last executing test programs: 9.547630949s ago: executing program 2 (id=3): syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') syz_emit_ethernet(0x5e, &(0x7f0000001c00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x28, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='unlock i'], 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 9.367683464s ago: executing program 2 (id=7): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (fail_nth: 8) 9.144617166s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r6) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.70933602s ago: executing program 2 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000141000010028bd700002d40bf23fd60000cfe51466f9b868067d512382f0408c0b852acb4977a26794748c79ad27572f9d242c15159b4a1e7e2298f489d62a5820374157a84839a377c32938015816ece286ff9f2eabc1201a38715f5a0a714c", @ANYRES32=r2, @ANYBLOB="984e0600c12a01002c001280110001006272696467655f736c617665000000001400058005000800000000000500060001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mq_timedsend(r3, &(0x7f0000000100)="4512712ed31d38f1398013030bdb4517cb8a4b388140f760d6c30d104ccbff0c170838bb0d1ed4ccf728ef98579e117f98e4e8fe3754fcdebbfb34d64b55ef30517d73a1e0697e58a29aee2bb448f1ba4db0a6cc92e6da795be506757ea2677ccf4ef350c0ee3cedf7f49cea056e1e0a71875af88f32616db07a49cb1cb48c6e99a8fff5a517d46d210461b1fb79cc2002337c1b50dc599fe01df13adcfddb7bf0f7e793144da40a29c9a2e64264a8bfe05a17c4520d6ddda0383958609b73e738f265d4a6d519cb8d37669257a19ca662d49133456b0106299134790abc449673a42f79b6b22ccfa7995686a57d67f58a5e", 0xf2, 0x40, &(0x7f0000000200)={0x77359400}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}]}, &(0x7f0000000040)=0xc) shutdown(r4, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={r5, 0xff, 0xf97b, 0xf, 0x1000, 0xfffff801}, 0x14) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) listen(r1, 0x0) 8.63845549s ago: executing program 2 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="81a0000000000000240012800c0001006d6163766c616e0014000280080001000200000008000300020008"], 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}]}, &(0x7f0000000040)=0xc) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x800, 0xb532, 0xf, 0x4, 0x100}, 0x14) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4de41386d8cf3b9e}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80000000, 0x0, 0x100}) 8.297211252s ago: executing program 0 (id=13): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@can_newroute={0x14, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010029bd7000fedbdf2505000000080002000400000008000300eb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000814) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b12", 0x3c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r5 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 7.01079989s ago: executing program 3 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 6.932309627s ago: executing program 3 (id=15): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(&(0x7f0000000b80), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x34324142, 0x6, 0x0, [{0x0, 0xc}], 0x0, 0xfd, 0x0, 0x2, 0x6}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x41415270}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x1, 0x56595559, 0xa52f906a308eb7e8, @stepwise={0x7ca72f0b, 0x1, 0x1698d859, 0x5, 0xb2, 0x7ec345c}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xe0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x9f) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a60002f4abe0400905020200020200000905820210"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000001200)) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r10, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) ioctl$SOUND_MIXER_READ_RECSRC(r9, 0x80044dff, &(0x7f00000000c0)) socket$qrtr(0x2a, 0x2, 0x0) mq_open(&(0x7f0000001240)='\x88%\\\x00', 0xc2, 0x12, &(0x7f0000001280)={0x4, 0x9, 0x7fffffff, 0x8}) sendmsg$inet(r7, &(0x7f00000011c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="ef9327d63273d7df", 0x8}], 0x2, &(0x7f0000001100)=ANY=[@ANYRESDEC=r8, @ANYRES32=r8, @ANYBLOB="e0000001ac1414bb540000000000000007000000830ba90a010102ffffffff441cdc21e0000002fffffff8ac1e000100000007e0000001fffffffa94040100441ce953ffffffff000000090a01010200000008ac1e01010000000400100000000000000002000000030000000d00000000000000010000000700000010000000000000000100000005000000"], 0xac}, 0x40) 5.968201439s ago: executing program 0 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x97ff) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040), 0x4) 5.790263507s ago: executing program 1 (id=21): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') syz_emit_ethernet(0x5e, &(0x7f0000001c00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x28, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='unlock i'], 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}]}]}], {0x14}}, 0x29c}}, 0x4048010) write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl_fd$Q_GETQUOTA(r3, 0x0, r4, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) 5.753510132s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r6) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.620489778s ago: executing program 1 (id=24): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabe17d192210800458e00280064000007069078ac1414bbac1414bb4e224e220083b0b4526335c8ebe7fa82c976233f08542f21567f2039384cbdedf55ddd2754140711b1ac24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020002907800e7"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x62) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="90e53d"]) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x80) recvmmsg$unix(r7, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000010c0)=""/4, 0x4}, {&(0x7f0000000480)=""/51, 0x33}], 0x2}}], 0x1, 0x40004022, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r8 = openat$audio1(0xffffff9c, &(0x7f0000000380), 0x45e582, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000400)=0x66) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x5446b546a74da96d) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4a22, 0x8f78, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0xa4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$autofs(0xffffff9c, &(0x7f0000001400), 0x20000, 0x0) 5.393271982s ago: executing program 4 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 5.354486477s ago: executing program 1 (id=26): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0x80}, 0x1, 0x7}, 0x0) 5.235539863s ago: executing program 4 (id=27): syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000002fc0)=[{0x73, 0x3000, 0x4e, &(0x7f0000001e00)="9493a7233113093eec73af54be09820c14b172117bba4a2e1a565415007d09d6a57ebc0198f2f3bd46f3b2d88f7f43a64eccb888813a49a8e599d3a52975bdd7edfb87b651beac657fae41721cc9"}, {0xfffa, 0x10, 0x0, 0x0}], 0x2}) 4.497966796s ago: executing program 1 (id=28): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20302, 0x0) listen(r6, 0x3) shutdown(r6, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0xb}, {0xa, 0x0, 0x9, @mcast1}, 0xffffffffffffffff, 0x9}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x7fffffff) 3.520044365s ago: executing program 4 (id=29): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (fail_nth: 8) 3.411063599s ago: executing program 3 (id=30): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x8010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x437a, &(0x7f0000000300)={0x0, 0x20001848, 0xa, 0x3}, 0x0, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x1) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000a40)="1debb5002d", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000013d000/0x3000)=nil, 0x3000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/193, 0xc1}, {0x0}], 0x2, 0x74, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9000d75600000000000000000080000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r4], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 3) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) 2.786533781s ago: executing program 4 (id=31): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x12b}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) connect$inet(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, r6}) 