last executing test programs: 14m7.289362921s ago: executing program 4 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r1 = accept(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'lo\x00'}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r11, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ba"}]}], {0x14}}, 0x64}}, 0x0) 14m6.811369253s ago: executing program 4 (id=2758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001200)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x6, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x80000001}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000075700b7305797092"], 0x0}, 0x0) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36dffd56e149523b04f7553979abf48a538bc48c7e4a637cc4a89b541bee19126701eccf408bd99d59db466d75bebccb72b8d609c305cd95b3a54eb8b4cab9b90c524ddae7d03c45b03f767301ff08a7cbc2e734271681488df1ddf64a39a9a442ea517f609050702"], 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x70790578}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) 14m4.559425691s ago: executing program 4 (id=2766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x800, 0x1) read$FUSE(r2, &(0x7f0000004d00)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='vegas', 0x5) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4080080}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x3c, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) listen(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$rds(0x15, 0x5, 0x0) 14m3.39814861s ago: executing program 4 (id=2768): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x15, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) (async) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) (async) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 14m2.429181561s ago: executing program 4 (id=2774): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000100", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 14m2.253555938s ago: executing program 4 (id=2776): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ff06c7"}, {0x5, 0x24, 0x0, 0xe4b}, {0xd, 0x24, 0xf, 0x1, 0xc0000000, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x0, 0xfff6}, @mbim={0xc, 0x24, 0x1b, 0xa000, 0x0, 0x2, 0x5, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0xaa7, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x10, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x1, 0x0, 0xdd, 0x8, 0xb}, 0x147, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ff06c7"}, {0x5, 0x24, 0x0, 0xe4b}, {0xd, 0x24, 0xf, 0x1, 0xc0000000, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x0, 0xfff6}, @mbim={0xc, 0x24, 0x1b, 0xa000, 0x0, 0x2, 0x5, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0xaa7, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x10, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x1, 0x0, 0xdd, 0x8, 0xb}, 0x147, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2809}}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r6, 0xffffffffffffffff, 0x0) 13m47.108452319s ago: executing program 32 (id=2776): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ff06c7"}, {0x5, 0x24, 0x0, 0xe4b}, {0xd, 0x24, 0xf, 0x1, 0xc0000000, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x0, 0xfff6}, @mbim={0xc, 0x24, 0x1b, 0xa000, 0x0, 0x2, 0x5, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0xaa7, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x10, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x1, 0x0, 0xdd, 0x8, 0xb}, 0x147, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xff, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ff06c7"}, {0x5, 0x24, 0x0, 0xe4b}, {0xd, 0x24, 0xf, 0x1, 0xc0000000, 0x1, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0x0, 0xfff6}, @mbim={0xc, 0x24, 0x1b, 0xa000, 0x0, 0x2, 0x5, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0xaa7, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x10, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x1, 0x0, 0xdd, 0x8, 0xb}, 0x147, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2809}}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8m20.042635252s ago: executing program 3 (id=4539): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x138, 0x29, 0x36, {0x5e, 0x23, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x86, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x1f0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m19.676522304s ago: executing program 3 (id=4543): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c"}, 0x18a) (async, rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) (async, rerun: 32) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) (async) creat(0x0, 0x188) 8m19.44457692s ago: executing program 3 (id=4546): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '+/!./.'}, {0x20, '.('}, {}, {0x20, 'm\':\\]:$-[}:'}], 0xa, "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"}, 0x15e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x46, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 8m19.069779826s ago: executing program 3 (id=4550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x1}, {0x0, 0x0, 0x0, 0x1}, 0x400000, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000200000000000000000e00000010000000000000000000000004e2400000000000002000010"], 0xb8}}, 0x0) 8m19.035659549s ago: executing program 3 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x1b, 0x1, 0x2, "6040a719021002001e940000000000f8000006ff00", 0x42303159}) r3 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x2ed}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 8m18.783005179s ago: executing program 3 (id=4553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x24) r2 = dup(r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240)="b745813830f4615db7b27e0dc012f23ee0f331c77b1a71bb5be2b0c4446e79cb509936af1f0203249a2ecadd0b4a5198983a54408055b068e37977556cefbe117dea1682362ced5559836c93f13c31e73dbda08248f6", 0x2000ce4, r4}, 0x38) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000000000000000000000000000005002a14acfafca69d1001834524120009000000050013007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r2}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 8m3.759168581s ago: executing program 33 (id=4553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x24) r2 = dup(r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240)="b745813830f4615db7b27e0dc012f23ee0f331c77b1a71bb5be2b0c4446e79cb509936af1f0203249a2ecadd0b4a5198983a54408055b068e37977556cefbe117dea1682362ced5559836c93f13c31e73dbda08248f6", 0x2000ce4, r4}, 0x38) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000000000000000000000000000005002a14acfafca69d1001834524120009000000050013007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r2}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 1m21.958276626s ago: executing program 0 (id=6252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e030800d3ff71ef288563"], 0xffdd) 1m18.549635814s ago: executing program 0 (id=6263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x30}, 0x94) 1m18.399055915s ago: executing program 0 (id=6266): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x62, 0x0, 0x9, 0x5, 0x0, 0x5, 0x8, 0x0, 0x85, 0x2, 0xf5, 0x13, 0x6}, 0x5c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3772, 0x0, r1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000140)={0x2, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="18006217e33c30039b050215bf0c21000007000000800000000300000000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000001971000ffffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000085100000fdffffff1842000007000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000044198000f0ffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1f00, 0x6e}, 0x94) 1m18.288850566s ago: executing program 0 (id=6268): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="8f47e644a9959e93d6bda9c37baac41b633b4716c507e5ec3beecd14d68d306192", 0x21}], 0x1, 0x0, 0x0, 0x4000814}], 0x1, 0x40800) 1m18.167091362s ago: executing program 0 (id=6270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "95d875db896271d922"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x26b, 0x0, 0xfffffffffffffffc}]}) r7 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r7, 0x90044802, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x101, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x7, 0x8000000000002, 0x9c1, 0x8002, 0x1005, 0x400, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xa000, 0xc2d83}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000002c0)=@x86={0x3, 0x0, 0xff, 0x0, 0xffffffff, 0xe, 0x8, 0xf2, 0xd5, 0x5, 0x4, 0x9, 0x0, 0x6adc01cd, 0xd, 0x9, 0x7, 0xa, 0x1c, '\x00', 0x9, 0x7}) r10 = add_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x400000, 0x1) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() keyctl$chown(0x4, r10, r11, r12) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m17.601500898s ago: executing program 0 (id=6281): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0800c400010000000800c300ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x6, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) io_setup(0x6, &(0x7f00000007c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000280)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0xa, r5, 0x0, 0x4000, 0x7fe, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r5, 0x0, 0x0, 0x1, 0x0, 0x3, r5}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20003fc, 0x401, &(0x7f0000000140)) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00004a2000/0x1000)=nil, 0x1000}, 0x1}) mbind(&(0x7f0000a3a000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000180)=0x8000, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x81, 0x0, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @multicast1}, &(0x7f00000000c0)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xce1}, {0x4}, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, 0x0, @in6=@private1}}, 0xe8) 1m17.224915763s ago: executing program 34 (id=6281): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0800c400010000000800c300ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x6, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) io_setup(0x6, &(0x7f00000007c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000280)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0xa, r5, 0x0, 0x4000, 0x7fe, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r5, 0x0, 0x0, 0x1, 0x0, 0x3, r5}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20003fc, 0x401, &(0x7f0000000140)) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00004a2000/0x1000)=nil, 0x1000}, 0x1}) mbind(&(0x7f0000a3a000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000180)=0x8000, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x81, 0x0, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @multicast1}, &(0x7f00000000c0)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xce1}, {0x4}, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, 0x0, @in6=@private1}}, 0xe8) 29.544169455s ago: executing program 7 (id=6531): socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000600)="87", 0x1}, {&(0x7f00000004c0)="6960d29b880d91310cf0ece7f83eb7106781f2f4bf4f763d30921572bee13a5e3ea6b665b5c65c037bb039bbdc699ea7f9218389e046945394c2cc1c2cba1be6b4baf3b5ca3345935ad336ba3dffdf2f664663", 