last executing test programs: 3m7.992304306s ago: executing program 1 (id=3937): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x40) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x401, 0x3, 0xcadf, 0x6, 0x2, 0x8000000000000001}) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="95541a690891e64fc2b92179039c2f692dc4f59eccf6df580d5a95f433904fcdb0666d0c0c6757e6fad433af7b760eaa529424f8d3aa9302069cef2b80af3cad0279d9f0a4da5e2a1c94167006840900000092286a8cc58280f37dc82a25467c7e0d73409ea57563e4f7285334a4b47acf20766936190f986b6f264952f2c8892fe54c3ec1701ca07af89eac77174af7d95b91e3a8e8b72033ee92e0a6a3d9e5c6a656a740bb63b8e131e681f9611a0224ce0bae60991252c52520992a86f87c4407088786eafa5358e5c0ca60a53800148bbecf", 0xd4, 0x0, &(0x7f0000000080)={0x11, 0x1b, r3, 0x1, 0x40, 0x6, @broadcast}, 0x14) 3m7.866865851s ago: executing program 1 (id=3940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)={0x30, r1, 0x5, 0x10, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x30}, 0x1, 0x0, 0x30000, 0xc0}, 0x44084) 3m7.775912381s ago: executing program 1 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/182, 0xb6) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c011) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m7.091554215s ago: executing program 1 (id=3951): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0xfffffff8, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = dup(r0) pipe(0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x201, &(0x7f0000000240)={0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x10000, 0x4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000240)={0x2}) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x5, 0x30, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x14}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x2, "58a46ebd6d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x0, 0x9, "309131db"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0xce, 0x20, {0x7, 0x25, 0x1, 0x4, 0x80, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xdd, 0x0, 0x1, 0x6, 0xd}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7fff, 0x5, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xb, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x6, 0xf8, {0x7, 0x25, 0x1, 0x0, 0xdf, 0x1}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1, 0x1, 0x5, 0x10, 0x7}, 0x29, &(0x7f0000000400)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x8, 0xd2e0f5d17052be41, 0x3dfb, [0xff0030, 0x60, 0xffffee, 0xc0, 0xf, 0xfe40]}]}, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x40, 0x11, 0x47, {0x47, 0x2, "511f0c691d94bc79a7bcfdda21ab79db942c0f79b6070ac72f5b46b92b24b90a211b6b6dd8ece35ff0aa40113555b961aa313cdcfcf024811186f84259c13917e885aa8931"}}, &(0x7f0000000540)={0x0, 0x3, 0xee, @string={0xee, 0x3, "c4bfb41bdca7431b37013970b3eafe89b54f882d72a13321de5bcc4a1d13e70a8e4c0272bc6ff68d78e33d11bbfb817819e4d26602f2f001ce6adfe9efefb2ccccd9abfb1f5d12241936fbcb538bb660ec10c36f5a216b57bae37c06477403a1114ded229245da3952f8599357b795708f1ef11a5c42e942195b73eaaac520b3f125ed231eb78a62bd58884f2a153a85f20ce31ccde51d54c727b7a1e5f8100e04a16facaa7d4bde90bb8da6a673065693ea61b0a250b513a69f1e815e261d8db8726d0893f6d009169fb52aa6c2b597749121b94965a412c7073dba389bf90ac9a4401cbdf80c972e7a9b9c"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x20, 0x14, 0xed, "84ab90010fbaff841ad57fa33f78349b117d1a041e342e0680adc5d6fed8249cd025b53301ea5bed903c07d83098f6505418933768d3ae264cc3f759df94dee3125c562af1919bb2a0d8d2bfc28ce26a17e0aa820ce215784ea9a1486b513b21f7de42a370cdbb513ed326941e1a3caeb6946b3090148b8b6c42d9bbb82bc40fae948010ab560c8fb68781861aacdb1e7ab215c0426e4577e36d06830ee3a42035463e17aed19662fede69bc38c8e5647d154e2c29390b2a6f2352f5e17ae48cc5d081a0d2093ff30fbf501ccda713700ace7475d36c286254b7929e73190e99c504a3cddc69ab8ce5c8e0e7a8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x81, 0x1, "15"}, &(0x7f0000000840)={0x20, 0x82, 0x2, 'Bz'}, &(0x7f0000000880)={0x20, 0x83, 0x2, "ad1c"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "d949dd3f"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "5caaca"}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 3m3.988397295s ago: executing program 1 (id=3965): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) r4 = mq_open(&(0x7f0000000600)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5f\x02\x00\x00\x00\x00\x00\x00\x00,r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x01\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8eu\xe1r\xf7s2\x82\xe57&bJ\xef\xd0V\x01i%\x18=E\xa7\x8e#4!3\x8d\xf9\xc1I\xcb0\x16P\x04\xc2TSxSn\xb0\f\xd9\'\xff01t\xbf\x01\x0f\xa9\xe3\a\xd2\xdf\x9f\x7f\xce\x92\x8bG\x15\x06\xcd:\x9c\x19\xc8\xf9\x84\xd7\x8b\"\x87\x05?h\x1d\xf5\v\x1a0\xa8\x85\x06\xed\xccm\xe4\x18\xca94\x8dN\x9d\xe4\xac\xa2s\xf79\xa4\xb4\xe9\xe9', 0x41, 0x8f, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbee2, 0x11, r4, 0x39526000) request_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, 0xffffffffffffffff, 0x9dc0d000) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000066505c0a0500"/20, @ANYRES32=r6, @ANYBLOB="03410000420001003c00128009000100626f6e64000000002c0002807afe050004000000080005000000000405000d000000000008001a000000000000001600000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000040)={'veth0_virt_wifi\x00', @ifru_names='batadv_slave_1\x00'}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) 3m3.647951108s ago: executing program 1 (id=3966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0018000aac0f000dac0f0017d46de0c753a51a79b8759c906b5833b52e36119c291c96"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10000000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x4, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0xc, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x6, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0xc, 0x90, 0x4, '\x00', 0x8}, {0xb7, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xc, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x16, '\x00', 0xa}, {0x8, 0x1, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x8, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x10}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1}]}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x100) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7f, 0x0, [{0x0, 0x5}, {0x0, 0x7}, {}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x101, 0x0, 0x7}, {0x40000000, 0x0, 0x0, 0x20000000}, {0xc0000000}, {0xb}, {0xc0000001, 0x4}, {0x4}, {0x4}, {0x40000001}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0xfffffffc}, {0xc0000000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xa}, {0x7, 0x0, 0x3ff}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, {0x4, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7}, {0x6, 0x0, 0xcf7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x80000008}, {0xb}, {}, {0x80000000}, {0xd, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0x5}, {0x0, 0x0, 0x2}, {0xa}, {}, {}, {0x6, 0x0, 0x8}, {0x2, 0x0, 0x4, 0x0, 0x4}, {}, {}, {0x2, 0x0, 0x80000000, 0xffff}, {}, {}, {0xc0000001, 0x8000004}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0xc0000001, 0x4000, 0x0, 0x0, 0x88c}, {0x0, 0x0, 0x1, 0x0, 0x2000}, {}, {0x0, 0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x7, 0x2}, {}, {0xa}, {0x80000008, 0x9}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x80000019}, {0x0, 0xffffffff, 0x0, 0x400}, {}, {0xd}, {}, {0xc0000019}, {}, {}, {0x0, 0x0, 0x8, 0x4f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x80000001}, {0x0, 0x0, 0x5ee2}, {0xa}, {}, {0x0, 0x0, 0x0, 0x1010001}, {0x0, 0x0, 0x6c7}, {}, {0x80000007, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x612}, {}, {0x0, 0x0, 0x0, 0x4, 0xc}, {0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x40}, {}, {0x6}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x40000000}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x7fff, 0x7, 0x7fff, 0x0, 0x2, 0x2, 0x6, 0x2, 0x9, 0x8, 0x5, 0xf7be, 0x3, 0xffffffff, 0x3, 0x8], 0xeeef0000, 0x84080}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x5, 0x6, 0x0, 0x44, 0x4, 0x7, 0xf5, 0x0, 0x1, 0x81, 0x6, 0x0, 0x1ff, 0x1, 0x1, 0x7, 0xfb, 0x3, '\x00', 0x9, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = userfaultfd(0x80001) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000f8ff0f01778474850000010000000000d4dc4864fffff200000010010000020007000000000000000000"], 0x30}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r6, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x802, 0x0) 3m3.382207777s ago: executing program 32 (id=3966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0018000aac0f000dac0f0017d46de0c753a51a79b8759c906b5833b52e36119c291c96"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10000000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x4, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0xc, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x6, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0xc, 0x90, 0x4, '\x00', 0x8}, {0xb7, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xc, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x16, '\x00', 0xa}, {0x8, 0x1, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x8, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x10}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1}]}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x100) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7f, 0x0, [{0x0, 0x5}, {0x0, 0x7}, {}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x101, 0x0, 0x7}, {0x40000000, 0x0, 0x0, 0x20000000}, {0xc0000000}, {0xb}, {0xc0000001, 0x4}, {0x4}, {0x4}, {0x40000001}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0xfffffffc}, {0xc0000000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xa}, {0x7, 0x0, 0x3ff}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, {0x4, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7}, {0x6, 0x0, 0xcf7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x80000008}, {0xb}, {}, {0x80000000}, {0xd, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0x5}, {0x0, 0x0, 0x2}, {0xa}, {}, {}, {0x6, 0x0, 0x8}, {0x2, 0x0, 0x4, 0x0, 0x4}, {}, {}, {0x2, 0x0, 0x80000000, 0xffff}, {}, {}, {0xc0000001, 0x8000004}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0xc0000001, 0x4000, 0x0, 0x0, 0x88c}, {0x0, 0x0, 0x1, 0x0, 0x2000}, {}, {0x0, 0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x7, 0x2}, {}, {0xa}, {0x80000008, 0x9}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x80000019}, {0x0, 0xffffffff, 0x0, 0x400}, {}, {0xd}, {}, {0xc0000019}, {}, {}, {0x0, 0x0, 0x8, 0x4f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x80000001}, {0x0, 0x0, 0x5ee2}, {0xa}, {}, {0x0, 0x0, 0x0, 0x1010001}, {0x0, 0x0, 0x6c7}, {}, {0x80000007, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x612}, {}, {0x0, 0x0, 0x0, 0x4, 0xc}, {0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x40}, {}, {0x6}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x40000000}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x7fff, 0x7, 0x7fff, 0x0, 0x2, 0x2, 0x6, 0x2, 0x9, 0x8, 0x5, 0xf7be, 0x3, 0xffffffff, 0x3, 0x8], 0xeeef0000, 0x84080}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x5, 0x6, 0x0, 0x44, 0x4, 0x7, 0xf5, 0x0, 0x1, 0x81, 0x6, 0x0, 0x1ff, 0x1, 0x1, 0x7, 0xfb, 0x3, '\x00', 0x9, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = userfaultfd(0x80001) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000f8ff0f01778474850000010000000000d4dc4864fffff200000010010000020007000000000000000000"], 0x30}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r6, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x802, 0x0) 13.189510749s ago: executing program 3 (id=4616): syz_clone(0x0, 0x0, 0x24, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x404301, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, &(0x7f0000000100)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4008af25, &(0x7f00000000c0)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r4) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) 11.850100082s ago: executing program 5 (id=4621): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940000204d80825018030cc00000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) tkill(r0, 0x7) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 10.106052675s ago: executing program 3 (id=4628): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2001) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104001d80000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800600187893000000040012"], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.604123186s ago: executing program 3 (id=4629): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES64=r0], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r13, {0xd}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@newtaction={0x2650, 0x30, 0x100, 0x70bd29, 0x25dfdbff, {}, [{0x310, 0x1, [@m_gact={0x98, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x1, 0x3, 0x401, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4e14, 0x3, 0x0, 0xe, 0xfffffa40}}]}, {0x3c, 0x6, "20dc0920f90a459de7ebe2b205a5ee5fcbeb9ab304a5f5014537546c6bcae32689639fa62e32e0511071b19e938678709d73b7b676cf8ae3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x13c, 0x1a, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_PARMS={0x18, 0x1, {0x1e000000, 0x7, 0x4, 0xd, 0x80000000}}, @TCA_CT_MARK={0x8, 0x5, 0xe}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_LABELS_MASK={0x14, 0x8, "5aee8b67a757022f82e67b085936f7dc"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}]}, {0xbc, 0x6, "1c233f737c99aa79b85e0a586a3ae98117d4cfc5b21ecd2c4cb6eb291e5357bc52cf0fd686246af6f418bc6fca42f74f55f731de3ecc1a16b219a7d36c4bddeafb11b729a7463285292cff2d4239134f03ddb74a4617187c875aad31315c4f243e5e2afd2883c02f02f1d6d022095940e1a7a6dab83a57e2026863ff33f24e406fd9b317787c8e249f158b78363baac3381f583027de7cb563d67de93f48e39090c72d63a307d9d19e6110754360ee01a854d2ec2e27b038"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x138, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd17, 0x5, 0x0, 0x5, 0x9af}, @empty, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xed3, 0x10000000, 0xa88, 0x3}, @remote, @empty, 0xff000000}}]}, {0xc0, 0x6, "680dbcc4df4d93f117559ea9d4bc6fbd18cc7b7fed4c76fdc413a2dd80e9a8f982092dc1c4e0d0e161b81c102d8c780ce12c736ec2fe0be03d51718a0a8a36712be6a4905d993a18c5f6a0ffc305950c3b342e2dbfc05fd84962b82159900690fa196848ba86d55de1c3862733c542966d1bc36ef37385a30706778897436e131eb612b88b50de7b639a42e0903cf1241041b7136d523485ebb3cabc5c2ede6acb2ebd9562c0df51d0e0d8f8a2638628820720020e164eb656b69982"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x232c, 0x1, [@m_pedit={0xfd0, 0x3, 0x0, 0x0, {{0xa}, {0xed4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x0, 0x2, 0x10000000, 0x8, 0x8000}, 0xb6, 0x7, [{0x1, 0xff, 0xffffffff, 0x5, 0x2, 0x9}, {0x7, 0x7ff, 0x4, 0x4, 0x2, 0x3}, {0x0, 0x0, 0x7, 0x7ea5cddb, 0x650, 0x9}, {0x7, 0x675, 0xd862, 0xffff7fff, 0x380, 0x1ff}]}, [{0xfffffffd, 0x9, 0x1, 0x8, 0x7f, 0x6}, {0x7, 0x3, 0xfffffff0, 0xf, 0x800, 0x8447}, {0x2, 0x5, 0xe, 0xd0, 0xbbc}, {0xc7, 0x7fffffff, 0x0, 0x8001, 0x0, 0x80000001}, {0x7, 0x0, 0x3e62, 0x6, 0x4, 0xffffff6b}, {0x2, 0x446113a0, 0x0, 0x10001, 0x365, 0x40}, {0x1, 0x156, 0xd, 0xb47, 0x1, 0xf2}, {0x3, 0x9, 0xcc, 0x0, 0x8bb, 0x9}, {0xfffff7db, 0x5, 0x522, 0x8a, 0x2, 0xfffffff9}, {0x1ffcaf5d, 0x6, 0x972, 0xd7a5, 0x9, 0x40}, {0x1, 0x8, 0xc, 0x4, 0x0, 0x80}, {0x0, 0x6, 0x1, 0x5, 0x5b, 0x6}, {0x5, 0x80000001, 0x2, 0x4, 0x4}, {0x4, 0x81, 0x7, 0x10, 0xa, 0xa9}, {0xc, 0x9, 0x9, 0xfffffc00, 0x1, 0x8001}, {0x4, 0x2, 0xffffff7f, 0xfb, 0xe, 0x8001}, {0x3, 0x6, 0x6, 0xc, 0x7fff, 0x1}, {0xd08, 0x6af0, 0x77, 0x1, 0x0, 0x6}, {0x10001, 0x9, 0x2, 0x18, 0xfff, 0x2}, {0x2, 0x5, 0x6, 0x7f, 0x10000, 0x8000}, {0x7, 0x40, 0x0, 0x80000000, 0x7, 0x4}, {0xcf1, 0x1, 0x5, 0x5, 0x7f, 0xc}, {0xa8b0, 0x2, 0x9, 0x3, 0x40, 0x4}, {0x5, 0xfffffffb, 0x8, 0x64, 0x5, 0x8}, {0x7fff, 0x5, 0xb4c, 0x3, 0x9, 0x1}, {0x2, 0x7, 0x8, 0xf5f, 0x2, 0xffffffff}, {0x6f3, 0xfffffffa, 0x6, 0x0, 0x3, 0x3ff}, {0x4, 0x1, 0x80, 0x9, 0xebe7, 0x7}, {0x2a15, 0x1, 0x5, 0x7, 0xfffffff9, 0x50a70b8e}, {0x9b6a, 0x37, 0x80000000, 0x1, 0x80000000, 0x3}, {0xd6, 0x0, 0x4bb, 0x6, 0xfff, 0x10001}, {0x8, 0x4, 0x7fffffff, 0xfffffffa, 0x7, 0xd7e}, {0x3, 0x4, 0xff, 0x29f, 0x73a, 0x1}, {0x7, 0x0, 0x9, 0x3, 0x2}, {0xfffeffff, 0xfffffff9, 0xfff, 0x7, 0xd, 0xe803}, {0x0, 0x1, 0x4, 0x100, 0x0, 0x9}, {0x8001, 0x8, 0x0, 0x3ff, 0x0, 0x2}, {0x0, 0x2, 0x8, 0xb5, 0xd, 0x2}, {0x1, 0x5, 0x80000001, 0x1a, 0x10001, 0x2c40}, {0x3ff, 0x7, 0xf32, 0x3, 0x3, 0x8}, {0x10000, 0x4, 0x6a, 0x3, 0x1, 0x200}, {0x0, 0x5, 0x2, 0x3, 0x80000000, 0x200}, {0x80000001, 0x3, 0x100, 0x7, 0x9, 0x400}, {0x0, 0x7, 0x8000, 0xc, 0x4, 0x1}, {0xe, 0x0, 0x4, 0x1, 0xfffffffd, 0x4}, {0x0, 0x5, 0x4, 0x9, 0x400, 0x9}, {0x1, 0x1, 0xf, 0x40, 0x8, 0x40}, {0x7ff, 0xf, 0x5, 0x7, 0x8, 0xfffffffd}, {0x5, 0x3, 0xa, 0x1, 0xb823, 0x7}, {0x6, 0x4, 0x1, 0x300000, 0x9, 0x4}, {0x6, 0x1, 0x1ff, 0x5, 0x0, 0xb}, {0x9, 0x2, 0x3, 0x2, 0xb, 0x7fff}, {0xbffff, 0x3000000, 0xfffffffa, 0xf6, 0x2}, {0x7ff, 0x40, 0x1, 0x0, 0x9, 0x2}, {0x10001, 0x3, 0x0, 0x400, 0xff, 0x6}, {0xc, 0x0, 0xe, 0x40, 0xc, 0x2}, {0x4, 0x0, 0x7, 0x9, 0x6, 0x3}, {0x8, 0x555, 0x6, 0x151c, 0xa, 0x4}, {0xff, 0x10001, 0x8001, 0xa84b, 0x4, 0xdf}, {0x5, 0x80000000, 0x9, 0x7, 0x8, 0x8960}, {0x10001, 0x7, 0xeae, 0x5, 0x4, 0x6c5}, {0x7, 0x0, 0x4, 0x0, 0x1, 0x40000000}, {0x1, 0x5, 0x1000, 0x3, 0xa, 0x5}, {0xd3, 0x1, 0x2, 0x6, 0x7ff, 0x14}, {0x8, 0x1, 0x7, 0x1, 0x0, 0xfffffffd}, {0x4, 0xd, 0x0, 0x7, 0x40, 0x5}, {0xfffffff7, 0x3, 0x7c8b2130, 0x8000, 0x1, 0x7fff}, {0x3, 0x2, 0x10e8, 0x30c, 0xc, 0x55c}, {0xffff, 0x101, 0x5, 0x2, 0xc5, 0x34e8}, {0x1, 0x7, 0x8, 0x100, 0x401, 0xffffffff}, {0x10001, 0x101, 0x17, 0xffe00, 0x9b, 0x6565ed5c}, {0x2, 0xc0, 0x2, 0x6, 0x100, 0x40}, {0x856b, 0x1ff, 0x9, 0x4, 0x3d5a7d56, 0x40}, {0x80000001, 0x468c, 0x1ff, 0x9, 0x4, 0x3}, {0x93, 0x5bf, 0x7, 0x4, 0xe, 0x6}, {0x0, 0x7, 0x8, 0x80000000, 0x2, 0x401}, {0x6, 0xfffff800, 0x8001, 0x2, 0x9, 0xb5c}, {0x1, 0x8, 0x7, 0xffff, 0x5, 0x1}, {0x7ff, 0x1a000000, 0x8, 0x6f, 0x1ff, 0x3}, {0xffff0f3c, 0x8, 0x8, 0x7, 0x7, 0x10001}, {0x162, 0x6d, 0x10001, 0xc11, 0xffffffff, 0x4a39948f}, {0x0, 0x4ac, 0x3, 0x81, 0x2}, {0x9, 0x7, 0x1ff, 0x2, 0x3, 0xff}, {0x4, 0x5, 0xffffffff, 0x0, 0x6, 0xec4b}, {0x81, 0xd238, 0x9, 0x5, 0x1000, 0x7}, {0xf, 0x7, 0x2, 0x54b8, 0x800, 0x8890}, {0x8000, 0x8, 0x9, 0x337, 0x800, 0x7}, {0x1, 0x81, 0x8, 0x7be5189d, 0x6, 0x9}, {0x2, 0x0, 0xe, 0xfffffeff, 0x4a, 0x7}, {0x4, 0x80000001, 0x6, 0x3, 0x40, 0x7}, {0x3800, 0x3, 0x5, 0x4, 0x1, 0x8}, {0x4, 0x8, 0x3, 0xf7, 0x6, 0x4}, {0x7, 0x2b88, 0xfff, 0xab4, 0x40001, 0x7ff}, {0x100, 0x0, 0x5e7, 0x1, 0x80000000, 0x7}, {0x44, 0x8, 0x1000, 0x8900, 0x5, 0x101}, {0x706d, 0x3, 0x8, 0x1, 0x32dd1b6, 0x5b}, {0xc, 0x5d7, 0xfffff9eb, 0x2, 0x0, 0x7}, {0x6, 0x2, 0x6, 0x3, 0xbc, 0xffff}, {0xb9c, 0x9, 0xc0, 0x0, 0x5, 0x7}, {0x800, 0x7, 0x7, 0x2b180, 0x7fffffff, 0x3}, {0x0, 0x9, 0xfffffffc, 0x1, 0x3, 0x6}, {0x7, 0x7fffffff, 0x401, 0x0, 0x6, 0x1}, {0x401, 0x1, 0x2, 0x4, 0x200, 0x40}, {0x6, 0xff, 0x4, 0xffff, 0x4fd, 0x5}, {0x7ff, 0x8, 0x9, 0x1, 0x7, 0x8}, {0xfe, 0x8000, 0x5, 0x80000000, 0x81}, {0x0, 0x1, 0x8000, 0x3, 0x1}, {0x401, 0x6, 0x1, 0x5, 0x9, 0x5}, {0x3, 0x1, 0xfffffffb, 0x7, 0x3, 0x7}, {0xb491, 0x23, 0x0, 0x1c, 0x5d10, 0x7f}, {0x8, 0x9, 0xa, 0x4, 0x4, 0x6}, {0x2, 0x8, 0x7, 0x3, 0x7, 0xfffffff9}, {0x1, 0x8000, 0xc, 0xffff5e42, 0x3, 0xb13}, {0x2, 0x5, 0x4, 0x7, 0x1, 0x4}, {0xa1, 0x0, 0xfffffff7, 0x5, 0x8, 0x401}, {0x5, 0x80000001, 0xfffffff7, 0xfac8, 0x200, 0x8}, {0x3, 0x6726, 0x33c, 0xdf85, 0x1, 0x2}, {0x0, 0x3, 0x3, 0x81, 0x5, 0x1000}, {0x8000, 0x9, 0xb0, 0x8, 0x48000000, 0x7}, {0xaeb6, 0x5, 0x9, 0x7, 0x6, 0x6}, {0xce, 0x2, 0x0, 0x47b, 0x3, 0x8}, {0x6, 0x1, 0x6, 0x2, 0xc52d, 0x4}, {0x1, 0xe, 0x4, 0xfffff801, 0x7, 0x3}, {0xbe6, 0x1, 0x80000000, 0x4, 0xa158, 0x9}, {0x3, 0x35, 0x6, 0x5, 0x967, 0x80}, {0x0, 0xfc0, 0x0, 0x4, 0x748, 0x4}, {0x7, 0x1, 0x8, 0xc, 0x2, 0x1}, {0x80000001, 0x8001, 0x5, 0x7, 0x8000, 