2.113827312s ago: executing program 1 (id=32): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24000040) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5605, &(0x7f0000000200)={0xa, @win={{0x0, 0x0, 0x31324d4e}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x4, 0xebe, &(0x7f0000000780)={{0x12, 0x1, 0x21, 0x83, 0x56, 0x6c, 0x40, 0xc45, 0x607c, 0x7551, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeac, 0x4, 0x5, 0x3, 0x80, 0x6, "", [{{0x9, 0x4, 0x8, 0x80, 0xe, 0xa0, 0xb9, 0xea, 0x6, [], [{{0x9, 0x5, 0x6, 0x1, 0x20, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x2, 0x0, 0x4, [@generic={0x8a, 0x22, "d337122f2fbe97caa6b49bdc4f6135b5d355cdba8f25cffd42d82e139c23490f7832987685b9aa517bf946b71420eff32e39fd6c03aed643929f2cc4f7cd69e1596f39a4c83376c400fd4498adb84315b13783b60090d3151d427c96480cd4ddda1e945be67dc7d924c25789e5b640360d9007bf2b51cbe5a71324ef0541c073af1cb4c213e32bea"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xff, 0x7, 0x7, [@generic={0x7c, 0x21, "84ce7428f3629ee9e4bfcd00646c8d6e322768b7cc0d05a352824b9b01989ffef58c29ee3cfacf64246b68852a9b507bce721e7bbbe0e4395c7071dde61e60156f2a2c8e6d3eaf98393378606c1ab2024fdec5d0a9593e78cca7f38a797e8b72cb250ed8df874e377a7f384daa4b45534b74559316286d243516"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x81}]}}, {{0x9, 0x5, 0x2, 0x0, 0x7f7, 0xc, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x81}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x4, 0x4, 0x2e}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x71, 0x7, 0x7, [@generic={0x7b, 0x21, "13bb657121c4ef749f88a6cabdfd46ddc878376d0893ef95e88c2aab5a329cc00221857f06c89648903efc9ca34fb8804085bcee9292d40dd78c383a04ea11c639c04ce2daecc3a4add27d3244e075da836b600efc01a9046827797a2ed05cb504133caaca31f1f9d2e6982280df75725cb9e89c6945793bd2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x5}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x7d, 0x26, 0x8, [@generic={0x1f, 0xc, "676407beac8a896e54641ff7b0239361f2420523235135e6a10e8f0df9"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x3, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xaf, 0x5, 0x3, [@generic={0x4e, 0x21, "3129db0cdc018d9cdf534e07221b29c2bf2a32e0c7b4af79ce5b9023a10b6a3fd3c9fbb41dac2fc30c06858e45280e71de2ed5a6768b2dc72ed94dc10924714e4371ed3ffe4d4ca5625c30bb"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf6, 0x3}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x6d, 0xc, 0x6, [@generic={0xee, 0x23, "d58bd19b877b68e2695882a5f992caa49e6bfffe0df4f86593172135e73ad05aa7114db7088f5e0dbee1b4362b54bfe34c16f58cc548c5079405df5e2d0c56758fbc5962bccbc50d9cd9606f801dd7b3eb23f636eac4b27b2444372ab7b53358d82f510818ad733140393d56165eb99d6afeca3ad8a680a549f40f76620d7be60e00349a4dcb5a70ae88e63aaed400cafaac5fbdf561f4dff98b455c4e989e292024a63f77a056963a5c9f76d0510227d990a159de2ff4bd3d5b9136be7c506af722cf3599220dec09267a45353db71176e6c90b4aeb4024a9f2d4ad4f6e02c81b4d73971c411c61eb7932b3"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x6, 0x4, 0x7d}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x4, 0x7, 0x9, [@generic={0xf1, 0xa, "c1eb67d934a3413f33ce967d02bbc6a77d1e7ba490926740fc3be520b1bb15e08557df3b969df4dfcf7f38880cb06b0bbb02caec872861fbdc58c62ecc07012c8cfbebbe8e437083f9803b9b424f46d8a0f11fc518200172bd77c56115d40968ebc09af66e6d28132357eb82b2fb7f3e95df79c8d05951cf8d1986ef2cc797f5db4e4486926d2e5029f87a5b7c9fe4c8c08961b66d855a3a165d3b1fe9c431ad6cb856aa9002591a58484ae1bd4fb2297dab765f19c4ed787366ea9d3a4747c41c976c79a1e38fd0fdec6677d13f02f6e37286086e3f404840e4993d3f5636cd97faa276ee111c0a205f298269dd73"}, @generic={0x62, 0x31, "d99f6379d92d1153f185e6ec8631b9fa08018b8a2d349db126469e2dfa3748272a263514479cce55f75dc17b4b964af15dfe0690155aa1fe5aa78508aef46c29c67b57faa16a7508edb1b5949591259461faea4dbf94601e23627435bc193554"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x1, 0xd, 0x7}}]}}, {{0x9, 0x4, 0xd7, 0x8, 0xa, 0x4e, 0x6, 0x7c, 0x1, [], [{{0x9, 0x5, 0x2, 0x8613b5bc3d783286, 0x10, 0x5, 0x2, 0x2, [@generic={0x6f, 0x9, "1fd6e71b53d7842574ee04bcc533b84024cfc5d1919f028db4a614a4526bd898642c80762a14714d3569c7df7d34d28d206b300aa3c1073510748dbc0e0c9ba26db3c3892f48d0e1a21e138dfa7cb1c7045577f3e1e534ec40b981366e7203ed64e4b11936277b44e4e94fb9fe"}, @generic={0x7e, 0xe, "4d076d9f1dcda68f1f16e4d98512b81dd35948b75defdc374057dfbca5d9e6f1153d8958a822ac7f55df247a5a485d2b80bfe7dcf854508db73e6f6c58582bc75c3e7b8fc954f6bc0d31df0ec94d6a5f5a75888bd17e11546fa9ae188b6fd67210a53332e4a371467f8a5f3fa654638e5fdef901af682e61fb5a90e2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x80, 0xd, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6e}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xec32}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xd, 0x80, 0x0, [@generic={0x8f, 0x22, "f85d1c992c509a2e326e0eefd95e1cc8f80e205de9812a8c89f3748e97dc7ff9f2a75a5e4b56d28162e1a9c45558df89e5c2653f071af789946d33777d3cc385b387859bbea0181ae0aa67076f94d60621636ea43ac2fafe1344d932e5485549cfb8265a51fb51d3a46ae80c45770c94aa0e3fb244ee8a3b0b5d90e00dffc86ac8100c2996102d85eb6ecda344"}]}}, {{0x9, 0x5, 0xd, 0x1e, 0x20, 0xd8, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x3ff, 0x6, 0x7, 0x9, [@generic={0x97, 0x1, "ad1ae9bcc9c83fbfb83fde94abe33512445152fead2cfa60176bb798fe8de0d87249f6b6206eec3e489a10d05866094899aa482ed7ec2f055dd4c086a8aa520cfd8ff5e0580ccf3cf9ad7d505b388a23ac497bc71c5eedc64c5d6e7a53f269548c2ea581ca8f9f0352a54cde8ae2d954649da2d4f1e889cf7c99e547483d3d9faa5b6a27c53d9998fa152282f5941de62eb42f9156"}]}}, {{0x9, 0x5, 0xd, 0x13, 0x3ff, 0x80, 0x2, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x60, 0x85, 0x9, 0x2, [@generic={0xc0, 0xc, "e882b0207eb28ec5c90b43b948f11e9681de5f53164bf7474caf7e9df63c30c0d501b56d44594738adb92feab2aa3db99b0f79b3b714d4dbbf5d970ed0251216f388c953e9a11a0df5f18a0bf373a718bfa4a86c8a10ed3e75a6fb8d93dcb0be69276482c91174d63cbcd74776e9f76ec88000300c27982824eeeb592526afbf33a62fad44278796562890e9742279b57cb4bbdb6de01daf4bd957391330032d5c9b8c7b05ba50f5c5afe0402a65e2501280af3f5e5b02f8b76ab4382a42"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x7bf, 0xc, 0x6, 0x2, [@generic={0xe7, 0x23, "8af74485c338fa6d3b2c24eefa99d6013f0161ec7818a0549b729cbd920525f3244d94b509bdd5e4e6eaae14b969dc58f522246a72cd961f294c4451c25547dab57d345f3b6b288794f47c6cb5d5c8bfa1d09cd342fe0fe8854ea1f34a27c34806156336866af57e16c97c40daf672ff74c65b8665a9fbcb230789b24bd04e392a7e88d205b7648c3bb78048d6f6ccd7afe38bfb3daea5b9d5ba660ddde4e0259198babd598508cdbcf6f2e1e8adb00d8d415df4843886a039cf604eb61745c27843c5405786aec93d42e32da7b2e66b8440dbcd0078031870607f387e6eff74bc37c45d94"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0x77, 0x6, 0xc, 0xff, 0xff, 0xff, 0x3, [@hid_hid={0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xd86}}, @uac_as], [{{0x9, 0x5, 0x0, 0x1d, 0x38, 0xf3, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xf541}, @generic={0x70, 0xe, "719e92cf297b1080f565506679d951138ac7b0f53d5cbd8daed07a1566e16723f6621b0312e76aa3136bbad37227a6138156ba9719057d08497f8313e28035c80163259f2510344664b6d14769a6b13c1cee8a3bbc9634f40e529bfe548789db26d9ce5e326203dc3033211bf766"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x80, 0x6, 0x1, [@generic={0x7a, 0x5, "8b43f9546857d7f38420d9a8df82635a5eae29ce53ba4989777496be613445abdc1a1ceaff2b2ccde14d9bba567d7d0f581a41d918191fd53b63d8856cebbf0a4fe5d8158184a48286105c02ce4777a02640d73a1f525a59d05120ec9c19b52edc8f62f720b24b3905d406a319cfc33410f97b60cf18734b"}, @generic={0xa1, 0x21, "8e68fc1772ced0d8daa70b73b03efcd2820f2b61224905bedd4d831eacb6097ed7fe4b917da40096980fa90dbf3c36f16471d444a5a0d60c0bd05e739624a0b6b914c592a722a554ff3ab2bfbc2f5eca9d20300e91fdeea377ff0290e5e4458290a4826959f57ab90604d3af51a9859e26d8461cc762666deb14b8835f84e6580c6abc4eb43d9e09e660833d1e14f96673a3b35ad4a0d645f3f8dd116c3c16"}]}}, {{0x9, 0x5, 0x7, 0x4aefabd0a7bbd4c9, 0x200, 0xd8, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x62, 0x493c}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x1, 0x8, 0x7, [@generic={0x76, 0xfc8858f6c87bf56c, "9a830c67808199135dd807b5852e1e77c592c15b7fdff5db14667337c4e80e4a92bf2977f463ba7c55e6ca1ebdb5fae470e9244dcd7ba619040e5e26b60f4278fc9cf49bde32ca987f2feeab8a821ddc0a28aeaa358dbfa24e1d798fa28670b0a286c92817f32080488214f9c7c5b758a5e68ff9"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x401}]}}, {{0x9, 