last executing test programs: 7.137949415s ago: executing program 4 (id=361): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa1, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 6.797947418s ago: executing program 4 (id=364): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 6.555084713s ago: executing program 4 (id=367): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7f}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x7}, 0x8) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00"/91], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0105866, &(0x7f0000000cc0)={0x0, 0x401, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40000) socket$netlink(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xc2, "944f50899352b0766e40045fec71e83bda3e269c185da929bb269bb8f29a620238adf5c53b7210ca2605a735717aefcc9bd190f2a3141434aab2f227d55e41b79149b61fef838a0403ab3dd2e46782e75c45fd88f3d8ea6279ce2654623351b8b27381372eea6744227f57449e5ff2af6957d4918f5f30d5e4f512db0d2678a4ff767404bc94e5e34d5de1f3342b164e638fed50f6df7d02574f9721c89fa63cb20eeda04c805e0da9ddc3176f337037892b9fa4581bbbe7bd41a86b8b08486f5f50"}, &(0x7f0000000280)=0xca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) 4.503176423s ago: executing program 1 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xffe0, 0xe}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getpid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000206010800000000000000000a0000000500010007000000050004000100000005000400000000000900020073797a3202000000"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.349796052s ago: executing program 1 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x0, 0xe, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 4.17365251s ago: executing program 0 (id=374): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000ac0)={&(0x7f0000000b00)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x2, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x7fffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3, 0x6, 0x49}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000a80)={0x0, r4, r5, 0x0, 0x0, 0x8, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="05000000000000000000000000000000efbf7c781c52a737a4e386c0ec6d3aab57c04788a79d30ff191e75abd071a9712b67ab772acb72f1", @ANYRESOCT=r9, @ANYRES64=r10, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r10], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, r13) 3.717374256s ago: executing program 0 (id=376): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x8000000) 3.372203045s ago: executing program 2 (id=377): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) pipe2(&(0x7f0000000000), 0x80000) (async) socket(0x29, 0x80805, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x3000000, 0x0) pread64(r2, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r3], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.30111046s ago: executing program 4 (id=378): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(0x0, 0x95f, 0x426542) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000080)=""/35, 0x23}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x8004, {'\x00', "57fab043e15fad27a639f105b5e9f977", "a7c9474b00000000f7ff0000ff4a5ef3"}, 0x4000c, 0x4}) socket(0x2d, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.041343878s ago: executing program 2 (id=379): socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000958000/0x2000)=nil, 0x2000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}, 0x1, 0x4000000}, 0x80) 2.945253581s ago: executing program 2 (id=380): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(0x0, 0x95f, 0x426542) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000080)=""/35, 0x23}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x8004, {'\x00', "57fab043e15fad27a639f105b5e9f977", "a7c9474b00000000f7ff0000ff4a5ef3"}, 0x4000c, 0x4}) socket(0x2d, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.936623451s ago: executing program 4 (id=381): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="ffff2ae3d84a31dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0xc800) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r5, 0x30}) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r5) r6 = socket(0x2, 0x3, 0xfc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ptrace$pokeuser(0x6, r7, 0x358, 0x1000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendfile(r6, r0, 0x0, 0xffba83) 2.798146367s ago: executing program 3 (id=382): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=@newtfilter={0x10b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1084, 0x2, [@TCA_MATCHALL_ACT={0x1080, 0x2, [@m_police={0x107c, 0x1, 0x0, 0x0, {{0xb}, {0x1050, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9643, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x0, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x7, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x0, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x44, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x10001, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa29, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x1, 0x1ff, 0xa, 0x100, 0x81, 0x6, 0x2, 0x3, 0x4, 0x3, 0x7f, 0x5, 0x10001, 0x1, 0x5, 0x3, 0x3, 0x2, 0xfffffffb, 0x7ff, 0xffffffff, 0x12b54c90, 0x926d, 0x2, 0x8, 0x5, 0x1, 0x401, 0xfff, 0x8000, 0x5, 0x5, 0x5, 0x8, 0x4, 0xffffffff, 0x1, 0x7, 0x9, 0x16, 0xc, 0x7333, 0x3, 0x3, 0x8, 0xffffffff, 0x9, 0x8, 0x76809851, 0x5, 0x3, 0x6, 0x3, 0x100, 0x9, 0x1, 0x80000001, 0x2, 0x41d9, 0x6, 0x6, 0x7, 0x9, 0xd2b, 0x1, 0x3, 0x4, 0x5, 0x80000001, 0x3, 0x1, 0x1ff, 0x3, 0x1000, 0xfffffffd, 0x7, 0x1, 0xff, 0x6, 0x8000, 0xea29, 0xbd44, 0xffff785f, 0x2, 0xfffffffe, 0x28000, 0x0, 0x8, 0x3, 0x98, 0xf26, 0x401, 0x7, 0x11, 0x2, 0x5, 0xc56e, 0x280000, 0x0, 0x9, 0xed4, 0x9, 0x9, 0x100, 0x3, 0x0, 0xcab, 0xfffffffb, 0x5, 0x4, 0x3, 0x5, 0xf5f4, 0x10000, 0x2, 0x6, 0x7, 0x81af, 0x5, 0x2, 0xfffffff9, 0x10000, 0x80, 0x80000000, 0x7fffffff, 0x2, 0x3, 0x6, 0x4, 0x7ff, 0x3, 0x1, 0x5, 0x7ff, 0x8, 0x66db7763, 0xf, 0x2, 0x10000000, 0x81, 0x3, 0x80000001, 0x0, 0xdd75, 0x8, 0x2, 0x9, 0x1, 0x5, 0x0, 0x9, 0x8, 0x5, 0x401, 0x8, 0x9, 0x3, 0x1, 0xfffffbff, 0x1, 0x72, 0x401, 0x4, 0x8, 0x6, 0x6, 0x8, 0xcf, 0x1, 0x1, 0xc64, 0xffff, 0x200, 0x200, 0x800, 0x4, 0x7fffffff, 0x10000, 0x7, 0xeca, 0x8, 0x1377, 0x6, 0x8, 0x40, 0x1, 0x0, 0x4, 0x8, 0x1, 0x101, 0xc, 0xffff, 0x3e40, 0x1, 0x9, 0x6, 0x7fff, 0x2, 0x7fff, 0x1, 0x20, 0x10000, 0x3, 0x4, 0x1ff, 0x6, 0x2, 0x2, 0xffffffff, 0x6, 0x0, 0x3, 0x3, 0x4, 0x80000001, 0x7, 0x752d, 0x8, 0x77a5, 0x36, 0x7498cfdd, 0xffff5a77, 0x9, 0x4, 0xd, 0x27, 0x1, 0x1000, 0x101, 0x74f, 0xf, 0xe3a, 0x401, 0xe52, 0x7, 0x2, 0x7, 0x3b2, 0x10001, 0x5, 0x10, 0x1, 0x7, 0xfffffffd, 0xfdc7, 0x9, 0x400, 0x1ff, 0x8000, 0x6, 0x8, 0x1, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x4, 0x6, 0x0, 0xff, 0x1, 0x3, 0x4, 0x4, 0x5, 0x6, 0x10001, 0xc1, 0x7, 0x7, 0xffffffff, 0xae, 0xb, 0x2, 0x1, 0x3, 0x2, 0xa0, 0x28, 0x80, 0x1, 0xfff, 0xf, 0x3, 0x180, 0x9, 0x75, 0x2, 0x6, 0x9, 0xe0e3, 0xfffffff7, 0x8, 0x109, 0x60e, 0x1, 0x8, 0x400, 0x4, 0x5, 0x5956, 0x0, 0x9, 0xffffffff, 0x6, 0x5, 0x3, 0xd, 0x710a32e8, 0x1e10, 0x9, 0x7ff, 0x9, 0x4, 0x4, 0x4, 0x7, 0x3, 0x6, 0x5, 0x0, 0x946f, 0x9, 0x81, 0x6, 0x2, 0xb937, 0x80, 0x0, 0x8001, 0x8000, 0x8, 0x7, 0x9, 0xd9c, 0xffff5be8, 0x9, 0x4, 0x3, 0x5, 0x7, 0x87d, 0x3c, 0x6, 0x0, 0x80000001, 0x5, 0x3, 0xfffffbff, 0x3, 0x81, 0x1000, 0x1, 0x2, 0xdc, 0x5, 0xfffffff8, 0xda01, 0x3, 0x1c0, 0x5, 0x4b, 0x8, 0x1e2, 0x4, 0xa, 0x0, 0x7, 0x3, 0x400, 0x0, 0x6, 0x8, 0x4, 0xfffffffa, 0x1, 0x6, 0xe8, 0x5, 0x5, 0x624f08e4, 0x2, 0x8, 0x8, 0x0, 0x51d, 0x2, 0x2, 0x4, 0x0, 0x7fffffff, 0xb503, 0x1, 0xfffffffa, 0xa, 0x1, 0x1, 0x1, 0x7, 0x3, 0x2, 0xd, 0xc, 0xc, 0x0, 0x7, 0xced, 0x8, 0x9, 0x2c, 0x9, 0x0, 0xfffffffe, 0x9, 0x2, 0x6, 0x3dbf23e0, 0x8, 0x0, 0x4, 0x9, 0x5, 0x7, 0x9, 0x2, 0xfffffff7, 0xdb84, 0x6, 0x80000000, 0x8, 0x800, 0x6, 0x7, 0x2, 0x2e, 0x200, 0x7, 0xf43, 0x7e6, 0x959, 0x4c9, 0x3, 0x72, 0x7, 0x7fff, 0x81, 0x9, 0x3, 0x4f7e, 0x8000, 0x401, 0xfffffff8, 0x3, 0x9f78, 0x8, 0x1, 0xffffff7c, 0x4, 0x4, 0x80000000, 0x3, 0x6, 0x0, 0x2, 0x1281, 0x6, 0x9, 0x17bb, 0x2, 0x627, 0x8001, 0x0, 0x6, 0x4, 0x7bdb, 0x7, 0x722, 0x3ff, 0x9, 0x6d3, 0x0, 0x1, 0x0, 0x80000001, 0x80000000, 0xf095, 0x4, 0x4, 0x0, 0x9, 0x5, 0x0, 0x2, 0x5, 0x40, 0x40, 0x36, 0x7fff, 0x62, 0xfef1, 0xd, 0x2, 0x0, 0xffffff81, 0x0, 0x81, 0xcbd3, 0x1, 0x8, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x0, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x8, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0xfff, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x80004, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.787023266s ago: executing program 1 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xffe0, 0xe}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getpid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000206010800000000000000000a0000000500010007000000050004000100000005000400000000000900020073797a3202000000"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.677240365s ago: executing program 0 (id=384): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x2, 0x7fff0004}]}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0xffffffffffffffda, 0x0, {0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0xfffffffe, {0x0, 0x90, 0x100000000006, 0xfffffdff, 0x4, 0x0, 0x0, 0x154, 0x0, 0x0, 0x20000008}}}, 0x90) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x200005, 0x400007f, 0x4000006, 0x4, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2.56384183s ago: executing program 1 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8b7a515e7a9aa37c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000206010800000000000000000a0000000500010007000000050004000100000005000400000000000900020073797a3202000000"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.410969865s ago: executing program 3 (id=386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(r0, 0x0, 0x0, 0x8) 2.324878468s ago: executing program 0 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.163492711s ago: executing program 2 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) (fail_nth: 25) 1.91648883s ago: executing program 0 (id=389): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x28, 0xfffffffd, 0x1, 0xdc, 0xffff7fff, 0xe3e}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) getitimer(0x0, &(0x7f0000000040)) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x8001, 0x4) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xee}}, './file0\x00'}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100}, 0x0) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc04c5611, &(0x7f0000001e00)=@overlay={0x1, 0xa, 0x4, 0x2, 0x9, {0x77359400}, {0x1, 0xc, 0x6, 0x6, 0x4, 0x1, "6db7036d"}, 0x4, 0x3, {}, 0x400002}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r7, &(0x7f0000000840)=[{&(0x7f0000000500)="f65659e34bc301db38c26632739f09fe6ecf11cd3165fd7ad145bb5fecfbf78ffacf5fd8a4f52c7ae4a96927607b9834fae1d4cda54b86fce44b6ba1de5ddcf3c8cac832c382b9644bf4bd7839a10a5dc98e30ee5af30cfe5cbfe84ffa1a5953c36894cd3c69302cd8baf8f26eda5a45ed6a8dff70cd712a65b09b9375a0f18600b9a355e7a4f376995fb19a3d56f3f14f8a56ec762bb373092a0a1a49ecab6455e98047cb5241462cceb8260bdf7d1f556bdf966029e35659dad034e834f8fb65a150ad780f33", 0xc7}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0xffffffffffffffff, 0x5, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0x1}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.293419934s ago: executing program 0 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000540)=0x803, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x9cffffff, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 1.292980063s ago: executing program 2 (id=391): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(0x0, 0x95f, 0x426542) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000080)=""/35, 0x23}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x8004, {'\x00', "57fab043e15fad27a639f105b5e9f977", "a7c9474b00000000f7ff0000ff4a5ef3"}, 0x4000c, 0x4}) socket(0x2d, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.199606482s ago: executing program 1 (id=392): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x80046601, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) capget(0x0, 0x0) 945.158631ms ago: executing program 1 (id=393): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) listen(r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x9, 0x7, 0x400, 0x2, 0x3, 0xcd}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000aa00010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x3, 0x10, 0x0, 0xfffffffffffffffc}, &(0x7f0000000480)=0x18) 944.847569ms ago: executing program 3 (id=394): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000104000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12f901, 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 848.990073ms ago: executing program 2 (id=395): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103d00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r4) 667.170739ms ago: executing program 3 (id=396): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=@newtfilter={0x10b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1084, 0x2, [@TCA_MATCHALL_ACT={0x1080, 0x2, [@m_police={0x107c, 0x1, 0x0, 0x0, {{0xb}, {0x1050, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9643, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x0, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x7, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x0, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x44, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x10001, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa29, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x1, 0x1ff, 0xa, 0x100, 0x81, 0x6, 0x2, 0x3, 0x4, 0x3, 0x7f, 0x5, 0x10001, 0x1, 0x5, 0x3, 0x3, 0x2, 0xfffffffb, 0x7ff, 0xffffffff, 0x12b54c90, 0x926d, 0x2, 0x8, 0x5, 0x1, 0x401, 0xfff, 0x8000, 0x5, 0x5, 0x5, 0x8, 0x4, 0xffffffff, 0x1, 0x7, 0x9, 0x16, 0xc, 0x7333, 0x3, 0x3, 0x8, 0xffffffff, 0x9, 0x8, 0x76809851, 0x5, 0x3, 0x6, 0x3, 0x100, 0x9, 0x1, 0x80000001, 0x2, 0x41d9, 0x6, 0x6, 0x7, 0x9, 0xd2b, 0x1, 0x3, 0x4, 0x5, 0x80000001, 0x3, 0x1, 0x1ff, 0x3, 0x1000, 0xfffffffd, 0x7, 0x1, 0xff, 0x6, 0x8000, 0xea29, 0xbd44, 0xffff785f, 0x2, 0xfffffffe, 0x28000, 0x0, 0x8, 0x3, 0x98, 0xf26, 0x401, 0x7, 0x11, 0x2, 0x5, 0xc56e, 0x280000, 0x0, 0x9, 0xed4, 0x9, 0x9, 0x100, 0x3, 0x0, 0xcab, 0xfffffffb, 0x5, 0x4, 0x3, 0x5, 0xf5f4, 0x10000, 0x2, 0x6, 0x7, 0x81af, 0x5, 0x2, 0xfffffff9, 0x10000, 0x80, 0x80000000, 0x7fffffff, 0x2, 0x3, 0x6, 0x4, 0x7ff, 0x3, 0x1, 0x5, 0x7ff, 0x8, 0x66db7763, 0xf, 0x2, 0x10000000, 0x81, 0x3, 0x80000001, 0x0, 0xdd75, 0x8, 0x2, 0x9, 0x1, 0x5, 0x0, 0x9, 0x8, 0x5, 0x401, 0x8, 0x9, 0x3, 0x1, 0xfffffbff, 0x1, 0x72, 0x401, 0x4, 0x8, 0x6, 0x6, 0x8, 0xcf, 0x1, 0x1, 0xc64, 0xffff, 0x200, 0x200, 0x800, 0x4, 0x7fffffff, 0x10000, 0x7, 0xeca, 0x8, 0x1377, 0x6, 0x8, 0x40, 0x1, 0x0, 0x4, 0x8, 0x1, 0x101, 0xc, 0xffff, 0x3e40, 0x1, 0x9, 0x6, 0x7fff, 0x2, 0x7fff, 0x1, 0x20, 0x10000, 0x3, 0x4, 0x1ff, 0x6, 0x2, 0x2, 0xffffffff, 0x6, 0x0, 0x3, 0x3, 0x4, 0x80000001, 0x7, 0x752d, 0x8, 0x77a5, 0x36, 0x7498cfdd, 0xffff5a77, 0x9, 0x4, 0xd, 0x27, 0x1, 0x1000, 0x101, 0x74f, 0xf, 0xe3a, 0x401, 0xe52, 0x7, 0x2, 0x7, 0x3b2, 0x10001, 0x5, 0x10, 0x1, 0x7, 0xfffffffd, 0xfdc7, 0x9, 0x400, 0x1ff, 0x8000, 0x6, 0x8, 0x1, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x4, 0x6, 0x0, 0xff, 0x1, 0x3, 0x4, 0x4, 0x5, 0x6, 0x10001, 0xc1, 0x7, 0x7, 0xffffffff, 0xae, 0xb, 0x2, 0x1, 0x3, 0x2, 0xa0, 0x28, 0x80, 0x1, 0xfff, 0xf, 0x3, 0x180, 0x9, 0x75, 0x2, 0x6, 0x9, 0xe0e3, 0xfffffff7, 0x8, 0x109, 0x60e, 0x1, 0x8, 0x400, 0x4, 0x5, 0x5956, 0x0, 0x9, 0xffffffff, 0x6, 0x5, 0x3, 0xd, 0x710a32e8, 0x1e10, 0x9, 0x7ff, 0x9, 0x4, 0x4, 0x4, 0x7, 0x3, 0x6, 0x5, 0x0, 0x946f, 0x9, 0x81, 0x6, 0x2, 0xb937, 0x80, 0x0, 0x8001, 0x8000, 0x8, 0x7, 0x9, 0xd9c, 0xffff5be8, 0x9, 0x4, 0x3, 0x5, 0x7, 0x87d, 0x3c, 0x6, 0x0, 0x80000001, 0x5, 0x3, 0xfffffbff, 0x3, 0x81, 0x1000, 0x1, 0x2, 0xdc, 0x5, 0xfffffff8, 0xda01, 0x3, 0x1c0, 0x5, 0x4b, 0x8, 0x1e2, 0x4, 0xa, 0x0, 0x7, 0x3, 0x400, 0x0, 0x6, 0x8, 0x4, 0xfffffffa, 0x1, 0x6, 0xe8, 0x5, 0x5, 0x624f08e4, 0x2, 0x8, 0x8, 0x0, 0x51d, 0x2, 0x2, 0x4, 0x0, 0x7fffffff, 0xb503, 0x1, 0xfffffffa, 0xa, 0x1, 0x1, 0x1, 0x7, 0x3, 0x2, 0xd, 0xc, 0xc, 0x0, 0x7, 0xced, 0x8, 0x9, 0x2c, 0x9, 0x0, 0xfffffffe, 0x9, 0x2, 0x6, 0x3dbf23e0, 0x8, 0x0, 0x4, 0x9, 0x5, 0x7, 0x9, 0x2, 0xfffffff7, 0xdb84, 0x6, 0x80000000, 0x8, 0x800, 0x6, 0x7, 0x2, 0x2e, 0x200, 0x7, 0xf43, 0x7e6, 0x959, 0x4c9, 0x3, 0x72, 0x7, 0x7fff, 0x81, 0x9, 0x3, 0x4f7e, 0x8000, 0x401, 0xfffffff8, 0x3, 0x9f78, 0x8, 0x1, 0xffffff7c, 0x4, 0x4, 0x80000000, 0x3, 0x6, 0x0, 0x2, 0x1281, 0x6, 0x9, 0x17bb, 0x2, 0x627, 0x8001, 0x0, 0x6, 0x4, 0x7bdb, 0x7, 0x722, 0x3ff, 0x9, 0x6d3, 0x0, 0x1, 0x0, 0x80000001, 0x80000000, 0xf095, 0x4, 0x4, 0x0, 0x9, 0x5, 0x0, 0x2, 0x5, 0x40, 0x40, 0x36, 0x7fff, 0x62, 0xfef1, 0xd, 0x2, 0x0, 0xffffff81, 0x0, 0x81, 0xcbd3, 0x1, 0x8, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x0, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x8, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0xfff, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x80004, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 438.328694ms ago: executing program 3 (id=397): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r1, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c531a0718}, 