0xea}], [{}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x8894c4fdf8336b8c}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x86ef0eafd3196b7}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x1}, {}, {}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x6, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x3}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xd2, 0x6, "5be9b178d0a921d6bbed17ef44543cbd2a7e7ada06d44dfb90d763d99847d3961efc16b549a4c0727f9dbccff8764a8c90f15152283f4b199157a703e32e7e0dc51697c3e4a461012a984502f8653911206ee728b246333bf56bfaf53073d5f7213da285b004e7dfbc992dda6fac05c77f6e838c13ec6291eb9154c7db29e3a3df0d5361bda58295e2fdf1c4b98e89d85d471d310b5e8c978a0f5d1d6f77f2b8c264e755b0d9ad70c59d09a780e53c475df50dec61ec16dace94755196f48a380364f80d66e206a9f88d19df47c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x46}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8e8df}]}, {0x69, 0x6, "77fe2d915b000037bc3beb5351c54ec6d7aaf06b1863df75897dc3a350aa9ef0761786524bfbb54aed832262228f129f802eff6c8075ed58212b2c31143a2f2927a9d04601dbd4fc057da9488a5962e273eb49dcdc7c201f918ba61c9d0bf8e1f2c846bfc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1b4, 0x1f, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x18e, 0x6, 0x2, 0xfffffff8, 0xc409}, @broadcast, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3, 0x6, 0x9, 0xf3cb}, @multicast2, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xa9b4, 0x2, 0x3, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x0, 0x5, 0x2}, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x0, 0xe, 0xf}, @loopback, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x7, 0xfc9e, 0x8001}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x79, 0x2, 0x800, 0xe56}, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8001, 0x8, 0x1, 0x8}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x68e, 0x1, 0x3, 0x9}, @loopback, @local, 0xff000000, 0x1}}]}, {0x22, 0x6, "0cc305fc11d4e9b6c83b34cbaa2ffad3172b846e0308908632e45f61e8a3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x800}]}, {0x64, 0x6, "7ef10f3994fe9e325f436185332449325624621bd8602f0d90c5d47ae2fe2e88e7d6fc2fdea8c4fbbae0e1e6a048e504c2d9c8686eebf7ad09a658a7039d99a75a4201d0348a7fa85015eff3f33b0de14663f19bec03b0f17681cd04c3248e28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1044, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x276bb1337475406d}}}}]}]}, 0x2650}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r15, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000465000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 9.389787578s ago: executing program 4 (id=4630): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 9.2985506s ago: executing program 4 (id=4631): socket$inet6_icmp_raw(0xa, 0x3, 0x87) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000834000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x771f, 0x33, 0x0, 0x0) (fail_nth: 3) 9.29525881s ago: executing program 4 (id=4632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x10000e5c, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffe, 0x10000000005, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r3, 0xae80, 0x6000000) 8.608599678s ago: executing program 4 (id=4633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0x18, 0x1, 0xfffffffc, 0x0, {0xf, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xd}]}, 0x1c}}, 0xc000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES64=r0], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 8.553466284s ago: executing program 5 (id=4634): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000180)='|', 0x1) r1 = socket(0x11, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0x11, 0x4e22, 0x3ff, @mcast2}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56443, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40880) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "5cb778d06fd7f669", "6ce2392979948052ae26afce95f580c564a42aeb089f73599cb9ce95a817c4a7", "d5a531d7", "93d550aee0450306"}, 0x38) 8.355845752s ago: executing program 5 (id=4635): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000005ac1e010100000000000000000000000000000004000000000a0060803b000000bdf529a06cace8564409e8d16c0dcae3e664095de4ceff6f05cf35684cdbf0b7bafe", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002000300000000000000fdffffffffffffff44050000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b0026"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.506559144s ago: executing program 0 (id=4639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x400, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 7.25264418s ago: executing program 0 (id=4640): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=@v2={0x5, 0xab, 0x3, 0x3179dadd, 0xd0, "c14d20f121069909d96907662a75f28a72407ba20ee53f8711226992559025f7bbea8637a949c8054ff7759447a98ac33786b11ed033064fd74296447d334757c35c1c1e8d9ee76ad7bc43d6e8107577d7fbca9fc5339d72dbfec934bd1cba78aec2197bbe1ee852b1df80df74788d2cba5878fbb297dfbdcf63615362f19b1a9527bd8c2f73f084b79dac8f5b8ddff0059aa847cc6e0b834ca43aabb4927b8d885b68d6e2fb4e9b4302a6b2f14e8eaed2f0c7ba3e082f5d0ae406f62b8800fdb327bde3999acd5e588bb50e5c98d822"}, 0xd9, 0x2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r7, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.745783548s ago: executing program 2 (id=4641): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 6.642750682s ago: executing program 2 (id=4642): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f59f44393a1336a8ef8cd5e5c97e422934fb48b94ca6b0a45bdb9305de5dd61f9ee28afe62", 0x48}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x7) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000), 0x8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6.620475016s ago: executing program 2 (id=4643): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/anycast6\x00') pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = syz_pidfd_open(r2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x7c, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000000000031a00030014000200fc0200000000000000000800000000001400010020010000"], 0x44}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x4, 0x21, {}, {0x1, 0xc, 0xb, 0x1, 0x9, 0x4, "fe3a8c75"}, 0x2b1, 0x2, {0x0}, 0x8}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) openat$cgroup_ro(r10, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$IOCTL_GET_NUM_DEVICES(r10, 0x40046104, &(0x7f0000000700)) close_range(r4, 0xffffffffffffffff, 0x0) 6.531394615s ago: executing program 2 (id=4644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xed5c39c755598dea}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=@bridge_setlink={0x28, 0x13, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x28802, 0x4081}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040d1}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0x4) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2f30e3f71ab71464f2a9526196fdaf5a4fc49bb21124cf72058514a15503bf78dfbaffd0956a2ee5940818ea3a27c169dd074f4d34d58b974c2637811d18109d2b45ccbcd6ab918b6f221b5795a9455a5449b6acc5347d392fa9e58d95c93bbe3b2f32c717ee5a0d063b28d301d5450a6ca43defc295e73a", @ANYRES16=r1, @ANYBLOB="01002cbd7000fadbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000008003500040000000a000600505050505050000008002600cc150000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000941b6508c410c1ea1d7001020301090212000100000000090401"], 0x0) pread64(r13, &(0x7f0000000200)=""/253, 0xfd, 0x5) r14 = syz_pidfd_open(0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040020}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x8804) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, r14, 0xa50c6000) 5.641589342s ago: executing program 3 (id=4645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) ptrace$pokeuser(0x6, r7, 0x388, 0x7ffe) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$nl_route(0x10, 0x3, 0x0) 5.490212225s ago: executing program 4 (id=4646): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x1200, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xa, 0x0}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) sendmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x125, &(0x7f0000000d80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x7, 0x0, 0x6c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x33, 0x4}, [@selector_unit={0xb, 0x24, 0xc, 0x0, 0x6, "2e0f77b09b17"}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x3, [0xf]}, @processing_unit={0x15, 0x24, 0x9, 0x1, 0x6, [0x1, 0x4, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x40, 0xae, 0xfc, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x53, 0x8, 0x7, "ad25"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xa, 0x8, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4b, 0xfff, 0x6, "f0cb"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x44b5, 0x7, "820252e5e781cfd8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0xf9, 0xf0, {0xa, 0x25, 0x25, 0x7369, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x60, 0x4, "c26130", "83320f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcb, 0x2, 0x59, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x3, 0x47}, @as_header={0x17, 0x24, 0x1, 0x7, 0x3, 0x2, 0x5, 0x9, 0x1, 0x2, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x3, "06d8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0xf9, 0x5, {0xa, 0x25, 0x25, 0x3, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0x8, 0x0, 0x5, 0x48, 0x2}, 0xb, &(0x7f0000000f40)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x24, &(0x7f0000000f80)=@string={0x24, 0x3, "65230bec959176e5fa42f2955f2b249a868f79b7b9e207b2c863364748fd7db2ba32"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x3c39}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="010006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314152}}) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380), 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x187031, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0800030019000000"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0xbfa, 0x5, 0x0, 0x4}, {0x0, 0x4, 0x4, 0x4}, {0xb9aa, 0x9, 0x9, 0xa}, {0x10, 0x7, 0xe, 0x7}]}) inotify_init() 5.147903675s ago: executing program 5 (id=4647): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b16, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.151205424s ago: executing program 0 (id=4648): r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r2, &(0x7f0000000140)='\x00', 0x4280, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x43068923]}, {0x7fff, 0x5, 0x4d5, 0xffffffffffffffff}}, 0xffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)}) read$FUSE(r4, &(0x7f00000014c0)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.060865159s ago: executing program 3 (id=4649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000400)={0x1, 0x0, 0x9, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0a, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) capget(&(0x7f0000000640)={0x19980330}, &(0x7f0000000680)={0xc, 0x6, 0x200, 0xffffffff, 0x7, 0x1}) fcntl$getownex(r2, 0x10, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r4, r2, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5, 0x3, 0x3, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) 2.84281454s ago: executing program 2 (id=4650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x400, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.652216929s ago: executing program 3 (id=4651): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x194}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x18) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) 2.510916213s ago: executing program 0 (id=4652): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd700004400000060003"], 0x30}}, 0x8040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4048aec9, &(0x7f0000000280)={0x82, 0xffffffffffffffff, 0x1}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) kexec_load(0x3, 0x4, &(0x7f0000000880)=[{&(0x7f0000002880)="703ed882b1b9036a4a5de54e87418288115857a8407e4575c98b21af97738db2e99dafee3e09a0c97d5864ee3371b87036b7d2cefcd3deaad952c727b859d20ab09dbe366ad970abe400de09e96872fdd862ec58afa277db158999c847472b8f36c02a0a927d60cc477a70c5d63e3be73b2ae687ba6b0d063d1df1853a780176e2b7903f3112911daf6020f2b1ded10ab0d73b8a2eafa0c72bd52e1b4a2bb86d7cf63a3c5d2c742b991c24dd90aa125270560538cebc9f339dd18d51d8dccc07092d82956211b204dd1a61fe16d9debc0c45ca4aecd2ba4260e414191fc891c075035ebb27c08f0a2a5edcc0c4ca57af52c6fb32059528ed0507dc1de3b5cc1a9b0646796b6cf25a0d9568fbb595244dd48a4c707edc6854ca16a8dbc003a71139e6626ead367fc900a89995d766e7edf700480d9a279965d5a089a4b88d9b1e660c0398564761446cc31747dfcc479aacb60b3d49f3968dbb1a8f8e5bb35015aecc8dac01a34b0528678f109e12364b1962fba3d1f408c9f5e661c93135af10e76e77d78a9b111e985289e33ea7a69fae1c10f545cdd8b5c4530dd36fffdf9c5cd7e95ba67b6fec1eaffe030069f841590f70045d030e28ce7afe66f6f09bbcfe0e45feedb32711d33ecf901add4cb4aeaa5c142b697c0898fa05daeac44d27a0232e1e27ff50310a827c9aac05b9c11eac5ca47f968175317534bca7799ac212fc13de13178cda77e9575f0f072b5573fa1a0532db52c7b0cfde62ea3fa1897c9be4fed58071fdd98e0659b6e51b4fcb09c5029fb3bd92a479bdc62f0057994dd21e889f983b5e4ccb242dc7a9d02a1086548c3c44499112fa97f29bf5eeb8d88439bcf74c5de0eaa16816d0de3b626e0574cd2a461915904a1626832bc41fe9c95039ad71bd86225ad4953ae9a6e5c7ba3c73aa6946eb715f79423c10b1573c6d537bceb579bcb6a35df63ce1fcb7ff493099fd1d578475b878454b2cf82f02831a0382bdcf56a33f40d5a531d7d7e7e496ff6afbb9652fc5c30a091b542e6b3fea8e27bc872b68b8ecb7b9bccefdfedcad5dcdc7c77b06399ec6c6647236b758e9b9d1f4c11a915653c566bacb0a191734e19bb34b2aac053a2f3cdc0e3483f58f7c17e4df2fe111cef43cc9fcaecf46e6d0d090c3d2e2eda7262147a690522ac5ecc22fbee8f18039819086afaa5f4805231dc885406528e807e393c36b3056ffbff92f9f56267af64c88c042c24325f4b7995fa127f7937c291978ef7548d1742104aa101abd2adfee8d6a18bc2032d7eb6146d69226acfe8c23d6080cf2cb5393ba0cadb2af88a7590e84aa5e0d48ab9c6e654335d64531b8aa8cf7ab838df5313d49237fec04c8165881781291fd27ebf78b87c43c0409710b5442bf455ebc209b7c1951b7b8a801b1afbb024a7c352f5bff724b7f768c5bb698592bd4e83754d83db4e52b043c9e30bea6cb45285d46bcdf1d8f9590bc49b50277c9195e162294c2c51f687c96550d8891bddfdf0abbe694ec7829e7ecb8b989f09dd1fd650ed021c1ce545e88532bdb09c53dafce458343a4ef5d263de1fa2a49c2a67227193aaaa3fc29bd88f80f0ee936654b5c319b4cf64f2505dde18b294abf5e2723c9370a5d7ab5fdec320f34c7ba7f0ed314d5c13db4937bf00eefe404658e3eba77839ca4235e4bd9c635f3011992465890d8039dbfac467b434efd3d83e24704a2e8cc462ed63f5b0296e6ef66b1f75b2077575eb3ca032b4c411ca061dbe236d45db412aa1f1199445bb1390a7a82d1668ae1678ab130fbe5126307f8709df803e4d4bb28efdc6cc83db3505974048234712fc2299da34a88ca28eea84f602be0048c35c0cfd565617b8dd95eaeaf5e801e4e27f4e42b869f7061b7fdfdc96d31786ebf5431159ea5758786ee797f5b33d5979dc807f3254eb89e11c01e26689f39445e3645b0eba49bc63562d9db54c2cc85d4500163ecc5d41e436c2cf5c774157b7bd861f3fa19aa88d7190645f8f459fadd40675d240e7ab5c51ae544fb964393aa2f35cdfc81959e8e63ae9461d83f09dc0a4b4653bd59f95f3270920652bf775ac43aa392040391c080a8d6fe9d0289f33dc15368757a865b3738251960cb88711bdea9f2b8b759d8c093b2cd981a344739561d9ebc1a63bd2cd5ce158c733893161358890969bdc215401b3a6669280a926e21951655355ed4e76a35bf7d94afae2e66b9a209423a7fa6764b236b8b5172c4d84771b5bd4d1fbd6ad0f9fc37a0dfac8c2d384f2c64027932f8c930eaba3fcabd71553eceb35bd7b0d33370897cc8cc4491550d5f6a57e97b6d257f56d4f3c602faa1a612904ec0f0fee88492a43ccc97b9f94d66db224b36b0ae0802f3a5bf4eacb3a29a25a9176c53c8151bc8329eefb14fe9847a02c9b38a7ed9e883075672aef7abdf6035d5d5ad9c82e30606c7d43f62cb422fc57dccc3a19eb5c77fc918841e2d4d511ea7cba035a86004a93bae8677aa4241db460c3aee22093c0596ceb8e19cbbbf67ff4d295134bf57a58430e3d4b01b7c50722e5eed8f10f8405d8e9cd807a641a45c44bd2233af56e0d1ca232cfd449c10cc428aad17dc4879b159b3fbbfaaa41562dc4ba9d87e3570835e1ca222efc8c7a18fd15bdb64c2510fa7713f9c5624d4a07236dd9eec13a91c3786ae088e27285f59e5456332b31a6b17cc5c7dfb08b9b7145c71b1b417a4c92c63752f80713efe1f701c37ac86886753372a5b0563d9ebb967281cc85625ba5df3213b29899f2872a02960b2e3d025c33d6aedfb4498293252c4c3371ec9b841164abee1413a1129977a215633076ab49914800eaf5bba4541d91c198e2973c3312fa705675864a0c0fa3085a06b075fbc002d705d262041a27d82cc3871d3934f4d802b1e6dfc6025695b11caa3ecd7ed3dcd0f4eece378801e65ead533e4ef929f6ac727e97b5ae2c0ac26ed17333a3f9eb3587bd436e5a3563588f72623a4116a55986b37c8307565dd1fb78c8d211b3706e01b9d96b71b44946f7bd5aa99b1dbfd5e6b64efdad99f05a87f81cab24edbe467620f92951963da13e1e18125bad59fb77bae300338c8fd0227db7c109d19337c9f2ea8ce196d54d78b3315958b8656bf07dc0be4829813d60821e32cb231f0ee846050fca610b3dd7ab014b6184ac957522d149658d11b972be5cbb3e3bc5d4e30022a10121c0cc692ff9f23aee77a5c31fa926bf449db10be4d772077d4c9ccaf7fc5b869d515f9b73e5bb8afa684a87227d9aabf7b6605d48fe3828afb2ce161f442a9fca74c611791772b39b880fcd4cbb9a71a1fd42c6a9f4b690ec0edbce6cfb51b908a20b1d029c6b9b2eae1f434c2e070d4c55f728e8ef5db85ae2514006a85f282a92534c53bbc71f5cc5382308eccf5a4ab558dafd8644672b9823e03c7a8adfd0c4f5b88504beede4b2080772f511d43303f238d933a34207a7f43cddd8b7bac10463372aa3a99b2bf09fb4440bd792af4d117299bdb87d528dd7a93a84e42c12185267f245869dbbbc01816e3b935410a4366f7e6c8e0139646d1110a4271080a86323bf4112f28123dce8c2e229b2d4ac9934ffa53d74d09ecdd351cb4fa931012323579ab6a42b2fd526cd7f165e1c988f9c9dc0299229ca1c9419c592c6e82b384cf8cd1facc48dc6e1c721dda241efe806881451140bac72f588f10fb8037386255dd637d98b5c655154a6f7516c010c01dd78882bae05a3e1a540382ed579198e36121452805da4481fccbaa5bddbbefd7b112a9aec2dba16f14074d1309952ac094c8f7e6dc80a9287e228a6daa323d73bc8b8b8c91a49c54ad15f47379b93749b0374c9e7512eb7b950d00e18a30fdbf00cc56d0b8a02599daf7d9bdbe634cecd4348d63d28648de838228e1c7c904a84ad7a745bf222327a979d2991c1d2548780b82b6b24dc17f410e7a39050dad0eb805af495c8fdcfd35fd3b08812154c6658fde5da3c8f4ba41013692a7e71a5419a55e9c32a182b3bcd4987695a602aadd931ae4ecf4f4f75632b2fe891adf6a9a3fb4b729970c71468230f631e5918008a5f4f8ba16f82aeafa04445c47f7afccfeda51628275d4da02d84b2cb9c7ff789038283f88cd65f4fec3fe545d6527c7e3ac4055e73b38c4a6c852a83ed3814fdd4c622ebfb06c29bb216ce736ffca0bfdd6b7d4996679dd99b2158d5b036639753e756d86d85e351de9bad2eb47c53f8bbdfbc48a135500878fa906bef6387c71c222233bd0b466d09c84134b1324511ba746e61089108730803431235255f338b5f2653f9a5279c6bc02d93fabb883ac2cfd36f61b9e0bbdbb8b7f3880584851b86f5258d41dbbae272fda994bf0a2ec64063b1e5c9d0983c25818cd673fac8281195d4bb8666cf116a2b9fb9ee972bea6b02abe06ff39c73abd85bb56d47cca68c7f4f8233b93e2af7abfc4348bd3dff2fde5984b15dee58e15578f7d715a37408d4fb5ee4dc53fe4a2d32583a40112b3d4ca09c969bf206d45b1d82cf2f8c1b0f51dc403ad569ecae65128a754c7601d06295d183f7d243c58a4498cdd2d89958c7e29aeb1e853b072254e78daeebc301ed0aca02c61b70b414b6acfa9e684b4c3d5080c0f20aae36c65f696a74b251f85fdc4abe5bbb3e3a6193e0ba7ec480183c690380732129e2a676e960ee17fc44796019447676e3935bc10895befcf4ba2102171b1ac0b9e45bc7df880259e21710f78f2af15946ce693268520252f50368d84fcdf1f31658a211c76b11653c8403c807361df3f8b32c0de4417f4f57559feec3e480db40040ca32c90ed92b13c556d0f55839ceea319c148b991bb23d96c6da528c16157835fd71e39617b8d4732ed168ab215db57949d6cf61381bf69fc9bf001f9b721ff7609143c732ac78da8c2a354a308694fbcbe2a9b0fabb59d81c2287033a816998a09cf958db08daf70ff4fd89b4c19edc2ced4df16b26e570a79d11952b24b65f9eb192968d93c50aaa1141d0b5e9fd8cab3877e68598884e44ae31d5a0dd1fcadc190817a5c300d51d2d0916a1e4282c866ad4d0841ff532ce6f5fc96551280c2103d5c8e7adca0f2c237771393cb5a403b2b674f2e7c045ace02c587fb1187f31a74bd63bcc76364717948410a06596ad73726aeacc462d80d6d3ed279c4164716b97c7c420f2ac4f198a4905c84080794a8b125f919b661e2aeeb10760fec5cae7042d867fb978b422775c10d96d900364b1901998d231bee738d59d38006f75e8bf4220decc215dd0be3ae7d62fa4b3b665bf919b746cd2af65c92ce00054bf006d7c8fecb83f71683865e8c897c1281e0d54901b952aacfd41c3c998647202af924e031efbaf797106d1b5986a6738cba38a583d88e2ceadbf976f7fcf4eb4528d3e47a39fb2ab5ceeaef9dc35c41468f635a03a4f7effcbdef26a52574e7afe45c38cb53ec5de6e9bc18171927477f0adbc4d9b70a0183833981c1ca81a9b9a5a019a126cbe0958c5e80c625832bd3d4e381e3c4f3dc6801fc797aecacd05448153e9ae14dd2f141e3b5b61d2fd74fac6879610c303cec1cb3754a30dfdfe71cbb0b18102aade10d90345734791eb5007295dd6b646fdb102978d75638ead7916c7e4e1d80eb232481814286ac04eb9ffb3389538ca0d9b18ccefe816f9d77dc43eeba560cb3dc8089f9817129c684b9a882ecd837e19c4f54f7b60fd94320bb4240d658ec4fc15a963217f12ad48d210ca6afabdc56f7a91a243d490caf97b92d537d118140c04f7ef1e", 