0x53}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000540)="23b23040e237be0951b7f9033293d77fdd4ee2d4058f6600fa62b07860d7a454c66aa278c8216eeadb6942f7115deae37455f6728c6a9c5a0da2b69c", 0x3c}], 0x5}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000000480)="c642f97924", 0x5}, {&(0x7f0000000640)="545b5fcaab51cb4bfdc42c3b6f26c5c9a1582a0d3840cf6c288092203db9f0c71613209c86dcef5d5eb3c0a746afc97618b3330a62c707fc7c84ae631c3e8d2943f9a1934dbee64688a3450a695fc36367fe144013fab79a7745b1ecb4", 0x5d}, {&(0x7f00000006c0)="c7182c094f21ff56fe70d5775341a87c27e4e4f625e9372469fc48785e4c52a6e41dfdf7a144a621057d39a5f131ffae1ba6801283f1333465853d236995784e062ae6f89b5f83a3af92", 0x4a}, {&(0x7f0000002740)="cc4cba001a1167fa72ca1d0de8089dc9c959f35d", 0x14}], 0x4}}], 0x2, 0x4004c081) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, r5, 0x100000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x998f6000) syz_clone3(0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18}) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYRESOCT=r7, @ANYRES64=r1, @ANYRES32=r5, @ANYRES16=r0], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 25.998168358s ago: executing program 1 (id=6538): r0 = io_uring_setup(0x2176, &(0x7f0000000280)={0x0, 0x8fea, 0x1, 0x1, 0x155}) syz_io_uring_setup(0x10010b, &(0x7f0000000140)={0x0, 0x334e, 0x42, 0x0, 0x800, 0x0, r0}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r1 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r1, 0x2219, 0x7721, 0x75, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="bc", 0x1, 0x0, 0x0, 0x2}]) set_mempolicy(0x3, &(0x7f0000000140)=0xd, 0x96e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 24.895436583s ago: executing program 7 (id=6540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f00000001c0)=""/75, 0x4b) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r7, 0x0, 0x0, 0x1}}, 0x20) pselect6(0x40, &(0x7f0000000280)={0x5, 0xfffffffffffffffd, 0x9, 0x9, 0x2, 0x7ffffffffffffffb}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x40000008}, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000600)='L', 0x1) 24.546608379s ago: executing program 2 (id=6543): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x12) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000027f2900201000c001a80080002800400018008001b00000000004ec18dfa67605a7be1eae855e1374cbc46613e9cbf549d0260868be3a07ff51d069f688ea1bee35c473faf03c765fb2025582a55ae2b868a99998d454553fb81"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x78c0, 0x40, 0x3, 0x6, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x65, 0x0, 0x81, 0x6, 0x0, @multicast1, @remote, {[@rr={0x7, 0x7, 0x51, [@remote]}]}}}}}) (async) socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x40, 0xe0, 0x0, 0x100000000000b49, 0x200000000002, 0x7, 0x8, 0x6}, 0x0) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x1, @local, 0x5}, @in6={0xa, 0x4e24, 0xedf0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe942}, @in6={0xa, 0x4e23, 0x4, @loopback, 0x401}, @in={0x2, 0x4e23, @multicast2}], 0x64) (async) syz_open_dev$vim2m(&(0x7f0000002c80), 0x5, 0x2) (async, rerun: 64) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r7 = epoll_create(0xd751) epoll_pwait(r7, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x1}) (async) read$FUSE(r5, &(0x7f0000002e40)={0x2020}, 0x192c) (async) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './control/file0'}, 0xffffffffffffff01) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x484) (async) socket(0x10, 0x3, 0x0) 20.731597993s ago: executing program 1 (id=6544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0) 19.437045192s ago: executing program 1 (id=6545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x6, 0x3}) symlinkat(&(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file1\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)={r3, 0xf, 0x20, 0x7fff}, &(0x7f00000010c0)=0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/notes', 0x20943, 0x81) r6 = syz_io_uring_setup(0x3ac6, &(0x7f0000000340)={0x0, 0x7125, 0x100, 0x1, 0x36b, 0x0, r5}, &(0x7f0000000400)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0x3, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x78, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x1, 0x4, 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x6, 0xccf, {{0x14, 0x4, 0x0, 0x2d, 0x50, 0x67, 0x0, 0xff, 0x2b, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x17, 0xd3, [@local, @multicast2, @rand_addr=0x64010101, @private=0xa010102, @multicast2]}, @ssrr={0x89, 0x3, 0xf7}, @lsrr={0x83, 0xb, 0xd2, [@broadcast, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xa4, [@private=0xa010100, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x80000004, 0xff0, &(0x7f0000001100)=""/4080, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18.034671551s ago: executing program 7 (id=6547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 16.757632567s ago: executing program 1 (id=6549): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) mlock2(&(0x7f000039b000/0x3000)=nil, 0x3000, 0x1) munlockall() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xffff, 0x2}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@wrmsr={0x1e, 0x20, {0xc0000104, 0x3}}], 0x20}) unshare(0x2c020400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(arc4),crct10dif-arm64-neon)\x00'}, 0xffffffffffffff81) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000001300)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)="7c993ecdaa1eb90ef74aaae5f11654a8969b0a4289d21b50c8997007b9e90ba735237fbee7bc8c6f4c34470591fac0aa57d2551e04fb245f0bd658f116301c8380aec5e0567a579f72c4e379b6480ee9b540f331fa4a00caaf76454154f7d498b6612a345730c611c014b26ba3fcee12f6e0c4dc884d1cd37212ace3ab49a81db925555a0667f144a9aa70b357fec9c471b7f79a6d4c567686c7b8e06baa1dba2dbe161070572cadda705d4aa6599186d4", 0xb1}, {&(0x7f0000000400)="be918288c5971e98373de72d7ad6bcee72475b5d52f59f9b5a8bd39f3f60a5e0d12a11a29efdaf969f347ff01d8a70bc938be7386f10f7e244ed38407711ccc8ab90e3a14df8f8f803b01a06531b8412ece0c7e8e4a1ae34409fc5871b98471ce41085bdc688a331c5986f8fd2b259c0bc4bc9223fdee443584ef9870e837bf43a6389ec4ee1424e1a4ba06ca1f50dd42f3c3a257db48e3f17f9bc157df61fa1fe44d0fa251f68dddd8f", 0xaa}, {&(0x7f00000004c0)="845d5c83de5fa66f8fd7d1ee7781c20cd2346b01ed6f300d763ffd33b3eabe3224193f45c7ceb49221314da3ca392144ceb2b12938de97b60d989304379ddc7980a553cd4aae65", 0x47}, {&(0x7f0000000140)="d528ab18dc5ab76c2751d4791f7585", 0xf}, {&(0x7f0000000ec0)="1ec0c00ad6482d0cf7fa0d37d623951b3d39d99876353886a5846c0b0aace7fc3cf3c24afbebddcda1bb51cfdb58561998e6c78fe43d308b28df3de1664cc8083692c9da01a1ca6b8cfcdc1a0d7d86331e7137a6fda86559a193768e7fd445486181e6e05c21ce9e05041d45ec61778bc1b4b581a0e60d81c249aadd821b533301c583d3144d8dcc58b6ada4616908e84048244ad7b88426420ce319f22127dfdbab38afbcc3c9c0b752c744cf0559f33138ae4551c6e72e9f2f2840e09691bbfa1eb6e58c911c288d5cbb65557bd1f8f45e429087421d3a6a26da8beb12477ec04d", 0xe2}, {&(0x7f0000000640)="af1c", 0x2}], 0x6, &(0x7f0000000780)=[@rights={{0x30, 0x1, 0x1, [r3, r7, 0xffffffffffffffff, 0xffffffffffffffff, r4, r7, 0xffffffffffffffff, r6]}}], 0x30, 0x24000001}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000840)="d2c68ae17063bfa83485666f90776a71718f4c03265c99f07e786a3bea2fdabd7a35af2170062e5e8b5451217bd53009c7510ab066b9c312b5f2b5baa7d5e9f9372c7e648494856e51f3bd4975a735d90dac46d951dbf555323e054c799e9a7f43e3f55c59317c7e3fd8fb31215434d15d201df8ca3b17e006df60ce17755fd652382070ee69a9b4ba80552b09aed39319d4296515dae6fe9f06a483290342d64f", 0xa1}, {&(0x7f0000000900)="22d520450db78897686be56d6fdd5219886a9816b34cff35274e10e167a0aff2aea102c554e8c69a5953c9069f1886b34517d892c35bf516a3b5fefa42f7fe45ca02d62c520cc84d7f44edcc073c7e814921c9dbfc802c8cc160f4e75770e6400f0972f23518085e80f681f501334de37dc7a8edf763c34b3bc1dd22a6c8cacb8881948925a990", 0x87}, {&(0x7f0000000dc0)="da9cf5969bd995cb61166ec15c65d77988c2050b625c0eaaa23df511a21ba683a6870ba312f5bcab0547945f81c051bc3786daaa4868e25aec5977a97815fb7bbf70ba85f5e9ea4cdffbbd794cc6ffe356e2590c68c55e532178de2a66cb3cac04b5c991800635ee5e735b30cac2ca17c440b5696a0ad919bb7e36f9af4185c030c7fea6849fd4874f58975b6895d287ee0cf2520791582f340537af086e0517", 0xa0}, {&(0x7f00000009c0)="46bcb05f", 0x4}], 0x4, &(0x7f00000010c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r5, r2, r4]}}, @cred={{0x1c}}], 0xe8, 0x50090}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000011c0)="0f4bd1cc70103ae4987e1fe365eeeab825b7aa1a0977c16890d8b98cfeac8cd0bd3e1b759a3e772822160c25", 0x2c}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4004800}}], 0x3, 0x44010) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c00100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000080)={0xa049, 0x35e8b531, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xb5{\xa0k\x95s\xa8l\xd4\b|m\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}', 0x42, 0x101, 0x0) 16.3108196s ago: executing program 7 (id=6550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1, 0x2, 0xe6cf) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) r4 = dup3(r3, r2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 32) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000100)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) (rerun: 32) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0xff73, &(0x7f0000000000)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) (async) socket(0x1e, 0x80000, 0x0) r10 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r11, 0xfffffffffffffffe, 0x39) 15.896096513s ago: executing program 2 (id=6552): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) (async, rerun: 32) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xc}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) r2 = getpid() (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x3, 0x80) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000500)={{0xa, 0x2, 0xfffffff7, 0x3, 'syz0\x00', 0x2}, 0x0, 0x10000000, 0x2, r2, 0x3, 0x9b8, 'syz1\x00', &(0x7f0000000340)=['ip6_vti0\x00', '%}{.{\xff\x00', '.