0x5, 0x89, 0x0, 0x200, 0x81, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0xbfd91f663730d62f, 0x5, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x12, 0x400, 0x7, 0x39, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xc0, 0xe, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xc, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x90, 0x54, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}, @generic={0xa7, 0x22, "b92fc0149283a77a37b8c2686f3bbf814de7bd04a980f3d75fa15837afafb87c09e943ec5492978fe74f7c97298e045e221034d78724a8ceb0008a5618e7282849135f50f2548e53b37bd90fa94d28758367291ec6c6d7c14527f0cd9ba21773bd8753629116f52123098f1265077cc47129dbadd3dec9d148e277ef217650b788d5cdd9fd076ea7c67695d176def1a963ad5aa82df133b93dfa3c7f66ae5b0c8e673feb5e"}]}}, {{0x9, 0x5, 0x8, 0x18, 0x200, 0x6, 0x0, 0x3}}]}}, {{0x9, 0x4, 0x8c, 0xfc, 0x4, 0xb8, 0x4c, 0xc, 0x0, [@generic={0x50, 0x6, "5b3b3cc532a271958b6814f6d3728335ec0e70570b36cd9ea6b94f7dc8ccef9ac09b35b4afd9c24d2f4265ba42326f8dcf28e2ee5027128addfbdc8944755a2279a187b94b582ff83a9002b109a4"}, @generic={0x78, 0xd, "76f68ee0bb236027ea19dd76b31e88f8f90a3247a7ecce32dae42570c6ebdb1c6cdee0d4be748ae18e947b2bd95fa08387c61c71274b4177b6a54f24012c194314d8e272aa8a280f85c768f4320f495fc660df3081bbb7ab0106ace2cc398276ae4344d91b007dcc9462bad4c4a2e6b9c7ffa649a247"}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x4, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x6}, @generic={0xf1, 0x22, "1ef6c21bb77c4ecac92be1740e0c8856f5da6dbf0e8ae67dda888be8619017cf5ec7887ef82a5be389bc84daaa44d189c76575031d17181766af8ee692d32c4c630ac6a765fe84f328883a723eaed9116ce74a706fae8cfdceed73ae7a50cda7965b08af6f1ea11dd01f5598459afe4b91b3b3f4c34855f84dc36207bb7f51d9551cde332e5a16dcee2bc891c31e0ad465f41d83110f4f3c03cf06b413a0d40e468d9ea19855a84773fbf2a682114cb75478687f89283187eea9f290d1ae0b3a54b927bbdce3d09f23c6ab023ac644a355a8e1c5913e89d13bbc2e9d05d8439031e657b09ed7f8222db74c0e82f5bb"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x4, 0x99, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0x1a, 0x8, 0x3ff, 0x8, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe7, 0xe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}]}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x200, 0x40, 0x8, 0x4, 0xff, 0xae}, 0xf, &(0x7f0000001680)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x8}]}, 0x2, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.929453494s ago: executing program 2 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd000011"], 0xfce) 1.742228611s ago: executing program 0 (id=34): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') syz_emit_ethernet(0x5e, &(0x7f0000001c00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x28, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='unlock i'], 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x29c}}, 0x4048010) write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl_fd$Q_GETQUOTA(r3, 0x0, r4, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) 1.602418426s ago: executing program 3 (id=35): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = getpgrp(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000001c0)) 1.598048191s ago: executing program 0 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="81a0000000000000240012800c0001006d6163766c616e0014000280080001000200000008000300020008"], 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}]}, &(0x7f0000000040)=0xc) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x800, 0xb532, 0xf, 0x4, 0x100}, 0x14) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4de41386d8cf3b9e}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80000000, 0x0, 0x100}) 1.438965906s ago: executing program 2 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="81a0000000000000240012800c0001006d6163766c616e0014000280080001000200000008000300020008"], 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}]}, &(0x7f0000000040)=0xc) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x800, 0xb532, 0xf, 0x4, 0x100}, 0x14) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4de41386d8cf3b9e}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80000000, 0x0, 0x100}) 1.400763907s ago: executing program 3 (id=38): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@can_newroute={0x14, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00', @ANYRESDEC=r2, @ANYBLOB="010029bd7000fedbdf2505000000080002000400000008000300eb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000814) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b12", 0x3c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r6 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1.05915612s ago: executing program 4 (id=39): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0xf93f000, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x290, 0x4420c0) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) close(r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 246.59266ms ago: executing program 1 (id=40): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r3) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x7f, 0x0, &(0x7f00000000c0)={0xf, "18096693297e294e3d70684d3e1dc807ac8faa28791336fdca13baf089d08d42d0"}}) 178.276514ms ago: executing program 3 (id=41): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@can_newroute={0x14, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYBLOB="010029bd7000fedbdf2505000000080002000400000008000300eb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000814) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b12", 0x3c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r6 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 4 (id=42): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, &(0x7f00000001c0), 0x2000022d, 0x2, 0x0, 0xa) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 63.772945][ T5617] cgroup: Unknown subsys name 'net' [ 63.858333][ T5617] cgroup: Unknown subsys name 'cpuset' [ 63.866405][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.174443][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.459172][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.468369][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.476870][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.488509][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.495062][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.503652][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.504236][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.519924][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.525354][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.528442][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.535920][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.542687][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.549581][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.558672][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.563690][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.569237][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.569854][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.584649][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.591879][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.604288][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.611571][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.614666][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.621462][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.634321][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.642143][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.566805][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.574331][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.581524][ T5647] bridge_slave_0: entered allmulticast mode [ 68.588606][ T5647] bridge_slave_0: entered promiscuous mode [ 68.625468][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.632611][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.640117][ T5647] bridge_slave_1: entered allmulticast mode [ 68.646942][ T5647] bridge_slave_1: entered promiscuous mode [ 