0x1000, 0xb, 0xffffffffffffffff}, {&(0x7f0000003880)="306375d5600dc1d13e7b325e72fc5593b3092e843cc8efb0ea7225e562f003c6e537d1312509873a", 0x28, 0x6d3, 0x5}, {&(0x7f00000038c0)="80df9a2260b06d3a2d65c52b2d344bc655f4", 0x12, 0x1ff, 0xfffffffffffffffd}, {&(0x7f0000003900)="72dee1e24c8e", 0x6, 0x2, 0x1}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000000) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x19}, {&(0x7f0000000640)="ebe3a0e9796cfdf4e376fda3608f6c50c1459c26c9d1777bb3ccba128280b372219d205e81f4a7f71c1926aae1efd7e005020000005cfe6cb55b5bb9fa6935849e6098ed884e7c7b4f080000009587304800000000a8ee5c57a9a8936eb77c98a2f40618e09d3ec5c402449980ed8cac9118e80a048ef01b98868f9fcbb090ec0178bf60107ce3ed98bba9674a68fff5a93f6d84198ab8d0504f5e133a7261ab100e8edd750b4287491d3f2d", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000580)="808e58b4c00f22e7f20f1d7400d9e566b80500000066b9003000000f01c166b9800000c00f326635000100000f300f01f90f01c4660f3881006a00", 0x3b}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="42faef429d41fcf62e4c9d113949c10113030d554f7c9da1bbb1a3c050e7505ff51ff8e5e4ae07", 0x27}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) 2.422214454s ago: executing program 4 (id=4653): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x46, 0x94, 0x6e, 0x20, 0x1c04, 0x15, 0x23b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7f, 0xd0, 0x9, "", [{{0x9, 0x4, 0x9e, 0x4, 0x0, 0x2, 0x6, 0x0, 0x9}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x3, 0x40000) listen(r0, 0x401) 2.180512451s ago: executing program 2 (id=4654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f00007bc000/0x4000)=nil, 0x4000, 0x1af9e9c7d7198b77, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xd8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "5ea6f4a919b4772a30b430e38a41376764aa484656a18478141fc81da67ad88c31a5c4ea89ef3e15349e25765ee06b4fbdaee92c7b19d5e372e265acf31b5dc39913e5273aaef6a925cda32301b122dee00ee52d239d1387b59d57b430ed534cdb655baf7f1898eb38cfc425176d39de39164d4d3f271b0360d65bb74a41831ede4606d85800acc8f087f352df19136737beec31684f1eb4c49c5d1274588a949ea23e9f7d887936f2504f58727fbfb19c0b4545838882b05a1bdeb9d9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x188}, 0x1, 0x0, 0x0, 0xc091}, 0x4002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) syz_usb_connect(0x1, 0xd6, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xa0, 0xf0, 0x10, 0x8, 0x1f4d, 0x102, 0x2466, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x0, 0x1, 0x80, 0x7, "", [{{0x9, 0x4, 0xd5, 0x2, 0x5, 0xe2, 0x6, 0x6c, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c89"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xc, 0x5, 0x1c}, {0x6, 0x24, 0x1a, 0x9, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x0, 0xb}, @acm={0x4, 0x24, 0x2, 0x6}]}], [{{0x9, 0x5, 0x7, 0x4, 0x10, 0x5, 0x40, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0xff, 0x7, 0x1, [@generic={0x38, 0x5, "35b763d7e71dadcf1df90f179c350a729952bd176691e3f606a26a3be13a16dbc3b555690746c6bd02b0eecd69793472768545add06c"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7, 0x5, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0xcf, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x1, 0x8, 0x8, 0xa6}, 0x43, &(0x7f00000002c0)={0x5, 0xf, 0x43, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x3, 0x31, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9a05ec70a1f2bc9a64ab63f5a047e508"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x2, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x2, 0x5, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xb, 0x1}]}, 0x8, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x418}}, {0x77, &(0x7f0000000380)=@string={0x77, 0x3, "a908b3f83d1a0d364f17fec1290bdf370470f650cc4f3d72c41fba9bbfd65d64ba1422a79694d8d1670d3dc38e4856a0f8baaa13f126ce5d607e67acda8403fdc7b5a829423f1dab4fd971558bb3c59088ac7b58233257fdbb0f6a511ba7bf5609233eec41fc8bd451cb45bd8760d1707463e1b186"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x48, &(0x7f0000000480)=@string={0x48, 0x3, "daf95dcad07b2cd5c9fc2311951049d7c748deef741f92c322e0984854547911f96aef2392a645e738ae320b118a36102ecac26e4d8cf31520f1045f59dd2212904abeafee74"}}, {0xa5, &(0x7f0000000500)=@string={0xa5, 0x3, "23edaba849f726810170d02626d812c7d5716e040f11746de6187fcde1cf8b84b929be8a1979a82889f6ea7515a4804868d1cca700cbffe966a6606c87924f82d2786d1eba890e47a5b9e9f2ed3515cc7ecc8896cfec5a6b65711156190c15c791fb405465b2d1e07faa72ce00e1a95e10203cf7e82d71c89c5fa2c2b647b95231bceeefff41cd9a1d43eb8afe2a4bd6357de8aed99da748e4d63638e2ad4297e87386"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2009}}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0xd}, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x0, 0x7f90, 0x3, 0xe0bf, {{0x12, 0x4, 0x1, 0x18, 0x48, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@rr={0x7, 0xf, 0x8d, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xa9, 0x1, 0x1, [{@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x2f, 0x8f, 0x4, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x3}, @mcast1, 0x20, 0x1, 0xfffff800, 0x200}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1f0, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9a1c5fbf932ef94b}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) syz_emit_ethernet(0x2bf, &(0x7f0000001c00)={@empty, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0x2b1, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x29d, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000a00)={0x4, 0x1, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/235, 0xeb}], &(0x7f00000009c0)=[0x1, 0x5ff, 0x3c8, 0x8, 0x41f, 0x10000, 0xffffffff]}, 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x40000400) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c0d0) 2.038554804s ago: executing program 0 (id=4655): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x188e01, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x1, 0x355}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000140)={0x2, 0x2, 0x9, 0xa8d, 0x3ff, 0x8}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x107800, 0x0) sendfile(r4, r5, 0x0, 0x201f00) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a06000408010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 1.103313733s ago: executing program 0 (id=4656): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x5b) read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r6 = io_uring_setup(0x1d90, &(0x7f0000000480)={0x0, 0xe9cc, 0x40, 0xfffffffd, 0x376}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000500), 0x0) io_uring_register$IORING_REGISTER_PROBE(r6, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x5, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 964.896765ms ago: executing program 5 (id=4657): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bdfeffffffdf251000000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x65, 0x482, 0x0, &(0x7f0000002d40)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003006d616373656330000000000000000000080004"], 0x58}}, 0x20084084) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x2c) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) r10 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) 0s ago: executing program 5 (id=4658): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000002c0)={'dummy0\x00', @random}) (fail_nth: 6) kernel console output (not intermixed with test programs): wframe+0x77/0x7f [ 1093.460085][T28502] RIP: 0033:0x7fe98c39ce59 [ 1093.460105][T28502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.460124][T28502] RSP: 002b:00007fe98d237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.460146][T28502] RAX: ffffffffffffffda RBX: 00007fe98c615fa0 RCX: 00007fe98c39ce59 [ 1093.460161][T28502] RDX: 0000000020040880 RSI: 0000200000000180 RDI: 0000000000000003 [ 1093.460174][T28502] RBP: 00007fe98d237090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.460187][T28502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.460199][T28502] R13: 00007fe98c616038 R14: 00007fe98c615fa0 R15: 00007fe98c73fa48 [ 1093.460228][T28502] [ 1093.748989][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 1093.773128][T15808] usb 6-1: USB disconnect, device number 12 [ 1094.302183][T28524] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1094.613380][T28517] netlink: 'syz.2.4312': attribute type 21 has an invalid length. [ 1094.621248][T28517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1094.642623][T28517] netlink: 'syz.2.4312': attribute type 4 has an invalid length. [ 1094.650431][T28517] netlink: 'syz.2.4312': attribute type 3 has an invalid length. [ 1094.658277][T28517] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4312'. [ 1095.052389][T15817] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1095.371962][ T5694] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1095.626910][T15817] usb 5-1: Using ep0 maxpacket: 32 [ 1095.636143][T15817] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1095.645117][T15817] usb 5-1: config 0 has no interface number 0 [ 1095.654957][T15817] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1095.665567][T15817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.674983][T15817] usb 5-1: Product: syz [ 1095.679825][T15817] usb 5-1: Manufacturer: syz [ 1095.685078][T15817] usb 5-1: SerialNumber: syz [ 1095.687317][T15807] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1095.706213][T15817] usb 5-1: config 0 descriptor?? [ 1095.868691][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 1095.868712][ T29] audit: type=1326 audit(1779837810.852:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1095.912949][ T29] audit: type=1326 audit(1779837810.852:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1095.937474][ T29] audit: type=1326 audit(1779837810.852:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1095.961866][ T29] audit: type=1326 audit(1779837810.852:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1095.978751][T15817] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1095.991451][ T29] audit: type=1326 audit(1779837810.852:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1096.050016][ T29] audit: type=1326 audit(1779837810.852:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1096.074341][ T29] audit: type=1326 audit(1779837810.852:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1096.106749][ T29] audit: type=1326 audit(1779837810.852:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x7ffc0000 [ 1096.131177][ T29] audit: type=1326 audit(1779837810.852:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05135d68e code=0x7ffc0000 [ 1096.162069][ T5693] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1096.179291][ T29] audit: type=1326 audit(1779837810.852:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28560 comm="syz.3.4327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05139caeb code=0x7ffc0000 [ 1096.206566][T14027] hid_parser_main: 10 callbacks suppressed [ 1096.206590][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.219888][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.227277][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.234652][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.242024][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.249409][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.256777][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.282758][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.290300][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.300234][T14027] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0 [ 1096.313987][T14027] hid-generic 0000:0000:0004.0027: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1096.375572][T28574] fido_id[28574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1096.406251][T15807] usb 1-1: Using ep0 maxpacket: 32 [ 1096.419676][T15817] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1096.442920][T15817] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1096.519438][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1096.529288][T28587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.536629][T28587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.726708][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.062971][T15807] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.073910][T15807] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.360021][T15805] usb 5-1: USB disconnect, device number 44 [ 1097.373793][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1097.395209][T15805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1097.413428][T15805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1097.427930][T15805] quatech2 5-1:0.51: device disconnected [ 1097.589190][ T5694] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.598310][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.606342][ T5694] usb 6-1: Product: syz [ 1097.610556][ T5694] usb 6-1: Manufacturer: syz [ 1097.615171][ T5694] usb 6-1: SerialNumber: syz [ 1097.741585][T15807] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1097.750649][T15807] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1097.759068][T15807] usb 1-1: Product: syz [ 1097.763233][T15807] usb 1-1: Manufacturer: syz [ 1097.814169][ T5693] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1097.824007][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.847930][ T5693] usb 4-1: Product: syz [ 1097.862740][ T5693] usb 4-1: Manufacturer: syz [ 1097.867410][ T5693] usb 4-1: SerialNumber: syz [ 1097.881558][ T5693] usb 4-1: config 0 descriptor?? [ 1097.956762][T15807] hub 1-1:4.0: USB hub found [ 1098.050264][ T5693] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1098.066719][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1098.168250][ T5693] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1098.177721][ T5693] usb 4-1: media controller created [ 1098.219806][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1098.258794][T28630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4332'. [ 1098.275061][ T5694] cdc_ncm 6-1:1.0: bind() failure [ 1098.284449][ T5694] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1098.291301][ T5694] cdc_ncm 6-1:1.1: bind() failure [ 1098.300908][ T5694] usb 6-1: USB disconnect, device number 13 [ 1098.314032][T28561] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1098.425984][ T5693] DVB: Unable to find symbol mt352_attach() [ 1098.429051][T15807] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1098.508594][ T5693] DVB: Unable to find symbol nxt6000_attach() [ 1098.514700][ T5693] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1098.535688][T15807] usb 1-1: USB disconnect, device number 20 [ 1098.671171][T28645] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1098.682467][T28645] bond1 (unregistering): Released all slaves [ 1098.720347][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input123 [ 1098.749656][T15805] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1098.795153][ T5693] dvb-usb: schedule remote query interval to 1000 msecs. [ 1098.802497][ T5693] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1098.857514][ T5693] dvb-usb: bulk message failed: -22 (7/0) [ 1098.863309][ T5693] dvb-usb: bulk message failed: -22 (7/0) [ 1099.387949][T28744] syzkaller0: entered promiscuous mode [ 1099.393721][T28744] syzkaller0: entered allmulticast mode [ 1099.486025][ T5693] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1099.759582][T28751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1099.914569][ T5694] dvb-usb: bulk message failed: -22 (7/0) [ 1099.920545][ T5694] dvb-usb: error while querying for an remote control event. [ 1100.269718][T15805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.279857][T15805] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1100.288741][T15805] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1100.297777][T15805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.311385][T15805] usb 3-1: config 0 descriptor?? [ 1100.492802][T15805] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1100.500575][T15805] dvb-usb: bulk message failed: -22 (3/0) [ 1100.518406][T15805] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1100.564761][T15807] usb 4-1: USB disconnect, device number 15 [ 1100.640067][T15805] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1100.647239][T15805] usb 3-1: media controller created [ 1100.654093][T15805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.665781][T15807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1100.694700][T15805] dvb-usb: bulk message failed: -22 (6/0) [ 1100.700564][T15805] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1100.738172][T28786] FAULT_INJECTION: forcing a failure. [ 1100.738172][T28786] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.775209][T28786] CPU: 1 UID: 0 PID: 28786 Comm: syz.3.4342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.775256][T28786] Tainted: [L]=SOFTLOCKUP [ 1100.775265][T28786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.775278][T28786] Call Trace: [ 1100.775287][T28786] [ 1100.775297][T28786] dump_stack_lvl+0xe8/0x150 [ 1100.775328][T28786] should_fail_ex+0x412/0x560 [ 1100.775364][T28786] should_failslab+0xa8/0x100 [ 1100.775388][T28786] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1100.775420][T28786] ? __alloc_skb+0x186/0x7d0 [ 1100.775450][T28786] ? __alloc_skb+0x1d0/0x7d0 [ 1100.775476][T28786] ? __local_bh_enable_ip+0xd0/0x130 [ 1100.775505][T28786] __alloc_skb+0x1d0/0x7d0 [ 1100.775534][T28786] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1100.775570][T28786] netlink_sendmsg+0x5d4/0xb40 [ 1100.775601][T28786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.775624][T28786] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1100.775658][T28786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1100.775692][T28786] ____sys_sendmsg+0x972/0x9f0 [ 1100.775714][T28786] ? __might_fault+0xaf/0x130 [ 1100.775748][T28786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.775779][T28786] ? import_iovec+0x73/0xa0 [ 1100.775816][T28786] ___sys_sendmsg+0x2a5/0x360 [ 1100.775836][T28786] ? __lock_acquire+0x6b5/0x2cf0 [ 1100.775864][T28786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.775921][T28786] ? __fget_files+0x2a/0x420 [ 1100.775948][T28786] ? __fget_files+0x3a0/0x420 [ 1100.775986][T28786] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1100.776011][T28786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.776043][T28786] ? __pfx_ksys_write+0x10/0x10 [ 1100.776089][T28786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.776113][T28786] do_syscall_64+0x15f/0x560 [ 1100.776134][T28786] ? trace_irq_disable+0x3b/0x140 [ 1100.776168][T28786] ? clear_bhb_loop+0x40/0x90 [ 1100.776194][T28786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.776216][T28786] RIP: 0033:0x7fc05139ce59 [ 1100.776242][T28786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.776261][T28786] RSP: 002b:00007fc04f5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.776288][T28786] RAX: ffffffffffffffda RBX: 00007fc051615fa0 RCX: 00007fc05139ce59 [ 1100.776303][T28786] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1100.776316][T28786] RBP: 00007fc04f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.776328][T28786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.776340][T28786] R13: 00007fc051616038 R14: 00007fc051615fa0 R15: 00007fc05173fa48 [ 1100.776370][T28786] [ 1100.798239][ T5693] usb 1-1: config 220 has an invalid interface number: 142 but max is 0 [ 1101.115528][T15805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input124 [ 1101.185237][T15805] dvb-usb: schedule remote query interval to 150 msecs. [ 1101.192348][T15805] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1101.261767][ T5693] usb 1-1: config 220 has no interface number 0 [ 1101.268105][ T5693] usb 1-1: config 220 interface 142 has no altsetting 0 [ 1101.368957][T15805] dvb-usb: bulk message failed: -22 (1/0) [ 1101.374739][T15805] dvb-usb: error while querying for an remote control event. [ 1101.592539][T15805] dvb-usb: bulk message failed: -22 (1/0) [ 1101.598397][T15805] dvb-usb: error while querying for an remote control event. [ 1101.814099][T15807] dvb-usb: bulk message failed: -22 (1/0) [ 1101.819994][T15807] dvb-usb: error while querying for an remote control event. [ 1102.015452][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1102.038167][T15805] dvb-usb: bulk message failed: -22 (1/0) [ 1102.038205][T15805] dvb-usb: error while querying for an remote control event. [ 1102.123639][ T5694] usb 3-1: USB disconnect, device number 5 [ 1102.156441][T15807] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1102.199063][ T5694] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1102.374572][ T5693] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1102.383774][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.391905][ T5693] usb 1-1: Product: syz [ 1102.411720][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1102.411739][ T29] audit: type=1326 audit(1779837817.432:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.442664][ T29] audit: type=1326 audit(1779837817.432:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.467061][ T29] audit: type=1326 audit(1779837817.432:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.573354][ T29] audit: type=1326 audit(1779837817.432:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.597782][ T29] audit: type=1326 audit(1779837817.432:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.627301][ T5693] usb 1-1: can't set config #220, error -71 [ 1102.633225][ T5693] usb 1-1: USB disconnect, device number 21 [ 1102.649697][ T29] audit: type=1326 audit(1779837817.432:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.674876][ T29] audit: type=1326 audit(1779837817.432:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.699513][ T29] audit: type=1326 audit(1779837817.432:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.723991][ T29] audit: type=1326 audit(1779837817.432:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1102.804697][ T29] audit: type=1326 audit(1779837817.432:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28835 comm="syz.2.