0xc081) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffc3}, 0x10) 237.129127ms ago: executing program 3 (id=398): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000540)="7f839800eea25dccc6c94d41f93010a6882bbac22d469fa25b711cf3b497956e2ce9cfa5e274380486089a7f1aac84502da1ec1fd13b438b9158c96d1f91cf1db4093aefcfe19655002a518f9a03f141bbfc17d8985a19382f316a3badb8b84e22bfbc3702844bc4e2f58f0c3cadbe076da15e8e2b1a147567c4e9d4189413a3ab18a208c43a1d52998698fe41b1bf588131d66f620016d749a72871", 0x9c}, {&(0x7f0000000600)="a8f6b1f0296310f516b85fb830ee914bc28be3b4805972a7bec1d42ddab8286c1464abec0db5a3aa818511fd9fc56ef44b8ec963d7d7a8361d8d11b3380bff1428fcfe440bc5a57495bf7c2c6f17", 0x4e}, {&(0x7f0000000680)="fda1d76f8b5b47fb513309d8d7808d5202402db0a6686bcdd8d48a60cf4ed966f9934db11dc536c1acb4038a83", 0x2d}, {&(0x7f00000006c0)="ae10e062b9a7006231bcfdd1d5fadae221cdb941b0d8cdf13821bc45d6ca3020f99be5185e39599a4edd4e2af0c81f4545bed03a859e349e2e3b1274fc8fcd71ab2027121abb649abecd2b11fba39382615acd3a5df5a0ded78772d6b2c7fba95d4c2a9d8da29710da3da2be06d3dc683457aed29a489abe1af43a024a53bfb32813de6a248a41bb07e5895838db2ef5f54de5c8e8eadf", 0x97}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="19ccfa8807aeef83f87ee80d00053ee1ce2fbd4617c0c3b810546626e12e560a10d2ff350d1c49b060a78a355de62460c8f38e502b5cbe6a9e75956edc09ba0c788fbc5a263e71d7294a700578e3c7595d62260403e7f616e9c2f4da81c60c9739d1d3e9135a4d3f261f64fdc2cb0c294cdfeea2782d6107d8531b7c38ba724788a5e2301a031124a7431688e7ab319f9bd12bdbbdd1ccc321d0", 0x9a}, {&(0x7f0000001840)="610077d859f3c8ee6bcd898c9a84abe9cf9f3c0802d5ec425cc18a2ad9f82f7b8b9e3c73d658b168bec7ec8bbf33d60aa015ef0e88f5b3eba5a6ab4f3dbaa496d732117ae051202ac15e81326222baffc39a06bd39072269594cd442d8a48c4c53459c11e69c98fe43a5dfc9d24a5fbd91a7269a6ccaf7beb0154cd9d31a9ff6a57a3633586295128bf6343731153845dbdb0799392c1d8d9ef28841a581712a1ff4cf84fd84770508326b1a0018f5124c91900b9daa8e5b2ba1ccb87803d9ebef69705c39cb2a1cea98810f62e47d4d0b2b2aeb794862c370bc691839ea7d852d", 0xe1}, {&(0x7f0000001940)="29ba970f684e234f293c7aac6420282df441baadd773041c5f5a5200171fa9e0994e32b91e54ecb47fb419d06e49502e19bfad36a2a616c7d1411fd96990be0ebde196671d66d8febc1edd737b7cd93b61ae3e73e09d0310d56f549d6774106e641b63a7cabd4fae100ed01ce3ebd623d73bd834422e76978be381c2634de9836891", 0x82}, {&(0x7f0000001a00)="0a57568713cc9d0798852a50d570064d3259c13319fb578bef44019b703457230507558f23ce44e0413b93d5cdf629f07acac425cc8aae75c6073e2cb767ddeeda32092419bed5455d7624774dbe343a838f520aecc98bd3e7aa5d0625b13d4aaf994aa08504df2ad037a01a80e2ebdfa3a9d57588c5aca4153cfdebaf567f0d211d11a36e4864a98e8d6a1079e5f3ced3ec99e4971883677099b7e94e68f91faf9c4f8d64d235c7717d0b079e521aaf353dafa95a35e0dd0683220203d30784e1cd362cce03ebe693dd9efd5f59c3c9253e2b1a395797e6c3047e1e92c84185054446265e56ffcf070fe2", 0xeb}, {&(0x7f0000001b00)="35748ede1f5444f0311d5ac42f16a02a4302ccba111c36cd5062a056ec5954d43f677534314eb78e583b440c5c82013d2fcd39be19f509249b6c7afdcdf64f5bd9fecf55450f33b9a576f1bc1be5f5f8b88772ad2de6e0cb4e487c8440464e20c02ac21c0aaeb066111ae16f5cc1104c01d91a4d629c6aaa5a33f9811727fde4625397896d65407baa5a60039002af926ee113dbdaebaecea087abaf7529093df4719562c2931498675879128bee877fee263aedecb2daa96514f77c366278aa939aeb6715536750c19f37ceb7d632ba3cb23144a09326a740", 0xd9}], 0xa, &(0x7f0000001c80)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x48, 0x4000000}}, {{&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001e80)="71c2c0f853534e6fcef69bcb3cd151317b9e11825d5db0fe0aafc942de80745c9d83cec8d49147a88893b66ddb4dadab5b50711ce87f26d54002ab0243c62758179db9e0e8abbe4c63ab2434178b139f5161b245f60edac32e33eaa5a61ad44930f57d8dcbf875a4d9a4674a9429c0065fd3d4107d4211c5fcd61e2bf66cd2f264356ef9fa5cb37e68bd9bb52ce89d3b9ce4dcf98885ac0d6463b808c311236c65317531429fb18727a04c", 0xab}, {&(0x7f0000001f40)="2f092c6f4382a28cf8deedf63fea50dfc09525b7eb527d10e740710c1e0ce449d8f3dd6f12802fed3a32d304cac255a9486daf42daed0d78cac24748bd7c406db1db38e49c35dc9e4bfee76ab32abb2f78946d39e3da862137d281bf594ed0dd6ce88e97f6cac1d6c01964c1d24df9e6aa9c6144f74d48b7976ee843feb2af268feb2e8a8d93637a8e3839b992de0cce018aff9fde93e4f4cb80c3ae29d3cda2d36e70e447fc9fa862b4372c5565bb04a0dc21e4b6cf552a736845f42e54540bdf5a875db3787795aaac64a7567457abfbbbf4a19ec08d3bbb9b9d446914b0e443b5956dc21c0701", 0xe8}, {&(0x7f0000002140)="8b564c73b3e02ded53e8d923af966139fe8533bab3ef30bc2c01dc900cb610430375887591bdae727ec8c416c8ef1eea6e14c4f8f02c7c2cae7d650883889de1b076c1f950e4c27bdacf6af7f6034265c3dc5b80560b8b81919b7b9124b448cb1fac31b0dcd6191447bcb3b3b923b4e55feaec81369d972e29e010bdce6b9acc2485312e53b56902605ab057ee79395236fc8613a549165518eda6b1de05f481f2f34b4d81592bc870d2e4f7a2ef2f25ee73d44c6952b2f1472f81d0be5b60bc0d6a11cbe14d453031dd9b50ed1830abd2f792370d361b7b3367142d06297e180e360dd4c8677ddd55258809bf3e", 0xee}, {&(0x7f0000002240)="1432c10456560b66be873fb311fc9e4846addad73c5b534e4eabc7", 0x1b}, {&(0x7f0000002280)="b212bf73c49524a32b4d8f", 0xb}], 0x5, &(0x7f0000001d00)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r3, r2, 0xffffffffffffffff, r1, r0]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0xa4, 0x10}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002480)="c57411c216c0e53464b396086be9890398f777ecd2f92101c28f55f6e9f9a27c0b34d5aac71c144fae46ad409a4bed532a7a844307787b7277647516456fee095a66b8b9c378f7362de9847ddab2316180b216370c1fa5b5adf08dbf20071d82c2c32a315f1d4af0748078fe75b7af7974c3f07cb1c9d9568ac47ad39031f70786043e662b5186535cd47f9dbdd353ead153efdf5ea068ded78e5881521be0262fc9827fc0e9422af8bef871cd7f84e1a943f08d1cac2aba5fc9c16da87fd881a2d487101a7779a83be795", 0xcb}, {&(0x7f0000002580)="981fd2c46d6ce9701f108f1871d8cc185967a6f7863684c59b65a25c2ce9cce6df840ea25d01a548898da5a2cc3d37d8538eeb4a59b3ee043397c2f7ffb04e18328ed1b9f603b5620e678d907c06db50e02bf3c71c6660a6458a5475819c266bca61d86cf1e214d9e8f59cf376de1d369bdb6c5b25573a99af88a992dfa87d5a9cf433d97ec7efd14dc09eabc7daa362bbf09fb3f2314b3fe0aa0c04fbf37da747d093be6172780cf8222c", 0xab}, {&(0x7f0000002640)="4c207f75c78b75023b1fa060aabc531a6c6f19f47b4b99630a579f15507bfab9578aa9599b61099a2d69529e76f5109f11992207b31cbf8b19cb1a0d0d8871931a454041e39a9d6df3bf55c147e0711a41ff6e7b860a7aa5dcbae41d6caba48c4dd2c7dbccaead8560358afff692a2c8a22a5804ffb7a3aa80be91dd3165ac46652a078593eb4948320fc390d4387be11ec276e4af388875ac41348faabc502fb64936ae301ef53571e81b0dc41fa0e1ac89d423ccca61f57f8fab0a88136257bedb0ed2f2b5", 0xc6}, {&(0x7f0000002740)="4ec920bf79d09ddabda7ace2e94ea3772c12903240f251292e256169449b9588d505b27434b433c32c6553e7179fc42b6d41a33a61fae5ec1f23520469", 0x3d}, {&(0x7f0000002780)="8c5ba668da0f6e123a74aaef4cce7d7bb79217c41fd3998a5a79735b34045ddb028dccffd4f9d56c88ec290cb19815bad21fff8e03b431a72e1be5cbdd4d1ea963bb8e8d8587e64ac9bfb505d3164f37cd16e086c1b3014b3807f47fc470a6f7630d40f1eb496260a0bc982ebc8e0b26c913628e4e14f5e3835087ce82366493c2e8899b29d679c5ea0bb1c8847965", 0x8f}, {&(0x7f0000002840)="235996a52360f64318b93649a3ed25e96f77404644db4e6909729d8bdea691f9ab2635f86cf905f17a1b5300e5bb1af44d67b5fd2f3d9e5f1d7450b7324fc6dc6ec38bb608752d4b93f63c9d3da7abc3d58832f141695bbdf71a5f4850f7963d9242f03a8f84a458581b047eff6b71f89518bbfe2050b680fcbff54b7d037782f89adfb92da4ae16e10615a309172a403ba9a3c751f3264fac4dd9fcf42e29c22b78c6af9c3728798cdcfee3e4549a7c2b038af732d9eeffafa32d50c62aa186e85e614cd406c93f8741", 0xca}, {&(0x7f0000002940)="6ed72dc09dd9db2070642d823f19277afd97795dbceca5a0ec09fa58f93757bb75786789589fee268e068b04a48d0e4f30aed0f5120cbcf0bf062cee4b66f16d254a1e1203cab0e723cf72c92334dc265dd2", 0x52}], 0x7, &(0x7f0000002ac0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r0]}}], 0x78, 0x20000801}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x4000001, 0x0, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x2, 0x7ff, 0x0, 'queue0\x00', 0x1000000c}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x4, 0x2, 0x10000}, 0x6de38590}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x4, {}, {}, @raw32}], 0x1c) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r4, 0x6) r7 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, [0x0, 0x38e, 0xd8, 0x6, 0xff, 0x1ff, 0x1, 0x2, 0x7, 0x86, 0x7, 0xc0, 0x4, 0xa22e, 0x6]}, &(0x7f0000000040)=0x9e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) setpriority(0x2, r8, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000005000000000000000000000000000000000000000000000000a1c4d8948002088498fba24441ecddf6346b01b45653f09c4aebdd8eedc9189b6857c3bcc448b1ac1c5e3c3275ad097df3c4178040fafca99535acc928eec95e583e2233ed9951365c90447e2b7bdcc349c9ca2a944549fd68cc6bfae7c1bb119e95512ded668ef89a946629ed74e9a82e9e88ae26fbf3ac3c7d780868f0626540ee7c0300000000000000ccdf114f01026af8806fafc127"], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x4, 0x80010, 0x9, 0x1, 0x7, 0x6, 0x4, 0x0, 0x2, 0x10}) 0s ago: executing program 4 (id=399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) kernel console output (not intermixed with test programs): _slave_0 [ 86.021057][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.047622][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.085316][ T5634] hsr_slave_0: entered promiscuous mode [ 86.091935][ T5634] hsr_slave_1: entered promiscuous mode [ 86.098889][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 86.104895][ T5634] Cannot create hsr debugfs directory [ 86.124091][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.131595][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.158073][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.179088][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.186220][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.212786][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.225043][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.232584][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.259710][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.298936][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.306004][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.332418][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.344393][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.351517][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.378779][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.541067][ T5639] hsr_slave_0: entered promiscuous mode [ 86.548370][ T5639] hsr_slave_1: entered promiscuous mode [ 86.554605][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 86.561088][ T5639] Cannot create hsr debugfs directory [ 86.621986][ T5640] hsr_slave_0: entered promiscuous mode [ 86.628589][ T5640] hsr_slave_1: entered promiscuous mode [ 86.634781][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 86.641082][ T5640] Cannot create hsr debugfs directory [ 86.673598][ T5641] hsr_slave_0: entered promiscuous mode [ 86.680052][ T5641] hsr_slave_1: entered promiscuous mode [ 86.686353][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 86.692530][ T5641] Cannot create hsr debugfs directory [ 86.921713][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.934828][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.943244][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.954348][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.992170][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.001990][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.070658][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.085933][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.359649][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.374231][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.407527][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.421478][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.442440][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.452080][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.471424][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.483402][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.531426][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.541799][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.550500][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.560489][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.569771][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.582085][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.592862][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.599905][ T51] Bluetooth: hci0: command tx timeout [ 87.608318][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.668633][ T51] Bluetooth: hci1: command tx timeout [ 87.750775][ T5641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.763392][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.778172][ T5641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.790791][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.800792][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.816396][ T5641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.827303][ T51] Bluetooth: hci3: command tx timeout [ 87.832253][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.841436][ T5641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.853570][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.907197][ T5630] Bluetooth: hci4: command tx timeout [ 87.912967][ T51] Bluetooth: hci2: command tx timeout [ 87.951840][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.991781][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.002935][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.017995][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.025886][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.041466][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.048576][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.059964][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.069385][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.079587][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.088471][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.098940][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.143516][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.150782][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.199012][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.235695][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.243196][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.272792][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.280183][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.351059][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.458028][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.475342][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.496318][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.519746][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.526986][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.554643][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.562294][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.611135][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.623496][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.661406][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.668978][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.695650][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.722799][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.730094][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.760130][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.813424][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.820650][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.836660][ T5625] veth0_vlan: entered promiscuous mode [ 88.871374][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.878661][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.901084][ T5625] veth1_vlan: entered promiscuous mode [ 88.956783][ T5634] veth0_vlan: entered promiscuous mode [ 88.972231][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.012483][ T5634] veth1_vlan: entered promiscuous mode [ 89.060631][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.085515][ T5625] veth0_macvtap: entered promiscuous mode [ 89.119118][ T5625] veth1_macvtap: entered promiscuous mode [ 89.173262][ T5639] veth0_vlan: entered promiscuous mode [ 89.199011][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.212938][ T5634] veth0_macvtap: entered promiscuous mode [ 89.232215][ T5634] veth1_macvtap: entered promiscuous mode [ 89.242803][ T5639] veth1_vlan: entered promiscuous mode [ 89.256017][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.283668][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.309425][ T158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.330865][ T158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340377][ T158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.350561][ T158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.370702][ T5641] veth0_vlan: entered promiscuous mode [ 89.394381][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.423858][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.443396][ T5641] veth1_vlan: entered promiscuous mode [ 89.483416][ T5639] veth0_macvtap: entered promiscuous mode [ 89.495156][ T3350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506463][ T3350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.527957][ T3350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.537245][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.556237][ T5639] veth1_macvtap: entered promiscuous mode [ 89.581677][ T5640] veth0_vlan: entered