68.738657][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.745915][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.753025][ T5651] bridge_slave_0: entered allmulticast mode [ 68.759972][ T5651] bridge_slave_0: entered promiscuous mode [ 68.771944][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.779152][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.786748][ T5650] bridge_slave_0: entered allmulticast mode [ 68.793541][ T5650] bridge_slave_0: entered promiscuous mode [ 68.810891][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.820671][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.828374][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.835546][ T5651] bridge_slave_1: entered allmulticast mode [ 68.842357][ T5651] bridge_slave_1: entered promiscuous mode [ 68.857215][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.864288][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.871430][ T5650] bridge_slave_1: entered allmulticast mode [ 68.878285][ T5650] bridge_slave_1: entered promiscuous mode [ 68.885247][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.892320][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.900309][ T5652] bridge_slave_0: entered allmulticast mode [ 68.907194][ T5652] bridge_slave_0: entered promiscuous mode [ 68.916387][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.960155][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.967340][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.974453][ T5652] bridge_slave_1: entered allmulticast mode [ 68.981515][ T5652] bridge_slave_1: entered promiscuous mode [ 69.004068][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.011255][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.018480][ T5649] bridge_slave_0: entered allmulticast mode [ 69.025552][ T5649] bridge_slave_0: entered promiscuous mode [ 69.052162][ T5647] team0: Port device team_slave_0 added [ 69.060172][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.069394][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.076684][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.083783][ T5649] bridge_slave_1: entered allmulticast mode [ 69.090702][ T5649] bridge_slave_1: entered promiscuous mode [ 69.099698][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.120553][ T5647] team0: Port device team_slave_1 added [ 69.128421][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.147214][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.158116][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.203184][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.233063][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.260599][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.267774][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.293699][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.307715][ T5651] team0: Port device team_slave_0 added [ 69.315688][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.326346][ T5650] team0: Port device team_slave_0 added [ 69.341139][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.348230][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.374358][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.394856][ T5651] team0: Port device team_slave_1 added [ 69.410024][ T5650] team0: Port device team_slave_1 added [ 69.417359][ T5652] team0: Port device team_slave_0 added [ 69.425267][ T5652] team0: Port device team_slave_1 added [ 69.493440][ T5649] team0: Port device team_slave_0 added [ 69.507670][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.514678][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.540947][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.552532][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.559839][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.586080][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.597843][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.604813][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.631027][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.643750][ T5649] team0: Port device team_slave_1 added [ 69.668618][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.675655][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.701588][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.712848][ T50] Bluetooth: hci4: command tx timeout [ 69.713017][ T50] Bluetooth: hci0: command tx timeout [ 69.718646][ T5633] Bluetooth: hci1: command tx timeout [ 69.718742][ T5633] Bluetooth: hci3: command tx timeout [ 69.728039][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.732353][ T4948] Bluetooth: hci2: command tx timeout [ 69.735923][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.773757][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.785688][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.792627][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.818832][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.845036][ T5647] hsr_slave_0: entered promiscuous mode [ 69.851225][ T5647] hsr_slave_1: entered promiscuous mode [ 69.883398][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.890534][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.916438][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.952950][ T5650] hsr_slave_0: entered promiscuous mode [ 69.960338][ T5650] hsr_slave_1: entered promiscuous mode [ 69.966625][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 69.972393][ T5650] Cannot create hsr debugfs directory [ 69.981182][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.988162][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.014136][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.145286][ T5652] hsr_slave_0: entered promiscuous mode [ 70.151392][ T5652] hsr_slave_1: entered promiscuous mode [ 70.157803][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 70.163847][ T5652] Cannot create hsr debugfs directory [ 70.173505][ T5651] hsr_slave_0: entered promiscuous mode [ 70.180326][ T5651] hsr_slave_1: entered promiscuous mode [ 70.186455][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 70.192180][ T5651] Cannot create hsr debugfs directory [ 70.233705][ T5649] hsr_slave_0: entered promiscuous mode [ 70.240031][ T5649] hsr_slave_1: entered promiscuous mode [ 70.246349][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 70.252099][ T5649] Cannot create hsr debugfs directory [ 70.659106][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.670939][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.679265][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.689444][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.697669][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.707542][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.715443][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.726034][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.791080][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.801101][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.809710][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.819031][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.827022][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.837376][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.848862][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.857982][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.935811][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.944617][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.952577][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.962477][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.975250][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.985444][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.008572][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.018431][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.106010][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.116238][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.124351][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.136393][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.152892][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.162759][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.176305][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.187965][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.217022][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.228918][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.236492][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.318792][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.329452][ T5651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.340939][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.349076][ T5651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.359115][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.368192][ T5651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.377450][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.392539][ T5651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.401476][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.414039][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.421390][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.447098][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.464364][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.471587][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.530072][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.556682][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.563795][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.578768][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.596009][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.603137][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.669245][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.692332][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.733726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.740818][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.771221][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.778329][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.786008][ T4948] Bluetooth: hci3: command tx timeout [ 71.786255][ T50] Bluetooth: hci1: command tx timeout [ 71.791750][ T4948] Bluetooth: hci4: command tx timeout [ 71.797368][ T5644] Bluetooth: hci2: command tx timeout [ 71.802859][ T5633] Bluetooth: hci0: command tx timeout [ 71.823092][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.844201][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.870958][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.878103][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.915419][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.922524][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.971734][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.983927][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.033919][ T5647] veth0_vlan: entered promiscuous mode [ 72.078308][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.088145][ T5647] veth1_vlan: entered promiscuous mode [ 72.098953][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.113085][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.120180][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.158823][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.165962][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.174861][ T5650] veth0_vlan: entered promiscuous mode [ 72.220317][ T5647] veth0_macvtap: entered promiscuous mode [ 72.241074][ T5650] veth1_vlan: entered promiscuous mode [ 72.259186][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.268262][ T5647] veth1_macvtap: entered promiscuous mode [ 72.311353][ T5649] veth0_vlan: entered promiscuous mode [ 72.324854][ T5649] veth1_vlan: entered promiscuous mode [ 72.342891][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.364359][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.401784][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.412257][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.422791][ T5650] veth0_macvtap: entered promiscuous mode [ 72.438143][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456305][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.469011][ T5650] veth1_macvtap: entered promiscuous mode [ 72.491089][ T5649] veth0_macvtap: entered promiscuous mode [ 72.499322][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.531927][ T5652] veth0_vlan: entered promiscuous mode [ 72.551841][ T5649] veth1_macvtap: entered promiscuous mode [ 72.566733][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.586757][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.594344][ T5652] veth1_vlan: entered promiscuous mode [ 72.638646][ T94] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647755][ T94] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.659616][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.671064][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.684378][ T94] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.693270][ T94] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.737538][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.748021][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.765765][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.778504][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780364][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.789033][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.858918][ T5651] veth0_vlan: entered promiscuous mode [ 72.867182][ T5652] veth0_macvtap: entered promiscuous mode [ 72.888788][ T5652] veth1_macvtap: entered promiscuous mode [ 72.897320][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.908514][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.922677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.943067][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.950926][ T5651] veth1_vlan: entered promiscuous mode [ 72.990583][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.023160][ T5647] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.033687][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.067972][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.078831][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.103793][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.112646][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149327][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.181867][ T5651] veth0_macvtap: entered promiscuous mode [ 73.188212][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.211025][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.227192][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.247047][ T5651] veth1_macvtap: entered promiscuous mode [ 73.400362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.410274][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.422213][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.423337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.474420][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.578433][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.590716][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.608576][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.634420][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 73.643863][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661239][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.703994][ T5741] FAULT_INJECTION: forcing a failure. [ 73.703994][ T5741] name failslab, interval 1, probability 0, space 0, times 1 [ 73.738308][ T5741] CPU: 1 UID: 0 PID: 5741 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 73.738327][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 73.738343][ T5741] Call Trace: [ 73.738350][ T5741] [ 73.738361][ T5741] dump_stack_lvl+0xe8/0x150 [ 73.738392][ T5741] should_fail_ex+0x412/0x560 [ 73.738416][ T5741] should_failslab+0xa8/0x100 [ 73.738434][ T5741] __kmalloc_cache_noprof+0x88/0x660 [ 73.738456][ T5741] ? tipc_udp_enable+0x1c6/0xbd0 [ 73.738480][ T5741] tipc_udp_enable+0x1c6/0xbd0 [ 73.738500][ T5741] ? kasan_save_track+0x4f/0x80 [ 73.738521][ T5741] ? __pfx_tipc_udp_enable+0x10/0x10 [ 73.738537][ T5741] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 73.738555][ T5741] ? genl_rcv_msg+0x61c/0x7a0 [ 73.738569][ T5741] ? netlink_rcv_skb+0x232/0x4b0 [ 73.738587][ T5741] ? genl_rcv+0x28/0x40 [ 73.738602][ T5741] ? netlink_unicast+0x75c/0x8e0 [ 73.738619][ T5741] ? netlink_sendmsg+0x813/0xb40 [ 73.738638][ T5741] ? ____sys_sendmsg+0x972/0x9f0 [ 73.738651][ T5741] ? ___sys_sendmsg+0x2a5/0x360 [ 73.738664][ T5741] ? __sys_sendmsg+0x183/0x260 [ 73.738677][ T5741] ? __do_fast_syscall_32+0x23e/0x6f0 [ 73.738693][ T5741] ? do_fast_syscall_32+0x33/0x70 [ 73.738707][ T5741] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.738761][ T5741] ? __kasan_kmalloc+0x93/0xb0 [ 73.738778][ T5741] ? __kmalloc_cache_noprof+0x31c/0x660 [ 73.738794][ T5741] ? __tipc_nl_bearer_enable+0xb6b/0x14a0 [ 73.738806][ T5741] ? __kmalloc_cache_noprof+0x15b/0x660 [ 73.738831][ T5741] __tipc_nl_bearer_enable+0xcd9/0x14a0 [ 73.738850][ T5741] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 73.738862][ T5741] ? __mutex_lock+0xef8/0x1550 [ 73.738879][ T5741] ? __mutex_lock+0x608/0x1550 [ 73.738897][ T5741] ? __pfx___mutex_lock+0x10/0x10 [ 73.738913][ T5741] ? __nla_parse+0x40/0x60 [ 73.738930][ T5741] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 73.738943][ T5741] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 73.738960][ T5741] tipc_nl_bearer_enable+0x22/0x40 [ 73.738973][ T5741] genl_family_rcv_msg_doit+0x22a/0x330 [ 73.738987][ T5741] ? __asan_memcpy+0x40/0x70 [ 73.739004][ T5741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 73.739033][ T5741] genl_rcv_msg+0x61c/0x7a0 [ 73.739050][ T5741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.739063][ T5741] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 73.739076][ T5741] ? __pfx_ref_tracker_free+0x10/0x10 [ 73.739088][ T5741] ? __asan_memcpy+0x40/0x70 [ 73.739101][ T5741] ? __skb_clone+0x63/0x7a0 [ 73.739118][ T5741] netlink_rcv_skb+0x232/0x4b0 [ 73.739135][ T5741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.739150][ T5741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.739177][ T5741] ? down_read+0x270/0x2e0 [ 73.739188][ T5741] ? genl_rcv+0xd/0x40 [ 73.739202][ T5741] genl_rcv+0x28/0x40 [ 73.739213][ T5741] netlink_unicast+0x75c/0x8e0 [ 73.739236][ T5741] netlink_sendmsg+0x813/0xb40 [ 73.739259][ T5741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.739278][ T5741] ? aa_sock_msg_perm+0xf1/0x1b0 [ 73.739296][ T5741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 73.739316][ T5741] ____sys_sendmsg+0x972/0x9f0 [ 73.739337][ T5741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.739351][ T5741] ? kstrtoull+0x12f/0x1d0 [ 73.739374][ T5741] ___sys_sendmsg+0x2a5/0x360 [ 73.739384][ T5741] ? __lock_acquire+0x6b5/0x2cf0 [ 73.739400][ T5741] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.739413][ T5741] ? get_pid_task+0x20/0x1f0 [ 73.739427][ T5741] ? get_pid_task+0x20/0x1f0 [ 73.739439][ T5741] ? get_pid_task+0x20/0x1f0 [ 73.739472][ T5741] ? __fget_files+0x2a/0x420 [ 73.739485][ T5741] ? __fget_files+0x3a0/0x420 [ 73.739506][ T5741] __sys_sendmsg+0x183/0x260 [ 73.739519][ T5741] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.739546][ T5741] __do_fast_syscall_32+0x23e/0x6f0 [ 73.739558][ T5741] ? do_fast_syscall_32+0x33/0x70 [ 73.739569][ T5741] ? lockdep_hardirqs_on+0x7a/0x110 [ 73.739581][ T5741] ? asm_int80_emulation+0x1a/0x20 [ 73.739591][ T5741] ? do_int80_emulation+0x29f/0x550 [ 73.739602][ T5741] ? trace_irq_disable+0x3b/0x140 [ 73.739621][ T5741] do_fast_syscall_32+0x33/0x70 [ 73.739633][ T5741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.739646][ T5741] RIP: 0023:0xf7f0901c [ 73.739665][ T5741] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 73.739674][ T5741] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 73.739690][ T5741] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 73.739699][ T5741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.739705][ T5741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.739712][ T5741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 73.739718][ T5741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.739737][ T5741] [ 73.742859][ T5741] tipc: Enabling of bearer rejected, failed to enable media [ 73.865322][ T5633] Bluetooth: hci0: command tx timeout [ 73.873433][ T5644] Bluetooth: hci2: command tx timeout [ 73.877731][ T5633] Bluetooth: hci1: command tx timeout [ 73.882009][ T50] Bluetooth: hci3: command tx timeout [ 73.887926][ T4948] Bluetooth: hci4: command tx timeout [ 73.894812][ T5746] tipc: Enabling of bearer rejected, failed to enable media [ 74.241079][ T5753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 74.245076][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.323314][ T5748] syzkaller0: entered promiscuous mode [ 74.336600][ T5748] syzkaller0: entered allmulticast mode [ 74.371272][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424152][ T5753] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 74.545771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.553630][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.729068][ T5702] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.975613][ T5702] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.994300][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.028148][ T5702] usb 4-1: Product: syz [ 75.044396][ T5702] usb 4-1: Manufacturer: syz [ 75.059750][ T5702] usb 4-1: SerialNumber: syz [ 75.102512][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.122390][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.153938][ T5702] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.233995][ T5725] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.689587][ T24] usb 4-1: USB disconnect, device number 2 [ 75.945188][ T5633] Bluetooth: hci1: command tx timeout [ 75.945581][ T50] Bluetooth: hci3: command tx timeout [ 75.950718][ T4948] Bluetooth: hci4: command tx timeout [ 75.956037][ T5644] Bluetooth: hci2: command tx timeout [ 75.961482][ T5633] Bluetooth: hci0: command tx timeout [ 76.346475][ T5725] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 76.397675][ T5725] ath9k_htc: Failed to initialize the device [ 76.425210][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 76.890321][ T5788] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 77.256780][ T30] audit: type=1326 audit(1780373254.329:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.3.15" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x0 [ 77.307066][ T5800] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 77.316891][ T5798] tipc: Started in network mode [ 77.345426][ T5798] tipc: Node identity faf162365686, cluster identity 4711 [ 77.352207][ T5365] IPVS: starting estimator thread 0... [ 77.368245][ T5798] tipc: Enabled bearer , priority 0 [ 77.378204][ T5803] mmap: syz.1.24 (5803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.445018][ T5804] IPVS: using max 35 ests per chain, 84000 per kthread [ 77.565050][ T5702] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 77.729528][ T5702] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 77.747720][ T5702] usb 4-1: config 0 has no interface number 0 [ 77.759452][ T5702] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 77.778874][ T5702] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 77.795084][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.803243][ T5702] usb 4-1: Product: syz [ 77.813068][ T5702] usb 4-1: Manufacturer: syz [ 77.819762][ T5702] usb 4-1: SerialNumber: syz [ 77.840137][ T5702] usb 4-1: config 0 descriptor?? [ 77.847521][ T5783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.945437][ T5365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.107831][ T5365] usb 5-1: Using ep0 maxpacket: 32 [ 78.118417][ T5365] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 78.133114][ T5365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.154405][ T5365] usb 5-1: Product: syz [ 78.165997][ T5365] usb 5-1: Manufacturer: syz [ 78.170824][ T5365] usb 5-1: SerialNumber: syz [ 78.191538][ T5365] usb 5-1: config 0 descriptor?? [ 78.207081][ T5365] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 78.220212][ T5365] dvb-usb: bulk message failed: -22 (2/0) [ 78.247254][ T5365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.263068][ T5365] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 78.276232][ T5365] usb 5-1: media controller created [ 78.346649][ T5365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.411316][ T5365] usb 5-1: selecting invalid altsetting 7 [ 78.414457][ T5814] cxusb: i2c wr: len=80 is too big! [ 78.414457][ T5814] [ 78.419554][ T5365] cxusb: set interface failed [ 78.435503][ T5365] dvb-usb: bulk message failed: -22 (1/0) [ 78.488682][ T5365] DVB: Unable to find symbol lgdt330x_attach() [ 78.496498][ T5365] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 78.637525][ T5365] rc_core: IR keymap rc-dvico-portable not found [ 78.657487][ T5365] Registered IR keymap rc-empty [ 78.670358][ T5365] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 78.700359][ T5365] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 78.729682][ T5365] dvb-usb: schedule remote query interval to 100 msecs. [ 78.741048][ T5365] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 78.768581][ T5365] usb 5-1: USB disconnect, device number 2 [ 78.895155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.957639][ T5365] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 79.290890][ T5702] net1080 4-1:0.166: probe with driver net1080 failed with error -71 [ 79.365773][ T5702] usb 4-1: USB disconnect, device number 3 [ 79.533692][ T5835] FAULT_INJECTION: forcing a failure. [ 79.533692][ T5835] name failslab, interval 1, probability 0, space 0, times 0 [ 79.576456][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(full) [ 79.576470][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.576476][ T5835] Call Trace: [ 79.576480][ T5835] [ 79.576485][ T5835] dump_stack_lvl+0xe8/0x150 [ 79.576500][ T5835] should_fail_ex+0x412/0x560 [ 79.576514][ T5835] should_failslab+0xa8/0x100 [ 79.576524][ T5835] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 79.576542][ T5835] ? __alloc_skb+0x1d0/0x7d0 [ 79.576560][ T5835] ? __local_bh_enable_ip+0xd0/0x130 [ 79.576582][ T5835] __alloc_skb+0x1d0/0x7d0 [ 79.576595][ T5835] ? sctp_outq_flush+0x10bb/0x31b0 [ 79.576610][ T5835] _sctp_make_chunk+0x59/0x290 [ 79.576624][ T5835] sctp_make_heartbeat_ack+0x3b/0x310 [ 79.576646][ T5835] sctp_sf_beat_8_3+0x4eb/0x7b0 [ 79.576672][ T5835] sctp_do_sm+0x238/0x5cf0 [ 79.576691][ T5835] ? __pfx_sctp_cname+0x10/0x10 [ 79.576711][ T5835] ? sctp_do_8_2_transport_strike+0x43c/0x8d0 [ 79.576725][ T5835] ? sctp_outq_uncork+0x4d/0xa0 [ 79.576746][ T5835] ? sctp_do_sm+0x5571/0x5cf0 [ 79.576765][ T5835] ? finish_task_switch+0x427/0xbe0 [ 79.576790][ T5835] ? __pfx_sctp_do_sm+0x10/0x10 [ 79.576844][ T5835] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 79.576866][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 79.576880][ T5835] ? ktime_get+0x45/0x220 [ 79.576898][ T5835] ? seqcount_lockdep_reader_access+0xea/0x100 [ 79.576923][ T5835] sctp_assoc_bh_rcv+0x3f2/0x630 [ 79.576955][ T5835] sctp_backlog_rcv+0x167/0x380 [ 79.576972][ T5835] ? __local_bh_enable_ip+0xd0/0x130 [ 79.576991][ T5835] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 79.577007][ T5835] __release_sock+0x297/0x3a0 [ 79.577032][ T5835] release_sock+0x190/0x260 [ 79.577053][ T5835] sctp_setsockopt+0xb42/0x12c0 [ 79.577070][ T5835] ? sock_common_setsockopt+0x36/0xc0 [ 79.577088][ T5835] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 79.577107][ T5835] do_sock_setsockopt+0x17c/0x1b0 [ 79.577132][ T5835] __ia32_sys_setsockopt+0x13d/0x1b0 [ 79.577156][ T5835] __do_fast_syscall_32+0x23e/0x6f0 [ 79.577174][ T5835] ? do_fast_syscall_32+0x33/0x70 [ 79.577188][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 79.577202][ T5835] ? asm_int80_emulation+0x1a/0x20 [ 79.577216][ T5835] ? do_int80_emulation+0x29f/0x550 [ 79.577230][ T5835] ? trace_irq_disable+0x3b/0x140 [ 79.577254][ T5835] do_fast_syscall_32+0x33/0x70 [ 79.577270][ T5835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.577290][ T5835] RIP: 0023:0xf6fdf01c [ 79.577305][ T5835] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 79.577317][ T5835] RSP: 002b:00000000f53ac50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 79.577333][ T5835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 79.577343][ T5835] RDX: 0000000000000009 RSI: 0000000080000a00 RDI: 000000000000009c [ 79.577352][ T5835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.577360][ T5835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.577368][ T5835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.577393][ T5835] [ 80.145017][ T5702] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.373938][ T5702] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 80.391862][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.419200][ T5702] usb 4-1: config 0 descriptor?? [ 80.667122][ T5702] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 80.697260][ T5702] [drm:udl_init] *ERROR* Selecting channel failed [ 80.794412][ T5702] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 80.807347][ T5702] [drm] Initialized udl on minor 2 [ 80.847302][ T5702] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 80.860150][ T5798] syzkaller0: entered promiscuous mode [ 80.876070][ T5798] syzkaller0: entered allmulticast mode [ 80.887383][ T5702] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 80.914904][ T5806] tipc: Resetting bearer [ 80.916324][ T5725] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 80.961746][ T5702] usb 4-1: USB disconnect, device number 4 [ 80.969953][ T5725] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 80.977289][ T5797] tipc: Resetting bearer [ 80.999073][ T5797] tipc: Disabling bearer [ 81.015552][ T5711] tipc: Node number set to 2893505078 [ 81.101271][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 81.115016][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.291452][ T5852] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 81.304117][ T29] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.322459][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.324733][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 81.330801][ T5852] Zero length message leads to an empty skb [ 81.356549][ T29] usb 2-1: config 0 descriptor?? [ 81.379741][ T29] cp210x 2-1:0.0: cp210x converter detected [ 81.479351][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 81.480345][ T9] cfg80211: failed to load regulatory.db [ 81.793292][ T29] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 81.994059][ T29] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 82.009624][ T29] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 82.053794][ T29] usb 2-1: cp210x converter now attached to ttyUSB0 [ 82.118422][ T29] usb 2-1: USB disconnect, device number 2 [ 82.155471][ T5730] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.170095][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 82.214706][ T29] cp210x 2-1:0.0: device disconnected [ 82.326727][ T5730] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 82.344770][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.362948][ T5730] usb 5-1: config 0 descriptor?? [ 82.387765][ T5730] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 82.803656][ T5730] usb 5-1: USB disconnect, device number 3 [ 82.855026][ T994] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.059653][ T994] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 83.088337][ T994] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 83.102606][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.118477][ T994] usb 2-1: Product: syz [ 83.126970][ T994] usb 2-1: Manufacturer: syz [ 83.137681][ T994] usb 2-1: SerialNumber: syz [ 83.163921][ T994] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 83.590203][ T994] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.624503][ T994] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 83.634589][ T5884] ------------[ cut here ]------------ [ 83.640200][ T5884] usb 2-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 83.649046][ T5884] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.1.40/5884 [ 83.659149][ T5884] Modules linked in: [ 83.663089][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 83.672202][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.682302][ T5884] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 83.687991][ T5884] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 83.708247][ T5884] RSP: 