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1103.217334][T28863] vlan0: entered allmulticast mode [ 1103.222694][T28863] veth0_to_bond: entered allmulticast mode [ 1103.540451][T11946] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1103.771040][T15807] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1103.781290][T15807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.789291][T15807] usb 4-1: Product: syz [ 1103.793459][T15807] usb 4-1: Manufacturer: syz [ 1103.798054][T15807] usb 4-1: SerialNumber: syz [ 1103.889126][T15805] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1103.979796][T14027] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1104.427408][T15807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1104.439339][T15807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1104.449779][T15807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1104.538295][T15807] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1104.552157][T15807] usb 4-1: USB disconnect, device number 16 [ 1105.090451][T11946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1105.296042][T14027] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1105.304387][T14027] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.314866][T14027] usb 5-1: config 0 has no interface number 0 [ 1105.321024][T14027] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1105.332186][T14027] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1105.343090][T14027] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.567495][T11946] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1105.578681][T11946] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1105.590430][T28912] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4362'. [ 1106.072237][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1106.238667][T15805] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1106.247857][T15805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.255898][T15805] usb 1-1: Product: syz [ 1106.260087][T15805] usb 1-1: Manufacturer: syz [ 1106.266786][T15807] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1106.276102][T15805] usb 1-1: config 0 descriptor?? [ 1106.291529][T14027] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1106.300724][T14027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.308744][T14027] usb 5-1: Product: syz [ 1106.312925][T14027] usb 5-1: Manufacturer: syz [ 1106.317514][T14027] usb 5-1: SerialNumber: syz [ 1106.330014][T14027] usb 5-1: config 0 descriptor?? [ 1106.347129][T15805] usb 1-1: can't set config #0, error -71 [ 1106.354611][T15805] usb 1-1: USB disconnect, device number 22 [ 1106.396555][T28881] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1106.457027][T11946] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1106.466160][T11946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.538493][T14027] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1106.572021][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1106.580957][T11946] usb 6-1: can't set config #1, error -71 [ 1106.589034][T11946] usb 6-1: USB disconnect, device number 14 [ 1106.716142][T15808] usb 5-1: USB disconnect, device number 45 [ 1106.796969][ T136] usb 5-1: Failed to submit usb control message: -71 [ 1106.804022][ T136] usb 5-1: unable to send the bmi data to the device: -71 [ 1106.811197][ T136] usb 5-1: unable to get target info from device [ 1106.817568][ T136] usb 5-1: could not get target info (-71) [ 1106.823687][ T136] usb 5-1: could not probe fw (-71) [ 1106.905149][T15807] usb 3-1: Using ep0 maxpacket: 16 [ 1107.266896][T28918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.278500][T28918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.116214][T15807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1108.467964][T15807] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1108.475563][T15807] usb 3-1: can't read configurations, error -71 [ 1108.770137][ T43] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1108.779208][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.787190][ T43] usb 4-1: Product: syz [ 1108.791341][ T43] usb 4-1: Manufacturer: syz [ 1108.795934][ T43] usb 4-1: SerialNumber: syz [ 1108.803824][ T43] usb 4-1: config 0 descriptor?? [ 1108.961931][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4378'. [ 1109.287487][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1109.296926][ T29] audit: type=1326 audit(1779837824.252:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.351607][ T29] audit: type=1326 audit(1779837824.252:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.376107][ T29] audit: type=1326 audit(1779837824.252:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.400475][ T29] audit: type=1326 audit(1779837824.252:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.424937][ T29] audit: type=1326 audit(1779837824.252:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.469147][ T29] audit: type=1326 audit(1779837824.252:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.493637][ T29] audit: type=1326 audit(1779837824.252:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.518039][ T29] audit: type=1326 audit(1779837824.252:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.545518][ T29] audit: type=1326 audit(1779837824.252:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.613590][ T29] audit: type=1326 audit(1779837824.252:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29021 comm="syz.0.4379" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c39ce59 code=0x7ffc0000 [ 1109.714515][T29029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1109.838946][T29041] usb usb8: usbfs: process 29041 (syz.4.4384) did not claim interface 0 before use [ 1109.946734][T29048] vlan2: entered allmulticast mode [ 1109.952150][T29048] bridge0: port 3(vlan2) entered blocking state [ 1109.960270][T29048] bridge0: port 3(vlan2) entered disabled state [ 1109.968889][T29048] vlan2: entered promiscuous mode [ 1110.081544][T29058] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1110.547651][T14027] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1110.694250][ T43] usb 4-1: f81604_read: reg: 100f failed: -EPIPE [ 1111.027599][T29027] tipc: Failed to remove unknown binding: 66,0,0/0:3368033522/3368033523 [ 1111.037027][T29027] tipc: Failed to remove unknown binding: 66,0,0/0:3368033522/3368033523 [ 1111.219834][T14027] usb 6-1: Using ep0 maxpacket: 16 [ 1111.350014][ T43] usb 4-1: f81604_read: reg: 200e failed: -EPROTO [ 1111.358820][ T43] usb 4-1: USB disconnect, device number 17 [ 1111.372456][ T43] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 1111.514910][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 1111.561629][T29067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.570629][T29067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.578161][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1112.604956][ T43] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 1113.032276][T29148] tipc: Enabling not permitted [ 1113.037871][T29148] tipc: Enabling of bearer rejected, failed to enable media [ 1113.082775][T29142] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4400'. [ 1113.184944][T14027] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1113.515430][T14027] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1113.523085][T14027] usb 6-1: can't read configurations, error -71 [ 1113.745423][T29173] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4405'. [ 1113.925013][T29185] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1113.966844][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4408'. [ 1114.011049][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1114.049645][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1114.400209][ T5694] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1114.408286][T15817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1114.543860][T29203] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1114.702365][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1115.050955][T15817] usb 3-1: Using ep0 maxpacket: 16 [ 1115.361055][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.371200][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1115.512498][T29213] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1115.578006][ T43] usb 4-1: string descriptor 0 read error: -71 [ 1115.584440][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1115.593596][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.722495][ T43] usb 4-1: can't set config #1, error -71 [ 1115.723800][T15817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.738442][T15817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.751278][T15817] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1115.754550][ T43] usb 4-1: USB disconnect, device number 18 [ 1115.760432][T15817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.844087][T15817] usb 3-1: config 0 descriptor?? [ 1115.946367][ T5694] usb 1-1: not running at top speed; connect to a high speed hub [ 1116.061280][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.067206][T15817] pxrc 3-1:0.0: Could not find endpoint [ 1116.073962][T15817] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1116.076005][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.355634][T15817] usb 3-1: USB disconnect, device number 8 [ 1116.383822][ T5694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 241, changing to 4 [ 1116.394813][ T5694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1116.447433][T29236] netlink: 'syz.4.4416': attribute type 1 has an invalid length. [ 1116.552165][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1116.552186][ T29] audit: type=1326 audit(1779837831.512:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29237 comm="syz.5.4417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a45f9ce59 code=0x0 [ 1116.611148][ T5694] usb 1-1: string descriptor 0 read error: -22 [ 1116.617504][ T5694] usb 1-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 1116.626574][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.772434][T29251] tipc: Enabling not permitted [ 1116.778364][T29251] tipc: Enabling of bearer rejected, failed to enable media [ 1116.835794][ T5694] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1117.023889][T15807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1117.039129][ T5694] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1117.147484][ T5694] usb 1-1: unit 3 not found! [ 1117.195924][ T5694] usb 1-1: USB disconnect, device number 23 [ 1117.681691][T15807] usb 4-1: Using ep0 maxpacket: 8 [ 1117.850322][T29300] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4426'. [ 1117.898972][T15807] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1117.908779][T15807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1117.921620][T15807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1117.936196][ T5694] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1117.955073][T15807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1117.976466][T15807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1117.997316][T15807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.025300][T15807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.047325][T15817] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1118.086240][T15807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.600132][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 1118.643847][T15807] usb 4-1: GET_CAPABILITIES returned 0 [ 1118.649421][T15807] usbtmc 4-1:16.0: can't read capabilities [ 1118.823929][T15817] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1118.833579][T15817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.846480][ T5694] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.858236][T14027] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1118.866525][ T5694] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1118.878118][ T5694] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1118.889210][ T5694] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1118.899085][ T5694] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1118.912082][ T5694] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1118.918755][ T5694] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1118.927839][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.937706][T15817] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1118.946721][T15817] usb 5-1: config 1 has no interface number 1 [ 1118.952855][T15817] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1118.976470][T15817] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1118.990851][ T5694] usb 1-1: config 0 descriptor?? [ 1119.117260][T29246] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 1119.125691][ T43] usb 4-1: USB disconnect, device number 19 [ 1119.844124][T15817] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.855700][ T5694] hid_parser_main: 91 callbacks suppressed [ 1119.855725][ T5694] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1119.869527][ T5694] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1119.877407][ T5694] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1119.885355][ T5694] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1119.893235][ T5694] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1119.904888][T15817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.912951][T15817] usb 5-1: Product: syz [ 1119.917190][T15817] usb 5-1: Manufacturer: syz [ 1119.921798][T15817] usb 5-1: SerialNumber: syz [ 1119.929574][ T5694] hid-thrustmaster 0003:044F:B65D.0028: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1119.941926][ T5694] hid-thrustmaster 0003:044F:B65D.0028: setup data couldn't be sent [ 1120.073192][ T5693] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1120.129919][T29260] batman_adv: batadv0: Adding interface: dummy0 [ 1120.136200][T29260] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.161680][T29260] batman_adv: batadv0: Interface activated: dummy0 [ 1120.191606][T29260] batadv0: mtu less than device minimum [ 1120.198193][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.209678][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.230851][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.242179][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.253415][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.264654][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.275882][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.287688][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.299508][T29260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.320310][T29291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.329172][T29291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.390525][T29291] team0: Port device dummy0 removed [ 1120.396314][T29291] bridge_slave_0: left allmulticast mode [ 1120.401999][T29291] bridge_slave_0: left promiscuous mode [ 1120.407813][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.440221][T29291] bridge_slave_1: left allmulticast mode [ 1120.445940][T29291] bridge_slave_1: left promiscuous mode [ 1120.476646][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.487890][T29291] bond1: (slave veth0_to_bond): Releasing active interface [ 1120.498085][T29291] bond0: (slave bond_slave_0): Releasing backup interface [ 1120.507650][T29291] bond0: (slave bond_slave_1): Releasing backup interface [ 1120.517859][T29291] team0: Port device team_slave_0 removed [ 1120.525589][T29291] team0: Port device team_slave_1 removed [ 1120.532643][T29291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.546401][ T5693] usb 3-1: device descriptor read/64, error -71 [ 1120.553922][T29291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.681737][T29260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.774291][T15807] usb 1-1: USB disconnect, device number 24 [ 1120.877525][ C0] hid-thrustmaster 0003:044F:B65D.0028: URB to get model id failed with error -2 [ 1120.888149][ T5693] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1121.093637][T14027] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1121.102757][T14027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.110879][T14027] usb 6-1: Product: syz [ 1121.115072][T14027] usb 6-1: Manufacturer: syz [ 1121.119695][T14027] usb 6-1: SerialNumber: syz [ 1121.152895][T14027] usb 6-1: config 0 descriptor?? [ 1121.429851][T15817] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1121.437352][T15817] usb 5-1: MIDIStreaming interface descriptor not found [ 1121.446701][ T5693] usb 3-1: device descriptor read/64, error -71 [ 1121.541580][ T5693] usb usb3-port1: attempt power cycle [ 1121.567975][T15817] usb 5-1: USB disconnect, device number 46 [ 1121.654470][T14027] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1121.662295][T14027] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1121.708071][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.733177][T14027] usb 6-1: USB disconnect, device number 17 [ 1121.985444][ T5693] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1122.056020][T29483] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1122.208081][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1122.415914][ T5693] usb 3-1: device descriptor read/8, error -71 [ 1122.747415][T14027] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1122.755220][ T5693] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1122.860640][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1123.191009][ T5693] usb 3-1: device not accepting address 12, error -71 [ 1123.222346][ T5693] usb usb3-port1: unable to enumerate USB device [ 1123.273779][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4447'. [ 1123.515907][ T10] usb 4-1: config 8 has an invalid interface number: 226 but max is 1 [ 1123.524129][ T10] usb 4-1: config 8 has an invalid interface number: 