promiscuous mode [ 89.656048][ T5640] veth1_vlan: entered promiscuous mode [ 89.667236][ T51] Bluetooth: hci0: command tx timeout [ 89.670882][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.682527][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.712276][ T5641] veth0_macvtap: entered promiscuous mode [ 89.726791][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.747565][ T51] Bluetooth: hci1: command tx timeout [ 89.772841][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.782174][ T5641] veth1_macvtap: entered promiscuous mode [ 89.803666][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.817959][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.860011][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.886563][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.889657][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.904015][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.915704][ T51] Bluetooth: hci3: command tx timeout [ 89.929100][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958090][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.966757][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.969844][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.992377][ T51] Bluetooth: hci2: command tx timeout [ 89.998836][ T51] Bluetooth: hci4: command tx timeout [ 90.011135][ T5640] veth0_macvtap: entered promiscuous mode [ 90.037495][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.051101][ T5640] veth1_macvtap: entered promiscuous mode [ 90.124037][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.124946][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.148383][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.168440][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.195660][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.205118][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298791][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.311249][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.335790][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.362632][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.450332][ T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.462577][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.475572][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.493932][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514988][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562201][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.615038][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.648217][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.773389][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.830700][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.979299][ T5729] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 91.014100][ T5729] macvlan1: entered promiscuous mode [ 91.042555][ T5729] macvlan1: entered allmulticast mode [ 91.078188][ T5729] veth1_vlan: entered allmulticast mode [ 91.099227][ T5729] team0: Port device macvlan1 added [ 91.112471][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.127727][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.279148][ T5358] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.477231][ T5358] usb 2-1: config 0 has no interfaces? [ 91.495102][ T5358] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 91.510556][ T5358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.541663][ T5358] usb 2-1: Product: syz [ 91.555835][ T5358] usb 2-1: Manufacturer: syz [ 91.570345][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.579486][ T5358] usb 2-1: SerialNumber: syz [ 91.602959][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.622861][ T5358] usb 2-1: config 0 descriptor?? [ 91.679411][ T5715] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.749769][ T51] Bluetooth: hci0: command tx timeout [ 91.828293][ T51] Bluetooth: hci1: command tx timeout [ 91.869407][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 91.899222][ T5715] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 91.928812][ T5715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.960816][ T5715] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 91.992146][ T51] Bluetooth: hci3: command tx timeout [ 91.998381][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.035694][ T5715] usb 5-1: config 0 descriptor?? [ 92.070623][ T51] Bluetooth: hci4: command tx timeout [ 92.076304][ T5630] Bluetooth: hci2: command tx timeout [ 92.153454][ T29] cfg80211: failed to load regulatory.db [ 92.496462][ T5747] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 94.025545][ T9] usb 2-1: USB disconnect, device number 2 [ 94.293643][ T5764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.347474][ T810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.517411][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 94.536439][ T810] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 94.548506][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056563000: rx timeout, send abort [ 94.573720][ T810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.590876][ T810] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 94.614288][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.658528][ T5715] usbhid 5-1:0.0: can't add hid device: -71 [ 94.672006][ T810] usb 1-1: config 0 descriptor?? [ 94.686160][ T5715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.788347][ T5715] usb 5-1: USB disconnect, device number 2 [ 94.991589][ T5687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.057907][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056563000: abort rx timeout. Force session deactivation [ 95.201127][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 95.221651][ T5687] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 95.251296][ T5687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.280283][ T5687] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 95.317746][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.368448][ T5687] usb 3-1: config 0 descriptor?? [ 95.721665][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 96.197781][ T5800] process 'syz.4.20' launched './file2' with NULL argv: empty string added [ 97.120592][ T810] usbhid 1-1:0.0: can't add hid device: -71 [ 97.180610][ T810] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.253999][ T810] usb 1-1: USB disconnect, device number 2 [ 97.545236][ T5809] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 97.557230][ T5809] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 97.730882][ T5687] usbhid 3-1:0.0: can't add hid device: -71 [ 97.784363][ T5687] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.882445][ T5687] usb 3-1: USB disconnect, device number 2 [ 98.277094][ T5687] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.468585][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 98.489890][ T5687] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 98.530197][ T5687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.544909][ T5687] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 98.565814][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.592917][ T5687] usb 3-1: config 0 descriptor?? [ 98.967315][ T810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.171014][ T5821] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 99.195057][ T810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.216119][ T810] usb 5-1: config 0 has no interface number 0 [ 99.245271][ T810] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 99.271036][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.286290][ T5823] netlink: 76 bytes leftover after parsing attributes in process `syz.3.26'. [ 99.297048][ T810] usb 5-1: Product: syz [ 99.301587][ T810] usb 5-1: Manufacturer: syz [ 99.314051][ T810] usb 5-1: SerialNumber: syz [ 99.337400][ T810] usb 5-1: config 0 descriptor?? [ 99.569559][ T810] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 99.628662][ T810] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 99.659648][ T810] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 99.679016][ T810] usb 5-1: media controller created [ 99.701082][ T5832] capability: warning: `syz.1.25' uses 32-bit capabilities (legacy support in use) [ 99.761004][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.032189][ T810] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 101.096715][ T5687] usbhid 3-1:0.0: can't add hid device: -71 [ 101.142448][ T5687] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.240425][ T5687] usb 3-1: USB disconnect, device number 3 [ 101.957260][ T5856] Zero length message leads to an empty skb [ 102.037142][ T5687] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.065302][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.072008][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.084634][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.130076][ T5856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.154706][ T5716] usb 5-1: USB disconnect, device number 3 [ 102.160773][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.167476][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.212412][ T5687] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.221477][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.237953][ T5687] usb 4-1: config 0 has no interface number 0 [ 102.251716][ T5856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.269339][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.279866][ T5687] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.312968][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.317636][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.334279][ T5856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.342479][ T5687] usb 4-1: Product: syz [ 102.342507][ T5687] usb 4-1: Manufacturer: syz [ 102.342524][ T5687] usb 4-1: SerialNumber: syz [ 102.359354][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.360172][ T5687] usb 4-1: config 0 descriptor?? [ 102.375397][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.406798][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.412830][ T5856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.428069][ T9] usb 2-1: config 0 has no interface number 0 [ 102.438862][ T5856] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.504210][ T5856] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.564238][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.594662][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.625428][ T9] usb 2-1: Product: syz [ 102.640312][ T9] usb 2-1: Manufacturer: syz [ 102.653650][ T9] usb 2-1: SerialNumber: syz [ 102.669522][ T9] usb 2-1: config 0 descriptor?? [ 102.697534][ T5687] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 102.734974][ T5687] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.755647][ T5687] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 102.765395][ T5687] usb 4-1: media controller created [ 102.836756][ T5687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.941044][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 103.000987][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.030478][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 103.040544][ T9] usb 2-1: media controller created [ 103.134520][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.152059][ T5870] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 103.280669][ T5740] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.378480][ T5740] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.067192][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.074732][ T5687] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 104.147044][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.311805][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.323406][ T9] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 104.387074][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.467783][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.497119][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.814352][ T5874] macsec1: entered promiscuous mode [ 104.841579][ T5874] bridge0: entered promiscuous mode [ 105.284463][ T5740] usb 2-1: USB disconnect, device number 3 [ 105.421286][ T5687] usb 4-1: USB disconnect, device number 2 [ 105.740463][ T5740] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.772692][ T5894] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 105.907537][ T5740] usb 2-1: Using ep0 maxpacket: 16 [ 105.950534][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.976677][ T5896] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 105.987623][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.022416][ T5896] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 106.034902][ T5740] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 106.066729][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.120895][ T5740] usb 2-1: config 0 descriptor?? [ 106.147493][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.235748][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.387125][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.476941][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.546951][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.618061][ T5740] apple 0003:05AC:024B.0002: unknown global tag 0xe [ 106.653999][ T5740] apple 0003:05AC:024B.0002: item 0 1 1 14 parsing failed [ 106.673090][ T5740] apple 0003:05AC:024B.0002: parse failed [ 106.690753][ T5740] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 106.737049][ T5715] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.885867][ T5885] syzkaller0: entered promiscuous mode [ 106.902122][ T5885] syzkaller0: entered allmulticast mode [ 106.935882][ T5715] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.958133][ T5715] usb 1-1: config 0 has no interface number 0 [ 106.997770][ T5715] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 107.051515][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.086179][ T5715] usb 1-1: Product: syz [ 107.094837][ T10] usb 2-1: USB disconnect, device number 4 [ 107.115015][ T5715] usb 1-1: Manufacturer: syz [ 107.135492][ T5715] usb 1-1: SerialNumber: syz [ 107.171056][ T5715] usb 1-1: config 0 descriptor?? [ 107.261684][ T5915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 107.307809][ T5913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 107.432355][ T5715] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 107.474715][ T5715] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.530070][ T5715] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 107.562522][ T5715] usb 1-1: media controller created [ 107.691241][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.227072][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.307603][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.440227][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.462459][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.474104][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.547555][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.557487][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.629931][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.744654][ T5925] macsec1: entered promiscuous mode [ 108.752322][ T5925] bridge0: entered promiscuous mode [ 108.760474][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 108.773483][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.798806][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.816190][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.816962][ T995] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.843036][ T9] usb 2-1: Product: syz [ 108.855413][ T9] usb 2-1: Manufacturer: syz [ 108.861279][ T9] usb 2-1: SerialNumber: syz [ 108.867542][ T5715] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 108.889206][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.937147][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.959034][ T5629] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.977059][ T5687] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.009570][ T995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.033592][ T995] usb 5-1: config 0 has no interface number 0 [ 109.068289][ T995] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.092152][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.104862][ T995] usb 5-1: Product: syz [ 109.112190][ T995] usb 5-1: Manufacturer: syz [ 109.117221][ T995] usb 5-1: SerialNumber: syz [ 109.132570][ T995] usb 5-1: config 0 descriptor?? [ 109.149314][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 109.164806][ T10] usb 3-1: config 0 has no interfaces? [ 109.185259][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.222807][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.256632][ T10] usb 3-1: Product: syz [ 109.274966][ T10] usb 3-1: Manufacturer: syz [ 109.281684][ T10] usb 3-1: SerialNumber: syz [ 109.302352][ T10] usb 3-1: config 0 descriptor?? [ 109.381616][ T995] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 109.409648][ T995] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.420689][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 109.430566][ T995] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 109.444697][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.453836][ T995] usb 5-1: media controller created [ 109.475925][ T10] usb 2-1: USB disconnect, device number 5 [ 109.497593][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.519081][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.707044][ T5687] usb 4-1: device descriptor read/64, error -71 [ 109.732899][ T810] usb 3-1: USB disconnect, device number 4 [ 109.947410][ T5687] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.992358][ T5715] usb 1-1: USB disconnect, device number 4 [ 110.070426][ T5629] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 110.094432][ T5629] ath9k_htc: Failed to initialize the device [ 110.103854][ T5687] usb 4-1: device descriptor read/64, error -71 [ 110.119408][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 110.230643][ T5687] usb usb4-port1: attempt power cycle [ 110.414200][ T5941] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 110.433328][ T5941] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 110.447354][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.577045][ T5687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.610006][ T5687] usb 4-1: device descriptor read/8, error -71 [ 110.620168][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 110.628763][ T995] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 110.633896][ T10] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 110.665298][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 110.707131][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 110.721238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.748283][ T10] usb 2-1: Product: syz [ 110.761104][ T10] usb 2-1: Manufacturer: syz [ 110.776913][ T10] usb 2-1: SerialNumber: syz [ 110.790712][ T5951] FAULT_INJECTION: forcing a failure. [ 110.790712][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.819001][ T10] ldusb 2-1:1.