${\x00'], 0x14}) (async) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x80) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xd1) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x5ee, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0xd80) (async) sendfile(r5, r6, 0x0, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0xb, 0x1, @local, @loopback, 0x40, 0x8000, 0x9, 0x7}}) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r8, 0x0, 0x0, 0x4}, 0x20) (async, rerun: 32) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) fcntl$lock(r9, 0x26, &(0x7f0000001980)={0x0, 0x2, 0xcd, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func, @map_fd={0x18, 0x5, 0x1, 0x0, r8}, @generic={0x7, 0x3, 0x9, 0x9, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r7, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.238455138s ago: executing program 2 (id=6553): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 15.088434414s ago: executing program 1 (id=6554): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) (async) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0x18d6, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x9c, 0x1, 0xd, [{@remote, 0x8001}, {@local, 0xc5}, {@loopback, 0x2}, {@broadcast, 0x6}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0x18d6, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x9c, 0x1, 0xd, [{@remote, 0x8001}, {@local, 0xc5}, {@loopback, 0x2}, {@broadcast, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0xaf, 0x0, 0x101, 0x14, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7, 0xffffffff, 0x7}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffbff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc5a2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3c0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x44040) 14.56164896s ago: executing program 2 (id=6555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0xda, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x1ffd, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$dsp(r10, &(0x7f00000000c0)=""/229, 0xe5) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/72, 0x48}], &(0x7f00000001c0)=[0x2, 0x8, 0x6, 0x9, 0x6, 0x5, 0x9]}, 0x20) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x0, 0x4, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x38b8, 0x8, &(0x7f0000000940)="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"}, {0x2, 0x0, 0xe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2dd, 0x0}, {0x2, 0x0, 0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.741252033s ago: executing program 5 (id=6557): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000000000000000) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x25, 0xbc, 0x86, 0x20, 0x4e8, 0xff30, 0x34ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x14, [{{0x9, 0x4, 0xe9, 0xfa, 0x2, 0xf7, 0xef, 0xb4, 0x5, [], [{{0x9, 0x5, 0x10f8371a2b8f700d, 0x0, 0x40, 0xf, 0x4, 0x9}}, {{0x9, 0x5, 0x1, 0x6e8b2aa4490576db, 0x3ff, 0x3, 0x9, 0x2}}]}}]}}]}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x9, 0x0, 0x0, 0xc, 0x200, 0x0, 0x1, 0xfffffffd], [0x1000, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x6, 0x8], [0x4, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x8]], '\x00', [{}, {0xc5}, {0x6}, {0xffffffff}, {0x2000005}, {0x2, 0x22c685d7}, {}, {0x0, 0xfffffff8}, {}, {0x7334486a}, {0x20000}, {0x0, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x2}) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6ef189fdf08e1947", "c7ec4b645285c2f437c9f187838e844d685fc984cc9b9affba1e271d74c5db06", "dff0534c", "e0a620eccf9fd807"}, 0x38) (async) sendto$inet6(r2, 0x0, 0x0, 0x80c0, 0x0, 0x0) lseek(r1, 0x289e0cb5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'bridge0\x00', @local}) 12.456064773s ago: executing program 6 (id=6558): r0 = userfaultfd(0x801) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x10c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x0) r6 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2f00ae97e13f24b30fcf00c71f984c61bf962cdc4d3eee7e707b52200b12a1cf513e9eaee9ea504979f3f38b537c54b0438e689cb88f8b2c3c6daec3d23a80e2504e0a2ddea1884b6f3987714f37f45f70e00bc99185621fbf99d4c93a81eccecd5a2554c4f05fd1acbc2128c8dbe1305f706c15337b1b362de575b5b302ae9c1b688d5d56fdf647dab5d5346a290068903372fa01c0b65c890ed9decef47da3e00734cf13edd4cd41904fb01aa2c1bab43060bf80c1c9a07cff34da26351d4fafc99bd05289e676ae71a5ee2527580b545266c63cca54bcb35a1d87271e1c28", 0xe0, 0xfffffffffffffffb) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "5a8730b3fdc7879b8e759d7a0403df3d56b700d68062b5ed4130f3bfc766c100c8a8b123d2001f4035250c91b66286724347981e4f1af20a1171efd0ceedadac", 0x1f}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='ceph\x00', 0x0, 0x0, 0x0, r7) keyctl$instantiate(0xc, r6, &(0x7f0000000340)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'memory.current\x00'}, 0x27, r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32=r5], 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 12.016430246s ago: executing program 5 (id=6559): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d6, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) (async) listen(r1, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a000000000010148a8239c5363f902df73b30500000000000000000a0000003c0001802c00078014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe880000000001000000000008000740000000000c00068007000200640101070000000000000000000000000000002d"], 0xa0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r6) (async) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 11.376812824s ago: executing program 2 (id=6560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x38, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xfffffffffffffe6e) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000100)={0x53fc, 0x13, [{0x5}, {0x1, 0x1}, {0xc}, {0x3, 0x1}, {0x7}, {0xf}, {0xd, 0x1}, {0x9}, {0x3, 0x1}, {0xb}, {0xa, 0x1}, {0xf, 0x1}, {0x3}, {0xd}, {0xf, 0x1}, {0x8, 0x1}, {0xe, 0x1}, {0x8, 0x1}, {0xb, 0x1}]}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) 11.376451662s ago: executing program 6 (id=6561): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r3, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 11.129412185s ago: executing program 5 (id=6562): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x80805, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xeea, 0x80500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) unshare(0x2c060000) unshare(0x24020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x20000) link(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x0) 10.931199218s ago: executing program 7 (id=6563): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="b3d9fa80817e505836dc75cf8d7543da0be4489f9e11a4fa0d1cd66b4c7599cce7bcb551704151c1da1a318d0197d20a282102bd0f3d04d73ab8d11ef60a9e5be952d935758e836282982c02c2dcae146459c5ee58eeaaf537ec70166f78f1fa006f41613d1d53d1047aeeee59a13a00d1bb45aaeebca7cbe0a98f43157316b031c62f6addb71ae908e0702c6d3b", 0x8e}, {&(0x7f0000000480)="bd440447ebadeda6e0bcbec207cd9f507f99dbd171289f76c56b2642e7fe046e406836bea2df87b9b7e7957aa293c2394376ea3bcbe203fe2fbe4417a726bd99107e69942d1e22fb6d87a671128a118249a27ea4432c7a086ea31ddb2fc527e1", 0x60}], 0x2, 0x0, 0x0, 0x5}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000680)="5523a572d25e8adfd15774a4acd77a66180c1748b59195b58c9b671d66c2a8afb0dde485448ea1a18d6059b570b477b7ea86fa0ca79b4d0bbe5e0f470b1e390ce9cb89150265add8d0aabbf51e3cdbc6a6fe15b00c531ed6c51065aa649975", 0x5f}, {&(0x7f0000000700)="86672e049511e929506688bb689575d871f9e1665a689154552e26c52c7305dccc2ad4c7f83d44b89e85be030fbd1ac11d96864684e2d00600a0b08ba3a459a47642bd282e324793558fbaa43170b946f826c948818a67ef2af519c57ac25ed6fe9f1f32c213566d8cbea733b55015448b9cc143", 0x74}, {&(0x7f0000000140)="89bcd909ba77a3", 0x7}, {&(0x7f0000000780)="5eed6be9f81988f2cff88ef004ebdc9c3f44f2fcdde13ec1081c803afe259a9b1a45aca042b91fad5630f4cd033517694d828b30dd1bd9d0b5fa6e457c08b6d68a26e1118c7296c65c447830847fe19af49f193dbba3e38e4844248d71386c054b64de77c3db4cd45222160281ac88dc2d100f8284441d2054c105f8901816406771e66e5064c7a737b58cbb783d11b18a3f69bd672fdf33eec2710d42caeb66f45b64fe866a533104438b1ff2615dcb761f0bb36953b3319080be72511f57df71678bc072d12aa83aa18247e94f47611d0d9ed2be755c066b3fec6b61da97fd1210d2", 0xe3}, {&(0x7f0000000880)="d42b3bd67a82bfc6a6c2ab8dc6127ed21874595df7b24e2ce6b5b33c3708a9ae4970bbdd77fae0da2d80c2e5a623d08d942a859232d167ee27a77e424221ba21f9e5e8c5b690b867b9c8b93c401927e92b323868b23e6f82da5b96c88afad3fbf60895dddb8e508b1158acea07f392653344d32bdde9e6b6b15871c988c41971d00ef6c79ff3c12f6e45006c128e154ec69989df247557a552faaf8c9aef54dbb9c2cc2b3c6c119c305ff5f9079cfbebcbe40efa5e3c6b", 0xb7}, {&(0x7f0000002880)="f619e00a4ac78995a4a23928f8c9c5f70e90a970bde57a9b3c227c9809bdeb73cedccde384130fa950cc5b85184f3508ebc58662868337d50cd31702495ed5af8f22a3afbbe7c6c28f26a781e0394b90df796a3aba460c03520102ed889b93d0967285045636709e325c6cb5cd104a7d3bf9c01ad9b0afe92147811c5484506f3deb14d96b64e223e52ac3a28bade74e71c6c3cc89aa4beefead4078ee8f6659e8ebff546f9475e9d96b1d0253b30d761cd90613015db8cf124f557ffc2e6f704618d4ff0d1a58033d611be1d5c252f19c64c665a65733d82b77029d195cca888aac0c544735fb1cca7eac27aa6f0e9f7d3abd780a2dac6ebc3b71b874c773ba85d60a930e91b22728862be3bc4def173610569bae2d55d1d9c830ab6164ce105bec086c4b09baccbe5224fe44919a1883dd5e5128a234646b55c5eb9d2f8f9d79d233d6c64d2b6f8b998f8f3f5b1060eef9df0adf9a1bb4840034ea4ccba040ec4377f1a50d771046dd21f54ee6670aefa126ee580a68011ef1cebdd424efbbe4c7ba33eb0459e98ba38e6b6b9be66e7cdbbdd34fc86b4d62d295257d23abfa5f43efb5845ed587c47830003f955111e6affe7d268709ce47d11e6c2f3968c0b254e2b0c24acd73ad894a355929af3256ec3ba58ca245de956f3383d0fc69d033de8681879f3c1b9ee107bb05d32583c5cbc6333e736733847cbc1caa84caa468083491730136424c98c9c14486201fa58dca9cf942d68552067011996ea661e0bfd46f0c7e3c4c9978bcf2dacfa9cf7c6d7a1dba12a343ace2c87ba3978c49a51dcdb22de164018fa7c2d788cd8e8497806e2fc291323969e9d5fbe461f20679ce032ad16830bf57be292cb311c3aed095b335d71fa9b333c3752bb2395935e6bd85ab0267b4b8cd7a76e70d0a2ddb806b2940b622d966bda2a6d7c9414b7691208b78ba158bfa740a54765fc9b38b73c97ea9fb90612789c766b99bd265e8846cb355b497253c2ab386eb7c79b6a4ba736ebc617134eeba2ea59ebaaa99ed1d6ac6a7096fc62b085911bf30b84bdb97f7ab0f2bd28e3bc9df59f64b6b2d0e6ec42035c8b35c419fa27e0fcfb7fbe67e6f1b35ee2bd04992a117c6f0b3f76637798cd8b7514513e66ee845d4ec5f43c5a7257ac7405667c39c16d64ea458347c88c2c252b62e6dc2580a73eab23609846295d7e0da50203c015f369ffb88145ba1147dc174b85bc094cc9148d4782917d06ab258273a098887698b9082221e9ad801ff3e91ec670657c2babd4d52dd12450ead4d36cb1f0d936614169da7a6aeb442ef8ee19164ff4c31e533d9a2396f702a6a13d5c910fba8f4a041ff099fcfebbb23b772a1a805abbcb59f03dc5589aa5b0b5f1c98442df9715a106c349b6b74a65ac0ba5bbf924999113aa01816c8da3d156f74bd29fd9d7f8fe2dcb2aa1e87ac2f6d015a53b4fadf998b9d7c13bd6c4246bdd182a312be0eae493878ae3b6120dd80bb9e7ed2dcd671f09fe54d53731e197afc2fdb831af1b9423ebd93224c28ac1a045bf448cb571baa73281dff42bc0035bae9b3e97f74b4f8b4579f11b8f309d8171c9cb906c3a4bdbf1b2da1263e0dbf97fa0b6230a66600ef3559e9eb3f77309473d4824579435a39519e8c15f6bc11e1d59849ced265514997f7fbdff83c8fb1375bc6d06aeee2a5223e271ce30481c01bfb4ed547154726e01b08739bfcd3439520ce25d4a8b204aeda35822093436026d46b7ad66feef938c3120e555d7313d466bea4e07f643d48b50795b55c7c99201861382063528516aa365453f82afa6e31335113de58966726749c31a8c0cf28e31a1ab37b6cf085018070c2f6dde20ead5798aa8b2700dd3221a91d814fb4aa59ac787b911c898d03b8191a28884027383595d922728d19548ace5b547fa83f25d4a2c1a286d78296e21f7884b492fb8955688e446cf39bd50e2deee134a960ae3ed1ccb457b42652a72dfef65e05abe07a4a757b525f33fb010e6607b787fc3770981bc8e8b26dce274ed84972404f97f15442bc1888531b5a91b7d916dfd2745d260709ea6ab97de03c99a5793a1bdb901b6790e9c04ff7eb7325f4230d4d1ea838b0642ad42349b337825f242fc72d2c2e3593bd41d64b0921bca3943f33e2f925b8f71c0ce4f66a4985433e0efe1f65921e543df4bf861b60be66cef40a69da28f255de6136361230c0e81b62772e8ed7cf537e49460eacdb7c211376273ba6c9f3baf85c9b49a7c703dd3baa733ca24689b531359f55ddf62e8a9c456925d5b424bcfe243738dc37fec855d9fcf31fb33b4d3f03eb3f032466355636350d476316d87de5a2d6362e0a6e9dd327338b1542bc533d0279c6c54779f38ee12efb6b04b7b910f2554729bb810b137c4402c8b3c53b10d06d10e34f0d035cf3381666093a716f2764d44d9a90f1327c8c7a20cac4c905985ba31f49593c73467e0c368167801f1a38e32bea568997e2cf63217b0a9e7b73af5eaaf39441fac811fcfe9386dd5439d12b025d4c54cc9bf9b264139b9d3e4a0c134d4e06045a094df4ada8667a1d10c8f9b65c91aa6415d98fafd0a55a8c3c6bb933c303484137e3a96547be4cb60c581d0139ef35e7dce6e0874858f84112a2de5d2480775cc3d574c3a9db3a48dfd5aa31ee59840b779d76e9927c52664bacd50ddfbe977