225b5ef035bc395416d82f19d9fa09482a9b7dba831a83164762f5e7cb99f47f7878cc81f1bd87f5755d35adc5b04f84456db68896d0da374758c507c0ae448e7fea949c23d8bd6c9f73f42a57acf42906448a767c521fd717c9d4ac5008b7316b427f1e42bf94e005af8cb17e63afdcf1f1a4505a398ed92801f0f51f6a8764204c033ff18d6886b59221d24f7b643748532b05d4"}, &(0x7f0000000e40)={0x20, 0x3, 0x1, 0xf5}}) syz_usb_control_io(r6, &(0x7f0000001100)={0x2c, &(0x7f0000000ec0)={0x20, 0x7, 0x14, {0x14, 0x20, "f4cdcb132e257e0b2429ba8e26cf1dcd535b"}}, &(0x7f0000000f00)={0x0, 0x3, 0x50, @string={0x50, 0x3, "b624766bdadb5516839119ae294c43e6ee036bbd35d5c9f4cb7b49ccf8dde60db9d7c084396b8cfd3aff2e0bdcbc209a01e37b9f16f920aa2fbe4185f31916d34fea78370d45a4cce4a710e3a546"}}, &(0x7f0000000f80)={0x0, 0xf, 0xd5, {0x5, 0xf, 0xd5, 0x3, [@ptm_cap={0x3}, @generic={0xc3, 0x10, 0x1, "cc490a099ab94406b3dc4cfdddbc2e1401992792c0d368f90f58946556fb2348f7c7550666fac619afc650a7fc23ca47bbb05893005a0ae09bf15640483d22dd23c63fce26d835bd026aa1ad0cd3f50f33691eb6b7b3b92160ca2c9b3b37948dea86c6975954bec7724ea6525b5f7c345f6926a445cf6063c755c1ac77d3a505dd90b18c93012fa83e347cf8645b6e1f4bdf666256df2693ecc1547288b50ba633b53635d905867ca351bf9f0f6177c1f2eb65ebd1d437a6267d0a3a70cf52e1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xfc, 0x2, 0x4}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x18, 0x9, 0x2, "944c009d", "aa577da7"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x1, 0x1, 0xa, 0x863, 0xcc5d}}}, &(0x7f0000001600)={0x84, &(0x7f0000001140)={0x40, 0x15, 0xf4, "04dbf410bbdd2463b239b8352f09bbd1a33fb79ba7caf244f7e0fee3ba99a55fb7ae8b6c404a8afc9712856043f842d27905b12bf6779685deed194785b7292988706b2ebb4cb2829e6c8b802424adbc0ffcf30bb144ee3c1f392c8416dad1cf27d05807a63a6021c6ea56637ed4762d98d5823818f614e52a0752c0e2b0f2252933b817d6a979f4e56e7a2a1e640e4cca437e88297a2ba7543b25c61fc9d4d89ab1642457f41f5b6ee1a1aabdc3ba7b0e90317c6a86368811ea4cb6dd3b1935c1a7ce7f8b23630ab8da78cf18c33c702bd12283e40010f6b88ccfd3033002256633f1acc77e1392560c905eba4cedddce084f8d"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x800, 0x2}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000013c0)={0x40, 0xb, 0x2, 'Io'}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0xb6e9}, &(0x7f0000001440)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, &(0x7f0000001480)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "73d9"}, &(0x7f0000001500)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001580)={0x40, 0x1e, 0x1, 0x38}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x3}}) (async) r7 = syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f00000016c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x1, 0x120, 0xf7, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x971, 0x7, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x8a3, 0x16}, @acm={0x4, 0x24, 0x2, 0xa}, @country_functional={0xe, 0x24, 0x7, 0x95, 0x5c0, [0x80, 0xd04, 0xc9, 0xf7]}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8ef4, 0x231a}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x3, [0x6, 0x368]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xc4, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x6, 0xf}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x250, 0xcc, 0x80, 0x4, 0x40, 0x8}, 0x26, &(0x7f00000017c0)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xf, 0xff}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x3, 0xf000, 0x7, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0xfd, 0x6f}]}, 0x2, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xa5, &(0x7f0000001840)=@string={0xa5, 0x3, "d7aaf511d42c25b46ca31cccf78c339178b54b752ced33df3eb2450b4f2d1dc043d45e84c26d1a969e60cf2281b12344411f0fabd9f323d951cdb3f7a01d69f671ec3b5bca02fbdcab5321d6e9242e0c094c767be85196a964ae978e24597715024432f798c1d0345f0c0f5ad92001b02e542ea75346f5744406b86e504d3573ea3ace3ae1d6b4dc40c1b53c7e35d1bece95eef00bb60cbbf2dd30bdbda3f60a00eda6"}}]}) syz_usb_control_io(r7, &(0x7f0000001b40)={0x2c, &(0x7f0000001940)={0x40, 0x3b, 0x62, {0x62, 0x23, "62967a58d1f14baff26f7d1125b1dc3c89bcffddc137deed8defd044b2f26baa3d0d7c61df4f373c5821ff89197e378d39ce41163d311abc56c24f94e06348a6447a5eaff5a4940ea23917f9c8509dfbc2dd4cec9d4059f727b68bd90e5ea6e9"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000001a00)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x6, [@generic={0x1e, 0x10, 0x4, "380ba56530948de7d5aa007d86c3ec21905604db48357ad21d7c09"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "4fbd41fe732756c7c90a6aa62bcbaea5"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x4, 0xf00, 0x9, [0xc000]}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x4, 0xff0f, 0x7, [0x30, 0x0, 0x30, 0xff0000, 0xc0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x5, 0x95}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "6e416c35147a2f504be616b2b0059143"}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x18, 0x3, 0xe3, "11ceed48", "3067914f"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x9, 0x81, 0x0, 0x7ff, 0x5}}}, &(0x7f0000002040)={0x84, &(0x7f0000001b80)={0x40, 0x16, 0xce, "3df7f89aafc2293885e57c97e177d948fb11c306071bc67ce3f56a174423bf563efc1ee11624d14db1a5a9950089a02b4b924ecac47b6b51e1d720c3cb5482f0c6fd30fc6924d3c5f9fb62ad00307fbb9a233384da7f022e38f7592675cc2006972e9c1dcf2810546c887a8d3e34b502fe69daee7a316318b21fc96e3c874f86d4a93f8e78bb82114f8ebbd9db9a7966cfcbea02ac05df6c8e9256f3bd864757b87035dcba2b2a8a4d0c5d4b7129f3b8703951398cf603fae2f98563798fc3e2a2ce0ea17dfdb1be0f30136b0f09"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001d40)={0x20, 0x0, 0x4, {0x200, 0x4}}, &(0x7f0000001d80)={0x40, 0x7, 0x2, 0x5c05}, &(0x7f0000001dc0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000001e00)={0x40, 0xb, 0x2, "d95d"}, &(0x7f0000001e40)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000001e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000001ec0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001f00)={0x40, 0x19, 0x2, 'Ix'}, &(0x7f0000001f40)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000001f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001fc0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002000)={0x40, 0x21, 0x1, 0x3}}) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000002100)={0x7ff, 0x1, 0x8, 0xbdd6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002140)={'virt_wifi0\x00'}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000002480)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8821081}, 0xc, &(0x7f0000002440)={&(0x7f00000021c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x6}, 0x5, 0x7f, 0x73, 0x4, 0x0, 'syz1\x00', "026735b8492ba56af643d9e8db306f7265e6a415ac13a63765e8d8135ffc52ef", "0c8a801f43725307c5b0d90a343ed327b788ddc46eaa1485434d8e788744f0f6", [{0x200, 0x101, {0x2, 0x3}}, {0x0, 0x4, {0x0, 0x10001}}, {0x80, 0x4, {0x2, 0x8}}, {0x9c7, 0x3ff, {0x0, 0x9}}, {0x8, 0xd, {0x3, 0x1}}, {0x8000, 0xff, {0x0, 0x10000}}, {0xe, 0x7ff, {0x3, 0xff}}, {0x7f, 0x1, {0x2, 0x8181}}, {0x5, 0x2, {0x3, 0xe05}}, {0x6, 0x0, {0x2, 0x7}}, {0x2, 0x2, {0x3, 0x2}}, {0x4, 0x80, {0x2, 0x7fff}}, {0x4, 0x5, {0x2, 0x4}}, {0x1, 0x101, {0x0, 0xa7}}, {0x1, 0x2, {0x1, 0xf94}}, {0xc, 0x6, {0x1, 0x200}}, {0xffff, 0x2, {0x3, 0x3}}, {0x9, 0x400, {0x3, 0x2}}, {0x7, 0x9, {0x3, 0x8}}, {0x7, 0xb931, {0x1, 0x57}}, {0x4, 0x5, {0x0, 0x28907b3}}, {0x4, 0x0, {0x0, 0x3}}, {0x8, 0x1000, {0x3}}, {0x1ff, 0x9, {0x0, 0x7}}, {0x6, 0x2, {0x1, 0x8000}}, {0x2, 0x7e4e, {0x0, 0x8}}, {0x3, 0x0, {0x2, 0x8}}, {0x5, 0x2, {0x3}}, {0x3, 0x5, {0x1, 0x1000}}, {0x9, 0x0, {0x1, 0x5}}, {0x7, 0x3, {0x2, 0x1ff}}, {0x3f57, 0x2, {0x0, 0x5}}, {0x5, 0x92b, {0x3, 0x4}}, {0x2, 0x5, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0x1}}, {0x8, 0x81, {0x3, 0x8}}, {0x0, 0x9, {0x2, 0xffff0001}}, {0x0, 0x200, {0x3, 0x3}}, {0x6ea0, 0x9, {0x1, 0xf390}}, {0x6, 0xffff}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000002540)={0x14, &(0x7f00000024c0)={0x40, 0x4, 0xc, {0xc, 0x23, "de4125cf106fbf61f5b2"}}, &(0x7f0000002500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002700)={0x1c, &(0x7f0000002580)={0x40, 0x1f, 0xe0, "e30f1dbb0c5bce07a0bfc320d1a41be4e42f38811403c36c9d71bf0a122751e1d4cb268623340b138b389de230588cdd3c45218b08bda70a947f16287fa22926a1be295dfcc0c3975da473a6d37b967a41cae7126c0d8b0470c32b18ea99a2ca614a80921d06dff4e4f1dcac9e860ca8385f3c308fdf4250dcfd3b65cda4c509b5697baf260f2107abe94155a7bbd6e6bd3b1e743679034ecebc7ffce48b47770a9458c845724c03f3949d4e08ec55b3db88a1fca10159c6ce0fdfefd9e2af83eda662adf74d1cd0bcc96e874b07f4802c002b980631b6cb59d65bff901818ac"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x81}}) read$char_usb(r8, &(0x7f0000002740)=""/18, 0x12) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000002780), 0x220881) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000027c0)={0x2, @sdr={0x31384142, 0x7}}) (async) syz_usb_connect$cdc_ecm(0x2, 0x74, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x4, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "21f5b0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x1, 0x7d}, [@obex={0x5, 0x24, 0x15, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x1bf, 0x80, 0x100}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0xe0, 0xdfc}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xa, 0x6, 0x10}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe, 0xc0, 0x7}}}}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x300, 0x3, 0x5, 0x0, 0xdf, 0x6}, 0x5, &(0x7f0000002980)={0x5, 0xf, 0x5}, 0x5, [{0x99, &(0x7f00000029c0)=@string={0x99, 0x3, "cd8b4b3ce9ae368db93a3c3ce7114af16ea4345e1f137304d9ce3cdadafaa4c9d228b7aa582eb52fd4e830fac97d8490b6fac4b52fa9891e5fd0ff7e585bc114e961f92c2ab357fe5560f4578d684b2adbd4c757c078675b81b0341da731e4452fa52bed95cd413630cfdf1e473233c982d92821157631da63cb68f2ac34d5c57008268ab256053fc85198338e94be8e73247bb2921427"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x42f}}, {0x49, &(0x7f0000002b00)=@string={0x49, 0x3, "fd73f63f0644f566049ddb4de2d5dadbe74ef924db999caaff53a2ffbd252e5240ade985a68bdeca35589b8d3e1b531afd1e81c0e182acbd533291e60c9e8ada4a5b4eaac3d7f9"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r12 = accept4$inet6(r10, &(0x7f0000002c40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002c80)=0x1c, 0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f0000002cc0)={0x0, r12}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000002d80), &(0x7f0000002dc0)=0x8) 1.156135364s ago: executing program 3 (id=508): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4bfa, &(0x7f0000000000)) 1.011003937s ago: executing program 3 (id=509): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r2 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8142, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000280)=[@cr4={0x1, 0x40000}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r2}, &(0x7f00000005c0)=""/210, 0xd2, &(0x7f0000000580)={&(0x7f0000000340)={'tgr192-generic\x00'}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) 388.584405ms ago: executing program 7 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x1, 0xfffffffd, 0x75}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe25e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = open(&(0x7f00000004c0)='./file0\x00', 0xea8c5, 0x73) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r10) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x34ffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(r10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e22, 0x7d58, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x87, r8, 0xee01}, {0x1, 0xdf6, 0x9, 0xd8, 0xccd3, 0x80000000, 0xd74, 0x2}, {0x7, 0x6}, 0x241, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3503, 0x1, 0x0, 0xff, 0x8, 0x0, 0x7f2}}, 0xe8) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r11, 0x0, 0x0, 0x44810, 0x0, 0x0) 0s ago: executing program 6 (id=511): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) fallocate(r0, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000080)={0x1f, 0x0, 0x9, 0x100000001}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000", @ANYRES8, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe8, 0xfffffffffffffffc}, 0x10) (async) shmdt(0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async, rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0), 0x4) close(r2) (async) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c6fb2966183249a6e810d0e008f8e0018030109021b0001000000000904", @ANYRES8=r2, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): .453663][ T25] usb 3-1: Product: syz [ 138.463975][ T25] usb 3-1: Manufacturer: syz [ 138.480473][ T25] usb 3-1: SerialNumber: syz [ 138.510086][ T25] usb 3-1: config 0 descriptor?? [ 138.535933][ T7442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.579083][ T7442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.606842][ T5881] usb 1-1: not running at top speed; connect to a high speed hub [ 138.614822][ T5829] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 138.636970][ T5881] usb 1-1: config 127 has an invalid interface number: 225 but max is 3 [ 138.674795][ T5881] usb 1-1: config 127 has an invalid interface number: 144 but max is 3 [ 138.708072][ T5881] usb 1-1: config 127 has an invalid interface number: 81 but max is 3 [ 138.736779][ T5881] usb 1-1: config 127 has an invalid interface number: 203 but max is 3 [ 138.774624][ T5881] usb 1-1: config 127 has an invalid interface number: 232 but max is 3 [ 138.810189][ T5881] usb 1-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 138.835870][ T5881] usb 1-1: config 127 has no interface number 0 [ 138.872877][ T25] cdc_subset 3-1:0.1: probe with driver cdc_subset failed with error -71 [ 138.881459][ T5881] usb 1-1: config 127 has no interface number 1 [ 138.894674][ T5881] usb 1-1: config 127 has no interface number 2 [ 138.912657][ T25] usb 3-1: USB disconnect, device number 18 [ 138.922016][ T5881] usb 1-1: config 127 has no interface number 3 [ 138.968742][ T5881] usb 1-1: config 127 has no interface number 4 [ 138.975669][ T5881] usb 1-1: config 127 interface 225 altsetting 21 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 139.007991][ T5881] usb 1-1: config 127 interface 225 altsetting 21 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 139.044109][ T5881] usb 1-1: config 127 interface 225 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 139.056185][ T7485] netlink: 172 bytes leftover after parsing attributes in process `syz.6.284'. [ 139.085922][ T5829] usb 4-1: device descriptor read/64, error -71 [ 139.094781][ T5881] usb 1-1: config 127 interface 225 altsetting 21 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 139.124590][ T5881] usb 1-1: config 127 interface 225 altsetting 21 endpoint 0xF has invalid maxpacket 3071, setting to 64 [ 139.164641][ T5881] usb 1-1: config 127 interface 225 altsetting 21 endpoint 0xC has an invalid bInterval 64, changing to 4 [ 139.204624][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 139.225477][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0x8 has invalid maxpacket 16631, setting to 64 [ 139.264543][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 139.293178][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 139.334696][ T5829] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 139.354587][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 139.383694][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 139.410556][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 139.463297][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 139.504782][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 139.527158][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 139.550617][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 139.574716][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.603583][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 139.616495][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 139.638101][ T5881] usb 1-1: config 127 interface 144 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 139.654799][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 139.679369][ T5881] usb 1-1: config 127 interface 144 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 139.690746][ T7475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.697761][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 