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.848656][ T10] ldusb 2-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.862318][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 110.862347][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.862358][ T5951] Call Trace: [ 110.862370][ T5951] [ 110.862378][ T5951] dump_stack_lvl+0xe8/0x150 [ 110.862408][ T5951] should_fail_ex+0x412/0x560 [ 110.862436][ T5951] ? __pfx_do_get_msr+0x10/0x10 [ 110.862457][ T5951] _copy_to_user+0x31/0xb0 [ 110.862495][ T5951] ? __pfx_do_get_msr+0x10/0x10 [ 110.862514][ T5951] msr_io+0x713/0x8b0 [ 110.862539][ T5951] ? __pfx_do_get_msr+0x10/0x10 [ 110.862562][ T5951] ? __pfx_msr_io+0x10/0x10 [ 110.862581][ T5951] ? __srcu_check_read_flavor+0x10b/0x250 [ 110.862602][ T5951] kvm_arch_vcpu_ioctl+0x1325/0x2ff0 [ 110.862622][ T5951] ? kvm_arch_vcpu_ioctl+0x12e8/0x2ff0 [ 110.862639][ T5951] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 110.862658][ T5951] ? __lock_acquire+0x6b5/0x2cf0 [ 110.862683][ T5951] ? unwind_next_frame+0xa6/0x2550 [ 110.862708][ T5951] ? unwind_next_frame+0xa6/0x2550 [ 110.862730][ T5951] ? is_bpf_text_address+0x26/0x2b0 [ 110.862756][ T5951] ? is_bpf_text_address+0x26/0x2b0 [ 110.862775][ T5951] ? is_bpf_text_address+0x292/0x2b0 [ 110.862790][ T5951] ? is_bpf_text_address+0x26/0x2b0 [ 110.862808][ T5951] ? kernel_text_address+0xa5/0xe0 [ 110.862831][ T5951] ? __kernel_text_address+0xd/0x30 [ 110.862852][ T5951] ? unwind_get_return_address+0x4d/0x90 [ 110.862871][ T5951] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 110.862899][ T5951] ? __lock_acquire+0x6b5/0x2cf0 [ 110.862922][ T5951] ? stack_trace_save+0xa9/0x100 [ 110.862944][ T5951] ? __pfx_stack_trace_save+0x10/0x10 [ 110.862966][ T5951] ? kasan_save_free_info+0x46/0x50 [ 110.862987][ T5951] ? stack_depot_save_flags+0x33/0x810 [ 110.863013][ T5951] ? __mutex_trylock_common+0x158/0x260 [ 110.863037][ T5951] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.863060][ T5951] ? rcu_is_watching+0x15/0xb0 [ 110.863081][ T5951] ? trace_contention_end+0x3d/0x140 [ 110.863106][ T5951] ? __mutex_lock+0x319/0x1550 [ 110.863142][ T5951] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 110.863167][ T5951] ? __pfx___mutex_lock+0x10/0x10 [ 110.863195][ T5951] ? kasan_quarantine_put+0xbb/0x1f0 [ 110.863224][ T5951] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 110.863252][ T5951] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.863271][ T5951] ? do_vfs_ioctl+0x1166/0x1530 [ 110.863297][ T5951] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.863350][ T5951] kvm_vcpu_compat_ioctl+0x204/0x390 [ 110.863375][ T5951] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 110.863397][ T5951] ? __fget_files+0x3a0/0x420 [ 110.863415][ T5951] ? __fget_files+0x2a/0x420 [ 110.863436][ T5951] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 110.863463][ T5951] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 110.863498][ T5951] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 110.863525][ T5951] ? __fget_files+0x3a0/0x420 [ 110.863549][ T5951] ? fput+0xa0/0xd0 [ 110.863567][ T5951] ? ksys_write+0x242/0x270 [ 110.863600][ T5951] __do_fast_syscall_32+0x229/0x6e0 [ 110.863619][ T5951] ? do_fast_syscall_32+0x33/0x70 [ 110.863637][ T5951] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.863653][ T5951] ? asm_int80_emulation+0x1a/0x20 [ 110.863668][ T5951] ? do_int80_emulation+0x286/0x530 [ 110.863685][ T5951] ? trace_irq_disable+0x3b/0x140 [ 110.863710][ T5951] do_fast_syscall_32+0x33/0x70 [ 110.863730][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.863749][ T5951] RIP: 0023:0xf7f2301c [ 110.863764][ T5951] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 110.863777][ T5951] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 110.863797][ T5951] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 110.863808][ T5951] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.863817][ T5951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.863826][ T5951] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.863835][ T5951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.863859][ T5951] [ 111.289321][ T5687] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.317603][ T5687] usb 4-1: device descriptor read/8, error -71 [ 111.427537][ T5687] usb usb4-port1: unable to enumerate USB device [ 111.447930][ T995] usb 5-1: USB disconnect, device number 4 [ 111.552953][ T5715] usb 2-1: USB disconnect, device number 6 [ 111.618272][ T5953] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 111.624253][ T5953] pim6reg1: linktype set to 823 [ 111.631488][ T5715] ldusb 2-1:1.0: LD USB Device #0 now disconnected [ 111.702917][ T5955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 111.978591][ T5960] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 112.393726][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 112.425843][ T5971] FAULT_INJECTION: forcing a failure. [ 112.425843][ T5971] name failslab, interval 1, probability 0, space 0, times 1 [ 112.450500][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.4.73 Not tainted syzkaller #0 PREEMPT(full) [ 112.450530][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.450541][ T5971] Call Trace: [ 112.450549][ T5971] [ 112.450557][ T5971] dump_stack_lvl+0xe8/0x150 [ 112.450590][ T5971] should_fail_ex+0x412/0x560 [ 112.450624][ T5971] should_failslab+0xa8/0x100 [ 112.450659][ T5971] __kmalloc_cache_noprof+0x88/0x660 [ 112.450688][ T5971] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 112.450712][ T5971] ? sctp_v6_cmp_addr+0x15/0xd0 [ 112.450737][ T5971] ? sctp_add_bind_addr+0x8c/0x370 [ 112.450767][ T5971] sctp_add_bind_addr+0x8c/0x370 [ 112.450798][ T5971] sctp_copy_local_addr_list+0x314/0x4f0 [ 112.450827][ T5971] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 112.450853][ T5971] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 112.450881][ T5971] ? sctp_v6_is_any+0x64/0x80 [ 112.450908][ T5971] ? sctp_copy_one_addr+0x93/0x360 [ 112.450935][ T5971] sctp_bind_addr_copy+0xb3/0x3c0 [ 112.450963][ T5971] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 112.451000][ T5971] sctp_connect_new_asoc+0x2ff/0x6b0 [ 112.451033][ T5971] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 112.451068][ T5971] ? __local_bh_enable_ip+0xd0/0x130 [ 112.451087][ T5971] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 112.451115][ T5971] ? security_sctp_bind_connect+0x7e/0x2c0 [ 112.451138][ T5971] sctp_sendmsg+0x1528/0x2c10 [ 112.451185][ T5971] ? __pfx_sctp_sendmsg+0x10/0x10 [ 112.451217][ T5971] ? aa_sk_perm+0x6d5/0x900 [ 112.451247][ T5971] ? __might_fault+0xaf/0x130 [ 112.451281][ T5971] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.451320][ T5971] ? sock_rps_record_flow+0x19/0x350 [ 112.451349][ T5971] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.451378][ T5971] ? inet_sendmsg+0x2f4/0x370 [ 112.451406][ T5971] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.451434][ T5971] __sys_sendto+0x5de/0x710 [ 112.451463][ T5971] ? __pfx___sys_sendto+0x10/0x10 [ 112.451512][ T5971] ? fput+0xa0/0xd0 [ 112.451537][ T5971] ? ksys_write+0x242/0x270 [ 112.451569][ T5971] __ia32_sys_sendto+0xdd/0x100 [ 112.451595][ T5971] __do_fast_syscall_32+0x229/0x6e0 [ 112.451620][ T5971] ? do_fast_syscall_32+0x33/0x70 [ 112.451642][ T5971] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.451662][ T5971] ? asm_int80_emulation+0x1a/0x20 [ 112.451681][ T5971] ? do_int80_emulation+0x286/0x530 [ 112.451702][ T5971] ? trace_irq_disable+0x3b/0x140 [ 112.451735][ T5971] do_fast_syscall_32+0x33/0x70 [ 112.451759][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.451781][ T5971] RIP: 0023:0xf6fef01c [ 112.451800][ T5971] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 112.451816][ T5971] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 112.451838][ T5971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 112.451852][ T5971] RDX: 0000000000000001 RSI: 00000000200400d0 RDI: 0000000080000040 [ 112.451864][ T5971] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 112.451875][ T5971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.451887][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.451917][ T5971] [ 113.298906][ T5985] FAULT_INJECTION: forcing a failure. [ 113.298906][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 113.352320][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 113.352349][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.352360][ T5985] Call Trace: [ 113.352369][ T5985] [ 113.352377][ T5985] dump_stack_lvl+0xe8/0x150 [ 113.352408][ T5985] should_fail_ex+0x412/0x560 [ 113.352439][ T5985] should_failslab+0xa8/0x100 [ 113.352469][ T5985] ? __pmd_alloc+0xc1/0x5c0 [ 113.352492][ T5985] kmem_cache_alloc_noprof+0x87/0x650 [ 113.352527][ T5985] __pmd_alloc+0xc1/0x5c0 [ 113.352555][ T5985] handle_mm_fault+0xe96/0x3170 [ 113.352596][ T5985] ? handle_mm_fault+0xee/0x3170 [ 113.352628][ T5985] ? __pfx_handle_mm_fault+0x10/0x10 [ 113.352667][ T5985] ? __lock_acquire+0x6b5/0x2cf0 [ 113.352694][ T5985] ? lock_mm_and_find_vma+0xa7/0x340 [ 113.352726][ T5985] do_user_addr_fault+0x75b/0x1340 [ 113.352765][ T5985] exc_page_fault+0x6a/0xc0 [ 113.352790][ T5985] asm_exc_page_fault+0x26/0x30 [ 113.352810][ T5985] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 113.352839][ T5985] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 113.352854][ T5985] RSP: 0018:ffffc900058a7d38 EFLAGS: 00050202 [ 113.352874][ T5985] RAX: 00007ffffffff001 RBX: 000000000000001e RCX: 000000000000001e [ 113.352887][ T5985] RDX: 0000000000000001 RSI: 0000000080000200 RDI: ffffc900058a7da0 [ 113.352900][ T5985] RBP: ffffc900058a7e88 R08: ffffc900058a7dbd R09: 1ffff92000b14fb7 [ 113.352914][ T5985] R10: dffffc0000000000 R11: fffff52000b14fb8 R12: 000000000000001e [ 113.352927][ T5985] R13: 000000000000001e R14: ffffc900058a7da0 R15: 0000000080000200 [ 113.352959][ T5985] _copy_from_user+0x7a/0xb0 [ 113.352989][ T5985] __sys_connect+0x156/0x450 [ 113.353011][ T5985] ? fd_install+0x94/0x3d0 [ 113.353035][ T5985] ? __pfx___sys_connect+0x10/0x10 [ 113.353081][ T5985] __ia32_sys_connect+0x7a/0x90 [ 113.353105][ T5985] __do_fast_syscall_32+0x229/0x6e0 [ 113.353130][ T5985] ? do_fast_syscall_32+0x33/0x70 [ 113.353152][ T5985] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.353173][ T5985] ? asm_int80_emulation+0x1a/0x20 [ 113.353192][ T5985] ? do_int80_emulation+0x286/0x530 [ 113.353213][ T5985] ? trace_irq_disable+0x3b/0x140 [ 113.353245][ T5985] do_fast_syscall_32+0x33/0x70 [ 113.353278][ T5985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.353302][ T5985] RIP: 0023:0xf70bf01c [ 113.353320][ T5985] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 113.353335][ T5985] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 113.353353][ T5985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 113.353366][ T5985] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 113.353377][ T5985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.353388][ T5985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.353400][ T5985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.353431][ T5985] [ 113.994066][ T5989] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 114.239738][ T6000] cgroup: fork rejected by pids controller in /syz4 [ 114.303325][ T5992] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 114.357064][ T5992] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 114.863598][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.132791][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.402896][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.535815][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.114706][ T36] bridge_slave_1: left allmulticast mode [ 116.134952][ T36] bridge_slave_1: left promiscuous mode [ 116.160658][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.241321][ T36] bridge_slave_0: left allmulticast mode [ 116.270277][ T36] bridge_slave_0: left promiscuous mode [ 116.300446][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.518087][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.533116][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.542241][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.553974][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.566757][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.612028][ T30] audit: type=1326 audit(1777456584.356:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 116.744005][ T30] audit: type=1326 audit(1777456584.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 116.792861][ T30] audit: type=1326 audit(1777456584.406:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 116.829251][ T30] audit: type=1326 audit(1777456584.406:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 116.934994][ T30] audit: type=1326 audit(1777456584.406:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 116.993643][ T30] audit: type=1326 audit(1777456584.406:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 117.076970][ T5629] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.087381][ T30] audit: type=1326 audit(1777456584.406:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 117.129380][ T30] audit: type=1326 audit(1777456584.406:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 117.156983][ T30] audit: type=1326 audit(1777456584.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 117.181334][ T30] audit: type=1326 audit(1777456584.