ebd160ed32ea73ec5046bb0c51b441864e38da5f1ef3dd85a18c38053b05a22472dd4ab06a65f45e040ba92e1eed0b91bc616c3d48e7644d3657c24a37e3b2a4a3850e6c46b3a9dbda7b28d8868039fffe548a0a5aa762e0d453691c22fcf3952e1ba5d46d42279ef583f88a215a85ee854c0c881b2d4c6b31b1b474a32a2dd85ce53677fe963bd0b499afe36f366d49092ba653ebbac0f3070937e3422881262e2db732c2740f820ba6efd0657bc2b48acf3c841203699685c3e9226ca15fc3b1eab809ff782bd113f14fa7a7dd5efa23c92e833106e6311def905ff22021679daa5ce2f69cad60b997f6564dd377cec63a1638e767c29689317e6d0facefa366897bd4e8f7551c6693f71de889d5ddc95f6fa210fac4beedd26acf084d3b0472ce72fba3fa08a5699ace79a74a3c08b8331eb059683cf1a34bcd894e4361eb0c16b8a1523409ccae8908d9b7c0b41b4226bd314263e58032211ab3e88fdabd7f4bdbf3ad50c2dacb67e275bd0e47c659c30cca261856dcfa00328607b681e05d01b09373f164f2ccd396be4b809634502cb3eb559c9d11b1b4525748d795a7e4d44f7c2c7c8a9206f792d1b369544e0fc72cca6a8b3bb18eb7f37039eb2604a91052f3b879e42d0eac3beb24103f9272574341781c7e6df8c49b276ed2d349996d0d3e2fb216a62a565d65a39f32d18d726f99aca627d3a1e341ca3afe94ac93b69a5bd97c371d610f99204e0c2c7b193fa422163680401960e9afd1af457919f993f3c58f255b1369c7263fddcf1b2801c1d17962581119ff1a528ac17811daf04a847c86cf893c410f72073bae14f9f1bf0968dc1b7865d64e2f3e628e14f93e10351d23d4c2c31c94f7042f4ad71f338d6231e62b21e9bf45682749464cf15f75313d035317476ff4809a136fb00f3a0d524fd55da23ba437e3f49352d06c33ef588eea9b0968756e2e31b4006e3e751e4f6a710694fcbe5a73a616d270710cbac1f88631002ed0df8275bde3b02603a6417904767c382be8972cd5c4a435ac752bae6d42e65c9f006bec0882b6b8dfca56375b687a91d517407cacc5610f34a5221dbc28337a91c3a7460da32f7bc03aac6f3312bcd14a3205c1adcfde65c13993aa421794315918818d30a97932387cc4faabc0434aa3c9c94651356cb574f4b86e16c301a91045682602803e4be13921ec4f2d48cabaae1f1ef6ef049e75d697f0bde8720c5ce426b91440477458e0213fe1e2c2a53debad344f33bd95822f215c4a8b94ccb838eca25341fe80100fcea97a05066304e932d40c0e6bd6b7eb6f8659a20c2b447defa4a8bea507297531bc747add2a732946be0c617faa1a68cb903d4bc1fcdf341781fddd2c438dc6e0ea4f632b105166e749079e40b1d6971a32edf7334fdeea3427b30a24d0e987dac83b8f04aabef6594371a0679af84be6d2c1ed6f6224a6dab9d0fad5383c0f1fad597db6eb6e11fd926c025c4fdec3f326435011590d355615f1304235b912b1b018a01068dc708754507a42d64f76ac871151ea9998196d588922b2df251e916e95ea74f4fada7056cabf23f4e64d12ae135c9e5853dafc2b3b71f83442a7fcde710df1e2f60cc5d5fe8d6a41084ca5b0553cf62c6c541b8b035a6bcf67639893a45b9583d70ac3ae1a651cfeca948c55690331477286f07e7211086d85c1443ba1c207e27973bc5232cda7e3175e825591473df9cf7a2d75f8e380b3377caaa1cb6f358142375b50c83ade7bc8cf03e43d66aa8b04e1f10aa8c7ad8abf28d6ff909032e787b2ded78a936658b04216b55344e77a08ed380d43efeeeca937b667d956da2dcc985ce18c517bd1f2fdf795ee599c97caf087ab861c285fe6104cf79ccf984d41a4523bdaa575feaae4b11f030f0caf69486c9fe7072312a095ae07ef8be3bfb0e8861a1dea21f784473c5d96c96516c8a2207e09ea2ae43f92ac55b0d02de88a69ac99fb19e7c97dd6423ee6053f5b0b7789f67f67bf92cdcd475170a87799e635aa6cb0701fe0b42fd1bf66b604a5c93f30c62e58b10e27fc80cb72b1cdfbf58195f75d86bf7e341db2021413de64d6a02cc0a28a3200c3388e743853ec7bd57cae7ca9b68912d258c8f52d502bedba2ee9be92b6caee8b87688de943c9bf7447b60d09149e55661ebf2091accb8755676787962f9a8fcde20e9b30307f5aa34f9b447ec399f95564d7f3a3ab53b951d41a5abeb894f9a8d3e846f90969edfea2399f49c6de0ef700533afed00f672775cc1535ff766f8685acfcae07a9bba5b28bee305e922b6e97786fe54efe08669b926714e3125e0693f485cb4da4c328b6348c806629f9b822b8ffb5c2292b1de07f9dca3d4fa0ec2f965aef066e1bdb82dbea70b24dff097a4458b36b421fa3538e338f735f34ff558e67a9dbbaff804995fb75425da74b4a9aa418010a21c6e1bcd16955baf22620ec330015f6c4719c762b4e0ccb3a5d78f8e3a12e8058cfe0f7b1c70585e0767afc7d50c2d402f88ddd0423bfa5958317dcd1812a8b4c3664b6381e01721416ba5a50f2a98f44fb11c99a454e12b1ee50379fd27e2a4ed4d0c594280f76c165f0069352e93c95f0bd24e2859d245db8acc815ada3947edfffacd256e7419d37ddffe3db21b78729f65d56b8ac5836a19d3b00318581b298ddcfdfde2f3b4b5324ff41c6cf7cbaa0c38d2eb880c5155bfe39d2ef67e57fc3b061baa8a8b6001a051a55bf5e1f6acf701c5a43403bea85ad4e9959fbb5d7543812b2e193d4ee94b77233e4a72b02f8396dac2db17ad37c3bb315310ee27391a0c79fd5a0368d39e7904b7435e9948b737ba7eb512f38d8686fd2384f70f24bfb92f5930daf890794da699c28c8669e7a5db831e6f64a00583a533355689d322943fb6cd4cddd8203e35f835f1670dddc5c03bedd8fb621d8cc7e74c11e65e527d27c14774ed5fa7cc47fe3ceea0fbb734d6f4aa112592a3ef533e38ed6e6c4da6bc799507bbfe5113ab169775318b685fcb5f6e54cb7bbf6fe918096a91cfe818de386533c2618b0387b30b0e0250234124e93681880b02b18a2fd1a78ce8ecb1e4be75d7", 0x1005}, {&(0x7f0000000940)="44532ec5945e411fd4fbb8186b7bd106d300925ceb536e09b854259b9afb2702299fc9103b75b99e016530183bf33760d276772d2bf919e9a90729f401f717760b18e62e5d21b39d63d47f60f99feaff2d7461dad610774fb1145e52af21b686ec34ed8a65b4c8517d603a7d10cb8f35bed8dc4de387bca1caddd2b811be5af9ebfd43eee44f8e6c824c94dba8c09181cb80b6", 0x93}], 0x7, &(0x7f0000001100)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000424f1b1d5c84f685000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x4010}}, {{&(0x7f0000001240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000012c0)="0f4d4ad8ea3a130dff90a8f6b0c2359fc92b71177a98bf486db7595e3746c6e3dd430aaefa3d63bcddb9049ac9b682efe90c4f102052b9b36f242c5d9f406ce3e5371c3fdd30f2762031", 0x4a}, {&(0x7f0000001340)="879b4ff4da997575698daa3bb4bec42845d46f79b7b366cdf0f5a4fbf26e8d52b57e8555473008d65955e70960acbe345f0ed321ea56fa9faa24c7dc1448285bd1365e28da0e7d1983f5b67071029342e1a863c1a95ab9d7", 0x58}, {&(0x7f00000013c0)="4ced8757f0f8f1298a53b201a6ba3f25211f85c820dc5d8dcd4d4d947a7653f18c0041a3248b306e9d598b977a7eba7deebede3fbbe0b92caeaca1106896c35861e0a83a3acdb181ac6a245672ac5c561a459bd714c2b4bb93954e6d32c57f738000a61ac8d1a1c35643b504460d03122a8dfa8124b0ed0939dbb1ffda3d1cbdff82fd0759285ab8c03c393d02f80b13e0a676e96d43f39e64389f8ac4", 0x9d}, {&(0x7f0000006380)="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", 0x1000}], 0x4, &(0x7f0000007380)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="10000000000000040100007f82000281", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x48010}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r3 = socket$unix(0x1, 0x1, 0x0) cachestat(r3, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r5 = fsopen(&(0x7f0000000340)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='port', 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) close(r7) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000200)={0x918b, 0x8004, 0xb, 0xa6a, 0x88, "4ae23ae17df2e9890009000005000500001000", 0x100, 0xffffffff}) syz_io_uring_setup(0x5393, &(0x7f0000000a80)={0x0, 0x36d1, 0x10, 0x0, 0x80000213}, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xf, 0x400001}) socket$netlink(0x10, 0x3, 0x0) 9.0397715s ago: executing program 5 (id=6564): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c088088f51e72eb2f7e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="3d98a5b11814525408d35781815813328744fbd886249810efbe64d6a23fc74fa6b725b892a5c75503591e076f8ac328f9808b8d4bd936be775767c2629e7f7d7cfaf4574a4910fe8da16f8c95c7d2aa40a825d498714cba7669c644b4cd86ac531b29d1df8bd639952d97dc35dc56b4a1b93499de10f6e8c6f2cfc51b603fead58ca137ae668c46e2da7c4b4279ca62eac8301b", 0x94}], 0x1}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 8.083762537s ago: executing program 6 (id=6565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0) 2.834181563s ago: executing program 7 (id=6566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x2c}}, 0x20010000) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newchain={0x3c, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0xc, 0x2}, {0xa, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1b, 0xf4}}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)='\x00@', 0x2}], 0x1}, 0x4) socket$kcm(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e22, 0x3, 'sh\x00', 0x2f, 0x80005, 0x65}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = epoll_create1(0x80000) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) epoll_pwait(r10, &(0x7f0000000100)=[{}], 0x1, 0xef60, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x2000000f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) 2.833764088s ago: executing program 5 (id=6567): r0 = epoll_create1(0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x3, 0x980914, 0x3}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000140)={0xa000201e}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'nr0\x00', 'lo\x00', 0x4, 0x1, 0x3ff, 0x4, 0x7, 0x3, {0x88}, {0x8}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x5}, {0xffffffffffffffff, 0x3, 0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffff00], [], 'erspan0\x00', 'macvlan1\x00', {}, {}, 0x6}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0xb9, [0x10, 0xa], 0x800, 0x10, 0x6, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}]}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'nicvf0\x00', {0xffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200002002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x24042840}, 0x20008000) 2.825011206s ago: executing program 6 (id=6568): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x100000000000000, 0x0, 0x1}, 0x22000054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbbfaae60080000000000001000000000000000000007efff10000400000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000001fe00", "f4bd0000008019000000000000000000000000000000008000", [0x8000000000008, 0xffffffff9673e35d]}}) 2.515140982s ago: executing program 1 (id=6569): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d2}) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) 1.935630712s ago: executing program 6 (id=6570): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}, {0x20, '&/&'}]}, 0xa8) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e72e4f0bedb7c930aa4ab1e46695c1fb6ce947a12539fd90c30a1de6c9c3f7d33fc18866cb172e469352b6ba03830dbcf172d1f7cf467bf6bea0cf4c0aa3cc"}, 0xbb) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000fffd00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.441717865s ago: executing program 5 (id=6571): r0 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) (async) ftruncate(r0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000)="f33e", 0x2, r0}, 0x68) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30110000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async, rerun: 32) r6 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x3) (async) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x44e4c2) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 582.348723ms ago: executing program 2 (id=6572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff2) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x5, "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", 0x4, 0x9a, 0xb8, 0x6, 0x40, 0x3, 0x0, 0x2}}}, 0x128) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20f}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000008c0)={0x2, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0x5, 0x920000000000, 0x4, 0x15ab}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x4, 0x8000, 0x1c, 0x0, 0x5}}]}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x2, 0xfffd, 0x3}, 'syz0\x00', 0x3c}) r6 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xa2c2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003940)=@generic={&(0x7f0000003900)='./file0\x00', r9}, 0x18) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r10 