139.714897][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.728165][ T5881] usb 1-1: config 127 interface 81 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 139.740533][ T5881] usb 1-1: config 127 interface 81 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 139.752081][ T5881] usb 1-1: config 127 interface 81 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 139.774340][ T5829] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 139.786489][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 139.801608][ T5829] usb 4-1: Product: syz [ 139.806688][ T5881] usb 1-1: config 127 interface 81 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 139.818120][ T5829] usb 4-1: Manufacturer: syz [ 139.824813][ T5829] usb 4-1: SerialNumber: syz [ 139.840699][ T5881] usb 1-1: config 127 interface 81 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 139.854698][ T5829] usb 4-1: config 0 descriptor?? [ 139.892468][ T5881] usb 1-1: too many endpoints for config 127 interface 203 altsetting 54: 250, using maximum allowed: 30 [ 139.914633][ T5881] usb 1-1: config 127 interface 203 altsetting 54 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 139.944645][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 139.974706][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 139.974749][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 139.994548][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 140.026181][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 140.057517][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has an invalid endpoint descriptor of length 6, skipping [ 140.070401][ T5829] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 140.089215][ T5829] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 140.122601][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 140.148759][ T5881] usb 1-1: config 127 interface 232 altsetting 7 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 140.166336][ T5881] usb 1-1: config 127 interface 225 has no altsetting 0 [ 140.173349][ T5881] usb 1-1: config 127 interface 144 has no altsetting 0 [ 140.182289][ T5881] usb 1-1: config 127 interface 81 has no altsetting 0 [ 140.191082][ T5881] usb 1-1: config 127 interface 203 has no altsetting 0 [ 140.198847][ T5881] usb 1-1: config 127 interface 232 has no altsetting 0 [ 140.234968][ T5881] usb 1-1: New USB device found, idVendor=1286, idProduct=2052, bcdDevice=68.54 [ 140.258032][ T5829] radio-si470x 4-1:0.0: software version 98, hardware version 163 [ 140.277315][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.290457][ T5829] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 140.293831][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.315422][ T5881] usb 1-1: Product:  [ 140.319607][ T5881] usb 1-1: Manufacturer: 欳åµé•–ç›Œéº [ 140.334653][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.344430][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 140.345067][ T5881] usb 1-1: SerialNumber: І [ 140.365129][ T7519] tun0: tun_chr_ioctl cmd 1074025675 [ 140.370929][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.372781][ T7519] tun0: persist enabled [ 140.381452][ T5885] usb 3-1: config 0 descriptor?? [ 140.407696][ T7519] tun0: tun_chr_ioctl cmd 1074025675 [ 140.413114][ T7519] tun0: persist disabled [ 140.421512][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.433968][ T7457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 140.443208][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.451923][ T7519] netlink: 'syz.7.289': attribute type 21 has an invalid length. [ 140.475188][ T5829] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.484074][ T7519] netlink: 128 bytes leftover after parsing attributes in process `syz.7.289'. [ 140.493812][ T5829] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 140.494177][ T5829] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.522772][ T7519] netlink: 'syz.7.289': attribute type 4 has an invalid length. [ 140.524813][ T5829] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 140.571054][ T5829] usb 4-1: USB disconnect, device number 22 [ 140.574416][ T7519] netlink: 3 bytes leftover after parsing attributes in process `syz.7.289'. [ 140.627437][ T7522] netlink: 76 bytes leftover after parsing attributes in process `syz.7.289'. [ 140.738759][ T5881] usb 1-1: USB disconnect, device number 15 [ 140.807758][ T5885] magicmouse 0003:05AC:0265.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 140.996647][ T7533] trusted_key: encrypted_key: insufficient parameters specified [ 141.088179][ T7536] netlink: 6 bytes leftover after parsing attributes in process `syz.7.291'. [ 141.127021][ T5885] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 141.180150][ T7536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.245613][ T7539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.324774][ T5885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.383115][ T5885] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.478795][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.523049][ T5885] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 141.532903][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.550536][ T5885] hub 7-1:1.0: bad descriptor, ignoring hub [ 141.560807][ T5885] hub 7-1:1.0: probe with driver hub failed with error -5 [ 141.604316][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 141.644248][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 141.663906][ T5885] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 141.790512][ T7528] netem: incorrect gi model size [ 141.797128][ T7528] netem: change failed [ 142.162111][ T7555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3863623691 (61817979056 ns) > initial count (6685549984 ns). Using initial count to start timer. [ 142.275414][ T5885] usb 7-1: USB disconnect, device number 7 [ 142.588391][ T5880] usb 3-1: USB disconnect, device number 19 [ 142.894215][ T7577] capability: warning: `syz.2.299' uses deprecated v2 capabilities in a way that may be insecure [ 143.164810][ T5880] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 143.337837][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.354840][ T5880] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.385946][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.425546][ T5880] usb 4-1: config 0 descriptor?? [ 143.601288][ T7603] bond1: entered promiscuous mode [ 143.617494][ T7603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.654735][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 143.654747][ T29] audit: type=1326 audit(1737284032.168:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.683336][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 143.689513][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.728518][ T5880] usb 4-1: USB disconnect, device number 23 [ 143.735866][ T29] audit: type=1326 audit(1737284032.168:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.771968][ T29] audit: type=1326 audit(1737284032.178:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.803395][ T29] audit: type=1326 audit(1737284032.178:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.834102][ T29] audit: type=1326 audit(1737284032.178:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.864014][ T29] audit: type=1326 audit(1737284032.178:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.888351][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.894164][ T29] audit: type=1326 audit(1737284032.178:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.6.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2686f85d29 code=0x7ffc0000 [ 143.959446][ T7614] FAULT_INJECTION: forcing a failure. [ 143.959446][ T7614] name failslab, interval 1, probability 0, space 0, times 1 [ 143.973326][ T7614] CPU: 1 UID: 0 PID: 7614 Comm: syz.6.310 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 143.983935][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.994011][ T7614] Call Trace: [ 143.997304][ T7614] [ 144.000254][ T7614] dump_stack_lvl+0x241/0x360 [ 144.004966][ T7614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.010197][ T7614] ? __wake_up_klogd+0xcc/0x110 [ 144.015074][ T7614] should_fail_ex+0x3b0/0x4e0 [ 144.019782][ T7614] should_failslab+0xac/0x100 [ 144.024491][ T7614] __kmalloc_noprof+0xdd/0x4c0 [ 144.029278][ T7614] ? tomoyo_encode+0x26f/0x540 [ 144.034073][ T7614] tomoyo_encode+0x26f/0x540 [ 144.038692][ T7614] tomoyo_realpath_from_path+0x59e/0x5e0 [ 144.044357][ T7614] tomoyo_path_number_perm+0x236/0x860 [ 144.049846][ T7614] ? __lock_acquire+0x1397/0x2100 [ 144.054898][ T7614] ? tomoyo_path_number_perm+0x206/0x860 [ 144.060562][ T7614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.066605][ T7614] ? __fget_files+0x2a/0x410 [ 144.071219][ T7614] ? __fget_files+0x2a/0x410 [ 144.075260][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 144.075827][ T7614] security_file_ioctl+0xc6/0x2a0 [ 144.085965][ T7614] __se_sys_ioctl+0x46/0x170 [ 144.086201][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.090558][ T7614] do_syscall_64+0xf3/0x230 [ 144.090583][ T7614] ? clear_bhb_loop+0x35/0x90 [ 144.101295][ T8] usb 1-1: config 0 has no interface number 0 [ 144.103034][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.110107][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 144.113745][ T7614] RIP: 0033:0x7f2686f85d29 [ 144.113773][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.120246][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.128637][ T7614] RSP: 002b:00007f2687daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.128670][ T7614] RAX: ffffffffffffffda RBX: 00007f2687175fa0 RCX: 00007f2686f85d29 [ 144.128685][ T7614] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 144.128697][ T7614] RBP: 00007f2687daa090 R08: 0000000000000000 R09: 0000000000000000 [ 144.128709][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.128722][ T7614] R13: 0000000000000000 R14: 00007f2687175fa0 R15: 00007f268729fa28 [ 144.128748][ T7614] [ 144.214718][ T7614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.272506][ T8] usb 1-1: Product: syz [ 144.309584][ T8] usb 1-1: Manufacturer: syz [ 144.324659][ T8] usb 1-1: SerialNumber: syz [ 144.333662][ T8] usb 1-1: config 0 descriptor?? [ 144.343889][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 144.384645][ T5880] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 144.504818][ T5892] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 144.534671][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 144.542351][ T5880] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.554690][ T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 144.568809][ T5880] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.583596][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.591067][ T5880] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.600351][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.610281][ T5880] usb 4-1: config 0 descriptor?? [ 144.707841][ T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.719895][ T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.721276][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.761326][ T5892] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.770463][ T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 144.779640][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.806335][ T7621] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 144.813790][ T5892] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.840758][ T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.843595][ T5892] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.866110][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.884209][ T5892] hub 8-1:1.0: bad descriptor, ignoring hub [ 144.891696][ T5892] hub 8-1:1.0: probe with driver hub failed with error -5 [ 144.901542][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 144.911444][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 144.918019][ T5892] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 145.029132][ T8] gspca_spca1528: reg_w err -71 [ 145.044642][ T8] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 145.057569][ T8] usb 1-1: USB disconnect, device number 16 [ 145.091917][ T7616] netem: incorrect gi model size [ 145.098136][ T7616] netem: change failed [ 145.145817][ T7631] FAULT_INJECTION: forcing a failure. [ 145.145817][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 145.159458][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.6.314 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 145.170084][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 145.180156][ T7631] Call Trace: [ 145.183435][ T7631] [ 145.186383][ T7631] dump_stack_lvl+0x241/0x360 [ 145.191093][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.196317][ T7631] ? __pfx__printk+0x10/0x10 [ 145.200917][ T7631] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 145.206931][ T7631] ? __pfx___might_resched+0x10/0x10 [ 145.212242][ T7631] should_fail_ex+0x3b0/0x4e0 [ 145.216957][ T7631] should_failslab+0xac/0x100 [ 145.221656][ T7631] kmem_cache_alloc_node_noprof+0x77/0x380 [ 145.227479][ T7631] ? __alloc_skb+0x1c3/0x440 [ 145.232088][ T7631] __alloc_skb+0x1c3/0x440 [ 145.234636][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 145.236492][ T7631] ? __pfx___alloc_skb+0x10/0x10 [ 145.247327][ T7631] ? netlink_autobind+0xd6/0x2f0 [ 145.252285][ T7631] ? netlink_autobind+0x2b0/0x2f0 [ 145.255883][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.257316][ T7631] netlink_sendmsg+0x638/0xcb0 [ 145.269802][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.275113][ T7631] ? aa_sock_msg_perm+0x91/0x160 [ 145.279651][ T5880] usb 4-1: USB disconnect, device number 24 [ 145.280057][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.291227][ T7631] __sock_sendmsg+0x221/0x270 [ 145.295932][ T7631] ____sys_sendmsg+0x52a/0x7e0 [ 145.300725][ T7631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.306034][ T7631] ? __fget_files+0x2a/0x410 [ 145.310680][ T7631] ? __fget_files+0x2a/0x410 [ 145.315302][ T7631] __sys_sendmsg+0x269/0x350 [ 145.319908][ T7631] ? __pfx_lock_release+0x10/0x10 [ 145.324938][ T7631] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.330076][ T7631] ? __pfx_vfs_write+0x10/0x10 [ 145.334880][ T7631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.341217][ T7631] ? do_syscall_64+0x100/0x230 [ 145.345985][ T7631] ? do_syscall_64+0xb6/0x230 [ 145.350672][ T7631] do_syscall_64+0xf3/0x230 [ 145.355169][ T7631] ? clear_bhb_loop+0x35/0x90 [ 145.359842][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.365735][ T7631] RIP: 0033:0x7f2686f85d29 [ 145.370153][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.389763][ T7631] RSP: 002b:00007f2687daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.398197][ T7631] RAX: ffffffffffffffda RBX: 00007f2687175fa0 RCX: 00007f2686f85d29 [ 145.406182][ T7631] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 145.414153][ T7631] RBP: 00007f2687daa090 R08: 0000000000000000 R09: 0000000000000000 [ 145.422113][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.430077][ T7631] R13: 0000000000000000 R14: 00007f2687175fa0 R15: 00007f268729fa28 [ 145.438065][ T7631] [ 145.445443][ T5892] usb 8-1: USB disconnect, device number 5 [ 145.639373][ T7642] sctp: [Deprecated]: syz.6.316 (pid 7642) Use of int in max_burst socket option. [ 145.639373][ T7642] Use struct sctp_assoc_value instead [ 145.974595][ T51] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 146.103152][ T7666] netlink: 268 bytes leftover after parsing attributes in process `syz.7.321'. [ 146.137803][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 146.154602][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 146.195846][ T51] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.215042][ T51] usb 7-1: config 0 has no interface number 0 [ 146.221181][ T51] usb 7-1: config 0 interface 12 has no altsetting 0 [ 146.258562][ T51] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 146.270544][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.289015][ T51] usb 7-1: Product: syz [ 146.293205][ T51] usb 7-1: Manufacturer: syz [ 146.300905][ T51] usb 7-1: SerialNumber: syz [ 146.315376][ T51] usb 7-1: config 0 descriptor?? [ 146.457855][ T7678] FAULT_INJECTION: forcing a failure. [ 146.457855][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 146.474614][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.7.325 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 146.476728][ T5881] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.485210][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.485243][ T7678] Call Trace: [ 146.485252][ T7678] [ 146.485261][ T7678] dump_stack_lvl+0x241/0x360 [ 146.485300][ T7678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.485326][ T7678] ? __pfx__printk+0x10/0x10 [ 146.523555][ T7678] ? __kmalloc_cache_noprof+0x48/0x390 [ 146.529047][ T7678] ? __pfx___might_resched+0x10/0x10 [ 146.534349][ T7678] should_fail_ex+0x3b0/0x4e0 [ 146.539062][ T7678] should_failslab+0xac/0x100 [ 146.543774][ T7678] __kmalloc_cache_noprof+0x70/0x390 [ 146.549086][ T7678] ? n_hdlc_tty_open+0x8d/0x480 [ 146.553949][ T7678] n_hdlc_tty_open+0x8d/0x480 [ 146.558651][ T7678] ? __pfx_up_write+0x10/0x10 [ 146.563347][ T7678] tty_ldisc_open+0xa6/0x110 [ 146.567947][ T7678] tty_set_ldisc+0x389/0x560 [ 146.572545][ T7678] tty_ioctl+0xbd6/0xdc0 [ 146.576789][ T7678] ? __pfx_tty_ioctl+0x10/0x10 [ 146.581569][ T7678] __se_sys_ioctl+0xf5/0x170 [ 146.586182][ T7678] do_syscall_64+0xf3/0x230 [ 146.590697][ T7678] ? clear_bhb_loop+0x35/0x90 [ 146.595399][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.601295][ T7678] RIP: 0033:0x7fce8d385d29 [ 146.605712][ T7678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.625341][ T7678] RSP: 002b:00007fce8e1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.633775][ T7678] RAX: ffffffffffffffda RBX: 00007fce8d575fa0 RCX: 00007fce8d385d29 [ 146.634879][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 146.641739][ T7678] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 146.641759][ T7678] RBP: 00007fce8e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.641772][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.641785][ T7678] R13: 0000000000000000 R14: 00007fce8d575fa0 R15: 00007fce8d69fa28 [ 146.641814][ T7678] [ 146.649273][ T5881] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 146.672752][ T7678] n_hdlc_tty_open: n_hdlc_alloc failed [ 146.702347][ T5881] usb 1-1: config 0 has no interface number 1 [ 146.717137][ T5881] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 146.731671][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.743232][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 146.749787][ T5881] usb 1-1: config 0 descriptor?? [ 146.758708][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 146.790834][ T7674] vlan2: entered promiscuous mode [ 146.963457][ T5881] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 147.068090][ T7682] sctp: [Deprecated]: syz.3.327 (pid 7682) Use of int in max_burst socket option. [ 147.068090][ T7682] Use struct sctp_assoc_value instead [ 147.283136][ T29] audit: type=1326 audit(1737284035.808:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.7.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8d385d29 code=0x7ffc0000 [ 147.309471][ T29] audit: type=1326 audit(1737284035.808:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.7.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8d385d29 code=0x7ffc0000 [ 147.330573][ T8] usb 3-1: USB disconnect, device number 20 [ 147.381246][ T29] audit: type=1326 audit(1737284035.838:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.7.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce8d385d29 code=0x7ffc0000 [ 147.435545][ T5881] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 147.627702][ T5881] usb 4-1: config 0 has no interfaces? [ 147.638350][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.647606][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.656204][ T5881] usb 4-1: Product: syz [ 147.660725][ T5881] usb 4-1: Manufacturer: syz [ 147.665418][ T5881] usb 4-1: SerialNumber: syz [ 147.672791][ T5881] usb 4-1: config 0 descriptor?? [ 147.784670][ T5892] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 147.814688][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 147.956574][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.989576][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.045308][ T5892] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.070913][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.082309][ T5892] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.111257][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.124525][ T5892] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.133628][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.141955][ T8] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 148.153353][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.162921][ T5892] hub 8-1:1.0: bad descriptor, ignoring hub [ 148.170142][ T5892] hub 8-1:1.0: probe with driver hub failed with error -5 [ 148.179784][ T8] usb 3-1: config 0 descriptor?? [ 148.185224][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 148.193437][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 148.198799][ T5892] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 148.390490][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.402358][ T7696] netem: incorrect gi model size [ 148.407675][ T7696] netem: change failed [ 148.425148][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.536762][ T5892] usb 8-1: USB disconnect, device number 6 [ 148.603433][ T8] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 148.615443][ T8] acrux 0003:1A34:0802.000A: no inputs found [ 148.621737][ T8] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 148.852029][ T8] usb 3-1: USB disconnect, device number 21 [ 149.016697][ C1] sd 0:0:1:0: [sda] tag#2569 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 149.027192][ C1] sd 0:0:1:0: [sda] tag#2569 CDB: Read(6) 08 00 00 00 6e e3 [ 149.071235][ T51] f81534 7-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 149.079901][ T51] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.088485][ T51] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.096891][ T51] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 149.109082][ T51] usb 7-1: USB disconnect, device number 8 [ 149.253333][ T5892] usb 1-1: USB disconnect, device number 17 [ 149.272035][ T5892] qcserial 1-1:0.2: device disconnected [ 149.328307][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 149.337721][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.345288][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.353562][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.361084][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.890981][ T7719] sctp: [Deprecated]: syz.6.338 (pid 7719) Use of int in max_burst socket option. [ 149.890981][ T7719] Use struct sctp_assoc_value instead [ 150.051544][ T7713] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 150.051983][ T7725] FAULT_INJECTION: forcing a failure. [ 150.051983][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 150.052017][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: syz.6.340 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 150.052040][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.052052][ T7725] Call Trace: [ 150.052060][ T7725] [ 150.052069][ T7725] dump_stack_lvl+0x241/0x360 [ 150.052102][ T7725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.052127][ T7725] ? __pfx__printk+0x10/0x10 [ 150.052163][ T7725] should_fail_ex+0x3b0/0x4e0 [ 150.052195][ T7725] should_failslab+0xac/0x100 [ 150.052227][ T7725] ? skb_clone+0x20c/0x390 [ 150.052249][ T7725] kmem_cache_alloc_noprof+0x70/0x380 [ 150.052278][ T7725] skb_clone+0x20c/0x390 [ 150.052303][ T7725] __netlink_deliver_tap+0x3cc/0x7f0 [ 150.052333][ T7725] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.052352][ T7725] netlink_deliver_tap+0x19d/0x1b0 [ 150.052373][ T7725] netlink_unicast+0x7c4/0x990 [ 150.052399][ T7725] ? __pfx_netlink_unicast+0x10/0x10 [ 150.052415][ T7725] ? __virt_addr_valid+0x45f/0x530 [ 150.052437][ T7725] ? __phys_addr_symbol+0x2f/0x70 [ 150.052456][ T7725] ? __check_object_size+0x47a/0x730 [ 150.052482][ T7725] netlink_sendmsg+0x8e4/0xcb0 [ 150.052513][ T7725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.052538][ T7725] ? aa_sock_msg_perm+0x91/0x160 [ 150.052558][ T7725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.052577][ T7725] __sock_sendmsg+0x221/0x270 [ 150.052603][ T7725] ____sys_sendmsg+0x52a/0x7e0 [ 150.052626][ T7725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.052646][ T7725] ? __fget_files+0x2a/0x410 [ 150.052673][ T7725] ? __fget_files+0x2a/0x410 [ 150.052703][ T7725] __sys_sendmsg+0x269/0x350 [ 150.052724][ T7725] ? __pfx_lock_release+0x10/0x10 [ 150.052748][ T7725] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.052781][ T7725] ? __pfx_vfs_write+0x10/0x10 [ 150.052826][ T7725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.052849][ T7725] ? do_syscall_64+0x100/0x230 [ 150.052870][ T7725] ? do_syscall_64+0xb6/0x230 [ 150.052889][ T7725] do_syscall_64+0xf3/0x230 [ 150.052903][ T7725] ? clear_bhb_loop+0x35/0x90 [ 150.052923][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.052948][ T7725] RIP: 0033:0x7f2686f85d29 [ 150.052965][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.052979][ T7725] RSP: 002b:00007f2687daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.053000][ T7725] RAX: ffffffffffffffda RBX: 00007f2687175fa0 RCX: 00007f2686f85d29 [ 150.053015][ T7725] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 150.053026][ T7725] RBP: 00007f2687daa090 R08: 0000000000000000 R09: 0000000000000000 [ 150.053039][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.053050][ T7725] R13: 0000000000000000 R14: 00007f2687175fa0 R15: 00007f268729fa28 [ 150.053077][ T7725] [ 150.057345][ T7725] netlink: 268 bytes leftover after parsing attributes in process `syz.6.340'. [ 150.635352][ T8] usb 4-1: USB disconnect, device number 25 [ 150.657948][ T7750] netlink: 172 bytes leftover after parsing attributes in process `syz.3.345'. [ 150.694435][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 150.697517][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 150.697533][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'. [ 151.067939][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.104627][ T5881] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 151.164189][ T8] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 151.176513][ T7722] tty tty35: ldisc open failed (-12), clearing slot 34 [ 151.336339][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.347307][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.365204][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 151.381625][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.402613][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 79, changing to 10 [ 151.413829][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 41300, setting to 1024 [ 151.425282][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 151.434342][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.444926][ T5881] usb 4-1: config 0 descriptor?? [ 151.451256][ T8] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.453008][ T5881] smsusb:smsusb_probe: board id=8, interface number 0 [ 151.470756][ T5881] smsusb:smsusb_probe: Device initialized with return code -19 [ 151.525677][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.544707][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 151.552995][ T5880] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.565354][ T5880] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.575180][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.584233][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.594027][ T8] hub 7-1:1.0: bad descriptor, ignoring hub [ 151.605909][ T5880] hub 3-1:4.0: USB hub found [ 151.672031][ T8] hub 7-1:1.0: probe with driver hub failed with error -5 [ 151.795430][ T7757] netem: incorrect gi model size [ 151.800739][ T7757] netem: change failed [ 151.813657][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.818065][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 151.822703][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.838513][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.847681][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.858826][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.880708][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.893583][ T5880] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 151.920749][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 151.935436][ T5880] usb 3-1: USB disconnect, device number 22 [ 152.008367][ T8] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 152.546108][ T8] usb 7-1: USB disconnect, device number 9 [ 152.651144][ T7778] capability: warning: `syz.2.350' uses 32-bit capabilities (legacy support in use) [ 152.720963][ T7783] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 152.854264][ T7787] FAULT_INJECTION: forcing a failure. [ 152.854264][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 152.867296][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.0.352 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 152.877919][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.887999][ T7787] Call Trace: [ 152.891277][ T7787] [ 152.894212][ T7787] dump_stack_lvl+0x241/0x360 [ 152.898899][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.904099][ T7787] ? __pfx__printk+0x10/0x10 [ 152.908698][ T7787] should_fail_ex+0x3b0/0x4e0 [ 152.913380][ T7787] should_failslab+0xac/0x100 [ 152.918056][ T7787] ? skb_clone+0x20c/0x390 [ 152.922472][ T7787] kmem_cache_alloc_noprof+0x70/0x380 [ 152.927845][ T7787] skb_clone+0x20c/0x390 [ 152.932091][ T7787] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 152.937288][ T7787] dev_queue_xmit_nit+0x249/0xca0 [ 152.942308][ T7787] ? dev_queue_xmit_nit+0x2b/0xca0 [ 152.947412][ T7787] ? validate_xmit_skb+0x9b8/0xff0 [ 152.952523][ T7787] dev_hard_start_xmit+0x15f/0x7d0 [ 152.957632][ T7787] ? __pfx_validate_xmit_skb+0x10/0x10 [ 152.963092][ T7787] __dev_queue_xmit+0x1b73/0x3f50 [ 152.968113][ T7787] ? kasan_save_track+0x51/0x80 [ 152.972963][ T7787] ? ____sys_sendmsg+0x52a/0x7e0 [ 152.977904][ T7787] ? __dev_queue_xmit+0x2f4/0x3f50 [ 152.983012][ T7787] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.988396][ T7787] ? __copy_skb_header+0x437/0x5b0 [ 152.993510][ T7787] ? __asan_memcpy+0x40/0x70 [ 152.998097][ T7787] ? __copy_skb_header+0x437/0x5b0 [ 153.003207][ T7787] ? __skb_clone+0x454/0x6c0 [ 153.007799][ T7787] ? skb_clone+0x240/0x390 [ 153.012213][ T7787] __netlink_deliver_tap+0x56b/0x7f0 [ 153.017504][ T7787] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.022697][ T7787] netlink_deliver_tap+0x19d/0x1b0 [ 153.027804][ T7787] netlink_unicast+0x7c4/0x990 [ 153.032568][ T7787] ? __pfx_netlink_unicast+0x10/0x10 [ 153.037849][ T7787] ? __virt_addr_valid+0x45f/0x530 [ 153.042962][ T7787] ? __phys_addr_symbol+0x2f/0x70 [ 153.047983][ T7787] ? __check_object_size+0x47a/0x730 [ 153.053270][ T7787] netlink_sendmsg+0x8e4/0xcb0 [ 153.058046][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.063331][ T7787] ? aa_sock_msg_perm+0x91/0x160 [ 153.068272][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.073552][ T7787] __sock_sendmsg+0x221/0x270 [ 153.078231][ T7787] ____sys_sendmsg+0x52a/0x7e0 [ 153.082998][ T7787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.088280][ T7787] ? __fget_files+0x2a/0x410 [ 153.092874][ T7787] ? __fget_files+0x2a/0x410 [ 153.097471][ T7787] __sys_sendmsg+0x269/0x350 [ 153.102058][ T7787] ? __pfx_lock_release+0x10/0x10 [ 153.107085][ T7787] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.112200][ T7787] ? __pfx_vfs_write+0x10/0x10 [ 153.116978][ T7787] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.123302][ T7787] ? do_syscall_64+0x100/0x230 [ 153.128060][ T7787] ? do_syscall_64+0xb6/0x230 [ 153.132730][ T7787] do_syscall_64+0xf3/0x230 [ 153.137224][ T7787] ? clear_bhb_loop+0x35/0x90 [ 153.141895][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.147787][ T7787] RIP: 0033:0x7f3569f85d29 [ 