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 117.186993][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.241175][ T5629] usb 1-1: Using ep0 maxpacket: 32 [ 117.258085][ T5629] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.271387][ T5629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.299662][ T5629] usb 1-1: config 0 has no interface number 0 [ 117.320600][ T5629] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.356961][ T5629] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 117.396752][ T5629] usb 1-1: config 0 interface 8 has no altsetting 0 [ 117.419594][ T5629] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 117.434858][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.443987][ T5629] usb 1-1: Product: syz [ 117.451073][ T5629] usb 1-1: Manufacturer: syz [ 117.465712][ T5629] usb 1-1: SerialNumber: syz [ 117.518472][ T24] usb 3-1: device descriptor read/64, error -71 [ 117.540082][ T5629] usb 1-1: config 0 descriptor?? [ 117.663953][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.725101][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.743033][ T36] bond0 (unregistering): Released all slaves [ 117.767883][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.777165][ T6039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 117.784028][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.839070][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 117.917245][ T24] usb 3-1: device descriptor read/64, error -71 [ 117.958396][ T6050] vhci_hcd: connection closed [ 117.961616][ T12] vhci_hcd vhci_hcd.0: stop threads [ 118.036264][ T5629] ath6kl: Failed to submit usb control message: -71 [ 118.048533][ T5730] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 118.060971][ T12] vhci_hcd vhci_hcd.0: release socket [ 118.064172][ T24] usb usb3-port1: attempt power cycle [ 118.087034][ T5629] ath6kl: unable to send the bmi data to the device: -71 [ 118.095061][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 118.116686][ T5629] ath6kl: Unable to send get target info: -71 [ 118.134253][ T5629] ath6kl: Failed to init ath6kl core: -71 [ 118.178188][ T5730] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 118.200946][ T5629] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 118.213327][ T5730] usb 33-1: enqueue for inactive port 0 [ 118.261312][ T6058] fuse: Unknown parameter 'fd0x0000000000000003' [ 118.304747][ T5629] usb 1-1: USB disconnect, device number 5 [ 118.318396][ T5730] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 118.508011][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.538582][ T24] usb 3-1: device descriptor read/8, error -71 [ 118.626955][ T5630] Bluetooth: hci2: command tx timeout [ 118.827222][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.890525][ T24] usb 3-1: device descriptor read/8, error -71 [ 119.046608][ T24] usb usb3-port1: unable to enumerate USB device [ 119.116575][ T36] hsr_slave_0: left promiscuous mode [ 119.143903][ T36] hsr_slave_1: left promiscuous mode [ 119.177756][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.208555][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.252910][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.283654][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.408450][ T36] veth1_macvtap: left promiscuous mode [ 119.428972][ T36] veth0_macvtap: left promiscuous mode [ 119.460958][ T36] veth1_vlan: left promiscuous mode [ 119.485498][ T36] veth0_vlan: left promiscuous mode [ 119.616465][ T6076] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 119.725827][ T6076] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 119.767770][ T6083] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 120.707165][ T5630] Bluetooth: hci2: command tx timeout [ 120.878888][ T36] team0 (unregistering): Port device team_slave_1 removed [ 120.882427][ T6099] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.110'. [ 120.917160][ T6099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 120.944666][ T36] team0 (unregistering): Port device team_slave_0 removed [ 121.579782][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 122.299306][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.308228][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.326120][ T6037] bridge_slave_0: entered allmulticast mode [ 122.352714][ T6037] bridge_slave_0: entered promiscuous mode [ 122.373968][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.395413][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.420537][ T6037] bridge_slave_1: entered allmulticast mode [ 122.487552][ T6037] bridge_slave_1: entered promiscuous mode [ 122.622655][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 122.622677][ T30] audit: type=1326 audit(1777456590.376:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 122.719776][ T30] audit: type=1326 audit(1777456590.376:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 122.787481][ T5630] Bluetooth: hci2: command tx timeout [ 122.822373][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.826961][ T30] audit: type=1326 audit(1777456590.376:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 122.887235][ T30] audit: type=1326 audit(1777456590.376:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 122.910901][ T30] audit: type=1326 audit(1777456590.376:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 122.975887][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.009096][ T30] audit: type=1326 audit(1777456590.416:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 123.120103][ T6037] team0: Port device team_slave_0 added [ 123.133668][ T30] audit: type=1326 audit(1777456590.416:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 123.143242][ T6037] team0: Port device team_slave_1 added [ 123.248277][ T30] audit: type=1326 audit(1777456590.456:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 123.364667][ T30] audit: type=1326 audit(1777456590.456:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 123.447245][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.468480][ T30] audit: type=1326 audit(1777456590.456:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f9501c code=0x7ffc0000 [ 123.504317][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.540243][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.665579][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.704657][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.722230][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.756435][ T29] usb 4-1: device descriptor read/64, error -71 [ 123.793079][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.017320][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.061675][ T6037] hsr_slave_0: entered promiscuous mode [ 124.079596][ T6037] hsr_slave_1: entered promiscuous mode [ 124.098702][ T6037] debugfs: 'hsr0' already exists in 'hsr' [ 124.114513][ T6037] Cannot create hsr debugfs directory [ 124.130008][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 124.198916][ T29] usb 4-1: device descriptor read/64, error -71 [ 124.327416][ T6158] input: syz0 as /devices/virtual/input/input5 [ 124.345568][ T29] usb usb4-port1: attempt power cycle [ 124.669470][ T6168] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 124.713332][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.749548][ T6168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.123'. [ 124.777081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.798380][ T29] usb 4-1: device descriptor read/8, error -71 [ 124.867546][ T5630] Bluetooth: hci2: command tx timeout [ 125.052467][ T6171] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 125.077386][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.151729][ T29] usb 4-1: device descriptor read/8, error -71 [ 125.174977][ T6171] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 125.328366][ T29] usb usb4-port1: unable to enumerate USB device [ 125.955998][ T6037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.167230][ T6193] hub 9-0:1.0: USB hub found [ 126.205325][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.206530][ T6193] hub 9-0:1.0: 1 port detected [ 126.229331][ T6037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.247142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 126.278312][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.299143][ T6037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.536299][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'. [ 126.660641][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.678476][ T6204] FAULT_INJECTION: forcing a failure. [ 126.678476][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 126.736758][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(full) [ 126.736778][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.736785][ T6204] Call Trace: [ 126.736790][ T6204] [ 126.736795][ T6204] dump_stack_lvl+0xe8/0x150 [ 126.736825][ T6204] should_fail_ex+0x412/0x560 [ 126.736855][ T6204] should_failslab+0xa8/0x100 [ 126.736887][ T6204] __kmalloc_noprof+0xe8/0x760 [ 126.736911][ T6204] ? ip_rt_ioctl+0x94d/0x1250 [ 126.736927][ T6204] ? compat_sock_ioctl+0x17a/0xcb0 [ 126.736942][ T6204] ? fib_create_info+0x1723/0x31f0 [ 126.736962][ T6204] fib_create_info+0x1723/0x31f0 [ 126.736994][ T6204] fib_table_insert+0xc8/0x1b50 [ 126.737013][ T6204] ? __kasan_kmalloc+0x93/0xb0 [ 126.737030][ T6204] ? __kmalloc_cache_noprof+0x31c/0x660 [ 126.737047][ T6204] ? fib_new_table+0x10a/0x2d0 [ 126.737063][ T6204] ip_rt_ioctl+0x4db/0x1250 [ 126.737082][ T6204] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 126.737096][ T6204] ? __might_fault+0xaf/0x130 [ 126.737120][ T6204] ? __might_fault+0xaf/0x130 [ 126.737136][ T6204] inet_compat_ioctl+0x3f3/0x400 [ 126.737155][ T6204] ? __pfx_inet_compat_ioctl+0x10/0x10 [ 126.737184][ T6204] compat_sock_ioctl+0x17a/0xcb0 [ 126.737205][ T6204] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 126.737231][ T6204] ? __fget_files+0x3a0/0x420 [ 126.737245][ T6204] ? __fget_files+0x2a/0x420 [ 126.737260][ T6204] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 126.737280][ T6204] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 126.737300][ T6204] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 126.737319][ T6204] ? __fget_files+0x3a0/0x420 [ 126.737337][ T6204] ? fput+0xa0/0xd0 [ 126.737350][ T6204] ? ksys_write+0x242/0x270 [ 126.737373][ T6204] __do_fast_syscall_32+0x229/0x6e0 [ 126.737388][ T6204] ? do_fast_syscall_32+0x33/0x70 [ 126.737401][ T6204] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.737413][ T6204] ? asm_int80_emulation+0x1a/0x20 [ 126.737425][ T6204] ? do_int80_emulation+0x286/0x530 [ 126.737438][ T6204] ? trace_irq_disable+0x3b/0x140 [ 126.737458][ T6204] do_fast_syscall_32+0x33/0x70 [ 126.737476][ T6204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.737498][ T6204] RIP: 0023:0xf6fcf01c [ 126.737517][ T6204] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 126.737533][ T6204] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 126.737556][ T6204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 126.737569][ T6204] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.737577][ T6204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.737583][ T6204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.737590][ T6204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.737608][ T6204] [ 127.299243][ T6037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.315689][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.875230][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.119431][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.201664][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.209156][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.363880][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.371174][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.439407][ T6239] netlink: 76 bytes leftover after parsing attributes in process `syz.2.136'. [ 128.884344][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.072695][ T6037] veth0_vlan: entered promiscuous mode [ 129.138066][ T6037] veth1_vlan: entered promiscuous mode [ 129.205370][ T6250] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 129.257106][ T6250] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 129.274243][ T6037] veth0_macvtap: entered promiscuous mode [ 129.294083][ T6037] veth1_macvtap: entered promiscuous mode [ 129.378770][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.426618][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.494462][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.526450][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.577746][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.620132][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.862037][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 129.903923][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.934169][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.071614][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.104651][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.272223][ T6270] netlink: 'syz.1.145': attribute type 3 has an invalid length. [ 130.299892][ T810] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 130.364394][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 130.377600][ T810] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.566997][ T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.597286][ T6277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.734265][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.737522][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 130.759610][ T6282] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.770537][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.792770][ T6282] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 130.793338][ T29] usb 2-1: config 0 has no interface number 0 [ 130.840307][ T29] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 130.854980][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.878624][ T29] usb 2-1: Product: syz [ 130.889209][ T29] usb 2-1: Manufacturer: syz [ 130.903532][ T29] usb 2-1: SerialNumber: syz [ 130.928835][ T29] usb 2-1: config 0 descriptor?? [ 130.980848][ T29] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 131.011674][ T6283] macvlan2: entered promiscuous mode [ 131.013146][ T29] usb 2-1: selecting invalid altsetting 1 [ 131.034268][ T6283] macvlan2: entered allmulticast mode [ 131.050900][ T29] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 131.060817][ T6283] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 131.108776][ T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.146531][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 131.208760][ T29] usb 2-1: media controller created [ 131.292213][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.433407][ T29] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 131.455129][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 131.485315][ T29] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.652521][ T29] usb 2-1: USB disconnect, device number 7 [ 131.762112][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 131.762133][ T30] audit: type=1326 audit(1777456599.506:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 131.841730][ T30] audit: type=1326 audit(1777456599.556:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 131.890574][ T30] audit: type=1326 audit(1777456599.556:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 131.933142][ T30] audit: type=1326 audit(1777456599.556:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 132.023014][ T6302] xt_hashlimit: max too large, truncated to 1048576 [ 132.345777][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 132.783097][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 133.110007][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119259][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.516501][ T6344] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 133.547344][ T6344] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 134.003352][ T6354] vlan2: entered promiscuous mode [ 134.062612][ T6354] hsr0: entered promiscuous mode [ 134.085674][ T6360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.160'. [ 134.171529][ T6354] vlan2: entered allmulticast mode [ 134.213268][ T6354] hsr0: entered allmulticast mode [ 134.232052][ T6354] hsr_slave_0: entered allmulticast mode [ 134.265591][ T6354] hsr_slave_1: entered allmulticast mode [ 134.947424][ T995] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.138294][ T995] usb 3-1: Using ep0 maxpacket: 16 [ 135.166657][ T995] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 135.203622][ T995] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 135.230424][ T995] usb 3-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 135.262454][ T995] usb 3-1: config 0 has no interface number 0 [ 135.278648][ T995] usb 3-1: config 0 interface 115 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 135.325479][ T995] usb 3-1: config 0 interface 115 has no altsetting 0 [ 135.359414][ T995] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 135.394951][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.427693][ T995] usb 3-1: Product: syz [ 135.449931][ T995] usb 3-1: Manufacturer: syz [ 135.472206][ T995] usb 3-1: SerialNumber: syz [ 135.513138][ T995] usb 3-1: config 0 descriptor?? [ 135.568391][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.168'. [ 136.215926][ T6400] netlink: 76 bytes leftover after parsing attributes in process `syz.1.173'. [ 136.216392][ T995] usb 3-1: USB disconnect, device number 9 [ 136.364550][ T6399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.777001][ T5629] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 136.987511][ T5629] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 137.028449][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.055050][ T5629] usb 2-1: Product: syz [ 137.057193][ T6416] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.093749][ T5629] usb 2-1: Manufacturer: syz [ 137.103486][ T5629] usb 2-1: SerialNumber: syz [ 137.603968][ T6422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 137.657330][ T5629] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 137.794683][ T6421] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 137.822707][ T6421] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 138.212342][ T6436] netlink: 'syz.2.184': attribute type 3 has an invalid length. [ 138.458332][ T5629] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.585281][ T6442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 138.621167][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.647545][ T5629] usb 3-1: Using ep0 maxpacket: 32 [ 138.664053][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.679651][ T5629] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.695432][ T5629] usb 3-1: config 0 has no interface number 0 [ 138.714225][ T5629] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 138.732030][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.741034][ T5629] usb 3-1: Product: syz [ 138.746059][ T5629] usb 3-1: Manufacturer: syz [ 138.753878][ T5629] usb 3-1: SerialNumber: syz [ 138.768878][ T5629] usb 3-1: config 0 descriptor?? [ 138.793850][ T5629] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.808513][ T5716] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.829218][ T5629] usb 3-1: selecting invalid altsetting 1 [ 138.839481][ T5629] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 138.862971][ T5629] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.884218][ T5629] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 138.895570][ T5629] usb 3-1: media controller created [ 138.924927][ T5629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.959478][ T6447] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.188'. [ 138.970705][ T5718] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.997045][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 139.005869][ T5716] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.018909][ T5716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.025702][ T5716] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 139.036111][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.052743][ T5716] usb 5-1: config 0 descriptor?? [ 139.129020][ T5718] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.144285][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.154776][ T5718] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 139.165126][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.173374][ T5718] usb 4-1: Product: syz [ 139.177654][ T5718] usb 4-1: Manufacturer: syz [ 139.182318][ T5718] usb 4-1: SerialNumber: syz [ 139.329018][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 139.908616][ T5715] usb 2-1: USB disconnect, device number 8 [ 139.929451][ T5715] usblp0: removed [ 139.997229][ T5629] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 140.011657][ T5629] zl10353_read_register: readreg error (reg=127, ret==-110) [ 140.027531][ T5629] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 140.113923][ T5629] usb 3-1: USB disconnect, device number 10 [ 140.321048][ T6461] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.584345][ T6465] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 140.594625][ T6465] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 140.905859][ T6473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 141.675904][ T5716] usbhid 5-1:0.0: can't add hid device: -71 [ 141.703528][ T5716] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.787283][ T5716] usb 5-1: USB disconnect, device number 5 [ 141.884718][ T5718] usbhid 4-1:1.0: can't add hid device: -71 [ 141.914031][ T5718] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 141.966662][ T5718] usb 4-1: USB disconnect, device number 11 [ 142.065225][ T6478] ip6gretap0: refused to change device tx_queue_len [ 142.110785][ T6478] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 142.238630][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 142.408260][ T5718] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.605686][ T5718] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.629054][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.665303][ T5718] usb 4-1: Product: syz [ 142.685955][ T5718] usb 4-1: Manufacturer: syz [ 142.697260][ T5718] usb 4-1: SerialNumber: syz [ 142.697991][ T995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.725855][ T5718] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.748338][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.898261][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 142.922158][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.978741][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.006782][ T6495] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 143.015552][ T995] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 143.040538][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.057843][ T6495] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 143.078836][ T995] usb 5-1: config 0 descriptor?? [ 143.389977][ T6508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 143.433867][ T5716] usb 4-1: USB disconnect, device number 12 [ 143.530835][ T995] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 143.544082][ T995] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 143.552835][ T995] apple 0003:05AC:024B.0005: parse failed [ 143.561788][ T995] apple 0003:05AC:024B.0005: probe with driver apple failed with error -22 [ 143.795089][ T6517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.836024][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 143.858956][ T10] ath9k_htc: Failed to initialize the device [ 143.890141][ T5716] usb 4-1: ath9k_htc: USB layer deinitialized [ 144.153042][ T6529] netlink: 80 bytes leftover after parsing attributes in process `syz.3.212'. [ 144.411444][ T6528] syzkaller0: entered promiscuous mode [ 144.411466][ T6528] syzkaller0: entered allmulticast mode [ 146.111682][ T6546] "syz.0.218" (6546) uses obsolete ecb(arc4) skcipher [ 146.494932][ T6557] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 146.503112][ T6557] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 146.799468][ T6563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'. [ 147.645869][ T6577] Cannot find add_set index 0 as target [ 148.635239][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 148.987075][ T5718] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.249008][ T5718] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 149.275509][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.316315][ T5718] usb 2-1: config 0 descriptor?? [ 149.556947][ T5718] usb 2-1: Cannot read MAC address [ 149.572253][ T5718] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 149.591798][ T5718] usb 2-1: USB disconnect, device number 9 [ 149.610445][ T995] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.767265][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 149.774908][ T995] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 149.788190][ T995] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.794898][ T995] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 149.805197][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.831491][ T995] usb 1-1: config 0 descriptor?? [ 150.028449][ T6533] netlink: 76 bytes leftover after parsing attributes in process `syz.3.213'. [ 150.065271][ T5718] usb 5-1: USB disconnect, device number 6 [ 150.118438][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 150.484355][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.521212][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.710322][ T6606] FAULT_INJECTION: forcing a failure. [ 150.710322][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.748719][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.1.238 Not tainted syzkaller #0 PREEMPT(full) [ 150.748756][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.748768][ T6606] Call Trace: [ 150.748775][ T6606] [ 150.748784][ T6606] dump_stack_lvl+0xe8/0x150 [ 150.748814][ T6606] should_fail_ex+0x412/0x560 [ 150.748843][ T6606] _copy_from_user+0x2d/0xb0 [ 150.748870][ T6606] binder_ioctl_write_read+0xaee/0xa590 [ 150.748917][ T6606] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 150.748955][ T6606] ? stack_trace_save+0xa9/0x100 [ 150.748973][ T6606] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 150.748985][ T6606] ? kasan_save_free_info+0x46/0x50 [ 150.749001][ T6606] ? stack_depot_save_flags+0x33/0x810 [ 150.749021][ T6606] ? __lock_acquire+0x6b5/0x2cf0 [ 150.749048][ T6606] ? __pfx_binder_debug+0x10/0x10 [ 150.749059][ T6606] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.749084][ T6606] ? _raw_spin_unlock+0x28/0x50 [ 150.749096][ T6606] ? binder_get_thread+0x177/0x6d0 [ 150.749111][ T6606] binder_ioctl+0x423/0x1b10 [ 150.749125][ T6606] ? tomoyo_path_number_perm+0x219/0x630 [ 150.749140][ T6606] ? tomoyo_path_number_perm+0x219/0x630 [ 150.749164][ T6606] ? do_vfs_ioctl+0x1166/0x1530 [ 150.749186][ T6606] ? __pfx_binder_ioctl+0x10/0x10 [ 150.749207][ T6606] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 150.749254][ T6606] ? __fget_files+0x2a/0x420 [ 150.749271][ T6606] ? __fget_files+0x3a0/0x420 [ 150.749284][ T6606] ? __fget_files+0x2a/0x420 [ 150.749299][ T6606] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 150.749319][ T6606] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 150.749338][ T6606] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 150.749358][ T6606] ? __fget_files+0x3a0/0x420 [ 150.749375][ T6606] ? fput+0xa0/0xd0 [ 150.749388][ T6606] ? ksys_write+0x242/0x270 [ 150.749414][ T6606] __do_fast_syscall_32+0x229/0x6e0 [ 150.749428][ T6606] ? do_fast_syscall_32+0x33/0x70 [ 150.749441][ T6606] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.749453][ T6606] ? asm_int80_emulation+0x1a/0x20 [ 150.749464][ T6606] ? do_int80_emulation+0x286/0x530 [ 150.749481][ T6606] do_fast_syscall_32+0x33/0x70 [ 150.749494][ T6606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.749509][ T6606] RIP: 0023:0xf6fcf01c [ 150.749521][ T6606] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 150.749531][ T6606] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 150.749545][ T6606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 150.749554][ T6606] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.749561][ T6606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.749567][ T6606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.749574][ T6606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.749597][ T6606] [ 150.749830][ T6606] binder: 6604:6606 ioctl c0306201 80004a40 returned -14 [ 150.799461][ T6603] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 151.086645][ T6603] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 151.258184][ T6612] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.240'. [ 151.903000][ T6619] nvme_fabrics: missing parameter 'transport=%s' [ 151.932268][ T6619] nvme_fabrics: missing parameter 'nqn=%s' [ 152.156984][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.314671][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 152.317265][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.317302][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.317345][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 152.317395][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.323047][ T29] usb 4-1: config 0 descriptor?? [ 152.488956][ T995] usbhid 1-1:0.0: can't add hid device: -71 [ 152.489117][ T995] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.517792][ T995] usb 1-1: USB disconnect, device number 6 [ 152.773513][ T29] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 152.773554][ T29] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 152.797012][ T6633] netlink: 76 bytes leftover after parsing attributes in process `syz.4.248'. [ 152.802192][ T29] apple 0003:05AC:024B.0006: parse failed [ 152.802313][ T29] apple 0003:05AC:024B.0006: probe with driver apple failed with error -22 [ 153.258396][ T6626] syzkaller0: entered promiscuous mode [ 153.258428][ T6626] syzkaller0: entered allmulticast mode [ 153.345799][ T6646] FAULT_INJECTION: forcing a failure. [ 153.345799][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 153.345876][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 153.345899][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.345910][ T6646] Call Trace: [ 153.345918][ T6646] [ 153.345926][ T6646] dump_stack_lvl+0xe8/0x150 [ 153.345957][ T6646] should_fail_ex+0x412/0x560 [ 153.345987][ T6646] should_failslab+0xa8/0x100 [ 153.346019][ T6646] __kmalloc_noprof+0xe8/0x760 [ 153.346044][ T6646] ? iter_file_splice_write+0x1da/0x10f0 [ 153.346075][ T6646] iter_file_splice_write+0x1da/0x10f0 [ 153.346098][ T6646] ? __lock_acquire+0x6b5/0x2cf0 [ 153.346144][ T6646] ? __pfx_iter_file_splice_write+0x10/0x10 [ 153.346166][ T6646] ? direct_splice_actor+0x49/0x160 [ 153.346191][ T6646] ? direct_splice_actor+0x49/0x160 [ 153.346229][ T6646] ? __pfx_iter_file_splice_write+0x10/0x10 [ 153.346256][ T6646] direct_splice_actor+0x101/0x160 [ 153.346283][ T6646] splice_direct_to_actor+0x53a/0xc70 [ 153.346318][ T6646] ? __pfx_direct_splice_actor+0x10/0x10 [ 153.346353][ T6646] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 153.346387][ T6646] do_splice_direct+0x195/0x290 [ 153.346415][ T6646] ? __pfx_do_splice_direct+0x10/0x10 [ 153.346449][ T6646] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 153.346484][ T6646] ? rw_verify_area+0x255/0x4d0 [ 153.346515][ T6646] do_sendfile+0x535/0x7d0 [ 153.346548][ T6646] ? __pfx_do_sendfile+0x10/0x10 [ 153.346578][ T6646] ? __might_fault+0xaf/0x130 [ 153.346608][ T6646] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 153.346636][ T6646] __do_fast_syscall_32+0x229/0x6e0 [ 153.346660][ T6646] ? do_fast_syscall_32+0x33/0x70 [ 153.346682][ T6646] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.346703][ T6646] ? asm_int80_emulation+0x1a/0x20 [ 153.346721][ T6646] ? do_int80_emulation+0x286/0x530 [ 153.346744][ T6646] ? trace_irq_disable+0x3b/0x140 [ 153.346776][ T6646] do_fast_syscall_32+0x33/0x70 [ 153.346806][ T6646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.346828][ T6646] RIP: 0023:0xf70bf01c [ 153.346846][ T6646] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 153.346861][ T6646] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 153.346882][ T6646] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 153.346894][ T6646] RDX: 0000000080000080 RSI: 0000000000007f03 RDI: 0000000000000000 [ 153.346906][ T6646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.346917][ T6646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.346928][ T6646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.346957][ T6646] [ 153.798173][ T995] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.948172][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 153.950551][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.950575][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.950600][ T995] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 153.950614][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.960409][ T995] usb 1-1: config 0 descriptor?? [ 154.115121][ T6659] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 154.115161][ T6659] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 154.479987][ T995] apple 0003:05AC:024B.0007: unknown global tag 0xe [ 154.480018][ T995] apple 0003:05AC:024B.0007: item 0 1 1 14 parsing failed [ 154.480992][ T995] apple 0003:05AC:024B.0007: parse failed [ 154.481107][ T995] apple 0003:05AC:024B.0007: probe with driver apple failed with error -22 [ 155.707001][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.926901][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 155.951800][ T5718] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 155.976945][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.006928][ T5718] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 156.024414][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.075430][ T5718] usb 5-1: config 0 descriptor?? [ 156.344981][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 157.484024][ T995] usb 4-1: USB disconnect, device number 13 [ 157.505946][ T6671] netlink: 76 bytes leftover after parsing attributes in process `syz.1.259'. [ 157.648943][ T29] usb 1-1: USB disconnect, device number 7 [ 157.903638][ T5629] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.947813][ T5629] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.046970][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.206978][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 158.219841][ T5716] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.236949][ T5716] usb 3-1: config 0 has no interface number 0 [ 158.256399][ T5716] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.277378][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.295764][ T5716] usb 3-1: Product: syz [ 158.316310][ T5716] usb 3-1: Manufacturer: syz [ 158.337484][ T5716] usb 3-1: SerialNumber: syz [ 158.365342][ T5716] usb 3-1: config 0 descriptor?? [ 158.388448][ T5716] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.637457][ T5716] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.663288][ T6692] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 158.675585][ T5716] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.691618][ T6692] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 158.926609][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.937799][ T5716] usb 3-1: USB disconnect, device number 11 [ 158.985687][ T5716] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 159.015265][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 159.033472][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 159.057806][ T5716] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 159.081126][ T5718] usb 5-1: USB disconnect, device number 7 [ 159.112008][ T5716] quatech2 3-1:0.51: device disconnected [ 159.336435][ T6697] syzkaller1: entered promiscuous mode [ 159.372539][ T6697] syzkaller1: entered allmulticast mode [ 159.597571][ T5716] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 159.770748][ T5716] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.799432][ T5716] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 159.825227][ T5716] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.848833][ T5716] usb 4-1: config 220 has no interface number 2 [ 159.869635][ T5716] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 159.898039][ T5716] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 159.924310][ T5716] usb 4-1: config 220 interface 0 has no altsetting 0 [ 159.933774][ T5716] usb 4-1: config 220 interface 76 has no altsetting 0 [ 159.941055][ T5716] usb 4-1: config 220 interface 1 has no altsetting 0 [ 159.962601][ T5716] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 