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r10, &(0x7f0000003740)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/230, 0xe6}], 0x1, &(0x7f00000007c0)=""/181, 0xb5}, 0x6}, {{&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000940)=""/254, 0xfe}, {&(0x7f0000000a40)=""/140, 0x8c}], 0x3, &(0x7f0000000b00)=""/170, 0xaa}, 0x3ff}, {{&(0x7f0000000bc0)=@generic, 0x80, &(0x7f0000001240)=[{&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/192, 0xc0}, {&(0x7f0000000d80)=""/157, 0x9d}, {&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000f40)=""/183, 0xb7}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001080)=""/138, 0x8a}, {&(0x7f0000001140)=""/219, 0xdb}], 0x8, &(0x7f00000012c0)=""/181, 0xb5}, 0x401}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/217, 0xd9}, {&(0x7f0000002600)=""/208, 0xd0}], 0x4, &(0x7f0000002740)=""/4096, 0x1000}, 0x401}], 0x4, 0x40008000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000003840)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000003880)={0x48, 0x2, r11}) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 0s ago: executing program 6 (id=6573): r0 = memfd_secret(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x900}) r1 = syz_io_uring_setup(0x1aa2, &(0x7f0000000040)={0x0, 0xa9f0, 0x4, 0x0, 0x3d3, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x100, &(0x7f0000000140)=0xef78, 0x0, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x4802) r5 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x5, 0x24041) ioctl$FE_DISEQC_RESET_OVERLOAD(r5, 0x6f3e, 0x0) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r6}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x9f7, 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'sit0\x00', 0x8}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r7, 0x400}, {r4, 0x4000}, {r1, 0x2010}], 0x3, &(0x7f0000000440)={r8, r9+60000000}, &(0x7f0000000480)={[0xffffffffffffffff]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000004c0)={0x1, 0x2, 0x8001, 0x6, 0x8, 0x7}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x29, 0x0, @fd=r7, 0x8000000000000000, 0x0, 0x1ff, 0x5, 0x1, {0x0, r10}}) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000540)={0x3, @meta={0x48505356, 0x5a4ea6c, 0xa9cf, 0x4d4, 0x6f79eb9b}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00') close_range(r11, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000740)={0x0, 0x9, &(0x7f0000000680)=[0x9117, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x4, 0x400, 0x6], &(0x7f00000006c0)=[0x81, 0x7, 0x8], &(0x7f0000000700)=[0xfff7, 0x6, 0xa, 0x144b, 0xfffb, 0x81]}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000780)={0xc, 0x40, {0xffffffffffffffff}, {0xee01}, 0x344, 0xd654}) migrate_pages(r12, 0x0, &(0x7f00000007c0)=0x4, &(0x7f0000000800)=0xfff) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000880)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840), 0x1, 0x10, 0x1, {0x0, r10}}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r7, 0x6f50, 0x4) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f00000008c0)=""/152, &(0x7f0000000980)=0x98) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered blocking state [ 1335.888006][T29615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.903359][T29615] bridge_slave_0: entered allmulticast mode [ 1335.921365][T29615] bridge_slave_0: entered promiscuous mode [ 1335.937873][T29615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.953660][T29615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.973165][T29615] bridge_slave_1: entered allmulticast mode [ 1336.011138][T29615] bridge_slave_1: entered promiscuous mode [ 1336.377978][T25766] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1336.553680][ T5833] Bluetooth: hci0: command tx timeout [ 1336.574070][T25766] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1336.583603][T25766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.603584][T25766] usb 7-1: Product: syz [ 1336.608253][T25766] usb 7-1: Manufacturer: syz [ 1336.613536][T25766] usb 7-1: SerialNumber: syz [ 1336.637775][T29615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.647766][T25766] usb 7-1: config 0 descriptor?? [ 1336.663892][T29615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.823020][ T7013] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1336.843929][T29615] team0: Port device team_slave_0 added [ 1336.862362][T25766] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1336.876194][T29615] team0: Port device team_slave_1 added [ 1336.937460][T25766] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1336.991700][ T7013] usb 6-1: device descriptor read/64, error -71 [ 1337.035454][T25766] usb 7-1: USB disconnect, device number 69 [ 1337.161297][T29615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.169168][T29615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.224869][T29853] sctp: [Deprecated]: syz.2.5924 (pid 29853) Use of int in max_burst socket option. [ 1337.224869][T29853] Use struct sctp_assoc_value instead [ 1337.252692][T29615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.256497][T29850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1337.270661][T29615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.278376][ T7013] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1337.294159][T29615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.334937][T29615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.432738][ T7013] usb 6-1: device descriptor read/64, error -71 [ 1337.495401][T29615] hsr_slave_0: entered promiscuous mode [ 1337.503497][T29615] hsr_slave_1: entered promiscuous mode [ 1337.509938][T29615] debugfs: 'hsr0' already exists in 'hsr' [ 1337.515801][T29615] Cannot create hsr debugfs directory [ 1337.540074][ T7013] usb usb6-port1: attempt power cycle [ 1337.629938][ T7017] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1337.666292][T21823] bridge_slave_1: left allmulticast mode [ 1337.673343][T21823] bridge_slave_1: left promiscuous mode [ 1337.679878][T21823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.689254][T21823] bridge_slave_0: left allmulticast mode [ 1337.696451][T21823] bridge_slave_0: left promiscuous mode [ 1337.702432][T21823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.802145][ T7017] usb 7-1: Using ep0 maxpacket: 16 [ 1337.820458][ T7017] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1337.829194][ T7017] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.850037][ T7017] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.890198][ T7017] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.899765][ T7013] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1337.918454][ T7017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.926798][ T7017] usb 7-1: Product: syz [ 1337.931164][ T7017] usb 7-1: Manufacturer: syz [ 1337.936042][ T7017] usb 7-1: SerialNumber: syz [ 1337.940448][ T7013] usb 6-1: device descriptor read/8, error -71 [ 1338.000794][T21823] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1338.189965][ T7013] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1338.243832][ T7013] usb 6-1: device descriptor read/8, error -71 [ 1338.272476][T21823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.284001][T21823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.295621][T21823] bond0 (unregistering): Released all slaves [ 1338.315454][T21823] bond1 (unregistering): Released all slaves [ 1338.337702][T21823] bond2 (unregistering): Released all slaves [ 1338.359557][ T5905] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1338.360642][ T7013] usb usb6-port1: unable to enumerate USB device [ 1338.375024][ T7017] usb 7-1: 0:2 : does not exist [ 1338.388436][T21823] bond3 (unregistering): Released all slaves [ 1338.521707][T21823] tipc: Disabling bearer [ 1338.553216][T21823] tipc: Left network mode [ 1338.557967][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.584607][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1338.622588][ T5833] Bluetooth: hci0: command tx timeout [ 1338.629223][ T5905] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.639619][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.663241][ T5905] usb 3-1: config 0 descriptor?? [ 1338.717013][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1338.891102][T29944] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1338.952970][T29944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.996854][T29944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.015841][T29944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.052917][T29944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.074929][ T7013] usb 3-1: USB disconnect, device number 66 [ 1339.100677][ T5905] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1339.390673][T21823] hsr_slave_0: left promiscuous mode [ 1339.406292][T21823] hsr_slave_1: left promiscuous mode [ 1339.444075][ T7017] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1339.565021][ T7017] usb 7-1: USB disconnect, device number 70 [ 1339.604822][T30076] loop8: detected capacity change from 0 to 8 [ 1339.614724][T30076] Dev loop8: unable to read RDB block 8 [ 1339.626203][T30076] loop8: unable to read partition table [ 1339.633029][T26808] udevd[26808]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.636809][T30076] loop8: partition table beyond EOD, truncated [ 1339.671393][T30076] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1340.079050][T30099] loop5: detected capacity change from 0 to 7 [ 1340.102298][T30099] Dev loop5: unable to read RDB block 7 [ 1340.124335][T30099] loop5: unable to read partition table [ 1340.149549][ T7017] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1340.201748][T30099] loop5: partition table beyond EOD, truncated [ 1340.212754][T30099] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1340.351064][ T7017] usb 6-1: Using ep0 maxpacket: 8 [ 1340.387700][ T7017] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.486541][ T7017] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1340.499136][ T7017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.507752][T29615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1340.527680][ T7017] usb 6-1: Product: syz [ 1340.533180][ T7017] usb 6-1: Manufacturer: syz [ 1340.538783][ T7017] usb 6-1: SerialNumber: syz [ 1340.544092][ T5905] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1340.606048][T29615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1340.615621][ T7017] usb 6-1: config 0 descriptor?? [ 1340.648034][ T7017] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1340.658225][T29615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1340.688241][T29615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1340.700168][ T5833] Bluetooth: hci0: command tx timeout [ 1340.731825][ T5905] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1340.740947][ T5905] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1340.764045][ T5905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1340.790942][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1340.829541][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1340.851505][ T5905] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1340.863046][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1340.879529][ T5905] usb 7-1: Product: syz [ 1340.909345][ T5905] usb 7-1: Manufacturer: syz [ 1340.933801][ T5905] cdc_wdm 7-1:1.0: skipping garbage [ 1340.943171][ T5905] cdc_wdm 7-1:1.0: skipping garbage [ 1340.961574][ T5905] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1340.978160][ T5905] cdc_wdm 7-1:1.0: Unknown control protocol [ 1341.256607][T25766] usb 7-1: USB disconnect, device number 71 [ 1341.273511][T30152] kAFS: unable to lookup cell '' [ 1341.279075][T30152] kAFS: unable to lookup cell '(,c' [ 1341.412532][T30129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5936'. [ 1341.477778][T29615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.531083][T21823] IPVS: stop unused estimator thread 0... [ 1341.557156][T29615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.632817][T21829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.639950][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.835244][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.842417][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.114365][T30181] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5940'. [ 1342.249819][ T5905] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1342.265870][T29615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.358426][T29615] veth0_vlan: entered promiscuous mode [ 1342.400397][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1342.406967][ T5905] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1342.415366][ T5905] usb 3-1: config 0 has no interface number 0 [ 1342.422348][ T5905] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1342.448023][ T5905] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1342.451418][T29615] veth1_vlan: entered promiscuous mode [ 1342.481536][ T5905] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1342.492651][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1342.500938][ T5905] usb 3-1: Product: syz [ 1342.505381][ T5905] usb 3-1: SerialNumber: syz [ 1342.554547][ T5905] usb 3-1: config 0 descriptor?? [ 1342.572033][ T5905] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1342.592552][T29615] veth0_macvtap: entered promiscuous mode [ 1342.598707][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input81 [ 1342.625973][T29615] veth1_macvtap: entered promiscuous mode [ 1342.657852][T29615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.683752][T29615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.714984][T21837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.738786][T21837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.781383][ T5833] Bluetooth: hci0: command tx timeout [ 1342.799263][T21837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.836214][T21837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.901702][ T5875] usb 6-1: USB disconnect, device number 5 [ 1342.941125][T21827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.961752][T21827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.007091][T21827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.016739][T21827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.459476][ T5905] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1343.478377][T30223] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5942'. [ 1343.555522][T30227] loop8: detected capacity change from 0 to 8 [ 1343.574924][T30227] Dev loop8: unable to read RDB block 8 [ 1343.590960][T30227] loop8: unable to read partition table [ 1343.603300][T30227] loop8: partition table beyond EOD, truncated [ 1343.610447][T30227] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1343.621918][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.659298][ T5905] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1343.690733][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.768777][ T5905] usb 6-1: config 0 descriptor?? [ 1343.803618][T30233] syzkaller0: entered promiscuous mode [ 1343.811042][T30233] syzkaller0: entered allmulticast mode [ 1344.074389][T30248] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1344.124316][ T7017] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1344.280324][ T7017] usb 2-1: device descriptor read/64, error -71 [ 1344.508701][T30259] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1344.530717][ T7017] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1344.660731][ T7017] usb 2-1: device descriptor read/64, error -71 [ 1344.716144][T30267] FAULT_INJECTION: forcing a failure. [ 1344.716144][T30267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.731531][T30267] CPU: 1 UID: 0 PID: 30267 Comm: syz.6.5952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.731562][T30267] Tainted: [L]=SOFTLOCKUP [ 1344.731569][T30267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1344.731579][T30267] Call Trace: [ 1344.731587][T30267] [ 1344.731595][T30267] dump_stack_lvl+0xe8/0x150 [ 1344.731617][T30267] should_fail_ex+0x412/0x560 [ 1344.731632][T30267] _copy_from_iter+0x1d3/0x1670 [ 1344.731644][T30267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1344.731660][T30267] ? __pfx_policy_nodemask+0x10/0x10 [ 1344.731682][T30267] ? __pfx__copy_from_iter+0x10/0x10 [ 1344.731709][T30267] ? set_page_refcounted+0xa0/0x1e0 [ 1344.731730][T30267] ? page_copy_sane+0x4e/0x270 [ 1344.731752][T30267] copy_page_from_iter+0xdd/0x170 [ 1344.731768][T30267] tun_get_user+0x1d4b/0x3dd0 [ 1344.731780][T30267] ? tun_get_user+0x6ff/0x3dd0 [ 1344.731800][T30267] ? aa_file_perm+0x440/0x1630 [ 1344.731815][T30267] ? __pfx_tun_get_user+0x10/0x10 [ 1344.731851][T30267] ? ref_tracker_alloc+0x363/0x4d0 [ 1344.731873][T30267] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1344.731899][T30267] ? tun_get+0x1c/0x2f0 [ 1344.731924][T30267] ? tun_get+0x1c/0x2f0 [ 1344.731944][T30267] ? tun_get+0x1c/0x2f0 [ 1344.731965][T30267] tun_chr_write_iter+0x113/0x200 [ 1344.731986][T30267] vfs_write+0x61d/0xb90 [ 1344.732010][T30267] ? __pfx_vfs_write+0x10/0x10 [ 1344.732043][T30267] ? __fget_files+0x2a/0x420 [ 1344.732074][T30267] ksys_write+0x150/0x270 [ 1344.732094][T30267] ? __pfx_ksys_write+0x10/0x10 [ 1344.732112][T30267] do_syscall_64+0x14d/0xf80 [ 1344.732127][T30267] ? trace_irq_disable+0x3b/0x150 [ 1344.732148][T30267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.732165][T30267] ? clear_bhb_loop+0x40/0x90 [ 1344.732186][T30267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.732202][T30267] RIP: 0033:0x7f154115cece [ 1344.732219][T30267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1344.732234][T30267] RSP: 002b:00007f1542142fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.732253][T30267] RAX: ffffffffffffffda RBX: 00007f15421436c0 RCX: 00007f154115cece [ 1344.732263][T30267] RDX: 0000000000000050 RSI: 0000200000001080 RDI: 00000000000000c8 [ 1344.732269][T30267] RBP: 00007f1542143090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.732275][T30267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.732281][T30267] R13: 00007f1541416038 R14: 00007f1541415fa0 R15: 00007f154153fa48 [ 1344.732305][T30267] [ 1344.780507][ T7017] usb usb2-port1: attempt power cycle [ 1344.998147][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.002080][T25766] usb 3-1: USB disconnect, device number 67 [ 1345.005476][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1345.029163][T30273] program syz.6.5953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1345.055591][T25766] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1345.137424][T30283] netlink: 'syz.2.5954': attribute type 1 has an invalid length. [ 1345.191854][T30283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1345.220065][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1345.260126][T30283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1345.399522][ T7017] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1345.430229][ T7017] usb 2-1: device descriptor read/8, error -71 [ 1345.682528][ T7017] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1345.720284][ T7017] usb 2-1: device descriptor read/8, error -71 [ 1345.831726][ T7017] usb usb2-port1: unable to enumerate USB device [ 1345.984380][T30321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5955'. [ 1346.050753][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1346.089690][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1346.116619][ T5905] usb 6-1: USB disconnect, device number 6 [ 1346.719706][T30383] xt_hashlimit: size too large, truncated to 1048576 [ 1347.307207][T30414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1347.549765][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1347.755003][ T5898] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1347.776474][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.792416][T30431] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1347.798867][ T5898] usb 2-1: Product: syz [ 1347.807940][ T5898] usb 2-1: Manufacturer: syz [ 1347.828531][ T5898] usb 2-1: SerialNumber: syz [ 1347.871316][ T5898] usb 2-1: config 0 descriptor?? [ 1347.950691][T30433] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5973'. [ 1347.982779][T30433] netlink: 'syz.2.5973': attribute type 2 has an invalid length. [ 1347.990616][T30433] netlink: 'syz.2.5973': attribute type 1 has an invalid length. [ 1348.135800][ T5898] hso 2-1:0.0: Failed to find BULK IN ep [ 1348.176692][ T5898] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1348.696207][T30446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5967'. [ 1348.855160][ T7017] usb 2-1: USB disconnect, device number 47 [ 1349.089417][ T29] audit: type=1326 audit(1771591258.613:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.198649][ T29] audit: type=1326 audit(1771591258.613:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282354][ T29] audit: type=1326 audit(1771591258.613:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282398][ T29] audit: type=1326 audit(1771591258.613:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282434][ T29] audit: type=1326 audit(1771591258.623:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282469][ T29] audit: type=1326 audit(1771591258.623:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282504][ T29] audit: type=1326 audit(1771591258.623:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282546][ T29] audit: type=1326 audit(1771591258.633:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282581][ T29] audit: type=1326 audit(1771591258.653:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.282616][ T29] audit: type=1326 audit(1771591258.683:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30436 comm="syz.2.