153.152194][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.171791][ T7787] RSP: 002b:00007f356ae79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.180208][ T7787] RAX: ffffffffffffffda RBX: 00007f356a175fa0 RCX: 00007f3569f85d29 [ 153.188180][ T7787] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 153.196155][ T7787] RBP: 00007f356ae79090 R08: 0000000000000000 R09: 0000000000000000 [ 153.204119][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.212085][ T7787] R13: 0000000000000000 R14: 00007f356a175fa0 R15: 00007f356a29fa28 [ 153.220064][ T7787] [ 153.439275][ T7787] netlink: 268 bytes leftover after parsing attributes in process `syz.0.352'. [ 153.534841][ T5880] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 153.588876][ T7803] netlink: 'syz.6.356': attribute type 3 has an invalid length. [ 153.671053][ T7810] netlink: 'syz.6.356': attribute type 10 has an invalid length. [ 153.703029][ T7810] vlan2: entered promiscuous mode [ 153.717921][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 153.746788][ T5880] usb 8-1: config 3 has an invalid interface number: 246 but max is 0 [ 153.767563][ T5880] usb 8-1: config 3 has no interface number 0 [ 153.768403][ T7815] netlink: 268 bytes leftover after parsing attributes in process `syz.2.358'. [ 153.792815][ T5880] usb 8-1: config 3 interface 246 altsetting 64 endpoint 0x6 has an invalid bInterval 31, changing to 8 [ 153.819244][ T5880] usb 8-1: config 3 interface 246 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 153.844548][ T5880] usb 8-1: config 3 interface 246 has no altsetting 0 [ 153.862094][ T5880] usb 8-1: New USB device found, idVendor=1901, idProduct=0196, bcdDevice=af.30 [ 153.871778][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.879933][ T5880] usb 8-1: Product: syz [ 153.890562][ T5880] usb 8-1: Manufacturer: syz [ 153.907755][ T5880] usb 8-1: SerialNumber: syz [ 153.944441][ T5878] usb 4-1: USB disconnect, device number 26 [ 153.996298][ T5881] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 154.142221][ T5880] cp210x 8-1:3.246: cp210x converter detected [ 154.150203][ T5880] cp210x 8-1:3.246: failed to get vendor val 0x370b size 1: -71 [ 154.161003][ T5880] cp210x 8-1:3.246: querying part number failed [ 154.173519][ T5880] usb 8-1: cp210x converter now attached to ttyUSB0 [ 154.188232][ T5881] usb 1-1: config 0 has no interfaces? [ 154.194754][ T5880] usb 8-1: USB disconnect, device number 7 [ 154.206675][ T5881] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.216449][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.225276][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.238055][ T5881] usb 1-1: Product: syz [ 154.244941][ T5880] cp210x 8-1:3.246: device disconnected [ 154.251284][ T5881] usb 1-1: Manufacturer: syz [ 154.258097][ T5881] usb 1-1: SerialNumber: syz [ 154.268216][ T5881] usb 1-1: config 0 descriptor?? [ 154.653892][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.360'. [ 154.704985][ T7836] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 154.755847][ T7841] program syz.6.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.786051][ T7843] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 154.821617][ T7843] netlink: 268 bytes leftover after parsing attributes in process `syz.3.360'. [ 154.938674][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 154.982625][ T7822] geneve0: entered promiscuous mode [ 155.012689][ T7822] geneve0: entered allmulticast mode [ 155.112726][ T7854] sctp: [Deprecated]: syz.3.363 (pid 7854) Use of int in max_burst socket option. [ 155.112726][ T7854] Use struct sctp_assoc_value instead [ 155.394710][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 155.554595][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 155.569815][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.587683][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.614634][ T8] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 155.635366][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.648662][ T8] usb 7-1: config 0 descriptor?? [ 155.722099][ T7878] FAULT_INJECTION: forcing a failure. [ 155.722099][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 155.735639][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.7.367 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 155.746251][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.756323][ T7878] Call Trace: [ 155.759618][ T7878] [ 155.762565][ T7878] dump_stack_lvl+0x241/0x360 [ 155.767274][ T7878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.772502][ T7878] ? __pfx__printk+0x10/0x10 [ 155.777125][ T7878] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 155.782521][ T7878] ? __pfx___might_resched+0x10/0x10 [ 155.787829][ T7878] should_fail_ex+0x3b0/0x4e0 [ 155.792542][ T7878] should_failslab+0xac/0x100 [ 155.797246][ T7878] __kmalloc_node_noprof+0xe1/0x4d0 [ 155.802468][ T7878] ? qdisc_alloc+0x9a/0xa80 [ 155.806999][ T7878] qdisc_alloc+0x9a/0xa80 [ 155.811359][ T7878] qdisc_create+0x182/0x11a0 [ 155.815984][ T7878] ? __pfx_qdisc_create+0x10/0x10 [ 155.821043][ T7878] tc_modify_qdisc+0xa26/0x1e40 [ 155.825935][ T7878] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 155.831273][ T7878] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 155.836586][ T7878] rtnetlink_rcv_msg+0x73f/0xcf0 [ 155.841549][ T7878] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 155.846685][ T7878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.852174][ T7878] ? ref_tracker_free+0x643/0x7e0 [ 155.857241][ T7878] netlink_rcv_skb+0x1e3/0x430 [ 155.862028][ T7878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.867511][ T7878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.872837][ T7878] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.878060][ T7878] netlink_unicast+0x7f6/0x990 [ 155.882849][ T7878] ? __pfx_netlink_unicast+0x10/0x10 [ 155.888148][ T7878] ? __virt_addr_valid+0x45f/0x530 [ 155.893302][ T7878] ? __phys_addr_symbol+0x2f/0x70 [ 155.898348][ T7878] ? __check_object_size+0x47a/0x730 [ 155.903658][ T7878] netlink_sendmsg+0x8e4/0xcb0 [ 155.908452][ T7878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.913762][ T7878] ? aa_sock_msg_perm+0x91/0x160 [ 155.918722][ T7878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.924026][ T7878] __sock_sendmsg+0x221/0x270 [ 155.928732][ T7878] ____sys_sendmsg+0x52a/0x7e0 [ 155.933524][ T7878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.938826][ T7878] ? __fget_files+0x2a/0x410 [ 155.943444][ T7878] ? __fget_files+0x2a/0x410 [ 155.948069][ T7878] __sys_sendmsg+0x269/0x350 [ 155.952677][ T7878] ? __pfx_lock_release+0x10/0x10 [ 155.957725][ T7878] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.962871][ T7878] ? __pfx_vfs_write+0x10/0x10 [ 155.967681][ T7878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.974032][ T7878] ? do_syscall_64+0x100/0x230 [ 155.978822][ T7878] ? do_syscall_64+0xb6/0x230 [ 155.983521][ T7878] do_syscall_64+0xf3/0x230 [ 155.988044][ T7878] ? clear_bhb_loop+0x35/0x90 [ 155.992742][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.998660][ T7878] RIP: 0033:0x7fce8d385d29 [ 156.003126][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.022754][ T7878] RSP: 002b:00007fce8e1d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.031197][ T7878] RAX: ffffffffffffffda RBX: 00007fce8d575fa0 RCX: 00007fce8d385d29 [ 156.039191][ T7878] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 156.047184][ T7878] RBP: 00007fce8e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.055181][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.063176][ T7878] R13: 0000000000000000 R14: 00007fce8d575fa0 R15: 00007fce8d69fa28 [ 156.071187][ T7878] [ 156.121480][ T8] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 156.121998][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.140892][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.175206][ T5880] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 156.190436][ T8] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 156.251903][ T8] usb 7-1: USB disconnect, device number 10 [ 156.326321][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.342157][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.367756][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.379011][ T5880] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 156.390405][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.419065][ T5880] hub 4-1:1.0: bad descriptor, ignoring hub [ 156.457111][ T5880] hub 4-1:1.0: probe with driver hub failed with error -5 [ 156.488025][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 156.502759][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 156.520117][ T5880] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 156.718230][ T5880] usb 1-1: USB disconnect, device number 18 [ 156.879560][ T7903] netlink: 268 bytes leftover after parsing attributes in process `syz.6.370'. [ 156.894468][ T7905] sctp: [Deprecated]: syz.0.371 (pid 7905) Use of int in max_burst socket option. [ 156.894468][ T7905] Use struct sctp_assoc_value instead [ 156.917077][ T51] usb 4-1: USB disconnect, device number 27 [ 157.233099][ T5880] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 157.384987][ T5878] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 157.433056][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 157.473666][ T5880] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 157.522400][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.574651][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.606539][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.633546][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.684729][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.722084][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.761311][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.771557][ T5878] usb 7-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 157.835620][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.885541][ T5878] usb 7-1: config 0 descriptor?? [ 157.905027][ T5878] option 7-1:0.0: GSM modem (1-port) converter detected [ 157.968451][ T5880] usb 1-1: GET_CAPABILITIES returned 0 [ 157.979465][ T5880] usbtmc 1-1:16.0: can't read capabilities [ 158.235643][ T5878] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 158.385410][ T7950] trusted_key: syz.0.371 sent an empty control message without MSG_MORE. [ 158.396179][ T7913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.420183][ T5878] usb 8-1: config 123 has an invalid interface number: 156 but max is 0 [ 158.439462][ T5878] usb 8-1: config 123 has no interface number 0 [ 158.450168][ T5878] usb 8-1: config 123 interface 156 has no altsetting 0 [ 158.459599][ T7913] batadv0: entered promiscuous mode [ 158.479824][ T5878] usb 8-1: New USB device found, idVendor=12d1, idProduct=7c7b, bcdDevice=cb.51 [ 158.493463][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.497840][ T7905] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 158.501699][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 158.524830][ T51] usb 7-1: USB disconnect, device number 11 [ 158.531621][ T5878] usb 8-1: Product: syz [ 158.531856][ T51] option 7-1:0.0: device disconnected [ 158.544897][ T5878] usb 8-1: Manufacturer: syz [ 158.555126][ T5878] usb 8-1: SerialNumber: syz [ 158.696534][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.706877][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.719402][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.728964][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.737324][ T8] usb 3-1: SerialNumber: syz [ 158.815223][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.845587][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.343553][ T7947] netlink: 'syz.2.377': attribute type 18 has an invalid length. [ 159.356416][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.6.378'. [ 159.372052][ T7947] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.381233][ T7947] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.390050][ T7947] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.398825][ T7947] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.443057][ T7947] Zero length message leads to an empty skb [ 159.456922][ T5878] option 8-1:123.156: GSM modem (1-port) converter detected [ 159.470553][ T8] usb 3-1: 0:2 : does not exist [ 159.484182][ T5878] usb 8-1: USB disconnect, device number 8 [ 159.503319][ T5878] option 8-1:123.156: device disconnected [ 159.509622][ T8] usb 3-1: USB disconnect, device number 23 [ 159.580004][ T7960] netlink: 268 bytes leftover after parsing attributes in process `syz.7.379'. [ 159.608263][ T7960] FAULT_INJECTION: forcing a failure. [ 159.608263][ T7960] name failslab, interval 1, probability 0, space 0, times 0 [ 159.623878][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.7.379 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 159.634500][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.644579][ T7960] Call Trace: [ 159.647879][ T7960] [ 159.650799][ T7960] dump_stack_lvl+0x241/0x360 [ 159.655467][ T7960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.660653][ T7960] ? __pfx__printk+0x10/0x10 [ 159.665228][ T7960] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 159.671204][ T7960] ? __pfx___might_resched+0x10/0x10 [ 159.676496][ T7960] should_fail_ex+0x3b0/0x4e0 [ 159.681202][ T7960] should_failslab+0xac/0x100 [ 159.685894][ T7960] kmem_cache_alloc_node_noprof+0x77/0x380 [ 159.691686][ T7960] ? __alloc_skb+0x1c3/0x440 [ 159.696264][ T7960] __alloc_skb+0x1c3/0x440 [ 159.700667][ T7960] ? __pfx___alloc_skb+0x10/0x10 [ 159.705592][ T7960] ? netlink_ack_tlv_len+0x6e/0x200 [ 159.710776][ T7960] netlink_ack+0x145/0xa50 [ 159.715184][ T7960] netlink_rcv_skb+0x262/0x430 [ 159.719934][ T7960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.725400][ T7960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.730705][ T7960] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.735892][ T7960] netlink_unicast+0x7f6/0x990 [ 159.740641][ T7960] ? __pfx_netlink_unicast+0x10/0x10 [ 159.745911][ T7960] ? __virt_addr_valid+0x45f/0x530 [ 159.751009][ T7960] ? __phys_addr_symbol+0x2f/0x70 [ 159.756016][ T7960] ? __check_object_size+0x47a/0x730 [ 159.761288][ T7960] netlink_sendmsg+0x8e4/0xcb0 [ 159.766042][ T7960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.771311][ T7960] ? aa_sock_msg_perm+0x91/0x160 [ 159.776238][ T7960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.781503][ T7960] __sock_sendmsg+0x221/0x270 [ 159.786168][ T7960] ____sys_sendmsg+0x52a/0x7e0 [ 159.790937][ T7960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.796225][ T7960] ? __fget_files+0x2a/0x410 [ 159.800808][ T7960] ? __fget_files+0x2a/0x410 [ 159.805391][ T7960] __sys_sendmsg+0x269/0x350 [ 159.809968][ T7960] ? __pfx_lock_release+0x10/0x10 [ 159.814979][ T7960] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.820078][ T7960] ? __pfx_vfs_write+0x10/0x10 [ 159.824860][ T7960] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.831197][ T7960] ? do_syscall_64+0x100/0x230 [ 159.835946][ T7960] ? do_syscall_64+0xb6/0x230 [ 159.840690][ T7960] do_syscall_64+0xf3/0x230 [ 159.845194][ T7960] ? clear_bhb_loop+0x35/0x90 [ 159.849862][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.855743][ T7960] RIP: 0033:0x7fce8d385d29 [ 159.860140][ T7960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.879734][ T7960] RSP: 002b:00007fce8e1d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.888135][ T7960] RAX: ffffffffffffffda RBX: 00007fce8d575fa0 RCX: 00007fce8d385d29 [ 159.896093][ T7960] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 159.904048][ T7960] RBP: 00007fce8e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.912011][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.919971][ T7960] R13: 0000000000000000 R14: 00007fce8d575fa0 R15: 00007fce8d69fa28 [ 159.927937][ T7960] [ 159.973089][ T5880] usb 1-1: USB disconnect, device number 19 [ 159.985610][ T7626] udevd[7626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.167824][ T7964] netlink: 268 bytes leftover after parsing attributes in process `syz.6.382'. [ 160.495108][ T3464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.667512][ T7975] netlink: 172 bytes leftover after parsing attributes in process `syz.2.388'. [ 160.764892][ T3464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.859176][ T7976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.904742][ T51] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 160.980771][ T3464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.113172][ T51] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.158106][ T51] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.184591][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.199496][ T51] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.220294][ T3464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.220324][ T51] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.247091][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.260341][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.270679][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.279926][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.287795][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.295738][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.302951][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.323205][ T51] hub 7-1:1.0: bad descriptor, ignoring hub [ 161.331870][ T51] hub 7-1:1.0: probe with driver hub failed with error -5 [ 161.343190][ T51] cdc_wdm 7-1:1.0: skipping garbage [ 161.348661][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 161.356486][ T51] cdc_wdm 7-1:1.0: skipping garbage [ 161.362973][ T51] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 161.371363][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.387103][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 161.409585][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 161.429593][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.442703][ T25] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 161.453730][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.464385][ T25] usb 3-1: Product: syz [ 161.468690][ T25] usb 3-1: Manufacturer: syz [ 161.473617][ T25] usb 3-1: SerialNumber: syz [ 161.491537][ T25] usb 3-1: config 0 descriptor?? [ 161.501756][ T25] imon_raw 3-1:0.0: IR endpoint missing [ 161.518865][ T7984] netlink: 268 bytes leftover after parsing attributes in process `syz.3.391'. [ 161.562198][ T7983] ip6tnl0: mtu greater than device maximum [ 161.709406][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.788972][ T3464] bridge_slave_1: left allmulticast mode [ 161.813247][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.827569][ T3464] bridge_slave_1: left promiscuous mode [ 161.896048][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.963034][ T25] usb 3-1: USB disconnect, device number 24 [ 162.041486][ T3464] bridge_slave_0: left allmulticast mode [ 162.052687][ T3464] bridge_slave_0: left promiscuous mode [ 162.064761][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.165993][ T8006] sctp: [Deprecated]: syz.7.393 (pid 8006) Use of int in max_burst socket option. [ 162.165993][ T8006] Use struct sctp_assoc_value instead [ 162.913700][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.915003][ T5878] usb 7-1: USB disconnect, device number 12 [ 162.937037][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.951041][ T3464] bond0 (unregistering): Released all slaves [ 163.054011][ T3464] bond1 (unregistering): Released all slaves [ 163.078711][ T8022] netlink: 268 bytes leftover after parsing attributes in process `syz.2.395'. [ 163.308050][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 163.308067][ T29] audit: type=1326 audit(1737284051.828:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac04d85d29 code=0x0 [ 163.385864][ T54] Bluetooth: hci4: command tx timeout [ 163.794332][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 163.839731][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.906380][ T3464] hsr_slave_0: left promiscuous mode [ 163.916958][ T3464] hsr_slave_1: left promiscuous mode [ 163.943650][ T3464] veth1_macvtap: left promiscuous mode [ 163.949937][ T3464] veth0_macvtap: left promiscuous mode [ 163.958194][ T3464] veth1_vlan: left promiscuous mode [ 163.963778][ T3464] veth0_vlan: left promiscuous mode [ 164.323852][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 164.365207][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 164.701880][ T8074] netlink: 172 bytes leftover after parsing attributes in process `syz.6.406'. [ 164.930565][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.408'. [ 164.939540][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 165.097250][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 165.107840][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.116109][ T25] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 165.125699][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.132889][ T7988] bridge_slave_0: entered allmulticast mode [ 165.139227][ T25] usb 3-1: Product: syz [ 165.143417][ T25] usb 3-1: SerialNumber: syz [ 165.150052][ T7988] bridge_slave_0: entered promiscuous mode [ 165.163639][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.172193][ T25] usb 3-1: config 0 descriptor?? [ 165.181740][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.191149][ T7988] bridge_slave_1: entered allmulticast mode [ 165.206629][ T7988] bridge_slave_1: entered promiscuous mode [ 165.272684][ T8086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.298458][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.315519][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.388719][ T29] audit: type=1326 audit(1737284053.918:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac04d85d29 code=0x7ffc0000 [ 165.411328][ T29] audit: type=1326 audit(1737284053.918:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fac04d85d29 code=0x7ffc0000 [ 165.433505][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.439972][ T29] audit: type=1326 audit(1737284053.918:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac04d85d29 code=0x7ffc0000 [ 165.469513][ T29] audit: type=1326 audit(1737284053.998:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac04d847df code=0x7ffc0000 [ 165.493224][ T29] audit: type=1326 audit(1737284053.998:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac04d85d29 code=0x7ffc0000 [ 165.495381][ T54] Bluetooth: hci4: command tx timeout [ 165.515395][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.515455][ T29] audit: type=1326 audit(1737284053.998:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac04d85d29 code=0x7ffc0000 [ 165.526328][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.549002][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.563677][ T29] audit: type=1326 audit(1737284054.048:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac04d84690 code=0x7ffc0000 [ 165.585831][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.597992][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.608144][ T29] audit: type=1326 audit(1737284054.048:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 165.637854][ T7988] team0: Port device team_slave_0 added [ 165.648667][ T25] ldusb 3-1:0.0: Interrupt in endpoint not found [ 165.652042][ T29] audit: type=1326 audit(1737284054.048:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 165.663609][ T25] usb 3-1: USB disconnect, device number 25 [ 165.708562][ T7988] team0: Port device team_slave_1 added [ 165.790622][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.812019][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.844856][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.870815][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.878529][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.954921][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.021316][ T54] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 166.156746][ T8104] sctp: [Deprecated]: syz.6.412 (pid 8104) Use of int in max_burst socket option. [ 166.156746][ T8104] Use struct sctp_assoc_value instead [ 166.159394][ T7988] hsr_slave_0: entered promiscuous mode [ 166.216129][ T7988] hsr_slave_1: entered promiscuous mode [ 166.233955][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.254000][ T7988] Cannot create hsr debugfs directory [ 166.671592][ T8114] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.996607][ T8130] bridge1: entered promiscuous mode [ 167.020333][ T8130] bridge1: entered allmulticast mode [ 167.107886][ T8131] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 167.119919][ T8131] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.264686][ T7988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.294774][ T7988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.327123][ T7988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.347414][ T7988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.465792][ T8145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.481828][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 167.573358][ T54] Bluetooth: hci4: command tx timeout [ 167.644571][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 167.651432][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 167.663413][ T9] usb 8-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 167.673326][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.682605][ T9] usb 8-1: Product: syz [ 167.687171][ T9] usb 8-1: Manufacturer: syz [ 167.691783][ T9] usb 8-1: SerialNumber: syz [ 167.698658][ T9] usb 8-1: config 0 descriptor?? [ 167.706420][ T9] usbtouchscreen 8-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 167.734832][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.767524][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.817900][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.825095][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.846517][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.853689][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.869022][ T8156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.909994][ T9] usb 8-1: USB disconnect, device number 9 [ 167.991118][ T7988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.004152][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.033178][ T8161] sctp: [Deprecated]: syz.3.425 (pid 8161) Use of int in max_burst socket option. [ 168.033178][ T8161] Use struct sctp_assoc_value instead [ 168.114457][ T8164] netlink: 172 bytes leftover after parsing attributes in process `syz.2.426'. [ 168.236373][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.277955][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 168.316306][ T7988] veth0_vlan: entered promiscuous mode [ 168.432770][ T7988] veth1_vlan: entered promiscuous mode [ 168.454586][ T5885] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 168.487733][ T8172] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.539066][ T8177] kvm: kvm [8176]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000016) = 0x0 [ 168.620594][ T7988] veth0_macvtap: entered promiscuous mode [ 168.635776][ T5885] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 168.654098][ T8183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.680766][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 168.697484][ T5885] usb 3-1: can't read configurations, error -61 [ 168.736142][ T7988] veth1_macvtap: entered promiscuous mode [ 168.783028][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.827710][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.854581][ T5885] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 168.859573][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.893348][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.904360][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.916735][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.927063][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.937655][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.948570][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.992838][ T8195] geneve0: entered promiscuous mode [ 169.013286][ T8195] geneve0: left promiscuous mode [ 169.044081][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.055016][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.065508][ T5885] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 169.073653][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.094705][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.096048][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.109386][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.122855][ T5885] usb 3-1: can't read configurations, error -61 [ 169.122878][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.140704][ T5885] usb usb3-port1: attempt power cycle [ 169.144331][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.146360][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 169.166855][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.178903][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.193548][ T7988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.202640][ T7988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.213078][ T7988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.222310][ T7988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.316925][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.325267][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 169.351925][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.365796][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.368448][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.392728][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.404331][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.442896][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.452759][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.464379][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.495788][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.505419][ T5885] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 169.536899][ T5885] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 169.547764][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.555664][ T5885] usb 3-1: can't read configurations, error -61 [ 169.635732][ T54] Bluetooth: hci4: command tx timeout [ 169.694652][ T5885] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 169.717206][ T5885] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 169.726547][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.432'. [ 169.745617][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.759285][ T5885] usb 3-1: can't read configurations, error -61 [ 169.759294][ T5881] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 169.799408][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 169.812680][ T5885] usb usb3-port1: unable to enumerate USB device [ 169.841544][ T9] usbtmc 7-1:16.0: can't read capabilities [ 169.927337][ T5881] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.991799][ T5881] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.016044][ T9] usb 7-1: USB disconnect, device number 13 [ 170.070410][ T5881] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.145878][ T5881] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 170.171662][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.303404][ T5881] hub 8-1:1.0: bad descriptor, ignoring hub [ 170.370885][ T5881] hub 8-1:1.0: probe with driver hub failed with error -5 [ 170.503624][ T5881] cdc_wdm 8-1:1.0: skipping garbage [ 170.563376][ T5881] cdc_wdm 8-1:1.0: skipping garbage [ 170.609504][ T5881] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 170.684779][ T5881] usb 8-1: USB disconnect, device number 10 [ 170.771155][ T8226] netlink: 172 bytes leftover after parsing attributes in process `syz.6.437'. [ 170.935111][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 171.104686][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 171.137952][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 171.167338][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.189064][ T9] usb 4-1: Product: syz [ 171.197212][ T9] usb 4-1: Manufacturer: syz [ 171.208011][ T9] usb 4-1: SerialNumber: syz [ 171.235733][ T9] usb 4-1: config 0 descriptor?? [ 