159.973463][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.981727][ T5716] usb 4-1: Product: syz [ 159.986324][ T5716] usb 4-1: Manufacturer: syz [ 159.995806][ T5716] usb 4-1: SerialNumber: syz [ 160.283708][ T5716] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 160.339183][ T5716] uvcvideo 4-1:220.0: No valid video chain found. [ 160.368907][ T5716] usb 4-1: selecting invalid altsetting 0 [ 160.538423][ T5716] usb 4-1: selecting invalid altsetting 0 [ 160.565343][ T5716] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 160.601193][ T5629] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.685552][ T5716] usb 4-1: USB disconnect, device number 14 [ 161.006366][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 161.626927][ T5716] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.830030][ T5716] usb 2-1: device descriptor read/64, error -71 [ 162.098185][ T5716] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.276956][ T5718] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.290689][ T5716] usb 2-1: device descriptor read/64, error -71 [ 162.407254][ T5716] usb usb2-port1: attempt power cycle [ 162.459454][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 162.473487][ T5718] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 162.484909][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.492378][ T5718] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 162.502355][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.514335][ T5718] usb 5-1: config 0 descriptor?? [ 162.606926][ T995] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 162.696981][ T29] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 162.747057][ T995] usb 1-1: device descriptor read/64, error -71 [ 162.777364][ T5716] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.780212][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.279'. [ 162.801110][ T5716] usb 2-1: device descriptor read/8, error -71 [ 162.850876][ T29] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 162.863404][ T29] usb 3-1: config 0 has no interface number 0 [ 162.873458][ T29] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 162.883749][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.893291][ T29] usb 3-1: Product: syz [ 162.910596][ T29] usb 3-1: Manufacturer: syz [ 162.923226][ T29] usb 3-1: SerialNumber: syz [ 162.937790][ T29] usb 3-1: config 0 descriptor?? [ 162.987388][ T995] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 163.078221][ T5716] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.108301][ T5716] usb 2-1: device descriptor read/8, error -71 [ 163.128257][ T995] usb 1-1: device descriptor read/64, error -71 [ 163.228554][ T5716] usb usb2-port1: unable to enumerate USB device [ 163.247635][ T995] usb usb1-port1: attempt power cycle [ 163.607564][ T995] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 163.650332][ T995] usb 1-1: device descriptor read/8, error -71 [ 163.923375][ T995] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 163.968416][ T995] usb 1-1: device descriptor read/8, error -71 [ 164.087523][ T995] usb usb1-port1: unable to enumerate USB device [ 165.122245][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 165.131616][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.165874][ T5718] usb 5-1: USB disconnect, device number 8 [ 165.368474][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 165.380774][ T29] asix 3-1:0.251: probe with driver asix failed with error -71 [ 165.433181][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.453913][ T29] usb 3-1: USB disconnect, device number 12 [ 166.143602][ T30] audit: type=1400 audit(1777456633.896:65): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6775 comm="syz.4.292" [ 166.262232][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.336181][ T6776] netlink: 'syz.2.291': attribute type 15 has an invalid length. [ 166.797030][ T5718] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.976968][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 166.996918][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.999174][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.024728][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.041621][ T5718] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 167.051126][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.088253][ T5718] usb 5-1: config 0 descriptor?? [ 167.176945][ T5730] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 167.228346][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 167.256891][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.271397][ T24] usb 3-1: Product: syz [ 167.287345][ T24] usb 3-1: Manufacturer: syz [ 167.296593][ T24] usb 3-1: SerialNumber: syz [ 167.330912][ T24] usb 3-1: config 0 descriptor?? [ 167.359767][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 167.395379][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.423950][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 167.445556][ T24] usb 3-1: media controller created [ 167.512887][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.538075][ T5718] apple 0003:05AC:024B.000A: unknown global tag 0xe [ 167.566572][ T5718] apple 0003:05AC:024B.000A: item 0 1 1 14 parsing failed [ 167.594009][ T5718] apple 0003:05AC:024B.000A: parse failed [ 167.614798][ T5718] apple 0003:05AC:024B.000A: probe with driver apple failed with error -22 [ 167.725666][ T24] DVB: Unable to find symbol mt352_attach() [ 167.864761][ T6804] kvm: pic: level sensitive irq not supported [ 167.908799][ T24] DVB: Unable to find symbol nxt6000_attach() [ 167.923604][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 167.959637][ T29] usb 5-1: USB disconnect, device number 9 [ 167.973424][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 168.044869][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 168.062525][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 168.097664][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 168.105647][ T6766] macsec1: entered promiscuous mode [ 168.122263][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 168.151017][ T6766] bridge0: entered promiscuous mode [ 168.176215][ T24] usb 3-1: USB disconnect, device number 13 [ 168.276418][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 168.317593][ T6810] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 168.420742][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 168.618782][ T5718] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 168.730140][ T6815] trusted_key: encrypted_key: insufficient parameters specified [ 168.826590][ T5718] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 168.877690][ T5718] usb 1-1: can't read configurations, error -71 [ 169.394402][ T6830] netlink: 76 bytes leftover after parsing attributes in process `syz.4.307'. [ 170.046925][ T5718] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.220466][ T5718] usb 1-1: config 0 has no interfaces? [ 170.236301][ T5718] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.287849][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.349658][ T5718] usb 1-1: config 0 descriptor?? [ 171.053692][ T6847] FAULT_INJECTION: forcing a failure. [ 171.053692][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.157468][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.3.311 Not tainted syzkaller #0 PREEMPT(full) [ 171.157498][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.157510][ T6847] Call Trace: [ 171.157519][ T6847] [ 171.157528][ T6847] dump_stack_lvl+0xe8/0x150 [ 171.157558][ T6847] should_fail_ex+0x412/0x560 [ 171.157590][ T6847] copy_fpstate_to_sigframe+0xb1b/0xd60 [ 171.157636][ T6847] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 171.157672][ T6847] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 171.157708][ T6847] ? ktime_get+0x1f5/0x220 [ 171.157753][ T6847] ? fpu__alloc_mathframe+0xac/0x130 [ 171.157785][ T6847] get_sigframe+0x5f7/0x820 [ 171.157823][ T6847] ? __pfx_get_sigframe+0x10/0x10 [ 171.157854][ T6847] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 171.157886][ T6847] ia32_setup_rt_frame+0x110/0xae0 [ 171.157917][ T6847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.157936][ T6847] ? get_signal+0x114f/0x1330 [ 171.157963][ T6847] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 171.158002][ T6847] arch_do_signal_or_restart+0x460/0x830 [ 171.158035][ T6847] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 171.158071][ T6847] ? __ia32_compat_sys_io_pgetevents+0x413/0x4e0 [ 171.158113][ T6847] exit_to_user_mode_loop+0x86/0x480 [ 171.158133][ T6847] ? rcu_is_watching+0x15/0xb0 [ 171.158155][ T6847] ? do_fast_syscall_32+0x33/0x70 [ 171.158179][ T6847] __do_fast_syscall_32+0x446/0x6e0 [ 171.158203][ T6847] ? do_fast_syscall_32+0x33/0x70 [ 171.158224][ T6847] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.158244][ T6847] ? asm_int80_emulation+0x1a/0x20 [ 171.158262][ T6847] ? do_int80_emulation+0x286/0x530 [ 171.158289][ T6847] do_fast_syscall_32+0x33/0x70 [ 171.158323][ T6847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.158347][ T6847] RIP: 0023:0xf7f9501c [ 171.158367][ T6847] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 171.158383][ T6847] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000181 [ 171.158408][ T6847] RAX: ffffffffffffffea RBX: 0000000000000000 RCX: 0000000000007909 [ 171.158422][ T6847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.158442][ T6847] RBP: 0000000080000200 R08: 0000000000000000 R09: 0000000000000000 [ 171.158454][ T6847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.158466][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.158495][ T6847] [ 171.611373][ T5629] usb 1-1: USB disconnect, device number 15 [ 171.973316][ T6854] tipc: Started in network mode [ 171.978627][ T6854] tipc: Node identity , cluster identity 4711 [ 171.985937][ T6854] tipc: Failed to obtain node identity [ 172.001295][ T6854] tipc: Enabling of bearer rejected, failed to enable media [ 172.085790][ T6857] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 172.143365][ T6854] syzkaller0: entered promiscuous mode [ 172.176336][ T6854] syzkaller0: entered allmulticast mode [ 172.269551][ T5718] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 172.297030][ T5629] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.319436][ T5718] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.475721][ T5629] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 172.508234][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.517722][ T5629] usb 2-1: Product: syz [ 172.522048][ T5629] usb 2-1: Manufacturer: syz [ 172.527490][ T5629] usb 2-1: SerialNumber: syz [ 172.557651][ T5629] usb 2-1: config 0 descriptor?? [ 172.593126][ T5629] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 172.633189][ T5629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.661331][ T5629] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 172.681135][ T5629] usb 2-1: media controller created [ 172.720970][ T5629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.889299][ T5629] DVB: Unable to find symbol mt352_attach() [ 173.020048][ T5629] DVB: Unable to find symbol nxt6000_attach() [ 173.045556][ T5629] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 173.083555][ T5629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 173.128647][ T5629] dvb-usb: schedule remote query interval to 1000 msecs. [ 173.149632][ T5629] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 173.168207][ T5629] dvb-usb: bulk message failed: -22 (7/0) [ 173.182522][ T5629] dvb-usb: bulk message failed: -22 (7/0) [ 173.242433][ T5629] usb 2-1: USB disconnect, device number 15 [ 173.440034][ T5629] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 173.638490][ T6869] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 173.725275][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'. [ 173.814675][ T6870] xt_NFQUEUE: number of total queues is 0 [ 174.473877][ T5718] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.315016][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 176.015047][ T6861] macsec1: entered promiscuous mode [ 176.039525][ T6861] bridge0: entered promiscuous mode [ 176.491996][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 176.516356][ T6892] fuse: Bad value for 'fd' [ 176.539720][ T6895] netlink: 76 bytes leftover after parsing attributes in process `syz.3.327'. [ 176.689530][ T6900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.328'. [ 176.727111][ T5629] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.755160][ T6903] netlink: 9 bytes leftover after parsing attributes in process `syz.3.329'. [ 176.775703][ T6903] gretap0: entered promiscuous mode [ 176.898344][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 176.910527][ T5629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.924720][ T5629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.938198][ T5629] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.949677][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.958605][ T5629] usb 3-1: Product: syz [ 176.962963][ T5629] usb 3-1: Manufacturer: syz [ 176.968809][ T5629] usb 3-1: SerialNumber: syz [ 176.997619][ T5629] usb 3-1: 0:2 : does not exist [ 177.208108][ T5629] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 177.470339][ T5629] usb 3-1: USB disconnect, device number 14 [ 177.634516][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.981549][ T6915] FAULT_INJECTION: forcing a failure. [ 177.981549][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.005465][ T5629] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.014831][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.2.334 Not tainted syzkaller #0 PREEMPT(full) [ 178.014861][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.014873][ T6915] Call Trace: [ 178.014880][ T6915] [ 178.014889][ T6915] dump_stack_lvl+0xe8/0x150 [ 178.014919][ T6915] should_fail_ex+0x412/0x560 [ 178.014949][ T6915] _copy_to_user+0x31/0xb0 [ 178.014979][ T6915] simple_read_from_buffer+0xe1/0x170 [ 178.015009][ T6915] proc_fail_nth_read+0x1bb/0x230 [ 178.015036][ T6915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.015065][ T6915] ? rw_verify_area+0x2a6/0x4d0 [ 178.015091][ T6915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.015117][ T6915] vfs_read+0x20c/0xa70 [ 178.015158][ T6915] ? __pfx___mutex_lock+0x10/0x10 [ 178.015183][ T6915] ? __pfx_vfs_read+0x10/0x10 [ 178.015210][ T6915] ? __fget_files+0x2a/0x420 [ 178.015239][ T6915] ? __fget_files+0x3a0/0x420 [ 178.015261][ T6915] ? __fget_files+0x2a/0x420 [ 178.015292][ T6915] ksys_read+0x150/0x270 [ 178.015322][ T6915] ? __pfx_ksys_read+0x10/0x10 [ 178.015353][ T6915] ? asm_int80_emulation+0x1a/0x20 [ 178.015378][ T6915] do_int80_emulation+0x181/0x530 [ 178.015400][ T6915] ? trace_irq_disable+0x3b/0x140 [ 178.015425][ T6915] ? asm_int80_emulation+0x1a/0x20 [ 178.015449][ T6915] ? clear_bhb_loop+0x40/0x90 [ 178.015469][ T6915] ? clear_bhb_loop+0x40/0x90 [ 178.015492][ T6915] asm_int80_emulation+0x1a/0x20 [ 178.015511][ T6915] RIP: 0023:0xf71f616b [ 178.015529][ T6915] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 178.015545][ T6915] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.015566][ T6915] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 178.015579][ T6915] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 178.015590][ T6915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.015600][ T6915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.015610][ T6915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.015640][ T6915] [ 178.357519][ T5629] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.526939][ T5730] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 178.611885][ T6909] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 178.646385][ T6909] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 178.677268][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 178.690510][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.706205][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.725847][ T5730] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.746972][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.783868][ T5730] usb 5-1: config 0 descriptor?? [ 178.815037][ T5730] hub 5-1:0.0: USB hub found [ 179.027822][ T5730] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 179.297007][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.458557][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 179.479854][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 179.504222][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.530045][ T5730] hid-generic 0003:046D:C31C.000D: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 179.543493][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 179.569648][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.587084][ T5716] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.606376][ T24] usb 4-1: config 0 descriptor?? [ 179.770788][ T5730] usb 5-1: USB disconnect, device number 11 [ 180.277145][ T5730] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.446972][ T5730] usb 5-1: Using ep0 maxpacket: 8 [ 180.463283][ T5730] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.493717][ T5730] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.516538][ T5730] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.550086][ T5730] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.567035][ T5730] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 180.588081][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.619527][ T5730] usb 5-1: config 0 descriptor?? [ 181.264651][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 181.301499][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.335026][ T5730] usb 5-1: USB disconnect, device number 12 [ 181.589602][ T6960] input: syz1 as /devices/virtual/input/input8 [ 181.726970][ T5718] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 181.889200][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.914829][ T5718] usb 3-1: not running at top speed; connect to a high speed hub [ 181.927610][ T5718] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 181.940158][ T5718] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 181.949863][ T5718] usb 3-1: config 17 has no interface number 0 [ 181.956622][ T5718] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 181.973949][ T5718] usb 3-1: config 17 interface 8 has no altsetting 0 [ 181.984816][ T5718] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 182.001797][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.010772][ T5718] usb 3-1: Product: syz [ 182.027718][ T5718] usb 3-1: Manufacturer: syz [ 182.033606][ T5718] usb 3-1: SerialNumber: syz [ 182.108482][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 182.134372][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.183106][ T24] usb 4-1: USB disconnect, device number 15 [ 182.293531][ T5718] usb 3-1: selecting invalid altsetting 0 [ 182.314971][ T5718] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 182.335899][ T5718] usb 3-1: selecting invalid altsetting 0 [ 182.439986][ T6976] input: syz0 as /devices/virtual/input/input9 [ 182.509895][ T6979] fuse: Bad value for 'fd' [ 182.532199][ T6978] syzkaller0: entered promiscuous mode [ 182.540810][ T5718] usb 3-1: USB disconnect, device number 15 [ 182.557134][ T6978] syzkaller0: entered allmulticast mode [ 183.006496][ T6984] pim6reg0: tun_chr_ioctl cmd 1074025692 [ 183.125854][ T5718] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 183.162934][ T5718] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.855713][ T6997] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 183.878329][ T6997] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 184.007012][ T5730] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 184.176966][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 184.199184][ T5730] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 184.207076][ T5718] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 184.220396][ T5730] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.232141][ T5730] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 184.251800][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.273422][ T5730] usb 5-1: config 0 descriptor?? [ 184.336989][ T995] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.408840][ T5718] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.427957][ T5718] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.467635][ T5718] usb 4-1: config 220 has no interface number 2 [ 184.491084][ T5718] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.530245][ T5718] usb 4-1: config 220 interface 0 has no altsetting 0 [ 184.539639][ T5718] usb 4-1: config 220 interface 76 has no altsetting 0 [ 184.551464][ T5718] usb 4-1: config 220 interface 1 has no altsetting 0 [ 184.562861][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 184.592059][ T5718] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.613317][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.641700][ T5718] usb 4-1: Product: syz [ 184.653899][ T5718] usb 4-1: Manufacturer: syz [ 184.668420][ T5718] usb 4-1: SerialNumber: syz [ 184.986287][ T5718] usb 4-1: selecting invalid altsetting 0 [ 185.025911][ T5718] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 185.082406][ T5718] uvcvideo 4-1:220.0: No valid video chain found. [ 185.155116][ T5718] usb 4-1: selecting invalid altsetting 0 [ 185.174031][ T5718] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 185.182949][ T7015] IPVS: set_ctl: invalid protocol: 171 127.0.0.1:20001 [ 185.210539][ T5718] usb 4-1: USB disconnect, device number 16 [ 186.035895][ T7026] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 186.191951][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 186.209579][ T7026] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.244888][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 186.264682][ T7026] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 186.421261][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'. [ 186.682503][ T7029] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 186.856003][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 186.873919][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.925717][ T5730] usb 5-1: USB disconnect, device number 13 [ 187.110833][ T7046] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 187.124415][ T7046] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 187.879559][ T7056] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 187.912592][ T7056] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 187.999205][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'. [ 188.328896][ T7082] FAULT_INJECTION: forcing a failure. [ 188.328896][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 188.391325][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(full) [ 188.391347][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.391355][ T7082] Call Trace: [ 188.391360][ T7082] [ 188.391366][ T7082] dump_stack_lvl+0xe8/0x150 [ 188.391388][ T7082] should_fail_ex+0x412/0x560 [ 188.391407][ T7082] should_failslab+0xa8/0x100 [ 188.391425][ T7082] ? vm_area_dup+0x2b/0x680 [ 188.391441][ T7082] kmem_cache_alloc_noprof+0x87/0x650 [ 188.391461][ T7082] vm_area_dup+0x2b/0x680 [ 188.391480][ T7082] __split_vma+0x1dc/0xa40 [ 188.391500][ T7082] ? __pfx___split_vma+0x10/0x10 [ 188.391513][ T7082] ? mas_find+0xb0e/0xd30 [ 188.391530][ T7082] ? validate_mm+0x403/0x4c0 [ 188.391554][ T7082] ? can_vma_merge_left+0x11a/0x3e0 [ 188.391567][ T7082] vma_modify+0x97e/0x1e10 [ 188.391589][ T7082] vma_modify_flags+0x24b/0x330 [ 188.391603][ T7082] ? __pfx_vma_modify_flags+0x10/0x10 [ 188.391623][ T7082] ? rcu_is_watching+0x15/0xb0 [ 188.391638][ T7082] ? percpu_counter_add_batch+0xea/0x1d0 [ 188.391655][ T7082] ? __vm_enough_memory+0x11b/0x380 [ 188.391671][ T7082] mprotect_fixup+0x62a/0xb60 [ 188.391692][ T7082] ? __pfx_mprotect_fixup+0x10/0x10 [ 188.391720][ T7082] ? apparmor_file_mprotect+0x1d0/0x400 [ 188.391732][ T7082] ? security_file_mprotect+0x1a/0x290 [ 188.391749][ T7082] do_mprotect_pkey+0x8d5/0xd20 [ 188.391768][ T7082] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 188.391778][ T7082] ? do_vmi_munmap+0x252/0x2d0 [ 188.391805][ T7082] ? __pfx___vm_munmap+0x10/0x10 [ 188.391825][ T7082] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 188.391857][ T7082] ? rcu_is_watching+0x15/0xb0 [ 188.391890][ T7082] __ia32_sys_mprotect+0x7f/0x90 [ 188.391921][ T7082] __do_fast_syscall_32+0x229/0x6e0 [ 188.391946][ T7082] ? do_fast_syscall_32+0x33/0x70 [ 188.391971][ T7082] ? irqentry_exit+0x10f/0x730 [ 188.391993][ T7082] ? trace_irq_disable+0x3b/0x140 [ 188.392026][ T7082] do_fast_syscall_32+0x33/0x70 [ 188.392050][ T7082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.392075][ T7082] RIP: 0023:0xf70bf01c [ 188.392094][ T7082] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 188.392113][ T7082] RSP: 002b:00000000f54ac248 EFLAGS: 00000206 ORIG_RAX: 000000000000007d [ 188.392146][ T7082] RAX: ffffffffffffffda RBX: 00000000f5300000 RCX: 0000000000021000 [ 188.392160][ T7082] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000100000 [ 188.392172][ T7082] RBP: 00000000f5300000 R08: 0000000000000000 R09: 0000000000000000 [ 188.392185][ T7082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.392197][ T7082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.392228][ T7082] [ 188.700750][ T7084] capability: warning: `syz.0.389' uses deprecated v2 capabilities in a way that may be insecure [ 188.729239][ T7084] fuse: fd is not a fuse device [ 189.122180][ T7086] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 189.185975][ T7086] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 189.747805][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.956930][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 189.989878][ T24] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 190.034795][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.084739][ T24] usb 3-1: config 0 descriptor?? [ 190.134219][ T24] as10x_usb: device has been detected [ 190.162640][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 190.250857][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 190.316663][ T7104] ------------[ cut here ]------------ [ 190.323176][ T7104] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 190.323196][ T7104] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x1303/0x1550, CPU#1: syz.2.395/7104 [ 190.339564][ T7104] Modules linked in: [ 190.343501][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.395 Not tainted syzkaller #0 PREEMPT(full) [ 190.352827][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.363484][ T7104] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 190.369390][ T7104] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 6f 87 04 00 75 13 48 8d 3d 8d 87 8a 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 190.389526][ T7104] RSP: 0018:ffffc900025a7880 EFLAGS: 00010246 [ 190.395613][ T7104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 190.404207][ T7104] RDX: ffffc90005e81000 RSI: ffffffff8bccdaa0 RDI: ffffffff9033e380 [ 190.412306][ T7104] RBP: ffffc900025a7a38 R08: ffffffff9030cbc3 R09: 1ffffffff2061978 [ 190.420621][ T7104] R10: dffffc0000000000 R11: fffffbfff2061979 R12: ffff8880328e8b30 [ 190.428784][ T7104] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004b4f28 [ 190.436772][ T7104] FS: 0000000000000000(0000) GS:ffff888125393000(0063) knlGS:00000000f54adb40 [ 190.446196][ T7104] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 190.452838][ T7104] CR2: 000000000c2a75ca CR3: 00000000754f6000 CR4: 00000000003526f0 [ 190.461870][ T7104] Call Trace: [ 190.465187][ T7104] [ 190.469089][ T7104] ? trace_contention_end+0x3d/0x140 [ 190.474816][ T7104] ? __mutex_lock+0x319/0x1550 [ 190.479741][ T7104] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 190.485449][ T7104] ? __pfx___mutex_lock+0x10/0x10 [ 190.490748][ T7104] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 190.496435][ T7104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.502537][ T7104] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.507657][ T7104] as102_dvb_dmx_start_feed+0x70/0x290 [ 190.513165][ T7104] dmx_section_feed_start_filtering+0x518/0x6c0 [ 190.519631][ T7104] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 190.525228][ T7104] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 190.530890][ T7104] dvb_demux_do_ioctl+0x470/0x540 [ 190.535966][ T7104] dvb_usercopy+0x199/0x2e0 [ 190.540771][ T7104] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 190.546456][ T7104] ? __pfx_dvb_usercopy+0x10/0x10 [ 190.551649][ T7104] ? __fget_files+0x3a0/0x420 [ 190.557137][ T7104] dvb_demux_ioctl+0x29/0x40 [ 190.562119][ T7104] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 190.568595][ T7104] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 190.575813][ T7104] ? kmem_cache_free+0x182/0x650 [ 190.581202][ T7104] ? __se_sys_futex_time32+0x3ab/0x440 [ 190.586731][ T7104] ? rcu_is_watching+0x15/0xb0 [ 190.591620][ T7104] ? arch_syscall_is_vdso_sigreturn+0x174/0x1a0 [ 190.597941][ T7104] __do_fast_syscall_32+0x229/0x6e0 [ 190.603191][ T7104] ? do_fast_syscall_32+0x33/0x70 [ 190.608497][ T7104] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.614289][ T7104] ? asm_int80_emulation+0x1a/0x20 [ 190.619544][ T7104] ? do_int80_emulation+0x286/0x530 [ 190.624794][ T7104] do_fast_syscall_32+0x33/0x70 [ 190.631014][ T7104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.638057][ T7104] RIP: 0023:0xf70bf01c [ 190.642295][ T7104] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 190.662148][ T7104] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 190.671571][ T7104] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b [ 190.680474][ T7104] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.690065][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.698214][ T7104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.706227][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.706536][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 190.715016][ T7104] [ 190.726707][ T7104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.734202][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.395 Not tainted syzkaller #0 PREEMPT(full) [ 190.743699][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.754052][ T7104] Call Trace: [ 190.757376][ T7104] [ 190.760352][ T7104] vpanic+0x56c/0xa60 [ 190.764400][ T7104] ? __pfx__printk+0x10/0x10 [ 190.769052][ T7104] ? __pfx_vpanic+0x10/0x10 [ 190.773601][ T7104] ? is_bpf_text_address+0x292/0x2b0 [ 190.779103][ T7104] ? is_bpf_text_address+0x26/0x2b0 [ 190.784360][ T7104] panic+0xc5/0xd0 [ 190.788122][ T7104] ? __pfx_panic+0x10/0x10 [ 190.792717][ T7104] __warn+0x315/0x4c0 [ 190.796737][ T7104] ? __mutex_lock+0x1303/0x1550 [ 190.801706][ T7104] ? __mutex_lock+0x1303/0x1550 [ 190.806590][ T7104] __report_bug+0x29a/0x540 [ 190.811217][ T7104] ? __mutex_lock+0x1303/0x1550 [ 190.816117][ T7104] ? __pfx___report_bug+0x10/0x10 [ 190.821191][ T7104] ? __lock_acquire+0x6b5/0x2cf0 [ 190.826373][ T7104] ? __page_table_check_ptes_set+0x6f/0x320 [ 190.832373][ T7104] ? pfn_valid+0x125/0x4c0 [ 190.836981][ T7104] ? pfn_valid+0x440/0x4c0 [ 190.841510][ T7104] report_bug_entry+0x19a/0x290 [ 190.846363][ T7104] ? __mutex_lock+0x130a/0x1550 [ 190.851267][ T7104] ? __mutex_lock+0x130f/0x1550 [ 190.856125][ T7104] handle_bug+0xce/0x200 [ 190.860466][ T7104] exc_invalid_op+0x1a/0x50 [ 190.864994][ T7104] asm_exc_invalid_op+0x1a/0x20 [ 190.869959][ T7104] RIP: 0010:__mutex_lock+0x130a/0x1550 [ 190.875447][ T7104] Code: 30 90 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 1b 02 00 00 83 3d da 6f 87 04 00 75 13 48 8d 3d 8d 87 8a 04 48 c7 c6 a0 da cc 8b <67> 48 0f b9 3a 90 e9 50 ee ff ff 90 0f 0b 90 e9 4e f2 ff ff 90 0f [ 190.895417][ T7104] RSP: 0018:ffffc900025a7880 EFLAGS: 00010246 [ 190.901595][ T7104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 190.909605][ T7104] RDX: ffffc90005e81000 RSI: ffffffff8bccdaa0 RDI: ffffffff9033e380 [ 190.917762][ T7104] RBP: ffffc900025a7a38 R08: ffffffff9030cbc3 R09: 1ffffffff2061978 [ 190.926185][ T7104] R10: dffffc0000000000 R11: fffffbfff2061979 R12: ffff8880328e8b30 [ 190.934339][ T7104] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004b4f28 [ 190.942585][ T7104] ? trace_contention_end+0x3d/0x140 [ 190.948004][ T7104] ? __mutex_lock+0x319/0x1550 [ 190.952879][ T7104] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 190.958522][ T7104] ? __pfx___mutex_lock+0x10/0x10 [ 190.963641][ T7104] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 190.969391][ T7104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.975387][ T7104] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.980531][ T7104] as102_dvb_dmx_start_feed+0x70/0x290 [ 190.986092][ T7104] dmx_section_feed_start_filtering+0x518/0x6c0 [ 190.992441][ T7104] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 190.998000][ T7104] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 191.003483][ T7104] dvb_demux_do_ioctl+0x470/0x540 [ 191.008546][ T7104] dvb_usercopy+0x199/0x2e0 [ 191.013147][ T7104] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 191.018714][ T7104] ? __pfx_dvb_usercopy+0x10/0x10 [ 191.023753][ T7104] ? __fget_files+0x3a0/0x420 [ 191.028461][ T7104] dvb_demux_ioctl+0x29/0x40 [ 191.033080][ T7104] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 191.038555][ T7104] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 191.044639][ T7104] ? kmem_cache_free+0x182/0x650 [ 191.049691][ T7104] ? __se_sys_futex_time32+0x3ab/0x440 [ 191.055291][ T7104] ? rcu_is_watching+0x15/0xb0 [ 191.060161][ T7104] ? arch_syscall_is_vdso_sigreturn+0x174/0x1a0 [ 191.066508][ T7104] __do_fast_syscall_32+0x229/0x6e0 [ 191.071817][ T7104] ? do_fast_syscall_32+0x33/0x70 [ 191.076946][ T7104] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.082249][ T7104] ? asm_int80_emulation+0x1a/0x20 [ 191.087366][ T7104] ? do_int80_emulation+0x286/0x530 [ 191.092663][ T7104] do_fast_syscall_32+0x33/0x70 [ 191.097525][ T7104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.103872][ T7104] RIP: 0023:0xf70bf01c [ 191.107949][ T7104] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 191.127566][ T7104] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 191.135998][ T7104] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b [ 191.144082][ T7104] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.152150][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.160140][ T7104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.168121][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.176169][ T7104] [ 191.179358][ T7104] Kernel Offset: disabled [ 191.183679][ T7104] Rebooting in 86400 seconds..