254 but max is 1 [ 1123.532293][ T10] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1123.540983][ T10] usb 4-1: config 8 has no interface number 0 [ 1123.547082][ T10] usb 4-1: config 8 has no interface number 1 [ 1123.553238][ T10] usb 4-1: config 8 interface 254 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1123.564206][ T10] usb 4-1: config 8 interface 254 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1123.575108][ T10] usb 4-1: config 8 interface 254 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.585091][T14027] usb 5-1: Using ep0 maxpacket: 8 [ 1123.590402][ T10] usb 4-1: config 8 interface 254 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1123.601312][ T10] usb 4-1: config 8 interface 254 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1123.612211][ T10] usb 4-1: config 8 interface 254 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1123.633221][ T10] usb 4-1: config 8 interface 254 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1123.643965][ T10] usb 4-1: config 8 interface 226 has no altsetting 0 [ 1123.650734][ T10] usb 4-1: config 8 interface 254 has no altsetting 0 [ 1123.682129][ T1223] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1124.061755][ T5693] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1124.169632][T14027] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1124.236103][ T1223] usb 6-1: Using ep0 maxpacket: 16 [ 1124.285729][T29521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.294625][T29521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.499786][ T10] usb 4-1: New USB device found, idVendor=07ff, idProduct=eb27, bcdDevice=b9.b9 [ 1124.508891][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.516903][ T10] usb 4-1: Product: 銗ਘ蝴뢽黗Ꮕ䝩绎ᥬꋧ度ᾶ렝ꇬ힡区ￅᘘ언簰䜉뿸룸黢䍬Ⴊ﵉䃊絞奮嫟琢雧⃟嵜껦킳鑤ง苋忼Ꝓ⢥윷獇Ⅿ켿嘋✝麅ྩ쩇뭓 [ 1124.565861][ T10] usb 4-1: SerialNumber: syz [ 1124.727043][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 1125.064717][T14027] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1125.073922][T14027] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1125.082034][T14027] usb 5-1: Product: syz [ 1125.086219][T14027] usb 5-1: Manufacturer: syz [ 1125.090843][T14027] usb 5-1: SerialNumber: syz [ 1125.478638][ T1223] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1125.521309][T29548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1125.607241][ T5693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1125.616161][T14027] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 1125.624468][T14027] visor 5-1:1.0: probe with driver visor failed with error -71 [ 1125.640435][T14027] usb 5-1: USB disconnect, device number 47 [ 1125.691047][T29561] tipc: Failed to remove unknown binding: 66,0,0/0:3460198521/3460198523 [ 1125.699558][T29561] tipc: Failed to remove unknown binding: 66,0,0/0:3460198521/3460198522 [ 1125.732254][T29561] tipc: Failed to remove unknown binding: 66,0,0/0:3460198521/3460198523 [ 1125.740751][T29561] tipc: Failed to remove unknown binding: 66,0,0/0:3460198521/3460198522 [ 1125.783313][ T1223] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1125.790969][ T1223] usb 6-1: can't read configurations, error -71 [ 1125.969174][ T10] usb 4-1: USB disconnect, device number 20 [ 1126.055572][ T5693] usb 3-1: config 1 has an invalid descriptor of length 210, skipping remainder of the config [ 1126.387444][ T5693] usb 3-1: string descriptor 0 read error: -71 [ 1126.393736][ T5693] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1126.402787][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.504118][ T5693] usb 3-1: can't set config #1, error -71 [ 1126.516219][ T5693] usb 3-1: USB disconnect, device number 13 [ 1126.932902][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1127.048262][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4464'. [ 1127.057271][T29632] net_ratelimit: 12 callbacks suppressed [ 1127.057284][T29632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.492503][ T5693] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1127.588081][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1127.750976][ T1223] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1128.022188][T15817] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1128.236797][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1128.245072][ T10] usb 4-1: config 0 has no interface number 0 [ 1128.666432][T15817] usb 6-1: Using ep0 maxpacket: 16 [ 1128.773485][ T5693] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1128.782689][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.801724][ T5693] usb 1-1: config 0 descriptor?? [ 1128.943135][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1128.956468][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1128.971113][ T1223] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.981600][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.004138][ T1223] usb 5-1: config 0 descriptor?? [ 1129.044091][T29666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.055187][T29666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.215192][T15807] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1129.224691][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1129.228440][ T1223] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1129.233773][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.249068][ T10] usb 4-1: Product: syz [ 1129.253268][ T10] usb 4-1: Manufacturer: syz [ 1129.264817][T29632] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1129.285297][ T10] usb 4-1: config 0 descriptor?? [ 1129.297404][T29632] syz.0.4464: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1129.311751][T29632] CPU: 1 UID: 0 PID: 29632 Comm: syz.0.4464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.311776][T29632] Tainted: [L]=SOFTLOCKUP [ 1129.311782][T29632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1129.311793][T29632] Call Trace: [ 1129.311800][T29632] [ 1129.311807][T29632] dump_stack_lvl+0xe8/0x150 [ 1129.311829][T29632] warn_alloc+0x249/0x340 [ 1129.311858][T29632] ? __pfx_warn_alloc+0x10/0x10 [ 1129.311895][T29632] __vmalloc_node_range_noprof+0x132/0x1750 [ 1129.311919][T29632] ? __mutex_trylock_common+0x158/0x260 [ 1129.311943][T29632] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1129.311970][T29632] ? trace_contention_end+0x3d/0x140 [ 1129.311993][T29632] ? __mutex_lock+0x319/0x1550 [ 1129.312017][T29632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1129.312038][T29632] ? tomoyo_path_number_perm+0x219/0x630 [ 1129.312060][T29632] ? dvb_demux_do_ioctl+0x320/0x540 [ 1129.312086][T29632] ? __pfx___mutex_lock+0x10/0x10 [ 1129.312105][T29632] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1129.312130][T29632] vmalloc_noprof+0xb2/0xe0 [ 1129.312151][T29632] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1129.312178][T29632] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1129.312212][T29632] dvb_demux_do_ioctl+0x45d/0x540 [ 1129.312239][T29632] dvb_usercopy+0x199/0x2e0 [ 1129.312266][T29632] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1129.312290][T29632] ? __pfx_dvb_usercopy+0x10/0x10 [ 1129.312321][T29632] ? __fget_files+0x3a0/0x420 [ 1129.312340][T29632] ? __fget_files+0x2a/0x420 [ 1129.312362][T29632] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1129.312385][T29632] dvb_demux_ioctl+0x29/0x40 [ 1129.312409][T29632] __se_sys_ioctl+0xfc/0x170 [ 1129.312434][T29632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.312451][T29632] do_syscall_64+0x15f/0x560 [ 1129.312466][T29632] ? trace_irq_disable+0x3b/0x140 [ 1129.312491][T29632] ? clear_bhb_loop+0x40/0x90 [ 1129.312516][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.312532][T29632] RIP: 0033:0x7fe98c39ce59 [ 1129.312547][T29632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.312562][T29632] RSP: 002b:00007fe98d237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.312578][T29632] RAX: ffffffffffffffda RBX: 00007fe98c615fa0 RCX: 00007fe98c39ce59 [ 1129.312595][T29632] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 1129.312606][T29632] RBP: 00007fe98c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1129.312617][T29632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.312627][T29632] R13: 00007fe98c616038 R14: 00007fe98c615fa0 R15: 00007fe98c73fa48 [ 1129.312652][T29632] [ 1129.376849][ T10] usb 4-1: can't set config #0, error -71 [ 1129.521477][T29632] Mem-Info: [ 1129.618346][ T10] usb 4-1: USB disconnect, device number 21 [ 1129.626903][T29632] active_anon:6691 inactive_anon:16 isolated_anon:0 [ 1129.626903][T29632] active_file:21543 inactive_file:40418 isolated_file:0 [ 1129.626903][T29632] unevictable:768 dirty:262 writeback:0 [ 1129.626903][T29632] slab_reclaimable:11566 slab_unreclaimable:140033 [ 1129.626903][T29632] mapped:31514 shmem:1294 pagetables:1565 [ 1129.626903][T29632] sec_pagetables:3 bounce:0 [ 1129.626903][T29632] kernel_misc_reclaimable:0 [ 1129.626903][T29632] free:1251169 free_pcp:9580 free_cma:0 [ 1129.682932][T29632] Node 0 active_anon:26764kB inactive_anon:64kB active_file:86128kB inactive_file:161468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126012kB dirty:1032kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12600kB pagetables:5992kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1129.718303][T29632] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1129.794560][T29632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.824587][T29632] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1129.830353][T29632] Node 0 DMA32 free:1059824kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26864kB inactive_anon:64kB active_file:86128kB inactive_file:161468kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:38460kB local_pcp:18536kB free_cma:0kB [ 1129.863820][T29632] lowmem_reserve[]: 0 0 0 0 0 [ 1129.868587][T29632] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1129.912450][T29632] lowmem_reserve[]: 0 0 0 0 0 [ 1129.984971][T29632] Node 1 Normal free:3929492kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.032999][T29632] lowmem_reserve[]: 0 0 0 0 0 [ 1130.037818][T29632] Node 0 DMA: 0*4kB 0*8kB [ 1130.039231][T29711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1130.056395][T29632] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1130.066940][T29632] Node 0 DMA32: 5432*4kB (UME) 5286*8kB (UME) 3346*16kB (UME) 504*32kB (UME) 448*64kB (UME) 454*128kB (UME) 309*256kB (UME) 245*512kB (UME) 146*1024kB (UME) 13*2048kB (UM) 112*4096kB (UM) = 1059888kB [ 1130.086585][T29632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1130.098255][T29632] Node 1 Normal: 3*4kB (UM) 11*8kB (UM) 7*16kB (U) 6*32kB (U) 6*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 7*2048kB (UM) 954*4096kB (UM) = 3929492kB [ 1130.115314][T29632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.125068][T15817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1130.125604][T29632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.169195][T29632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.186906][T29632] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1130.196217][T29632] 63269 total pagecache pages [ 1130.200906][T29632] 16 pages in swap cache [ 1130.205147][T29632] Free swap = 124932kB [ 1130.209297][T29632] Total swap = 124996kB [ 1130.213449][T29632] 2097051 pages RAM [ 1130.217257][T29632] 0 pages HighMem/MovableOnly [ 1130.221955][T29632] 427136 pages reserved [ 1130.226146][T29632] 0 pages cma reserved [ 1130.454255][T15817] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1130.461915][T15817] usb 6-1: can't read configurations, error -71 [ 1130.561556][ T5693] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1130.670419][ T5693] [drm:udl_init] *ERROR* Selecting channel failed [ 1130.688687][ T5693] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1130.695426][ T5693] [drm] Initialized udl on minor 2 [ 1130.703752][T15807] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.713866][T15807] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1130.722897][T15807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.759900][T29747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4473'. [ 1130.780918][ T5693] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1130.789060][ T5693] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1130.800390][ T5693] usb 1-1: USB disconnect, device number 25 [ 1130.889372][T15811] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1130.900131][T15811] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1130.935302][T15807] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1131.107687][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1131.655218][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.664019][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.824410][T15811] usb 5-1: USB disconnect, device number 48 [ 1132.233699][T15807] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1132.241935][T15807] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1132.306434][T15817] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1132.451924][T15807] stv0680 3-1:4.0: last error: 135, command = 0x23 [ 1132.522396][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.654155][T15811] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1132.823239][T15807] usb 3-1: USB disconnect, device number 14 [ 1132.847546][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1132.855181][ T10] usb 4-1: can't read configurations, error -71 [ 1132.957310][T15817] usb 1-1: Using ep0 maxpacket: 8 [ 1132.984273][T29820] FAULT_INJECTION: forcing a failure. [ 1132.984273][T29820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.010002][T29820] CPU: 1 UID: 0 PID: 29820 Comm: syz.5.4480 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.010038][T29820] Tainted: [L]=SOFTLOCKUP [ 1133.010047][T29820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1133.010059][T29820] Call Trace: [ 1133.010066][T29820] [ 1133.010074][T29820] dump_stack_lvl+0xe8/0x150 [ 1133.010099][T29820] should_fail_ex+0x412/0x560 [ 1133.010129][T29820] _copy_from_iter+0x1d3/0x1670 [ 1133.010158][T29820] ? rcu_is_watching+0x15/0xb0 [ 1133.010186][T29820] ? __pfx__copy_from_iter+0x10/0x10 [ 1133.010218][T29820] ? netlink_sendmsg+0x650/0xb40 [ 1133.010235][T29820] ? skb_put+0x11b/0x210 [ 1133.010265][T29820] netlink_sendmsg+0x6c0/0xb40 [ 1133.010290][T29820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.010310][T29820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1133.010338][T29820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1133.010366][T29820] ____sys_sendmsg+0x972/0x9f0 [ 1133.010384][T29820] ? __might_fault+0xaf/0x130 [ 1133.010413][T29820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.010438][T29820] ? import_iovec+0x73/0xa0 [ 1133.010469][T29820] ___sys_sendmsg+0x2a5/0x360 [ 1133.010485][T29820] ? __lock_acquire+0x6b5/0x2cf0 [ 1133.010509][T29820] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.010553][T29820] ? __fget_files+0x2a/0x420 [ 1133.010575][T29820] ? __fget_files+0x3a0/0x420 [ 1133.010606][T29820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1133.010625][T29820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1133.010650][T29820] ? __pfx_ksys_write+0x10/0x10 [ 1133.010685][T29820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.010705][T29820] do_syscall_64+0x15f/0x560 [ 1133.010723][T29820] ? trace_irq_disable+0x3b/0x140 [ 1133.010751][T29820] ? clear_bhb_loop+0x40/0x90 [ 1133.010773][T29820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.010791][T29820] RIP: 0033:0x7f4a45f9ce59 [ 1133.010809][T29820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.010825][T29820] RSP: 002b:00007f4a46ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.010844][T29820] RAX: ffffffffffffffda RBX: 00007f4a46215fa0 RCX: 00007f4a45f9ce59 [ 1133.010858][T29820] RDX: 0000000004000090 RSI: 0000200000000040 RDI: 0000000000000003 [ 1133.010870][T29820] RBP: 00007f4a46ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.010881][T29820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.010892][T29820] R13: 00007f4a46216038 R14: 00007f4a46215fa0 R15: 00007f4a4633fa48 [ 1133.010919][T29820] [ 1133.750895][T15817] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1133.759163][T15817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1133.770280][T15817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1133.780276][T15817] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1133.791512][T15817] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1133.801714][T15817] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.814836][T15817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1133.823942][T15817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.969987][T15811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 1134.023202][T29828] fuse: Bad value for 'fd' [ 1134.030742][T29833] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1134.297463][T15817] usb 1-1: GET_CAPABILITIES returned 0 [ 1134.302983][T15817] usbtmc 1-1:16.0: can't read capabilities [ 1134.403852][ T5693] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1134.510615][T14252] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1134.619630][T29783] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 1134.834169][T15811] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1134.843275][T15811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.851294][T15811] usb 5-1: Product: syz [ 1134.855483][T15811] usb 5-1: Manufacturer: syz [ 1134.860115][T15811] usb 5-1: SerialNumber: syz [ 1134.870735][T15811] usb 5-1: config 0 descriptor?? [ 1134.911079][T29853] FAULT_INJECTION: forcing a failure. [ 1134.911079][T29853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.924146][T29853] CPU: 1 UID: 0 PID: 29853 Comm: syz.3.4485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.924170][T29853] Tainted: [L]=SOFTLOCKUP [ 1134.924176][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1134.924186][T29853] Call Trace: [ 1134.924192][T29853] [ 1134.924199][T29853] dump_stack_lvl+0xe8/0x150 [ 1134.924221][T29853] should_fail_ex+0x412/0x560 [ 1134.924246][T29853] _copy_from_iter+0x1d3/0x1670 [ 1134.924271][T29853] ? rcu_is_watching+0x15/0xb0 [ 1134.924293][T29853] ? __pfx__copy_from_iter+0x10/0x10 [ 1134.924320][T29853] ? netlink_sendmsg+0x650/0xb40 [ 1134.924334][T29853] ? skb_put+0x11b/0x210 [ 1134.924359][T29853] netlink_sendmsg+0x6c0/0xb40 [ 1134.924380][T29853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.924396][T29853] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1134.924419][T29853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.924444][T29853] ____sys_sendmsg+0x972/0x9f0 [ 1134.924458][T29853] ? __might_fault+0xaf/0x130 [ 1134.924482][T29853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.924503][T29853] ? import_iovec+0x73/0xa0 [ 1134.924528][T29853] ___sys_sendmsg+0x2a5/0x360 [ 1134.924542][T29853] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.924563][T29853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.924601][T29853] ? __fget_files+0x2a/0x420 [ 1134.924620][T29853] ? __fget_files+0x3a0/0x420 [ 1134.924645][T29853] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.924662][T29853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.924684][T29853] ? __pfx_ksys_write+0x10/0x10 [ 1134.924712][T29853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.924729][T29853] do_syscall_64+0x15f/0x560 [ 1134.924744][T29853] ? trace_irq_disable+0x3b/0x140 [ 1134.924768][T29853] ? clear_bhb_loop+0x40/0x90 [ 1134.924786][T29853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.924801][T29853] RIP: 0033:0x7fc05139ce59 [ 1134.924816][T29853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.924829][T29853] RSP: 002b:00007fc04f5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.924846][T29853] RAX: ffffffffffffffda RBX: 00007fc051615fa0 RCX: 00007fc05139ce59 [ 1134.924857][T29853] RDX: 0000000000040000 RSI: 0000200000000900 RDI: 0000000000000003 [ 1134.924868][T29853] RBP: 00007fc04f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.924878][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.924887][T29853] R13: 00007fc051616038 R14: 00007fc051615fa0 R15: 00007fc05173fa48 [ 1134.924910][T29853] [ 1134.943492][T29781] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1135.250191][T29856] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1135.316076][T15811] usb 5-1: can't set config #0, error -71 [ 1135.324350][T15811] usb 5-1: USB disconnect, device number 49 [ 1135.351680][T29856] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1135.366017][ T29] audit: type=1326 audit(1779837850.392:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29863 comm="syz.4.4487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa78fb9ce59 code=0x0 [ 1135.449196][T29869] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1135.647239][ T29] audit: type=1326 audit(1779837850.602:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29855 comm="syz.3.