171.259962][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 171.287984][ T9] usb 4-1: Detected FT4233HP [ 171.374693][ T5880] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 171.438568][ T8249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.457847][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 171.462834][ T8241] syz.7.440 uses obsolete (PF_INET,SOCK_PACKET) [ 171.481095][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 171.500666][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.539920][ T9] usb 4-1: USB disconnect, device number 29 [ 171.554372][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.555101][ T5880] usb 9-1: Using ep0 maxpacket: 16 [ 171.578820][ T9] ftdi_sio 4-1:0.0: device disconnected [ 171.607970][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.615182][ T8255] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.650249][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.663278][ T5880] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 171.677988][ T5880] usb 9-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 171.688638][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.702668][ T5880] usb 9-1: config 0 descriptor?? [ 172.131363][ T5880] wacom 0003:056A:0314.000C: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 172.154045][ T5880] wacom 0003:056A:0314.000C: hidraw0: USB HID v0.10 Device [HID 056a:0314] on usb-dummy_hcd.8-1/input0 [ 172.174884][ T5880] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0314.000C/input/input29 [ 172.187913][ T8267] dccp_invalid_packet: P.Data Offset(1) too small [ 172.445502][ T5829] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 172.627049][ T5829] usb 4-1: device descriptor read/64, error -71 [ 172.965639][ T5829] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 173.105228][ T5829] usb 4-1: device descriptor read/64, error -71 [ 173.254625][ T5829] usb usb4-port1: attempt power cycle [ 173.324858][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 173.528468][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 173.545171][ T5878] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 173.583299][ T8] usb 8-1: config index 0 descriptor too short (expected 1051, got 27) [ 173.594603][ T5829] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 173.626222][ T5829] usb 4-1: device descriptor read/8, error -71 [ 173.646934][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 173.719308][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 114, changing to 10 [ 173.764985][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25963, setting to 1024 [ 173.784183][ T8] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 173.793877][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.804161][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.812924][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.822041][ T8] usb 8-1: Product: syz [ 173.826485][ T8] usb 8-1: Manufacturer: syz [ 173.831193][ T5878] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.841266][ T8] usb 8-1: SerialNumber: syz [ 173.847532][ T5878] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.857362][ T8] usb 8-1: config 0 descriptor?? [ 173.863828][ T8297] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 173.876240][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.904635][ T5829] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 173.919145][ T5878] hub 7-1:1.0: bad descriptor, ignoring hub [ 173.933243][ T5878] hub 7-1:1.0: probe with driver hub failed with error -5 [ 173.954167][ T5878] cdc_wdm 7-1:1.0: skipping garbage [ 173.977304][ T5829] usb 4-1: device descriptor read/8, error -71 [ 173.991324][ T5878] cdc_wdm 7-1:1.0: skipping garbage [ 174.030709][ T5878] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 174.087096][ T8] usb 8-1: USB disconnect, device number 11 [ 174.105441][ T5829] usb usb4-port1: unable to enumerate USB device [ 174.278622][ T8305] mmap: syz.2.451 (8305) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.484788][ T5829] usb 7-1: USB disconnect, device number 14 [ 174.562696][ T9] usb 9-1: USB disconnect, device number 2 [ 174.658023][ T8318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.796484][ T8323] netlink: 'syz.8.455': attribute type 21 has an invalid length. [ 174.804445][ T8323] netlink: 168 bytes leftover after parsing attributes in process `syz.8.455'. [ 174.878036][ T8328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.940526][ T8330] netlink: 172 bytes leftover after parsing attributes in process `syz.8.456'. [ 175.094579][ T5881] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 175.254587][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 175.272638][ T5881] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 175.300901][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.329989][ T5881] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 175.345456][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 175.354574][ T5879] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 175.356962][ T51] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 175.378677][ T5881] usb 3-1: Product: syz [ 175.399934][ T5881] usb 3-1: config 0 descriptor?? [ 175.419350][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 175.514931][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 175.532113][ T5879] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.554343][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.554553][ T51] usb 9-1: Using ep0 maxpacket: 16 [ 175.579303][ T5879] usb 7-1: config 0 has no interface number 0 [ 175.581482][ T51] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 175.592506][ T5879] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.619709][ T51] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.639063][ T5879] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.653196][ T51] usb 9-1: config 0 interface 0 has no altsetting 0 [ 175.655136][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.673421][ T51] usb 9-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 175.681499][ T5879] usb 7-1: Product: syz [ 175.691472][ T5879] usb 7-1: SerialNumber: syz [ 175.702924][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.709012][ T5879] usb 7-1: config 0 descriptor?? [ 175.729189][ T51] usb 9-1: config 0 descriptor?? [ 175.731324][ T5879] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 176.034634][ T5879] usb 7-1: USB disconnect, device number 15 [ 176.186022][ T51] wacom 0003:056A:0029.000D: unknown main item tag 0x0 [ 176.194891][ T51] wacom 0003:056A:0029.000D: unknown main item tag 0x0 [ 176.201964][ T51] wacom 0003:056A:0029.000D: unknown main item tag 0x0 [ 176.221761][ T51] wacom 0003:056A:0029.000D: unknown main item tag 0x0 [ 176.243941][ T51] wacom 0003:056A:0029.000D: unknown main item tag 0x0 [ 176.265460][ T51] wacom 0003:056A:0029.000D: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 176.270990][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 176.271003][ T29] audit: type=1326 audit(1737284064.798:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.305575][ T51] wacom 0003:056A:0029.000D: hidraw0: USB HID v0.40 Device [HID 056a:0029] on usb-dummy_hcd.8-1/input0 [ 176.325857][ T51] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0029.000D/input/input33 [ 176.339304][ T29] audit: type=1326 audit(1737284064.848:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.382771][ T29] audit: type=1326 audit(1737284064.848:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.432386][ T29] audit: type=1326 audit(1737284064.858:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.469654][ T51] usb 9-1: USB disconnect, device number 3 [ 176.504721][ T29] audit: type=1326 audit(1737284064.858:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.532066][ T29] audit: type=1326 audit(1737284064.858:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.564255][ T29] audit: type=1326 audit(1737284064.858:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.592833][ T29] audit: type=1326 audit(1737284064.858:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b9984690 code=0x7ffc0000 [ 176.622467][ T29] audit: type=1326 audit(1737284064.858:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b9984690 code=0x7ffc0000 [ 176.653821][ T29] audit: type=1326 audit(1737284064.868:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b9985d29 code=0x7ffc0000 [ 176.779053][ T5881] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 176.807783][ T8358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.944621][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 176.966691][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.993639][ T5881] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 177.010997][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.040573][ T5881] usb 4-1: config 0 descriptor?? [ 177.223270][ T8364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.672702][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 177.706099][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 177.719492][ T5881] usb 4-1: USB disconnect, device number 34 [ 177.774587][ T9] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 177.812650][ T8372] netlink: 172 bytes leftover after parsing attributes in process `syz.8.468'. [ 177.901832][ T5881] usb 3-1: USB disconnect, device number 30 [ 177.976740][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.986896][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.995840][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.005917][ T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.015168][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.026743][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 178.032692][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 178.040210][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 178.045464][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 178.050691][ T9] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.335756][ T8379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.444708][ T5881] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 178.501147][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 178.665104][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 178.687443][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.696913][ T8386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.724678][ T5881] usb 3-1: config 0 has no interface number 0 [ 178.807818][ T5881] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 178.817005][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.825270][ T5881] usb 3-1: Product: syz [ 178.829448][ T5881] usb 3-1: Manufacturer: syz [ 178.849507][ T5881] usb 3-1: SerialNumber: syz [ 178.854677][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 178.868565][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 178.882895][ T5881] usb 3-1: config 0 descriptor?? [ 178.939590][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 178.994575][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 179.021529][ T9] usb 4-1: Product: syz [ 179.043940][ T9] usb 4-1: Manufacturer: syz [ 179.064171][ T9] usb 4-1: SerialNumber: syz [ 179.101137][ T5881] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 179.161874][ T5881] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.189056][ T5881] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 179.204606][ T51] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 179.224860][ T5881] usb 3-1: media controller created [ 179.341471][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.356380][ T51] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.367694][ T51] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.380179][ T51] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.389370][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.416593][ T8388] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 179.431786][ T51] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.463510][ T9] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 179.482993][ T5881] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 179.516691][ T9] visor 4-1:1.0: probe with driver visor failed with error -110 [ 179.601778][ T5881] usb 3-1: USB disconnect, device number 31 [ 179.680566][ T9] usb 4-1: USB disconnect, device number 35 [ 179.960542][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.993714][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.391158][ T9] usb 7-1: USB disconnect, device number 16 [ 180.429931][ T8402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.595782][ T51] usb 8-1: USB disconnect, device number 12 [ 180.674122][ T54] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 180.744727][ T5878] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 180.746548][ T8418] netlink: 'syz.7.480': attribute type 21 has an invalid length. [ 180.874635][ T5878] usb 3-1: device descriptor read/64, error -71 [ 181.030844][ T8428] netlink: 'syz.7.483': attribute type 1 has an invalid length. [ 181.057104][ T8428] netlink: 'syz.7.483': attribute type 2 has an invalid length. [ 181.082347][ T8432] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 181.121685][ T8432] FAULT_INJECTION: forcing a failure. [ 181.121685][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 181.134600][ T5878] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 181.154973][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.6.484 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 181.165600][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.175689][ T8432] Call Trace: [ 181.178990][ T8432] [ 181.181937][ T8432] dump_stack_lvl+0x241/0x360 [ 181.186647][ T8432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.191877][ T8432] ? __pfx__printk+0x10/0x10 [ 181.196501][ T8432] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 181.202513][ T8432] ? __pfx___might_resched+0x10/0x10 [ 181.207818][ T8432] should_fail_ex+0x3b0/0x4e0 [ 181.212504][ T8432] should_failslab+0xac/0x100 [ 181.217182][ T8432] kmem_cache_alloc_node_noprof+0x77/0x380 [ 181.222987][ T8432] ? __alloc_skb+0x1c3/0x440 [ 181.227582][ T8432] __alloc_skb+0x1c3/0x440 [ 181.231994][ T8432] ? __pfx___alloc_skb+0x10/0x10 [ 181.236928][ T8432] ? netlink_ack_tlv_len+0x6e/0x200 [ 181.242127][ T8432] netlink_ack+0x145/0xa50 [ 181.246550][ T8432] netlink_rcv_skb+0x262/0x430 [ 181.251312][ T8432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.256774][ T8432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.262086][ T8432] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.267282][ T8432] netlink_unicast+0x7f6/0x990 [ 181.272045][ T8432] ? __pfx_netlink_unicast+0x10/0x10 [ 181.277344][ T8432] ? __virt_addr_valid+0x45f/0x530 [ 181.282468][ T8432] ? __phys_addr_symbol+0x2f/0x70 [ 181.287503][ T8432] ? __check_object_size+0x47a/0x730 [ 181.292800][ T8432] netlink_sendmsg+0x8e4/0xcb0 [ 181.297575][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.302870][ T8432] ? aa_sock_msg_perm+0x91/0x160 [ 181.307812][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.313094][ T8432] __sock_sendmsg+0x221/0x270 [ 181.317774][ T8432] ____sys_sendmsg+0x52a/0x7e0 [ 181.322540][ T8432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.327843][ T8432] ? __fget_files+0x2a/0x410 [ 181.332431][ T8432] ? __fget_files+0x2a/0x410 [ 181.337025][ T8432] __sys_sendmsg+0x269/0x350 [ 181.341609][ T8432] ? __pfx_lock_release+0x10/0x10 [ 181.346630][ T8432] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.351746][ T8432] ? __pfx_vfs_write+0x10/0x10 [ 181.356529][ T8432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.362858][ T8432] ? do_syscall_64+0x100/0x230 [ 181.367620][ T8432] ? do_syscall_64+0xb6/0x230 [ 181.372291][ T8432] do_syscall_64+0xf3/0x230 [ 181.376785][ T8432] ? clear_bhb_loop+0x35/0x90 [ 181.381457][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.387350][ T8432] RIP: 0033:0x7f2686f85d29 [ 181.391771][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.411373][ T8432] RSP: 002b:00007f2687daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.419785][ T8432] RAX: ffffffffffffffda RBX: 00007f2687175fa0 RCX: 00007f2686f85d29 [ 181.427750][ T8432] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 