0018:ffffc90007367428 EFLAGS: 00010246 [ 83.714538][ T5884] RAX: 0000000000000000 RBX: ffff88802a8bae00 RCX: 0000000080000380 [ 83.722576][ T5884] RDX: ffff8880318b1060 RSI: ffffffff8c80c0e0 RDI: ffffffff903d9570 [ 83.730560][ T5884] RBP: 1ffff110063163e8 R08: 00000000000000c0 R09: 0000000000000000 [ 83.738543][ T5884] R10: ffffc90007367520 R11: fffff52000e6ceb0 R12: ffff888077dec100 [ 83.746554][ T5884] R13: ffff8880318b1f40 R14: 0000000080000380 R15: ffff8880318b1060 [ 83.754516][ T5884] FS: 0000000000000000(0000) GS:ffff88812539c000(0063) knlGS:00000000f547cb40 [ 83.763466][ T5884] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 83.770077][ T5884] CR2: 00000000f547af80 CR3: 0000000078c22000 CR4: 00000000003526f0 [ 83.778077][ T5884] Call Trace: [ 83.781343][ T5884] [ 83.784261][ T5884] ? __init_swait_queue_head+0xa9/0x150 [ 83.789821][ T5884] usb_start_wait_urb+0x13f/0x5b0 [ 83.794882][ T5884] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 83.800979][ T5884] usb_control_msg+0x234/0x3e0 [ 83.805762][ T5884] gl861_ctrl_msg+0x207/0x420 [ 83.810747][ T5884] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 83.816214][ T5884] ? stack_trace_save+0xa9/0x100 [ 83.821148][ T5884] ? do_init_module+0x6f0/0x710 [ 83.826014][ T5884] ? kasan_save_free_info+0x46/0x50 [ 83.831206][ T5884] ? stack_depot_save_flags+0x33/0x810 [ 83.836672][ T5884] gl861_i2c_master_xfer+0x439/0x6a0 [ 83.841945][ T5884] ? kasan_save_track+0x3e/0x80 [ 83.846805][ T5884] __i2c_transfer+0x79a/0x1f70 [ 83.851558][ T5884] ? __lock_acquire+0x6b5/0x2cf0 [ 83.856514][ T5884] __i2c_smbus_xfer+0x1146/0x2050 [ 83.861565][ T5884] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 83.867117][ T5884] ? lockdep_hardirqs_on+0x7a/0x110 [ 83.872358][ T5884] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 83.878233][ T5884] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 83.883616][ T5884] i2c_smbus_xfer+0x1f4/0x310 [ 83.888356][ T5884] i2cdev_ioctl_smbus+0x1e7/0x730 [ 83.893388][ T5884] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 83.899067][ T5884] compat_i2cdev_ioctl+0x29d/0x5c0 [ 83.904207][ T5884] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 83.909870][ T5884] ? __fget_files+0x3a0/0x420 [ 83.914956][ T5884] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 83.920515][ T5884] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 83.926366][ T5884] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 83.932434][ T5884] ? __se_sys_futex_time32+0x3ab/0x440 [ 83.937953][ T5884] ? rcu_is_watching+0x15/0xb0 [ 83.942727][ T5884] __do_fast_syscall_32+0x23e/0x6f0 [ 83.947978][ T5884] ? do_fast_syscall_32+0x33/0x70 [ 83.953001][ T5884] ? lockdep_hardirqs_on+0x7a/0x110 [ 83.958225][ T5884] ? irqentry_exit+0x10f/0x8b0 [ 83.962988][ T5884] ? trace_irq_disable+0x3b/0x140 [ 83.968063][ T5884] do_fast_syscall_32+0x33/0x70 [ 83.972902][ T5884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.979247][ T5884] RIP: 0023:0xf70af01c [ 83.983302][ T5884] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 84.002945][ T5884] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 84.011388][ T5884] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000720 [ 84.019736][ T5884] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.028618][ T5884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.036716][ T5884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.044690][ T5884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.052722][ T5884] [ 84.055775][ T5884] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.063043][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 84.072126][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.082160][ T5884] Call Trace: [ 84.085422][ T5884] [ 84.088335][ T5884] vpanic+0x56c/0xa60 [ 84.092302][ T5884] ? __pfx__printk+0x10/0x10 [ 84.096888][ T5884] ? __pfx_vpanic+0x10/0x10 [ 84.101369][ T5884] ? is_bpf_text_address+0x292/0x2b0 [ 84.106634][ T5884] ? is_bpf_text_address+0x26/0x2b0 [ 84.111813][ T5884] panic+0xc5/0xd0 [ 84.115520][ T5884] ? __pfx_panic+0x10/0x10 [ 84.119957][ T5884] __warn+0x315/0x4c0 [ 84.123938][ T5884] ? usb_submit_urb+0x1053/0x18b0 [ 84.128952][ T5884] ? usb_submit_urb+0x1053/0x18b0 [ 84.133961][ T5884] __report_bug+0x29a/0x540 [ 84.138456][ T5884] ? usb_submit_urb+0x1053/0x18b0 [ 84.143464][ T5884] ? __pfx___report_bug+0x10/0x10 [ 84.148473][ T5884] ? lockdep_hardirqs_on+0x7a/0x110 [ 84.153654][ T5884] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 84.159451][ T5884] report_bug_entry+0x19a/0x290 [ 84.164281][ T5884] ? usb_submit_urb+0x1115/0x18b0 [ 84.169288][ T5884] ? usb_submit_urb+0x111a/0x18b0 [ 84.174295][ T5884] handle_bug+0xce/0x200 [ 84.178522][ T5884] exc_invalid_op+0x1a/0x50 [ 84.183010][ T5884] asm_exc_invalid_op+0x1a/0x20 [ 84.187846][ T5884] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 84.193462][ T5884] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 84.213046][ T5884] RSP: 0018:ffffc90007367428 EFLAGS: 00010246 [ 84.219097][ T5884] RAX: 0000000000000000 RBX: ffff88802a8bae00 RCX: 0000000080000380 [ 84.227061][ T5884] RDX: ffff8880318b1060 RSI: ffffffff8c80c0e0 RDI: ffffffff903d9570 [ 84.235016][ T5884] RBP: 1ffff110063163e8 R08: 00000000000000c0 R09: 0000000000000000 [ 84.242967][ T5884] R10: ffffc90007367520 R11: fffff52000e6ceb0 R12: ffff888077dec100 [ 84.250916][ T5884] R13: ffff8880318b1f40 R14: 0000000080000380 R15: ffff8880318b1060 [ 84.258874][ T5884] ? usb_submit_urb+0x10a4/0x18b0 [ 84.263883][ T5884] ? __init_swait_queue_head+0xa9/0x150 [ 84.269414][ T5884] usb_start_wait_urb+0x13f/0x5b0 [ 84.274426][ T5884] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 84.279961][ T5884] usb_control_msg+0x234/0x3e0 [ 84.284710][ T5884] gl861_ctrl_msg+0x207/0x420 [ 84.289371][ T5884] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 84.294547][ T5884] ? stack_trace_save+0xa9/0x100 [ 84.299475][ T5884] ? do_init_module+0x6f0/0x710 [ 84.304300][ T5884] ? kasan_save_free_info+0x46/0x50 [ 84.309479][ T5884] ? stack_depot_save_flags+0x33/0x810 [ 84.314927][ T5884] gl861_i2c_master_xfer+0x439/0x6a0 [ 84.320211][ T5884] ? kasan_save_track+0x3e/0x80 [ 84.325047][ T5884] __i2c_transfer+0x79a/0x1f70 [ 84.329794][ T5884] ? __lock_acquire+0x6b5/0x2cf0 [ 84.334710][ T5884] __i2c_smbus_xfer+0x1146/0x2050 [ 84.339721][ T5884] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 84.345080][ T5884] ? lockdep_hardirqs_on+0x7a/0x110 [ 84.350255][ T5884] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 84.356045][ T5884] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 84.361399][ T5884] i2c_smbus_xfer+0x1f4/0x310 [ 84.366083][ T5884] i2cdev_ioctl_smbus+0x1e7/0x730 [ 84.371092][ T5884] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 84.376625][ T5884] compat_i2cdev_ioctl+0x29d/0x5c0 [ 84.381719][ T5884] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 84.387330][ T5884] ? __fget_files+0x3a0/0x420 [ 84.391990][ T5884] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 84.397529][ T5884] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 84.402970][ T5884] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 84.408934][ T5884] ? __se_sys_futex_time32+0x3ab/0x440 [ 84.414379][ T5884] ? rcu_is_watching+0x15/0xb0 [ 84.419126][ T5884] __do_fast_syscall_32+0x23e/0x6f0 [ 84.424313][ T5884] ? do_fast_syscall_32+0x33/0x70 [ 84.429335][ T5884] ? lockdep_hardirqs_on+0x7a/0x110 [ 84.434512][ T5884] ? irqentry_exit+0x10f/0x8b0 [ 84.439254][ T5884] ? trace_irq_disable+0x3b/0x140 [ 84.444264][ T5884] do_fast_syscall_32+0x33/0x70 [ 84.449093][ T5884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.455395][ T5884] RIP: 0023:0xf70af01c [ 84.459440][ T5884] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 84.479042][ T5884] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 84.487432][ T5884] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000720 [ 84.495380][ T5884] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.503324][ T5884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.511268][ T5884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.519215][ T5884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.527175][ T5884] [ 84.530446][ T5884] Kernel Offset: disabled [ 84.534757][ T5884] Rebooting in 86400 seconds..