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb45059c629 code=0x7ffc0000 [ 1349.549956][T30483] x_tables: duplicate underflow at hook 3 [ 1350.691125][T30502] Cannot find add_set index 0 as target [ 1351.287534][T30510] syzkaller0: entered promiscuous mode [ 1351.305952][T30510] syzkaller0: entered allmulticast mode [ 1351.766430][T30518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1352.820729][T30559] syzkaller0: entered promiscuous mode [ 1352.840266][T30559] syzkaller0: entered allmulticast mode [ 1353.548210][ T980] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1353.772552][ T980] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1353.801409][ T980] usb 6-1: config 0 has no interface number 0 [ 1353.807538][ T980] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1353.829626][ T980] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1353.914933][ T980] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1353.925233][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.934676][ T980] usb 6-1: Product: syz [ 1353.939042][ T980] usb 6-1: Manufacturer: syz [ 1353.958082][ T980] usb 6-1: SerialNumber: syz [ 1353.968895][ T980] usb 6-1: config 0 descriptor?? [ 1353.975025][T30572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1353.988258][ T980] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1354.061742][ T980] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1354.301852][T30602] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1354.323659][T30602] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1354.398460][ T980] usb 6-1: USB disconnect, device number 7 [ 1354.408379][ T980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1354.473965][ T980] cyberjack 6-1:0.69: device disconnected [ 1354.674296][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6008'. [ 1355.258478][T30635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6011'. [ 1355.882466][T30643] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1356.819495][ T7017] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1356.983349][ T7017] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1356.992423][ T7017] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1357.001793][ T7017] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1357.015241][ T7017] usb 6-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1357.028603][ T7017] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1357.035285][ T7017] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1357.045246][ T7017] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1357.054733][ T7017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.062785][ T7017] usb 6-1: Product: syz [ 1357.067025][ T7017] usb 6-1: Manufacturer: syz [ 1357.071769][ T7017] usb 6-1: SerialNumber: syz [ 1357.169245][T30620] geneve2: entered promiscuous mode [ 1357.177215][T30641] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1357.187141][T30641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1357.302641][ T7017] smsusb:smsusb_probe: board id=8, interface number 0 [ 1357.335932][ T7017] usb 6-1: selecting invalid altsetting 0 [ 1357.349258][ T7017] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 1357.389496][ T7017] smsusb 6-1:1.0: probe with driver smsusb failed with error -22 [ 1357.425519][ T7017] usb 6-1: USB disconnect, device number 8 [ 1357.475489][T30684] loop8: detected capacity change from 0 to 8 [ 1357.492628][T26808] Dev loop8: unable to read RDB block 8 [ 1357.508448][T26808] loop8: unable to read partition table [ 1357.526679][T26808] loop8: partition table beyond EOD, truncated [ 1357.545362][T30684] Dev loop8: unable to read RDB block 8 [ 1357.559580][T30684] loop8: unable to read partition table [ 1357.571556][T30684] loop8: partition table beyond EOD, truncated [ 1357.587751][T30684] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1357.769910][ T7017] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1357.899728][ T7017] usb 2-1: device descriptor read/64, error -71 [ 1358.163313][ T7017] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1358.309611][ T7017] usb 2-1: device descriptor read/64, error -71 [ 1358.475216][ T7017] usb usb2-port1: attempt power cycle [ 1358.798286][T30731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.809604][T30731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.819557][ T7017] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1358.836734][T30731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.845002][T30731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.853111][ T7017] usb 2-1: device descriptor read/8, error -71 [ 1359.119473][ T7017] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1359.158514][ T7017] usb 2-1: device descriptor read/8, error -71 [ 1359.269785][ T7017] usb usb2-port1: unable to enumerate USB device [ 1359.503138][T30751] tipc: Started in network mode [ 1359.508163][T30751] tipc: Node identity ea4eb4b931fa, cluster identity 4711 [ 1359.516467][T30751] tipc: Enabled bearer , priority 0 [ 1359.524505][T30751] syzkaller0: entered promiscuous mode [ 1359.530219][T30751] syzkaller0: entered allmulticast mode [ 1359.551281][T30751] tipc: Resetting bearer [ 1359.587361][T30751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.612349][T30750] tipc: Resetting bearer [ 1359.648745][T30750] tipc: Disabling bearer [ 1360.403095][T30810] netlink: 'syz.1.6036': attribute type 3 has an invalid length. [ 1360.413128][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1360.741992][T30830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1361.023884][T30843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1361.031162][T30843] IPv6: NLM_F_CREATE should be set when creating new route [ 1361.136162][T30853] binder_alloc: 30852: binder_alloc_buf, no vma [ 1361.318035][T30862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1361.408185][T30864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1361.431629][T30864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1361.587423][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.587479][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.129091][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6064'. [ 1362.337698][T21836] bond0 (unregistering): Released all slaves [ 1362.348833][T21836] bond1 (unregistering): Released all slaves [ 1362.366715][T21836] bond2 (unregistering): (slave veth5): Releasing active interface [ 1362.384944][T21836] bond2 (unregistering): Released all slaves [ 1362.405358][T21836] bond3 (unregistering): (slave 5gQ[): Releasing backup interface [ 1362.414854][T21836] bond3 (unregistering): (slave 5gQ[): last VLAN challenged slave left bond - VLAN blocking is removed [ 1362.428583][T21836] bond3 (unregistering): Released all slaves [ 1364.789509][T21836] tipc: Left network mode [ 1365.170827][ T7017] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1365.303945][T31001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6080'. [ 1365.360891][ T7017] usb 3-1: Using ep0 maxpacket: 8 [ 1365.367446][ T7017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1365.378605][ T7017] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1365.388007][ T7017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.444257][ T7017] usb 3-1: config 0 descriptor?? [ 1365.527677][T21836] hsr0: left allmulticast mode [ 1365.535830][T21836] veth1_macvtap: left promiscuous mode [ 1365.547399][T21836] veth0_macvtap: left promiscuous mode [ 1365.558390][T21836] veth0_vlan: left promiscuous mode [ 1365.716854][ T7017] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1366.968203][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1366.968215][ T29] audit: type=1326 audit(1771591276.613:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.1.6086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x0 [ 1367.081134][T31033] netlink: 'syz.1.6086': attribute type 5 has an invalid length. [ 1367.102171][T31033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6086'. [ 1367.212695][T16298] usb 3-1: USB disconnect, device number 68 [ 1367.435067][T21836] IPVS: stop unused estimator thread 0... [ 1367.531755][T31046] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6087'. [ 1367.582350][T31046] syzkaller1: entered promiscuous mode [ 1367.601433][T31046] syzkaller1: entered allmulticast mode [ 1368.820520][ T5833] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 1370.281623][T31112] binder: BINDER_SET_CONTEXT_MGR already set [ 1370.287671][T31112] binder: 31109:31112 ioctl 4018620d 200000004a80 returned -16 [ 1370.448739][T31120] binder: transaction release 218 bad handle 1, ret = -22 [ 1370.489576][T31122] Set syz0 is full, maxelem 0 reached [ 1370.754394][T31137] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1370.785119][T31137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1371.948873][T31164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6118'. [ 1371.978955][T31164] netlink: 'syz.2.6118': attribute type 1 has an invalid length. [ 1371.994919][T31164] veth0: entered promiscuous mode [ 1372.001815][T31164] veth0: left promiscuous mode [ 1372.295494][T31169] bridge_slave_1: default FDB implementation only supports local addresses [ 1372.771459][T31177] syzkaller0: entered promiscuous mode [ 1372.777045][T31177] syzkaller0: entered allmulticast mode [ 1373.383908][T31198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4376 (8752 ns) > initial count (1792 ns). Using initial count to start timer. [ 1373.981736][ T5833] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1374.192941][T31239] netlink: 'syz.1.6133': attribute type 75 has an invalid length. [ 1374.259831][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1374.410635][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 1374.417983][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.427095][ T5875] usb 6-1: config 0 has no interface number 0 [ 1374.434357][ T5875] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.446283][ T5875] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.456979][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.471556][ T5875] usb 6-1: config 0 descriptor?? [ 1374.493793][ T5875] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1374.589484][T25766] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 1374.752001][T25766] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.760711][T25766] usb 7-1: config 0 has no interface number 0 [ 1374.770673][T25766] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1374.787769][T25766] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1374.802687][T25766] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.812226][T25766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.824124][T25766] usb 7-1: config 0 descriptor?? [ 1374.830032][T31248] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1374.843670][T25766] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1374.944620][T16298] usb 6-1: USB disconnect, device number 9 [ 1375.063237][T25766] usb 7-1: USB disconnect, device number 72 [ 1376.041209][T31315] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1376.739100][T31337] ptrace attach of "./syz-executor exec"[27495] was attempted by "./syz-executor exec"[31337] [ 1377.824859][T31386] syzkaller0: entered promiscuous mode [ 1377.833884][T31386] syzkaller0: entered allmulticast mode [ 1378.024729][T31399] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1379.821314][T31442] io-wq is not configured for unbound workers [ 1381.687319][ T29] audit: type=1326 audit(1771591291.333:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154119c629 code=0x7ffc0000 [ 1381.734372][ T29] audit: type=1326 audit(1771591291.333:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154119c629 code=0x7ffc0000 [ 1381.762229][ T29] audit: type=1326 audit(1771591291.363:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f154119c629 code=0x7ffc0000 [ 1381.785982][ T29] audit: type=1326 