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc05139ce59 code=0x0 [ 1135.864082][T14252] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.876702][T14252] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.079024][ T5693] usb 3-1: not running at top speed; connect to a high speed hub [ 1136.235589][T29877] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 1136.295728][T14252] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1136.304995][T14252] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1136.313017][T14252] usb 6-1: Manufacturer: syz [ 1136.331044][T14252] usb 6-1: config 0 descriptor?? [ 1136.448703][T15811] usb 1-1: USB disconnect, device number 26 [ 1136.509995][ T5693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 241, changing to 4 [ 1136.521038][ T5693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1136.762897][ T5693] usb 3-1: string descriptor 0 read error: -22 [ 1136.769257][ T5693] usb 3-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 1136.778610][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.972070][ T5693] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1137.067180][T29898] netlink: 'syz.0.4490': attribute type 5 has an invalid length. [ 1137.173284][T29898] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4490'. [ 1137.183710][ T5693] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1137.299341][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.306217][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.313034][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.319840][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.326678][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.333488][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.340294][T14252] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 1137.350498][ T5693] usb 3-1: unit 3 not found! [ 1137.593467][T14252] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1137.634558][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4490'. [ 1137.658881][ T5693] usb 3-1: USB disconnect, device number 15 [ 1137.922165][T29945] fuse: Bad value for 'fd' [ 1138.379392][ T5693] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1138.979781][T29839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.989448][T29839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.039623][T14252] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 1139.047139][T14252] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 1139.065860][T14252] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -32 [ 1139.173031][T14252] usb 6-1: USB disconnect, device number 22 [ 1139.238502][T29973] fuse: Bad value for 'fd' [ 1140.430375][T30003] input: syz1 as /devices/virtual/input/input127 [ 1140.482723][ T5693] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1140.492570][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.500555][ T5693] usb 3-1: Product: syz [ 1140.504748][ T5693] usb 3-1: Manufacturer: syz [ 1140.509360][ T5693] usb 3-1: SerialNumber: syz [ 1140.532878][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1140.562222][ T5693] usb 3-1: config 0 descriptor?? [ 1140.755499][ T5693] usb 3-1: can't set config #0, error -71 [ 1140.781608][ T5693] usb 3-1: USB disconnect, device number 16 [ 1141.190066][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1141.407332][T15807] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1141.575910][ T5693] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1141.641839][T30058] fuse: Invalid rootmode [ 1141.838532][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1142.219217][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 1142.700549][ T43] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1142.709683][ T43] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1142.717801][ T43] usb 6-1: Product: syz [ 1142.722002][ T43] usb 6-1: Manufacturer: syz [ 1142.730439][ T43] usb 6-1: SerialNumber: syz [ 1142.878874][ T5693] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1142.887187][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1143.243448][ T43] usb 6-1: Invalid connection information received from device [ 1143.563553][T15807] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1143.572755][T15807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.580781][T15807] usb 4-1: Product: syz [ 1143.584979][T15807] usb 4-1: Manufacturer: syz [ 1143.591572][T15807] usb 4-1: SerialNumber: syz [ 1143.597968][T15808] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1143.621052][T15807] usb 4-1: config 0 descriptor?? [ 1143.741877][ T5693] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1143.750953][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.758941][ T5693] usb 3-1: Product: syz [ 1143.763096][ T5693] usb 3-1: Manufacturer: syz [ 1143.767687][ T5693] usb 3-1: SerialNumber: syz [ 1143.786707][ T5693] usb 3-1: config 0 descriptor?? [ 1143.956927][ T5693] usb 3-1: can't set config #0, error -71 [ 1143.986874][ T5693] usb 3-1: USB disconnect, device number 17 [ 1144.080196][T30133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1144.115519][T15807] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1144.224282][T15808] usb 5-1: Using ep0 maxpacket: 16 [ 1144.762208][T15807] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1144.779165][T15807] usb 4-1: USB disconnect, device number 24 [ 1144.868296][T15808] usb 5-1: config 0 has no interfaces? [ 1144.953879][ T29] audit: type=1326 audit(1779837859.922:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1144.989358][ T29] audit: type=1326 audit(1779837859.922:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.013770][ T29] audit: type=1326 audit(1779837860.042:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.039801][ T29] audit: type=1326 audit(1779837860.042:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.071869][ T29] audit: type=1326 audit(1779837860.042:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.121218][ T29] audit: type=1326 audit(1779837860.042:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.145690][ T29] audit: type=1326 audit(1779837860.042:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.197465][ T29] audit: type=1326 audit(1779837860.042:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.236315][ T29] audit: type=1326 audit(1779837860.042:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.260643][ T29] audit: type=1326 audit(1779837860.042:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.2.4518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b839ce59 code=0x7ffc0000 [ 1145.299967][T15811] usb 6-1: USB disconnect, device number 23 [ 1145.354635][T15808] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1145.363711][T15808] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1145.371694][T15808] usb 5-1: Manufacturer: syz [ 1145.413906][T30174] fuse: Invalid rootmode [ 1145.434649][T15808] usb 5-1: config 0 descriptor?? [ 1145.526642][T30159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1145.606164][T30159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1145.799689][T15807] usb 5-1: USB disconnect, device number 50 [ 1146.066782][ T5693] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1146.622002][T30209] FAULT_INJECTION: forcing a failure. [ 1146.622002][T30209] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.634772][T30209] CPU: 1 UID: 0 PID: 30209 Comm: syz.4.4524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.634805][T30209] Tainted: [L]=SOFTLOCKUP [ 1146.634813][T30209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.634825][T30209] Call Trace: [ 1146.634835][T30209] [ 1146.634843][T30209] dump_stack_lvl+0xe8/0x150 [ 1146.634871][T30209] should_fail_ex+0x412/0x560 [ 1146.634903][T30209] should_failslab+0xa8/0x100 [ 1146.634923][T30209] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1146.634952][T30209] ? __alloc_skb+0x186/0x7d0 [ 1146.634978][T30209] ? __alloc_skb+0x1d0/0x7d0 [ 1146.635003][T30209] ? __local_bh_enable_ip+0xd0/0x130 [ 1146.635028][T30209] __alloc_skb+0x1d0/0x7d0 [ 1146.635055][T30209] ? netlink_ack_tlv_len+0x6c/0x210 [ 1146.635095][T30209] netlink_ack+0x146/0xa50 [ 1146.635122][T30209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1146.635151][T30209] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.635183][T30209] netlink_rcv_skb+0x2b6/0x4b0 [ 1146.635214][T30209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1146.635243][T30209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.635283][T30209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1146.635312][T30209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1146.635347][T30209] netlink_unicast+0x75c/0x8e0 [ 1146.635383][T30209] netlink_sendmsg+0x813/0xb40 [ 1146.635410][T30209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.635431][T30209] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1146.635459][T30209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1146.635490][T30209] ____sys_sendmsg+0x972/0x9f0 [ 1146.635508][T30209] ? __might_fault+0xaf/0x130 [ 1146.635539][T30209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.635565][T30209] ? import_iovec+0x73/0xa0 [ 1146.635598][T30209] ___sys_sendmsg+0x2a5/0x360 [ 1146.635616][T30209] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.635640][T30209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.635690][T30209] ? __fget_files+0x2a/0x420 [ 1146.635714][T30209] ? __fget_files+0x3a0/0x420 [ 1146.635746][T30209] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1146.635768][T30209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.635795][T30209] ? __pfx_ksys_write+0x10/0x10 [ 1146.635831][T30209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.635853][T30209] do_syscall_64+0x15f/0x560 [ 1146.635872][T30209] ? trace_irq_disable+0x3b/0x140 [ 1146.635901][T30209] ? clear_bhb_loop+0x40/0x90 [ 1146.635925][T30209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.635945][T30209] RIP: 0033:0x7fa78fb9ce59 [ 1146.635965][T30209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.635982][T30209] RSP: 002b:00007fa790b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.636004][T30209] RAX: ffffffffffffffda RBX: 00007fa78fe15fa0 RCX: 00007fa78fb9ce59 [ 1146.636019][T30209] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1146.636031][T30209] RBP: 00007fa790b37090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.636043][T30209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.636055][T30209] R13: 00007fa78fe16038 R14: 00007fa78fe15fa0 R15: 00007fa78ff3fa48 [ 1146.636084][T30209] [ 1147.019768][T30212] netem: change failed [ 1147.027960][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1147.083662][T15807] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1147.126237][T30216] netlink: 'syz.4.4527': attribute type 3 has an invalid length. [ 1147.134894][T30216] netlink: 'syz.4.4527': attribute type 1 has an invalid length. [ 1147.166512][T30216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1147.178187][T30216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1147.196761][T30216] bond3: entered promiscuous mode [ 1147.201866][T30216] bond3: entered allmulticast mode [ 1147.223403][T30216] bond3: (slave dummy0): making interface the new active one [ 1147.230822][T30216] dummy0: entered promiscuous mode [ 1147.236186][T30216] dummy0: entered allmulticast mode [ 1147.242411][T30216] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1147.252693][T30216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1147.263975][T30216] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1147.271985][T30216] dummy0: left promiscuous mode [ 1147.277239][T30216] dummy0: left allmulticast mode [ 1147.286308][T30216] bond3 (unregistering): Released all slaves [ 1147.703840][T30300] fuse: Invalid rootmode [ 1147.739644][T15807] usb 6-1: Using ep0 maxpacket: 8 [ 1147.765764][ T5693] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1148.102850][T15811] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1148.206763][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.216945][ T5693] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1148.226623][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1148.236377][ T5693] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1148.289846][T15807] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.300983][T15807] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1148.491432][T30322] FAULT_INJECTION: forcing a failure. [ 1148.491432][T30322] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.504085][T30322] CPU: 1 UID: 0 PID: 30322 Comm: syz.4.4538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.504109][T30322] Tainted: [L]=SOFTLOCKUP [ 1148.504115][T30322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.504125][T30322] Call Trace: [ 1148.504132][T30322] [ 1148.504139][T30322] dump_stack_lvl+0xe8/0x150 [ 1148.504161][T30322] should_fail_ex+0x412/0x560 [ 1148.504186][T30322] should_failslab+0xa8/0x100 [ 1148.504203][T30322] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1148.504225][T30322] ? __alloc_skb+0x186/0x7d0 [ 1148.504247][T30322] ? __alloc_skb+0x1d0/0x7d0 [ 1148.504267][T30322] ? __local_bh_enable_ip+0xd0/0x130 [ 1148.504287][T30322] __alloc_skb+0x1d0/0x7d0 [ 1148.504312][T30322] pfkey_sendmsg+0x212/0x1120 [ 1148.504340][T30322] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1148.504360][T30322] ? aa_sk_perm+0x6d5/0x900 [ 1148.504386][T30322] ? __pfx_aa_sk_perm+0x10/0x10 [ 1148.504404][T30322] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1148.504432][T30322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1148.504455][T30322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1148.504479][T30322] ____sys_sendmsg+0x972/0x9f0 [ 1148.504507][T30322] ? __might_fault+0xaf/0x130 [ 1148.504530][T30322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.504551][T30322] ? import_iovec+0x73/0xa0 [ 1148.504576][T30322] ___sys_sendmsg+0x2a5/0x360 [ 1148.504590][T30322] ? __lock_acquire+0x6b5/0x2cf0 [ 1148.504609][T30322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.504622][T30322] ? __lock_acquire+0x6b5/0x2cf0 [ 1148.504641][T30322] ? kstrtouint+0x6e/0xe0 [ 1148.504686][T30322] __sys_sendmmsg+0x27c/0x4e0 [ 1148.504704][T30322] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1148.504718][T30322] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1148.504752][T30322] ? ksys_write+0x242/0x270 [ 1148.504775][T30322] ? __pfx_ksys_write+0x10/0x10 [ 1148.504801][T30322] __x64_sys_sendmmsg+0xa0/0xc0 [ 1148.504816][T30322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.504831][T30322] do_syscall_64+0x15f/0x560 [ 1148.504846][T30322] ? trace_irq_disable+0x3b/0x140 [ 1148.504869][T30322] ? clear_bhb_loop+0x40/0x90 [ 1148.504887][T30322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.504902][T30322] RIP: 0033:0x7fa78fb9ce59 [ 1148.504916][T30322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.504929][T30322] RSP: 002b:00007fa790b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1148.504945][T30322] RAX: ffffffffffffffda RBX: 00007fa78fe15fa0 RCX: 00007fa78fb9ce59 [ 1148.504957][T30322] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 1148.504966][T30322] RBP: 00007fa790b37090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.504976][T30322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.504985][T30322] R13: 00007fa78fe16038 R14: 00007fa78fe15fa0 R15: 00007fa78ff3fa48 [ 1148.505008][T30322] [ 1149.038387][T15811] usb 3-1: Using ep0 maxpacket: 16 [ 1149.472578][ T5693] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1149.481656][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.497378][T15807] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1149.504565][ T5693] usb 1-1: config 0 descriptor?? [ 1149.506466][T15807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.519416][T15807] usb 6-1: Product: syz [ 1149.523613][T15807] usb 6-1: Manufacturer: syz [ 1149.528341][T15807] usb 6-1: SerialNumber: syz [ 1149.583420][ T5693] usb 1-1: can't set config #0, error -71 [ 1149.591220][ T5693] usb 1-1: USB disconnect, device number 27 [ 1149.693128][T15811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1149.719235][T15807] usb 6-1: can't set config #1, error -71 [ 1149.733016][T15807] usb 6-1: USB disconnect, device number 24 [ 1149.972669][T30364] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1150.267205][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1150.343368][ T5693] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1150.494000][T15807] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1150.557503][T15811] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1150.567073][T15811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.576893][T15811] usb 3-1: Product: syz [ 1150.581072][T15811] usb 3-1: Manufacturer: syz [ 1150.585661][T15811] usb 3-1: SerialNumber: syz [ 1150.592526][T15811] usb 3-1: config 0 descriptor?? [ 1150.784940][T15811] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1150.794185][T15811] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1150.929372][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1151.146870][T15807] usb 6-1: Using ep0 maxpacket: 32 [ 1151.208195][T15811] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1151.476236][T30424] fuse: Bad value for 'rootmode' [ 1151.575411][ T43] usb 4-1: config 186 has an invalid interface number: 209 but max is 2 [ 1151.583813][ T43] usb 4-1: config 186 has an invalid interface number: 78 but max is 2 [ 1151.592064][ T43] usb 4-1: config 186 has an invalid interface number: 161 but max is 2 [ 1151.600392][ T43] usb 4-1: config 186 has no interface number 0 [ 1151.606628][ T43] usb 4-1: config 186 has no interface number 1 [ 1151.612865][ T43] usb 4-1: config 186 has no interface number 2 [ 1151.619155][ T43] usb 4-1: config 186 interface 209 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 1151.630394][ T43] usb 4-1: config 186 interface 209 altsetting 132 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1151.641811][ T43] usb 4-1: config 186 interface 209 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 1151.653037][ T43] usb 4-1: config 186 interface 209 altsetting 132 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1151.665046][ T43] usb 4-1: config 186 interface 209 altsetting 132 endpoint 0x81 has invalid maxpacket 23158, setting to 64 [ 1151.689945][ T43] usb 4-1: config 186 interface 209 altsetting 132 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1151.703740][ T43] usb 4-1: config 186 interface 78 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1151.714631][ T43] usb 4-1: config 186 interface 209 has no altsetting 0 [ 1151.721619][ T43] usb 4-1: config 186 interface 78 has no altsetting 0 [ 1151.728505][ T43] usb 4-1: config 186 interface 161 has no altsetting 0 [ 1151.774355][T15811] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1151.782383][T15811] em28xx 3-1:0.0: board has no eeprom [ 1151.879463][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.889617][ T5693] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1151.898950][ T5693] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1151.908103][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.921218][ T5693] usb 1-1: config 0 descriptor?? [ 1151.926577][T15807] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1151.934699][T15807] usb 6-1: config 0 has no interface number 0 [ 1151.991535][ T5693] usb 1-1: can't set config #0, error -71 [ 1151.998972][ T5693] usb 1-1: USB disconnect, device number 28 [ 1152.098351][T15811] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1152.106244][T15811] em28xx 3-1:0.0: dvb set to bulk mode. [ 1152.118579][T14027] em28xx 3-1:0.0: Binding DVB extension [ 1152.124514][T15811] usb 3-1: USB disconnect, device number 18 [ 1152.131898][T15811] em28xx 3-1:0.0: Disconnecting em28xx [ 1152.233721][T14027] em28xx 3-1:0.0: Registering input extension [ 1152.240062][T15811] em28xx 3-1:0.0: Closing input extension [ 1152.257584][T15811] em28xx 3-1:0.0: Freeing device [ 1152.579313][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=08d8, bcdDevice= 9.d0 [ 1152.588483][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.597234][ T43] usb 4-1: Product: syz [ 1152.601884][ T43] usb 4-1: Manufacturer: 繊륶 [ 1152.606783][ T43] usb 4-1: SerialNumber: syz [ 1152.799724][T15807] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1152.808820][T15807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.816806][T15807] usb 6-1: Product: syz [ 1152.820958][T15807] usb 6-1: Manufacturer: syz [ 1152.825545][T15807] usb 6-1: SerialNumber: syz [ 1152.832786][T15807] usb 6-1: config 0 descriptor?? [ 1152.967834][T15811] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1153.020541][T15807] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1153.088198][T30472] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1153.359417][T15807] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1153.366333][T15807] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1153.382862][T15807] usb 6-1: USB disconnect, device number 25 [ 1153.784127][ T43] rndis_host 4-1:186.161: skipping garbage [ 1153.790018][ T43] rndis_host 4-1:186.161: skipping garbage [ 1153.795891][ T43] rndis_host 4-1:186.161: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1153.816611][ T43] usb 4-1: USB disconnect, device number 25 [ 1153.964179][T30524] fuse: Bad value for 'rootmode' [ 1153.998864][T30525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4564'. [ 1154.160946][T15811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1154.429537][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1154.438356][T15807] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1154.484207][T15811] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1154.492590][T15811] usb 3-1: can't read configurations, error -71 [ 1154.873325][ T43] usb 4-1: device descriptor read/64, error -71 [ 1155.307163][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1155.736346][ T43] usb 4-1: device descriptor read/64, error -71 [ 1155.742760][T15807] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1155.750871][T15807] usb 5-1: config 0 has no interface number 0 [ 1155.757012][T15807] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1155.767028][T15807] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.860812][ T43] usb usb4-port1: attempt power cycle [ 1156.291995][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1156.439814][ T5693] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1156.621965][T15807] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1156.631159][T15807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.639170][T15807] usb 5-1: Product: syz [ 1156.643352][T15807] usb 5-1: Manufacturer: syz [ 1156.647969][T15807] usb 5-1: SerialNumber: syz [ 1156.654419][ T43] usb 4-1: device descriptor read/8, error -71 [ 1156.684125][T15807] usb 5-1: config 0 descriptor?? [ 1156.731888][T30529] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1156.841618][T15807] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1156.858985][T15807] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1156.936992][T30605] fuse: Bad value for 'rootmode' [ 1157.082722][T15807] usb 5-1: USB disconnect, device number 51 [ 1157.167175][T15807] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1157.179197][T15807] cyberjack 5-1:0.69: device disconnected [ 1157.216478][ T5693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.227971][ T5693] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1157.238626][ T5693] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.249810][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.262782][ T5693] usb 6-1: config 0 descriptor?? [ 1157.318151][ T5693] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1157.325832][ T5693] dvb-usb: bulk message failed: -22 (3/0) [ 1157.358998][ T5693] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1157.476364][ T5693] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1157.483603][ T5693] usb 6-1: media controller created [ 1157.490554][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.513510][ T5693] dvb-usb: bulk message failed: -22 (6/0) [ 1157.522827][ T5693] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1157.697580][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input130 [ 1157.720583][ T5693] dvb-usb: schedule remote query interval to 150 msecs. [ 1157.727589][ T5693] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1157.743319][ T5693] usb 6-1: USB disconnect, device number 26 [ 1157.784484][ T5693] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1158.499363][ T43] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1158.579122][T30684] syzkaller0: entered promiscuous mode [ 1158.584625][T30684] syzkaller0: entered allmulticast mode [ 1158.609425][T30684] tipc: Started in network mode [ 1158.614314][T30684] tipc: Node identity 861baf019e45, cluster identity 4711 [ 1158.621630][T30684] tipc: Enabled bearer , priority 0 [ 1158.630874][T30683] tipc: Resetting bearer [ 1158.651828][T30683] tipc: Disabling bearer [ 1158.998569][ T5693] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1159.142955][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1159.645866][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 1159.687029][ T1223] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1159.790329][ T43] usb 5-1: config 186 has an invalid interface number: 209 but max is 2 [ 1159.790365][ T43] usb 5-1: config 186 has an invalid interface number: 78 but max is 2 [ 1159.790389][ T43] usb 5-1: config 186 has an invalid interface number: 161 but max is 2 [ 1159.790413][ T43] usb 5-1: config 186 has no interface number 0 [ 1159.790433][ T43] usb 5-1: config 186 has no interface number 1 [ 1159.790453][ T43] usb 5-1: config 186 has no interface number 2 [ 1159.790516][ T43] usb 5-1: config 186 interface 209 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 1159.790542][ T43] usb 5-1: config 186 interface 209 altsetting 132 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1159.790572][ T43] usb 5-1: config 186 interface 209 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 1159.790597][ T43] usb 5-1: config 186 interface 209 altsetting 132 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1159.790629][ T43] usb 5-1: config 186 interface 209 altsetting 132 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1159.790659][ T43] usb 5-1: config 186 interface 209 altsetting 132 endpoint 0x81 has invalid maxpacket 23158, setting to 64 [ 1159.790689][ T43] usb 5-1: config 186 interface 209 altsetting 132 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1159.790731][ T43] usb 5-1: config 186 interface 78 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1159.790770][ T43] usb 5-1: config 186 interface 209 has no altsetting 0 [ 1159.790791][ T43] usb 5-1: config 186 interface 78 has no altsetting 0 [ 1159.790813][ T43] usb 5-1: config 186 interface 161 has no altsetting 0 [ 1160.011208][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08d8, bcdDevice= 9.d0 [ 1160.011272][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.011302][ T43] usb 5-1: Product: syz [ 1160.011314][ T43] usb 5-1: Manufacturer: 繊륶 [ 1160.011340][ T43] usb 5-1: SerialNumber: syz [ 1160.066556][T15807] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1160.108610][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 1160.111382][ T1223] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1160.111422][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.111452][ T1223] usb 3-1: Product: syz [ 1160.111478][ T1223] usb 3-1: Manufacturer: syz [ 1160.111491][ T1223] usb 3-1: SerialNumber: syz [ 1160.128849][ T1223] usb 3-1: config 0 descriptor?? [ 1160.130047][T30697] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1160.132751][ T1223] hub 3-1:0.0: bad descriptor, ignoring hub [ 1160.132818][ T1223] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1160.140855][ T1223] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input131 [ 1160.301543][ T5693] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1160.301606][ T5693] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1160.301638][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1160.301667][ T5693] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1160.301696][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1160.301724][ T5693] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.301772][ T5693] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1160.301800][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.847690][T30730] fuse: Unknown parameter 'use00000000000000000000' [ 1160.933539][ T5693] usb 6-1: GET_CAPABILITIES returned 0 [ 1160.939223][ T5693] usbtmc 6-1:16.0: can't read capabilities [ 1161.063008][ T1223] usb 3-1: USB disconnect, device number 21 [ 1161.174288][ T43] rndis_host 5-1:186.161: skipping garbage [ 1161.180261][ T43] rndis_host 5-1:186.161: skipping garbage [ 1161.186131][ T43] rndis_host 5-1:186.161: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1161.213253][ T43] usb 5-1: USB disconnect, device number 52 [ 1161.275860][T15807] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1161.285843][T15807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1161.295697][T30677] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 1161.304538][ T5693] usb 6-1: USB disconnect, device number 27 [ 1161.560421][T30767] netlink: 572 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1161.569586][T30767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1162.057061][ T1223] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1162.196926][T15807] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1162.237169][T15807] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1162.253655][T15807] usb 1-1: Product: syz [ 1162.257907][T15807] usb 1-1: Manufacturer: syz [ 1162.262615][T15807] usb 1-1: SerialNumber: syz [ 1162.307896][T15807] usb 1-1: config 0 descriptor?? [ 1162.392224][T30708] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1162.524065][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1162.533671][T15807] usb 1-1: selecting invalid altsetting 0 [ 1162.540780][T30783] syzkaller0: entered promiscuous mode [ 1162.810140][T15811] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1162.841085][T15807] usb 1-1: USB disconnect, device number 29 [ 1162.898184][T30821] fuse: Bad value for 'fd' [ 1163.181293][T30836] xt_hashlimit: size too large, truncated to 1048576 [ 1163.600797][T15817] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1163.612620][ T1223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.622771][ T1223] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1163.656811][ T1223] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1163.665925][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.737583][T15811] usb 6-1: Using ep0 maxpacket: 16 [ 1163.749707][T30844] fuse: Unknown parameter 'use00000000000000000000' [ 1163.758842][ T1223] usb 4-1: config 0 descriptor?? [ 1163.927655][ T1223] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1163.934319][ T1223] dvb-usb: bulk message failed: -22 (3/0) [ 1163.950351][T15811] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 1163.971490][ T1223] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1164.032330][ T1223] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1164.039431][ T1223] usb 4-1: media controller created [ 1164.045824][ T1223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.062226][T15817] usb 3-1: Using ep0 maxpacket: 8 [ 1164.102083][ T1223] dvb-usb: bulk message failed: -22 (6/0) [ 1164.142592][ T1223] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1164.359001][ T1223] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132 [ 1164.373812][ T1223] dvb-usb: schedule remote query interval to 150 msecs. [ 1164.393166][T15811] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.403332][T15811] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1164.412260][T15811] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1164.429801][ T1223] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1164.588720][ T1223] dvb-usb: bulk message failed: -22 (1/0) [ 1164.594552][ T1223] dvb-usb: error while querying for an remote control event. [ 1164.603184][ T1223] usb 4-1: USB disconnect, device number 30 [ 1164.655160][ T1223] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1164.730967][T15817] usb 3-1: config 186 has an invalid interface number: 209 but max is 2 [ 1164.739468][T15817] usb 3-1: config 186 has an invalid interface number: 78 but max is 2 [ 1164.747756][T15817] usb 3-1: config 186 has an invalid interface number: 161 but max is 2 [ 1164.756312][T15817] usb 3-1: config 186 has no interface number 0 [ 1164.762584][T15817] usb 3-1: config 186 has no interface number 1 [ 1164.768856][T15817] usb 3-1: config 186 has no interface number 2 [ 1164.775190][T15817] usb 3-1: config 186 interface 209 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 1164.786435][T15817] usb 3-1: config 186 interface 209 altsetting 132 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1164.797934][T15817] usb 3-1: config 186 interface 209 altsetting 132 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1164.809249][T15817] usb 3-1: config 186 interface 209 altsetting 132 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1164.821263][T15817] usb 3-1: config 186 interface 209 altsetting 132 endpoint 0x81 has invalid maxpacket 23158, setting to 64 [ 1164.898713][T15817] usb 3-1: config 186 interface 209 altsetting 132 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1164.923585][T15817] usb 3-1: config 186 interface 78 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1164.934478][T15817] usb 3-1: config 186 interface 209 has no altsetting 0 [ 1164.941447][T15817] usb 3-1: config 186 interface 78 has no altsetting 0 [ 1164.962488][T15811] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.972633][T15811] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1164.981556][T15811] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1164.992814][T15817] usb 3-1: config 186 interface 161 has no altsetting 0 [ 1165.181897][T15807] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1165.373179][T30904] fuse: Bad value for 'fd' [ 1165.515648][T15811] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 1165.523307][T15811] usb 6-1: can't read configurations, error -71 [ 1165.848896][T15817] usb 3-1: New USB device found, idVendor=046d, idProduct=08d8, bcdDevice= 9.d0 [ 1165.858037][T15817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.866155][T15817] usb 3-1: Product: syz [ 1165.870357][T15817] usb 3-1: Manufacturer: 繊륶 [ 1165.875659][T15817] usb 3-1: SerialNumber: syz [ 1166.625941][T14252] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1166.720951][T15807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1167.066882][T15817] rndis_host 3-1:186.161: skipping garbage [ 1167.072764][T15817] rndis_host 3-1:186.161: skipping garbage [ 1167.078586][T15817] rndis_host 3-1:186.161: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1167.115145][T15817] usb 3-1: USB disconnect, device number 22 [ 1167.159510][T15807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.169710][T15807] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1167.180734][T15807] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.191637][T15807] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1167.495988][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1167.961716][T14252] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1167.973135][T14252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1168.084224][T30970] fuse: Bad value for 'fd' [ 1168.164869][T15807] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1168.174055][T15807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.182082][T15807] usb 5-1: Product: syz [ 1168.186276][T15807] usb 5-1: Manufacturer: syz [ 1168.192772][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1168.199732][T15817] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1168.283877][T15807] usb 5-1: can't set config #1, error -71 [ 1168.292580][T15807] usb 5-1: USB disconnect, device number 53 [ 1168.817479][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.827724][ T43] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1168.859544][T14252] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1168.868665][T14252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.876688][T14252] usb 1-1: Product: syz [ 1168.880881][T14252] usb 1-1: Manufacturer: syz [ 1168.886649][T14252] usb 1-1: SerialNumber: syz [ 1168.919877][T14252] usb 1-1: config 0 descriptor?? [ 1168.973964][T30980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1169.003764][T30978] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1169.259527][ T1223] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1169.688066][ T43] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1169.697183][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.705212][ T43] usb 6-1: Product: syz [ 1169.709526][ T43] usb 6-1: Manufacturer: syz [ 1169.714135][ T43] usb 6-1: SerialNumber: syz [ 1169.730337][T15817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.740482][T15817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1169.749426][T15817] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1169.758538][T15817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.771509][T15817] usb 3-1: config 0 descriptor?? [ 1169.780887][T14252] usb 1-1: USB disconnect, device number 30 [ 1169.955300][T15817] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1169.962085][T15817] dvb-usb: bulk message failed: -22 (3/0) [ 1169.981123][T15817] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1170.059192][T15817] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1170.066346][T15817] usb 3-1: media controller created [ 1170.073251][T15817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.090177][T15817] dvb-usb: bulk message failed: -22 (6/0) [ 1170.098627][T15817] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1170.141058][ T1223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.187957][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1170.213795][ T1223] usb 4-1: config 1 has no interface number 0 [ 1170.219969][ T1223] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1170.230970][ T1223] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1170.241777][ T1223] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1170.250865][ T1223] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1170.261683][ T1223] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.291826][T15817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input133 [ 1170.307032][T15817] dvb-usb: schedule remote query interval to 150 msecs. [ 1170.314033][T15817] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1170.410200][ T43] usb 6-1: USB disconnect, device number 30 [ 1170.502910][T15811] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1170.615604][ T5693] dvb-usb: bulk message failed: -22 (1/0) [ 1170.621513][ T5693] dvb-usb: error while querying for an remote control event. [ 1170.737753][T14252] usb 3-1: USB disconnect, device number 23 [ 1170.789412][T14252] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1171.086227][ T43] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1171.149161][T15811] usb 5-1: Using ep0 maxpacket: 8 [ 1171.192395][ T1223] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1171.201502][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.209528][ T1223] usb 4-1: Product: syz [ 1171.213711][ T1223] usb 4-1: Manufacturer: syz [ 1171.218411][ T1223] usb 4-1: SerialNumber: syz [ 1171.262416][T15811] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.270728][T15811] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1171.290030][T15811] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.303185][T15811] usb 5-1: config 168 interface 0 altsetting 188 has a duplicate endpoint with address 0x3, skipping [ 1171.314079][T15811] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1171.327994][T30983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1171.336351][T15811] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1171.732249][T30983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.741224][T30983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.743116][ T5693] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1171.758448][T15811] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.765892][T15811] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1171.777079][T15811] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.791781][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1171.817327][T15811] usb 5-1: config 168 interface 0 altsetting 188 has a duplicate endpoint with address 0x3, skipping [ 1171.828261][T15811] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1171.877172][T15811] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1171.967390][T31127] fuse: Unknown parameter '00000000000000000008' [ 1172.289375][T15811] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1172.296836][T15811] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1172.307971][T15811] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1172.319342][T15811] usb 5-1: config 168 interface 0 altsetting 188 has a duplicate endpoint with address 0x3, skipping [ 1172.330204][T15811] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1172.343607][T15811] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1172.355301][ T1223] cdc_ncm 4-1:1.1: bind() failure [ 1172.365349][ T1223] usb 4-1: USB disconnect, device number 31 [ 1172.463313][ T43] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1172.471546][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1172.482499][ T43] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1172.492395][ T43] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1172.505534][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1172.625624][T14252] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1173.162960][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 1173.275144][T15811] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1173.284225][T15811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.292219][T15811] usb 5-1: Product: syz [ 1173.296375][T15811] usb 5-1: Manufacturer: syz [ 1173.302435][T14252] usb 3-1: Using ep0 maxpacket: 8 [ 1173.324488][ T43] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1173.333587][ T43] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1173.342011][ T43] usb 6-1: Product: syz [ 1173.346172][ T43] usb 6-1: Manufacturer: syz [ 1173.350770][ T43] usb 6-1: SerialNumber: syz [ 1173.358181][ T43] usb 6-1: config 0 descriptor?? [ 1173.381687][T15811] usb 5-1: can't set config #168, error -71 [ 1173.389518][T15811] usb 5-1: USB disconnect, device number 54 [ 1173.442807][ T43] usb 6-1: can't set config #0, error -71 [ 1173.450812][ T43] usb 6-1: USB disconnect, device number 31 [ 1173.933344][T14252] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1173.941386][T14252] usb 3-1: config 0 has no interface number 0 [ 1174.038730][ T5693] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1174.047831][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.055835][ T5693] usb 1-1: Product: syz [ 1174.060081][ T5693] usb 1-1: Manufacturer: syz [ 1174.064671][ T5693] usb 1-1: SerialNumber: syz [ 1174.088729][ T5693] usb 1-1: config 0 descriptor?? [ 1174.149821][T31107] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1174.157409][T15811] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1174.197479][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1174.261088][ T5693] hub 1-1:0.0: bad descriptor, ignoring hub [ 1174.267061][ T5693] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1174.277044][ T5693] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input134 [ 1174.475318][ T5693] usb 1-1: USB disconnect, device number 31 [ 1174.801642][T14252] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 1174.810757][T14252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.818834][T14252] usb 3-1: Product: syz [ 1174.822991][T14252] usb 3-1: Manufacturer: syz [ 1174.827579][T14252] usb 3-1: SerialNumber: syz [ 1174.852497][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1174.855384][T14252] usb 3-1: config 0 descriptor?? [ 1175.023327][T14252] usb 3-1: selecting invalid altsetting 2 [ 1175.029121][T14252] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1175.046404][T31205] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1175.194676][T14252] usb 3-1: USB disconnect, device number 24 [ 1175.500508][T15811] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1175.500518][ T43] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1175.500620][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1175.508656][T15811] usb 5-1: config 0 has no interface number 0 [ 1175.516733][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1175.527886][T15811] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1175.533843][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1175.561729][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1175.571923][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1175.585091][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1175.594143][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.119699][T31239] netlink: 'syz.0.4652': attribute type 3 has an invalid length. [ 1176.276546][ T1223] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1176.284318][ T43] usb 6-1: GET_CAPABILITIES returned 0 [ 1176.289902][ T43] usbtmc 6-1:16.0: can't read capabilities [ 1176.369279][T15811] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1176.378365][T15811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.386381][T15811] usb 5-1: Product: syz [ 1176.390574][T15811] usb 5-1: Manufacturer: syz [ 1176.402444][T15811] usb 5-1: config 0 descriptor?? [ 1176.481484][T15811] usb 5-1: can't set config #0, error -71 [ 1176.493552][T15811] usb 5-1: USB disconnect, device number 55 [ 1176.807930][ T5693] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 1177.251936][T15811] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1177.593330][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.599698][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.619991][T14027] usb 6-1: USB disconnect, device number 32 [ 1177.711004][T31281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4657'. [ 1177.732964][T31281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4657'. [ 1177.775894][T31281] veth1_macvtap: left promiscuous mode [ 1177.781437][T31281] macsec0: entered promiscuous mode [ 1177.813444][ T1223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.823594][ T1223] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1177.832678][ T1223] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1177.842078][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.864784][ T1223] usb 4-1: config 0 descriptor?? [ 1178.034867][T15811] usb 5-1: Using ep0 maxpacket: 32 [ 1178.045605][ T1223] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1178.052654][ T1223] dvb-usb: bulk message failed: -22 (3/0) [ 1178.072240][ T1223] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1178.147812][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1178.156554][ T1223] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1178.163664][ T1223] usb 4-1: media controller created [ 1178.170582][ T1223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.214403][ T1223] dvb-usb: bulk message failed: -22 (6/0) [ 1178.222090][ T1223] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1178.373829][ T1223] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input135 [ 1178.399267][ T1223] dvb-usb: schedule remote query interval to 150 msecs. [ 1178.416173][ T1223] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1178.438390][ T1223] usb 4-1: USB disconnect, device number 32 [ 1178.594153][ T1223] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1178.652345][T31316] FAULT_INJECTION: forcing a failure. [ 1178.652345][T31316] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.665513][T31316] CPU: 1 UID: 0 PID: 31316 Comm: syz.5.4658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.665548][T31316] Tainted: [L]=SOFTLOCKUP [ 1178.665558][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.665571][T31316] Call Trace: [ 1178.665581][T31316] [ 1178.665591][T31316] dump_stack_lvl+0xe8/0x150 [ 1178.665623][T31316] should_fail_ex+0x412/0x560 [ 1178.665660][T31316] should_failslab+0xa8/0x100 [ 1178.665684][T31316] __kmalloc_cache_noprof+0x88/0x660 [ 1178.665718][T31316] ? __hw_addr_create+0x60/0x250 [ 1178.665745][T31316] __hw_addr_create+0x60/0x250 [ 1178.665772][T31316] __hw_addr_list_snapshot+0x19e/0x750 [ 1178.665808][T31316] netif_rx_mode_run+0x931/0x1290 [ 1178.665844][T31316] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 1178.665880][T31316] ? dev_ioctl+0x7b4/0x1150 [ 1178.665908][T31316] ? sock_do_ioctl+0x23e/0x320 [ 1178.665936][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1178.665972][T31316] ? netif_rx_mode_sync+0x169/0x1e0 [ 1178.665996][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1178.666038][T31316] netif_rx_mode_sync+0x171/0x1e0 [ 1178.666067][T31316] dev_ifsioc+0xf51/0x1330 [ 1178.666102][T31316] ? dev_load+0x21/0x1f0 [ 1178.666134][T31316] dev_ioctl+0x7b4/0x1150 [ 1178.666170][T31316] sock_do_ioctl+0x23e/0x320 [ 1178.666199][T31316] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1178.666224][T31316] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1178.666267][T31316] sock_ioctl+0x5c6/0x7f0 [ 1178.666295][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1178.666321][T31316] ? __fget_files+0x2a/0x420 [ 1178.666355][T31316] ? __fget_files+0x3a0/0x420 [ 1178.666382][T31316] ? __fget_files+0x2a/0x420 [ 1178.666414][T31316] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1178.666448][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1178.666473][T31316] __se_sys_ioctl+0xfc/0x170 [ 1178.666508][T31316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.666533][T31316] do_syscall_64+0x15f/0x560 [ 1178.666555][T31316] ? trace_irq_disable+0x3b/0x140 [ 1178.666588][T31316] ? clear_bhb_loop+0x40/0x90 [ 1178.666616][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.666639][T31316] RIP: 0033:0x7f4a45f9ce59 [ 1178.666661][T31316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.666687][T31316] RSP: 002b:00007f4a46ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.666711][T31316] RAX: ffffffffffffffda RBX: 00007f4a46215fa0 RCX: 00007f4a45f9ce59 [ 1178.666728][T31316] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 1178.666743][T31316] RBP: 00007f4a46ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.666758][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.666771][T31316] R13: 00007f4a46216038 R14: 00007f4a46215fa0 R15: 00007f4a4633fa48 [ 1178.666807][T31316] [ 1178.666858][T31316] ------------[ cut here ]------------ [ 1178.984098][T31316] netdevice: dummy0: failed to sync uc/mc addresses [ 1178.990735][T31316] WARNING: net/core/dev_addr_lists.c:1278 at netif_rx_mode_run+0xd55/0x1290, CPU#1: syz.5.4658/31316 [ 1179.001729][T31316] Modules linked in: [ 1179.006116][T31316] CPU: 1 UID: 0 PID: 31316 Comm: syz.5.4658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.017099][T31316] Tainted: [L]=SOFTLOCKUP [ 1179.021453][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.031543][T31316] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 1179.050372][T31316] Code: 3a 48 c7 c2 60 fe dd 8c eb 1a e8 d9 68 43 f8 48 c7 c2 e0 fc dd 8c eb 0c e8 cb 68 43 f8 48 c7 c2 e0 fd dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 ba c3 29 02 42 c7 [ 1179.070047][T31316] RSP: 0018:ffffc90005d679e0 EFLAGS: 00010293 [ 1179.076178][T31316] RAX: ffffffff89824d17 RBX: 0000000000000001 RCX: ffff888025809ec0 [ 1179.084184][T31316] RDX: ffffffff8cddfce0 RSI: ffff888057bae120 RDI: ffffffff903fd3e0 [ 1179.092191][T31316] RBP: ffffc90005d67bb8 R08: ffff888025809ec0 R09: 0000000000000006 [ 1179.100207][T31316] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888057bae120 [ 1179.108228][T31316] R13: dffffc0000000000 R14: ffffffff903fd3e0 R15: ffff888057bae120 [ 1179.116243][T31316] FS: 00007f4a46ee56c0(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1179.125379][T31316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.131998][T31316] CR2: 0000001b2fe63fff CR3: 0000000035744000 CR4: 00000000003526f0 [ 1179.140005][T31316] Call Trace: [ 1179.143315][T31316] [ 1179.146292][T31316] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 1179.164687][T31316] ? dev_ioctl+0x7b4/0x1150 [ 1179.169257][T31316] ? sock_do_ioctl+0x23e/0x320 [ 1179.174067][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1179.179493][T31316] ? netif_rx_mode_sync+0x169/0x1e0 [ 1179.184742][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1179.190177][T31316] netif_rx_mode_sync+0x171/0x1e0 [ 1179.195260][T31316] dev_ifsioc+0xf51/0x1330 [ 1179.199725][T31316] ? dev_load+0x21/0x1f0 [ 1179.204009][T31316] dev_ioctl+0x7b4/0x1150 [ 1179.208397][T31316] sock_do_ioctl+0x23e/0x320 [ 1179.213133][T31316] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1179.218287][T31316] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1179.223981][T31316] sock_ioctl+0x5c6/0x7f0 [ 1179.228352][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1179.233334][T31316] ? __fget_files+0x2a/0x420 [ 1179.237973][T31316] ? __fget_files+0x3a0/0x420 [ 1179.242693][T31316] ? __fget_files+0x2a/0x420 [ 1179.247326][T31316] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1179.252310][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1179.257197][T31316] __se_sys_ioctl+0xfc/0x170 [ 1179.261841][T31316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.281051][T31316] do_syscall_64+0x15f/0x560 [ 1179.285699][T31316] ? trace_irq_disable+0x3b/0x140 [ 1179.290783][T31316] ? clear_bhb_loop+0x40/0x90 [ 1179.295509][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.301452][T31316] RIP: 0033:0x7f4a45f9ce59 [ 1179.305903][T31316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.325540][T31316] RSP: 002b:00007f4a46ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.333992][T31316] RAX: ffffffffffffffda RBX: 00007f4a46215fa0 RCX: 00007f4a45f9ce59 [ 1179.342001][T31316] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 1179.350019][T31316] RBP: 00007f4a46ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.358031][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.366057][T31316] R13: 00007f4a46216038 R14: 00007f4a46215fa0 R15: 00007f4a4633fa48 [ 1179.374091][T31316] [ 1179.377166][T31316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1179.384503][T31316] CPU: 1 UID: 0 PID: 31316 Comm: syz.5.4658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.395479][T31316] Tainted: [L]=SOFTLOCKUP [ 1179.399830][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.409918][T31316] Call Trace: [ 1179.413235][T31316] [ 1179.416205][T31316] vpanic+0x56c/0xa60 [ 1179.420237][T31316] ? __pfx__printk+0x10/0x10 [ 1179.424888][T31316] ? __pfx_vpanic+0x10/0x10 [ 1179.429448][T31316] ? is_bpf_text_address+0x292/0x2b0 [ 1179.434779][T31316] ? is_bpf_text_address+0x26/0x2b0 [ 1179.440035][T31316] panic+0xc5/0xd0 [ 1179.443814][T31316] ? __pfx_panic+0x10/0x10 [ 1179.448294][T31316] __warn+0x315/0x4c0 [ 1179.452321][T31316] ? netif_rx_mode_run+0xd55/0x1290 [ 1179.457564][T31316] ? netif_rx_mode_run+0xd55/0x1290 [ 1179.462812][T31316] __report_bug+0x29a/0x540 [ 1179.467449][T31316] ? netif_rx_mode_run+0xd55/0x1290 [ 1179.472701][T31316] ? __pfx___report_bug+0x10/0x10 [ 1179.477774][T31316] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1179.482850][T31316] ? lock_acquire+0x106/0x350 [ 1179.487573][T31316] report_bug_entry+0x19a/0x290 [ 1179.492469][T31316] ? netif_rx_mode_run+0xe82/0x1290 [ 1179.497713][T31316] ? netif_rx_mode_run+0xe87/0x1290 [ 1179.502957][T31316] handle_bug+0xce/0x200 [ 1179.507237][T31316] exc_invalid_op+0x1a/0x50 [ 1179.511791][T31316] asm_exc_invalid_op+0x1a/0x20 [ 1179.516672][T31316] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 1179.522522][T31316] Code: 3a 48 c7 c2 60 fe dd 8c eb 1a e8 d9 68 43 f8 48 c7 c2 e0 fc dd 8c eb 0c e8 cb 68 43 f8 48 c7 c2 e0 fd dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 ba c3 29 02 42 c7 [ 1179.542162][T31316] RSP: 0018:ffffc90005d679e0 EFLAGS: 00010293 [ 1179.548268][T31316] RAX: ffffffff89824d17 RBX: 0000000000000001 RCX: ffff888025809ec0 [ 1179.556277][T31316] RDX: ffffffff8cddfce0 RSI: ffff888057bae120 RDI: ffffffff903fd3e0 [ 1179.564285][T31316] RBP: ffffc90005d67bb8 R08: ffff888025809ec0 R09: 0000000000000006 [ 1179.572267][T31316] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888057bae120 [ 1179.580244][T31316] R13: dffffc0000000000 R14: ffffffff903fd3e0 R15: ffff888057bae120 [ 1179.588229][T31316] ? netif_rx_mode_run+0xe67/0x1290 [ 1179.593452][T31316] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 1179.598960][T31316] ? dev_ioctl+0x7b4/0x1150 [ 1179.603478][T31316] ? sock_do_ioctl+0x23e/0x320 [ 1179.608254][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1179.613648][T31316] ? netif_rx_mode_sync+0x169/0x1e0 [ 1179.618887][T31316] ? preempt_schedule_thunk+0x16/0x30 [ 1179.624311][T31316] netif_rx_mode_sync+0x171/0x1e0 [ 1179.629439][T31316] dev_ifsioc+0xf51/0x1330 [ 1179.633875][T31316] ? dev_load+0x21/0x1f0 [ 1179.638136][T31316] dev_ioctl+0x7b4/0x1150 [ 1179.642481][T31316] sock_do_ioctl+0x23e/0x320 [ 1179.647079][T31316] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1179.652210][T31316] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1179.657966][T31316] sock_ioctl+0x5c6/0x7f0 [ 1179.662338][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1179.667235][T31316] ? __fget_files+0x2a/0x420 [ 1179.671861][T31316] ? __fget_files+0x3a0/0x420 [ 1179.676576][T31316] ? __fget_files+0x2a/0x420 [ 1179.681211][T31316] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1179.686197][T31316] ? __pfx_sock_ioctl+0x10/0x10 [ 1179.691061][T31316] __se_sys_ioctl+0xfc/0x170 [ 1179.695668][T31316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.701740][T31316] do_syscall_64+0x15f/0x560 [ 1179.706335][T31316] ? trace_irq_disable+0x3b/0x140 [ 1179.711374][T31316] ? clear_bhb_loop+0x40/0x90 [ 1179.716058][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.721961][T31316] RIP: 0033:0x7f4a45f9ce59 [ 1179.726384][T31316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.745992][T31316] RSP: 002b:00007f4a46ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.754416][T31316] RAX: ffffffffffffffda RBX: 00007f4a46215fa0 RCX: 00007f4a45f9ce59 [ 1179.762394][T31316] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 1179.770372][T31316] RBP: 00007f4a46ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.778352][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.786340][T31316] R13: 00007f4a46216038 R14: 00007f4a46215fa0 R15: 00007f4a4633fa48 [ 1179.794375][T31316] [ 1179.803209][T31316] Kernel Offset: disabled [ 1179.807561][T31316] Rebooting in 86400 seconds..