181.435712][ T8432] RBP: 00007f2687daa090 R08: 0000000000000000 R09: 0000000000000000 [ 181.443675][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.451640][ T8432] R13: 0000000000000000 R14: 00007f2687175fa0 R15: 00007f268729fa28 [ 181.459621][ T8432] [ 181.463059][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 181.504860][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 181.504877][ T29] audit: type=1326 audit(1737284070.038:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 181.595313][ T5878] usb 3-1: device descriptor read/64, error -71 [ 181.614560][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 181.621285][ T25] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 181.632234][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.675246][ T25] usb 4-1: config 0 has no interface number 0 [ 181.681374][ T25] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 181.706497][ T5878] usb usb3-port1: attempt power cycle [ 181.712737][ T29] audit: type=1326 audit(1737284070.238:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 181.740829][ T25] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 181.761382][ T51] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 181.776481][ T25] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 181.788996][ T29] audit: type=1326 audit(1737284070.238:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 181.811408][ T25] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 181.821902][ T25] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 181.848750][ T25] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 181.869647][ T29] audit: type=1326 audit(1737284070.238:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 181.898680][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 181.907918][ T5881] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 181.930224][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.939987][ T29] audit: type=1326 audit(1737284070.378:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 181.974746][ T51] usb 8-1: device descriptor read/64, error -71 [ 181.984939][ T25] usb 4-1: config 0 descriptor?? [ 181.991548][ T8424] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.009624][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.024790][ T29] audit: type=1326 audit(1737284070.488:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 182.048408][ T8447] netlink: 172 bytes leftover after parsing attributes in process `syz.8.486'. [ 182.093198][ T25] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 182.111213][ T5881] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.120579][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.180391][ T5881] usb 7-1: config 0 descriptor?? [ 182.189756][ T5881] cp210x 7-1:0.0: cp210x converter detected [ 182.197612][ T7627] udevd[7627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.213839][ T25] usb 4-1: USB disconnect, device number 36 [ 182.224944][ T51] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 182.234934][ T29] audit: type=1326 audit(1737284070.758:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 182.284658][ T5878] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 182.311696][ T29] audit: type=1326 audit(1737284070.838:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 182.318856][ T5878] usb 3-1: device descriptor read/8, error -71 [ 182.365855][ T29] audit: type=1326 audit(1737284070.868:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 182.388656][ T51] usb 8-1: device descriptor read/64, error -71 [ 182.509681][ T29] audit: type=1326 audit(1737284071.038:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac04d8592b code=0x7ffc0000 [ 182.515020][ T51] usb usb8-port1: attempt power cycle [ 182.594744][ T5885] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 182.634738][ T5878] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 182.665849][ T5878] usb 3-1: device descriptor read/8, error -71 [ 182.666638][ T5881] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 182.682824][ T5881] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 182.731178][ T5881] usb 7-1: cp210x converter now attached to ttyUSB0 [ 182.755012][ T5881] usb 7-1: USB disconnect, device number 17 [ 182.764647][ T5885] usb 9-1: Using ep0 maxpacket: 16 [ 182.771902][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.773789][ T5885] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.797520][ T5878] usb usb3-port1: unable to enumerate USB device [ 182.803792][ T5881] cp210x 7-1:0.0: device disconnected [ 182.829078][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 182.843843][ T5885] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 182.859471][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.878522][ T5885] usb 9-1: config 0 descriptor?? [ 182.916917][ T51] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 182.965071][ T51] usb 8-1: device descriptor read/8, error -71 [ 183.206539][ T51] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 183.244585][ T5881] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 183.254076][ T51] usb 8-1: device descriptor read/8, error -71 [ 183.341487][ T5885] usb 9-1: string descriptor 0 read error: -71 [ 183.353781][ T5885] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 183.364839][ T51] usb usb8-port1: unable to enumerate USB device [ 183.387566][ T5885] usb 9-1: USB disconnect, device number 4 [ 183.436941][ T5881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.447305][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.456357][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.466554][ T5881] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.476074][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.492183][ T5881] hub 7-1:1.0: bad descriptor, ignoring hub [ 183.527974][ T5881] hub 7-1:1.0: probe with driver hub failed with error -5 [ 183.528069][ T8476] netlink: 268 bytes leftover after parsing attributes in process `syz.2.491'. [ 183.536124][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 183.552693][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 183.558187][ T5881] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 183.904615][ T5885] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 184.054549][ T5885] usb 3-1: device descriptor read/64, error -71 [ 184.266613][ T8484] could not allocate digest TFM handle cbcmac(aes-aesni) [ 184.275660][ T9] usb 7-1: USB disconnect, device number 18 [ 184.308393][ T5885] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 184.471609][ T8504] netlink: 172 bytes leftover after parsing attributes in process `syz.8.497'. [ 184.475264][ T5885] usb 3-1: device descriptor read/64, error -71 [ 184.621228][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 184.637686][ T5885] usb usb3-port1: attempt power cycle [ 184.754775][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 184.763778][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 184.772347][ T5835] Bluetooth: hci0: hardware error 0x00 [ 184.784957][ T5881] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 184.798414][ T9] usb 8-1: config 0 has no interfaces? [ 184.833313][ T9] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.845837][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.868221][ T8521] veth0_to_team: entered promiscuous mode [ 184.873980][ T8521] veth0_to_team: entered allmulticast mode [ 184.877975][ T9] usb 8-1: Product: syz [ 184.903278][ T9] usb 8-1: Manufacturer: syz [ 184.916127][ T9] usb 8-1: SerialNumber: syz [ 184.931812][ T9] usb 8-1: config 0 descriptor?? [ 184.948437][ T5881] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 184.966850][ T5881] usb 4-1: config 1 interface 0 has no altsetting 0 [ 184.985007][ T5885] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 184.989208][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 185.023119][ T5885] usb 3-1: device descriptor read/8, error -71 [ 185.025262][ T5881] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 185.059042][ T5881] usb 4-1: Product: syz [ 185.090539][ T5881] usb 4-1: Manufacturer: syz [ 185.104399][ T5881] usb 4-1: SerialNumber: syz [ 185.263591][ T25] usb 8-1: USB disconnect, device number 17 [ 185.294572][ T5885] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 185.334294][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 185.346370][ T5885] usb 3-1: device descriptor read/8, error -71 [ 185.453287][ T8538] netlink: 268 bytes leftover after parsing attributes in process `syz.8.502'. [ 185.462940][ T5885] usb usb3-port1: unable to enumerate USB device [ 185.486554][ T9] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 185.500597][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.527296][ T9] usb 7-1: config 0 has no interface number 0 [ 185.544014][ T9] usb 7-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 185.588954][ T9] usb 7-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 185.642514][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 185.666578][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.681305][ T9] usb 7-1: Product: syz [ 185.688139][ T9] usb 7-1: Manufacturer: syz [ 185.693200][ T9] usb 7-1: SerialNumber: syz [ 185.718398][ T9] usb 7-1: config 0 descriptor?? [ 185.730951][ T9] cdc_ether 7-1:0.185: skipping garbage [ 185.737986][ T5881] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 185.742220][ T9] usb 7-1: bad CDC descriptors [ 185.762052][ T9] usb 7-1: unsupported MDLM descriptors [ 185.888806][ T5880] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 185.920126][ T8556] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 185.937868][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.953227][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.971998][ T9] usb 7-1: USB disconnect, device number 19 [ 186.036157][ T5880] usb 9-1: device descriptor read/64, error -71 [ 186.056016][ C0] usblp0: nonzero write bulk status received: -71 [ 186.059771][ T5881] usb 4-1: USB disconnect, device number 37 [ 186.296833][ T5880] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 186.308151][ T8505] usblp0: removed [ 186.394756][ T51] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 186.434640][ T5880] usb 9-1: device descriptor read/64, error -71 [ 186.555330][ T51] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 186.563057][ T5880] usb usb9-port1: attempt power cycle [ 186.589439][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.602519][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.613854][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.622921][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.644207][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.668140][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.683377][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.703488][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.725146][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.740728][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.757637][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.771529][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.779405][ T8599] sctp: [Deprecated]: syz.2.507 (pid 8599) Use of int in max_burst socket option. [ 186.779405][ T8599] Use struct sctp_assoc_value instead [ 186.798136][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.807815][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.823015][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.825579][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 186.837709][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 186.860285][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.885501][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.920529][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.933406][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.948934][ T5880] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 186.958947][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.981320][ T5880] usb 9-1: device descriptor read/8, error -71 [ 186.990998][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 187.012399][ T51] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.056137][ T9] usb 7-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 81 [ 187.059160][ T51] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.074571][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.084557][ T25] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 187.096616][ T51] usb 8-1: config 0 interface 0 has no altsetting 0 [ 187.098365][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 187.106118][ T51] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 187.123244][ T51] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.131672][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.131698][ T9] usb 7-1: Product: syz [ 187.131713][ T9] usb 7-1: Manufacturer: syz [ 187.131728][ T9] usb 7-1: SerialNumber: syz [ 187.165491][ T51] usb 8-1: Product: syz [ 187.169670][ T9] usb 7-1: config 0 descriptor?? [ 187.172167][ T8593] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 187.185567][ T9] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 187.186913][ T51] usb 8-1: Manufacturer: syz [ 187.193184][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 187.214535][ T51] usb 8-1: SerialNumber: syz [ 187.223821][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 187.235436][ T25] usb 3-1: device descriptor read/64, error -71 [ 187.241551][ T8616] loop6: detected capacity change from 0 to 524287999 [ 187.248833][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 187.251550][ T51] usb 8-1: config 0 descriptor?? [ 187.257716][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 187.262930][ T5880] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 187.269453][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 187.278628][ C1] blk_print_req_error: 20 callbacks suppressed [ 187.278644][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.291092][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 187.299782][ C1] buffer_io_error: 19 callbacks suppressed [ 187.299799][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.323427][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.325165][ T5880] usb 9-1: device descriptor read/8, error -71 [ 187.332609][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.350007][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.359204][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.368627][ T51] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.376550][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.385762][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.406389][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.415616][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.440915][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 187.447321][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.458131][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.474680][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.483914][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.486000][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 187.494680][ T25] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 187.507620][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.516848][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.525210][ T8616] ldm_validate_partition_table(): Disk read failed. [ 187.544444][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 187.555824][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.558477][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 187.564989][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.596839][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.606089][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.624295][ T5880] usb usb9-port1: unable to enumerate USB device [ 187.632790][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 187.641107][ T8] usb 8-1: USB disconnect, device number 18 [ 187.653442][ T8616] Dev loop6: unable to read RDB block 0 [ 187.659567][ T25] usb 3-1: device descriptor read/64, error -71 [ 187.661691][ T9] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 187.674816][ T8] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 187.693109][ T8616] loop6: unable to read partition table [ 187.711683][ T8616] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 187.724770][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 187.764617][ T9] usb 7-1: USB disconnect, device number 20 [ 187.776783][ T25] usb usb3-port1: attempt power cycle [ 187.781120][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 187.800623][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 187.811759][ T9] keyspan 7-1:0.0: device disconnected [ 188.018253][ T5206] ldm_validate_partition_table(): Disk read failed. [ 188.028974][ T5206] Dev loop6: unable to read RDB block 0 [ 188.042562][ T5206] loop6: unable to read partition table [ 188.184724][ T25] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 188.214630][ T8] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 188.274872][ T25] usb 3-1: device descriptor read/8, error -71 [ 188.366937][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.392482][ T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.415500][ T8] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.427982][ T8] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 188.438965][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.461301][ T8] hub 8-1:1.0: bad descriptor, ignoring hub [ 188.476013][ T8] hub 8-1:1.0: probe with driver hub failed with error -5 [ 188.483907][ T8] cdc_wdm 8-1:1.0: skipping garbage [ 188.491567][ T8] cdc_wdm 8-1:1.0: skipping garbage [ 188.498649][ T8] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 188.534995][ T25] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 188.564697][ T5885] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 188.575846][ T8619] [ 188.577317][ T25] usb 3-1: device descriptor read/8, error -71 [ 188.578180][ T8619] ====================================================== [ 188.578189][ T8619] WARNING: possible circular locking dependency detected [ 188.578198][ T8619] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 188.605450][ T8619] ------------------------------------------------------ [ 188.612460][ T8619] syz.3.509/8619 is trying to acquire lock: [ 188.618348][ T8619] ffff8881437a5f00 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x43f/0x900 [ 188.628290][ T8619] [ 188.628290][ T8619] but task is already holding lock: [ 188.635644][ T8619] ffff8881437a58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 188.645389][ T8619] [ 188.645389][ T8619] which lock already depends on the new lock. [ 188.645389][ T8619] [ 188.655805][ T8619] [ 188.655805][ T8619] the existing dependency chain (in reverse order) is: [ 188.664845][ T8619] [ 188.664845][ T8619] -> #5 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 188.673444][ T8619] lock_acquire+0x1ed/0x550 [ 188.678510][ T8619] blk_mq_submit_bio+0x1536/0x2390 [ 188.684150][ T8619] __submit_bio+0x2c6/0x560 [ 188.689170][ T8619] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 188.695320][ T8619] mpage_readahead+0x630/0x780 [ 188.700601][ T8619] read_pages+0x176/0x750 [ 188.705444][ T8619] page_cache_ra_unbounded+0x606/0x720 [ 188.711418][ T8619] page_cache_sync_ra+0x3c5/0xad0 [ 188.716954][ T8619] filemap_get_pages+0x605/0x2080 [ 188.722492][ T8619] filemap_read+0x452/0xf50 [ 188.726949][ T25] usb usb3-port1: unable to enumerate USB device [ 188.727498][ T8619] blkdev_read_iter+0x2d8/0x430 [ 188.727523][ T8619] vfs_read+0x991/0xb70 [ 188.743898][ T8619] ksys_read+0x18f/0x2b0 [ 188.748658][ T8619] do_syscall_64+0xf3/0x230 [ 188.753668][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.760074][ T8619] [ 188.760074][ T8619] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 188.768578][ T8619] lock_acquire+0x1ed/0x550 [ 188.773599][ T8619] down_read+0xb1/0xa40 [ 188.778284][ T8619] filemap_fault+0xb3e/0x1490 [ 188.783474][ T8619] __do_fault+0x135/0x390 [ 188.788317][ T8619] handle_pte_fault+0x39eb/0x5ed0 [ 188.793850][ T8619] handle_mm_fault+0x1106/0x1bb0 [ 188.799298][ T8619] exc_page_fault+0x2b9/0x8b0 [ 188.804501][ T8619] asm_exc_page_fault+0x26/0x30 [ 188.809866][ T8619] rep_movs_alternative+0x4a/0x70 [ 188.815396][ T8619] _copy_from_iter+0x268/0x1c20 [ 188.820757][ T8619] tipc_msg_build+0x488/0x1070 [ 188.826028][ T8619] __tipc_sendstream+0xa39/0x14c0 [ 188.831568][ T8619] tipc_sendstream+0x55/0x70 [ 188.836669][ T8619] __sock_sendmsg+0x221/0x270 [ 188.841855][ T8619] sock_write_iter+0x2d7/0x3f0 [ 188.847137][ T8619] vfs_write+0xaeb/0xd30 [ 188.851903][ T8619] ksys_write+0x18f/0x2b0 [ 188.856739][ T8619] do_syscall_64+0xf3/0x230 [ 188.861751][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.868158][ T8619] [ 188.868158][ T8619] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 188.875704][ T8619] lock_acquire+0x1ed/0x550 [ 188.880714][ T8619] __might_fault+0xc6/0x120 [ 188.885735][ T8619] _copy_from_user+0x2a/0xc0 [ 188.890858][ T8619] blk_trace_setup+0xd2/0x1e0 [ 188.896071][ T8619] sg_ioctl+0xa46/0x2e80 [ 188.900819][ T8619] __se_sys_ioctl+0xf5/0x170 [ 188.905911][ T8619] do_syscall_64+0xf3/0x230 [ 188.910918][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.917325][ T8619] [ 188.917325][ T8619] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 188.925130][ T8619] lock_acquire+0x1ed/0x550 [ 188.930140][ T8619] __mutex_lock+0x1ac/0xee0 [ 188.935156][ T8619] blk_mq_init_sched+0x3fa/0x830 [ 188.940600][ T8619] elevator_init_mq+0x20e/0x320 [ 188.945985][ T8619] add_disk_fwnode+0x10d/0xf80 [ 188.951253][ T8619] sd_probe+0xba6/0x1100 [ 188.956033][ T8619] really_probe+0x2b8/0xad0 [ 188.961039][ T8619] __driver_probe_device+0x1a2/0x390 [ 188.966849][ T8619] driver_probe_device+0x50/0x430 [ 188.972378][ T8619] __device_attach_driver+0x2d6/0x530 [ 188.978254][ T8619] bus_for_each_drv+0x24e/0x2e0 [ 188.983615][ T8619] __device_attach_async_helper+0x22d/0x300 [ 188.990015][ T8619] async_run_entry_fn+0xa8/0x420 [ 188.995456][ T8619] process_scheduled_works+0xa66/0x1840 [ 189.001512][ T8619] worker_thread+0x870/0xd30 [ 189.006609][ T8619] kthread+0x2f0/0x390 [ 189.011181][ T8619] ret_from_fork+0x4b/0x80 [ 189.016101][ T8619] ret_from_fork_asm+0x1a/0x30 [ 189.021369][ T8619] [ 189.021369][ T8619] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 189.030223][ T8619] lock_acquire+0x1ed/0x550 [ 189.035237][ T8619] blk_queue_enter+0xe1/0x600 [ 189.040428][ T8619] blk_mq_alloc_request+0x4fa/0xaa0 [ 189.046131][ T8619] scsi_execute_cmd+0x16c/0x10e0 [ 189.051571][ T8619] read_capacity_16+0x2b4/0x1450 [ 189.057014][ T8619] sd_revalidate_disk+0x1013/0xbce0 [ 189.062720][ T8619] sd_probe+0x9fa/0x1100 [ 189.067475][ T8619] really_probe+0x2b8/0xad0 [ 189.072483][ T8619] __driver_probe_device+0x1a2/0x390 [ 189.078273][ T8619] driver_probe_device+0x50/0x430 [ 189.083809][ T8619] __device_attach_driver+0x2d6/0x530 [ 189.089685][ T8619] bus_for_each_drv+0x24e/0x2e0 [ 189.095066][ T8619] __device_attach_async_helper+0x22d/0x300 [ 189.101461][ T8619] async_run_entry_fn+0xa8/0x420 [ 189.106900][ T8619] process_scheduled_works+0xa66/0x1840 [ 189.112947][ T8619] worker_thread+0x870/0xd30 [ 189.118041][ T8619] kthread+0x2f0/0x390 [ 189.122613][ T8619] ret_from_fork+0x4b/0x80 [ 189.127531][ T8619] ret_from_fork_asm+0x1a/0x30 [ 189.132803][ T8619] [ 189.132803][ T8619] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 189.140434][ T8619] validate_chain+0x18ef/0x5920 [ 189.145793][ T8619] __lock_acquire+0x1397/0x2100 [ 189.151145][ T8619] lock_acquire+0x1ed/0x550 [ 189.156148][ T8619] __mutex_lock+0x1ac/0xee0 [ 189.161169][ T8619] loop_reconfigure_limits+0x43f/0x900 [ 189.167130][ T8619] lo_ioctl+0x1351/0x1f50 [ 189.171959][ T8619] blkdev_ioctl+0x57d/0x6a0 [ 189.176965][ T8619] __se_sys_ioctl+0xf5/0x170 [ 189.182056][ T8619] do_syscall_64+0xf3/0x230 [ 189.187063][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.193460][ T8619] [ 189.193460][ T8619] other info that might help us debug this: [ 189.193460][ T8619] [ 189.203683][ T8619] Chain exists of: [ 189.203683][ T8619] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#23 [ 189.203683][ T8619] [ 189.218545][ T8619] Possible unsafe locking scenario: [ 189.218545][ T8619] [ 189.225984][ T8619] CPU0 CPU1 [ 189.231333][ T8619] ---- ---- [ 189.236683][ T8619] lock(&q->q_usage_counter(io)#23); [ 189.242046][ T8619] lock(mapping.invalidate_lock#2); [ 189.249848][ T8619] lock(&q->q_usage_counter(io)#23); [ 189.257726][ T8619] lock(&q->limits_lock); [ 189.262126][ T8619] [ 189.262126][ T8619] *** DEADLOCK *** [ 189.262126][ T8619] [ 189.270250][ T8619] 3 locks held by syz.3.509/8619: [ 189.275271][ T8619] #0: ffff888025ca4b60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 189.284234][ T8619] #1: ffff8881437a58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 189.294411][ T8619] #2: ffff8881437a58e8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 189.304762][ T8619] [ 189.304762][ T8619] stack backtrace: [ 189.310670][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.3.509 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 189.321238][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.331291][ T8619] Call Trace: [ 189.334562][ T8619] [ 189.337486][ T8619] dump_stack_lvl+0x241/0x360 [ 189.342156][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.347341][ T8619] ? __pfx__printk+0x10/0x10 [ 189.351918][ T8619] print_circular_bug+0x13a/0x1b0 [ 189.356931][ T8619] check_noncircular+0x36a/0x4a0 [ 189.361855][ T8619] ? __pfx_check_noncircular+0x10/0x10 [ 189.367301][ T8619] validate_chain+0x18ef/0x5920 [ 189.372179][ T8619] ? __pfx_validate_chain+0x10/0x10 [ 189.377368][ T8619] ? __pfx_validate_chain+0x10/0x10 [ 189.382558][ T8619] ? __pfx_validate_chain+0x10/0x10 [ 189.387743][ T8619] ? lockdep_unlock+0x16a/0x300 [ 189.392576][ T8619] ? __pfx_lockdep_unlock+0x10/0x10 [ 189.397762][ T8619] ? mark_lock+0x9a/0x360 [ 189.402075][ T8619] __lock_acquire+0x1397/0x2100 [ 189.406916][ T8619] lock_acquire+0x1ed/0x550 [ 189.411409][ T8619] ? loop_reconfigure_limits+0x43f/0x900 [ 189.417027][ T8619] ? __pfx_lock_acquire+0x10/0x10 [ 189.422033][ T8619] ? __pfx___might_resched+0x10/0x10 [ 189.427303][ T8619] ? mark_lock+0x9a/0x360 [ 189.431620][ T8619] __mutex_lock+0x1ac/0xee0 [ 189.436112][ T8619] ? loop_reconfigure_limits+0x43f/0x900 [ 189.441739][ T8619] ? loop_reconfigure_limits+0x43f/0x900 [ 189.447359][ T8619] ? __pfx___mutex_lock+0x10/0x10 [ 189.452374][ T8619] loop_reconfigure_limits+0x43f/0x900 [ 189.457817][ T8619] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 189.463781][ T8619] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.469672][ T8619] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.475999][ T8619] ? finish_wait+0xd4/0x1e0 [ 189.480487][ T8619] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 189.486195][ T8619] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 189.492247][ T8619] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.498317][ T8619] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 189.504205][ T8619] ? lo_ioctl+0x1344/0x1f50 [ 189.508700][ T8619] lo_ioctl+0x1351/0x1f50 [ 189.513038][ T8619] ? mark_lock+0x9a/0x360 [ 189.517360][ T8619] ? validate_chain+0x11e/0x5920 [ 189.522290][ T8619] ? __pfx_lo_ioctl+0x10/0x10 [ 189.526956][ T8619] ? mark_lock+0x9a/0x360 [ 189.531354][ T8619] ? __lock_acquire+0x1397/0x2100 [ 189.536384][ T8619] ? __pfx_lock_acquire+0x10/0x10 [ 189.541403][ T8619] ? is_bpf_text_address+0x26/0x2a0 [ 189.546593][ T8619] ? __pfx_lock_release+0x10/0x10 [ 189.551606][ T8619] ? unwind_next_frame+0x18e6/0x22d0 [ 189.556877][ T8619] ? preempt_count_add+0x93/0x190 [ 189.561890][ T8619] ? is_bpf_text_address+0x285/0x2a0 [ 189.567166][ T8619] ? is_bpf_text_address+0x26/0x2a0 [ 189.572347][ T8619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.578515][ T8619] ? kernel_text_address+0xa7/0xe0 [ 189.583614][ T8619] ? __kernel_text_address+0xd/0x40 [ 189.588801][ T8619] ? unwind_get_return_address+0x4d/0x90 [ 189.594418][ T8619] ? arch_stack_walk+0xfd/0x150 [ 189.599259][ T8619] ? stack_trace_save+0x118/0x1d0 [ 189.604268][ T8619] ? __pfx_stack_trace_save+0x10/0x10 [ 189.609665][ T8619] ? stack_depot_save_flags+0x37/0x940 [ 189.615123][ T8619] ? kasan_save_track+0x51/0x80 [ 189.619965][ T8619] ? kasan_save_track+0x3f/0x80 [ 189.624809][ T8619] ? kasan_save_free_info+0x40/0x50 [ 189.630019][ T8619] ? __kasan_slab_free+0x59/0x70 [ 189.634949][ T8619] ? kfree+0x196/0x430 [ 189.639005][ T8619] ? tomoyo_path_number_perm+0x679/0x860 [ 189.644628][ T8619] ? security_file_ioctl+0xc6/0x2a0 [ 189.649826][ T8619] ? __se_sys_ioctl+0x46/0x170 [ 189.654573][ T8619] ? do_syscall_64+0xf3/0x230 [ 189.659230][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.665374][ T8619] ? do_vfs_ioctl+0xf07/0x2e40 [ 189.670121][ T8619] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.675130][ T8619] ? mark_lock+0x9a/0x360 [ 189.679450][ T8619] ? tomoyo_path_number_perm+0x206/0x860 [ 189.685069][ T8619] ? __pfx_lock_release+0x10/0x10 [ 189.690079][ T8619] ? tomoyo_path_number_perm+0x679/0x860 [ 189.695699][ T8619] ? tomoyo_path_number_perm+0x679/0x860 [ 189.701320][ T8619] ? blkdev_common_ioctl+0xfb2/0x2460 [ 189.706679][ T8619] ? __lock_acquire+0x1397/0x2100 [ 189.711695][ T8619] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 189.717309][ T8619] ? tomoyo_path_number_perm+0x206/0x860 [ 189.722930][ T8619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.728906][ T8619] ? file_to_blk_mode+0xcc/0x140 [ 189.733830][ T8619] ? __pfx_lo_ioctl+0x10/0x10 [ 189.738490][ T8619] blkdev_ioctl+0x57d/0x6a0 [ 189.742976][ T8619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 189.747987][ T8619] ? __pfx_blkdev_ioctl+0x10/0x10 [ 189.752997][ T8619] __se_sys_ioctl+0xf5/0x170 [ 189.757570][ T8619] do_syscall_64+0xf3/0x230 [ 189.762055][ T8619] ? clear_bhb_loop+0x35/0x90 [ 189.766715][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.772595][ T8619] RIP: 0033:0x7fa5b9985d29 [ 189.777023][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.796612][ T8619] RSP: 002b:00007fa5ba7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.805012][ T8619] RAX: ffffffffffffffda RBX: 00007fa5b9b76080 RCX: 00007fa5b9985d29 [ 189.812965][ T8619] RDX: 0000000000000003 RSI: 0000000000004c09 RDI: 0000000000000004 [ 189.820919][ T8619] RBP: 00007fa5b9a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 189.828873][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.836854][ T8619] R13: 0000000000000000 R14: 00007fa5b9b76080 R15: 00007fa5b9c9fa28 [ 189.844815][ T8619] [ 189.847935][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.942957][ T8619] Invalid logical block size (3) [ 189.975712][ T8616] could not allocate digest TFM handle tgr192-generic [ 190.044543][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 190.050166][ T5885] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 190.066272][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 190.073870][ T5885] usb 7-1: can't read configurations, error -61 [ 190.135094][ T25] usb 8-1: USB disconnect, device number 19 [ 190.224556][ T5885] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 190.374538][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 190.380156][ T5885] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 190.389268][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 190.396879][ T5885] usb 7-1: can't read configurations, error -61 [ 190.403291][ T5885] usb usb7-port1: attempt power cycle [ 190.744635][ T5885] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 190.765227][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 190.771228][ T5885] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 190.780385][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 190.788038][ T5885] usb 7-1: can't read configurations, error -61 [ 190.924542][ T5885] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 190.944913][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 190.950468][ T5885] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 190.960867][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 190.968633][ T5885] usb 7-1: can't read configurations, error -61 [ 190.976098][ T5885] usb usb7-port1: unable to enumerate USB device [ 194.427758][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434181][ T1291] ieee802154 phy1 wpan1: encryption failed: -22