audit(1771591291.363:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154119c629 code=0x7ffc0000 [ 1381.897203][ T29] audit: type=1326 audit(1771591291.363:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.6.6190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154119c629 code=0x7ffc0000 [ 1382.159721][ T5875] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1382.367724][ T5875] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.389938][ T5875] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.416422][ T5875] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.510201][ T5875] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1382.519488][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.527492][ T5875] usb 7-1: Product: syz [ 1382.609425][ T5875] usb 7-1: Manufacturer: syz [ 1382.614062][ T5875] usb 7-1: SerialNumber: syz [ 1382.721973][ T5875] hub 7-1:1.0: bad descriptor, ignoring hub [ 1382.727923][ T5875] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1382.928007][ T5875] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1383.087125][T31488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.117305][T31488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.235029][ T5875] usb 7-1: USB disconnect, device number 73 [ 1383.250975][ T5875] usblp0: removed [ 1383.391082][T31488] ip6tnl1: left allmulticast mode [ 1383.457445][T31488] geneve2: left promiscuous mode [ 1383.474840][T21837] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.483878][T21837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.510232][T21837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.529939][T21837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.818357][T31384] Set syz1 is full, maxelem 65536 reached [ 1384.762384][T21829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1384.789505][T21829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1384.822007][T21829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1384.839698][T21829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.169829][T31560] Set syz0 is full, maxelem 0 reached [ 1385.334300][T31565] netlink: 'syz.0.6218': attribute type 29 has an invalid length. [ 1385.394468][T31568] netlink: 'syz.0.6218': attribute type 29 has an invalid length. [ 1385.757156][T31583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1385.764399][T31583] IPv6: NLM_F_CREATE should be set when creating new route [ 1385.853485][T31585] tipc: Enabled bearer , priority 0 [ 1385.869087][T31585] syzkaller0: entered promiscuous mode [ 1385.876772][T31585] syzkaller0: entered allmulticast mode [ 1385.914009][T31584] tipc: Resetting bearer [ 1385.941761][T31584] tipc: Disabling bearer [ 1386.279678][ T5875] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1386.432395][ T5875] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1386.442807][ T5875] usb 6-1: config 0 has no interface number 0 [ 1386.448980][ T5875] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1386.463569][ T5875] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1386.474963][ T5875] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1386.486357][ T5875] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1386.495888][T25766] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1386.503598][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1386.511963][ T5875] usb 6-1: Product: syz [ 1386.516496][ T5875] usb 6-1: SerialNumber: syz [ 1386.526190][ T5875] usb 6-1: config 0 descriptor?? [ 1386.534065][ T5875] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1386.544280][ T5875] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input82 [ 1386.659576][T25766] usb 2-1: Using ep0 maxpacket: 16 [ 1386.666421][T25766] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1386.677554][T25766] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1386.689290][T25766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1386.701065][T25766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1386.723013][T25766] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1386.739264][T25766] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1386.748833][T25766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.756965][T25766] usb 2-1: Product: syz [ 1386.763455][T25766] usb 2-1: Manufacturer: syz [ 1386.768086][T25766] usb 2-1: SerialNumber: syz [ 1386.772818][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1386.785346][T25766] usb 2-1: config 0 descriptor?? [ 1387.049676][T25766] appledisplay: Apple Cinema Display connected [ 1387.259787][ T5875] usb 2-1: USB disconnect, device number 52 [ 1387.265774][ C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1387.279815][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1387.280246][ T5898] usb 6-1: USB disconnect, device number 10 [ 1387.286776][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1387.294431][ T5875] appledisplay: Apple Cinema Display disconnected [ 1387.356470][ T5898] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1387.429526][T25766] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1387.591071][T25766] usb 7-1: no configurations [ 1387.595681][T25766] usb 7-1: can't read configurations, error -22 [ 1387.749641][T25766] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1387.836247][T31681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1387.916822][T25766] usb 7-1: no configurations [ 1387.929957][T25766] usb 7-1: can't read configurations, error -22 [ 1387.937480][T25766] usb usb7-port1: attempt power cycle [ 1388.279537][T25766] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1388.300943][T25766] usb 7-1: no configurations [ 1388.305557][T25766] usb 7-1: can't read configurations, error -22 [ 1388.319509][T16298] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1388.327173][ T5898] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1388.439676][T25766] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1388.461282][T25766] usb 7-1: no configurations [ 1388.467632][T25766] usb 7-1: can't read configurations, error -22 [ 1388.474606][T25766] usb usb7-port1: unable to enumerate USB device [ 1388.489527][T16298] usb 2-1: Using ep0 maxpacket: 16 [ 1388.496788][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.501361][T31703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.510819][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.518197][T31703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.527459][ T5898] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1388.542922][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1388.558775][T16298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1388.567498][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.577182][T16298] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1388.584798][T16298] usb 2-1: can't read configurations, error -71 [ 1388.593322][ T5898] usb 6-1: config 0 descriptor?? [ 1388.992494][T31716] binder: 31715:31716 ioctl c0306201 2000000003c0 returned -14 [ 1389.009428][ T5898] hid-steam 0003:28DE:1142.0053: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1389.090691][ T5898] hid-steam 0003:28DE:1142.0053: Steam wireless receiver connected [ 1389.115861][ T5898] hid-steam 0003:28DE:1142.0054: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1389.137789][T21825] tipc: Subscription rejected, illegal request [ 1389.325762][ T5875] usb 6-1: USB disconnect, device number 11 [ 1389.358141][ T5875] hid-steam 0003:28DE:1142.0053: Steam wireless receiver disconnected [ 1389.481217][T31748] syzkaller0: create flow: hash 3843197924 index 1 [ 1389.500081][ T980] syzkaller0: tun_net_xmit 76 [ 1389.530103][T31747] syzkaller0: delete flow: hash 3843197924 index 1 [ 1389.746526][ T29] audit: type=1800 audit(1771591299.383:1618): pid=31718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6250" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1390.419624][T16298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1390.580958][T16298] usb 6-1: Using ep0 maxpacket: 16 [ 1390.591428][T16298] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 1390.599783][T16298] usb 6-1: config 4 has no interface number 0 [ 1390.605904][T16298] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1390.616057][T16298] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1390.628863][T16298] usb 6-1: config 4 interface 9 has no altsetting 0 [ 1390.642466][T16298] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1390.653721][T16298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.662269][T16298] usb 6-1: Product: syz [ 1390.667222][T16298] usb 6-1: Manufacturer: syz [ 1390.676899][T31795] xt_bpf: check failed: parse error [ 1390.682424][T16298] usb 6-1: SerialNumber: syz [ 1390.731419][T31776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1390.755927][T31776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1390.799532][T16298] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1390.994009][T31776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.016762][T31776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.263888][T31807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.379840][T31807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.820657][T21825] usb 6-1: Failed to submit usb control message: -110 [ 1391.829920][T21825] usb 6-1: unable to send the bmi data to the device: -110 [ 1391.837269][T21825] usb 6-1: unable to get target info from device [ 1391.846634][T21825] usb 6-1: could not get target info (-110) [ 1391.855948][T21825] usb 6-1: could not probe fw (-110) [ 1393.206056][T31879] syzkaller0: entered promiscuous mode [ 1393.215711][T31879] syzkaller0: entered allmulticast mode [ 1393.245472][T16298] usb 6-1: USB disconnect, device number 12 [ 1393.325104][T31891] Set syz0 is full, maxelem 0 reached [ 1393.643559][T31926] bond4: entered promiscuous mode [ 1393.648893][T31926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1393.713775][T16298] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1393.889591][T16298] usb 6-1: Using ep0 maxpacket: 32 [ 1393.919973][T16298] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1393.948547][T16298] usb 6-1: config 2 has no interface number 0 [ 1393.959546][T16298] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1393.984485][T16298] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1394.012014][T16298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.031129][T16298] usb 6-1: Product: syz [ 1394.039469][T16298] usb 6-1: Manufacturer: syz [ 1394.049399][T16298] usb 6-1: SerialNumber: syz [ 1394.512911][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1394.525725][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1394.541471][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1394.550065][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1394.557665][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1394.666669][T32004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.690495][T32004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.719497][ T5875] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1394.767491][T16298] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1394.813583][T16298] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1394.844497][T32028] syzkaller0: entered promiscuous mode [ 1394.862233][T16298] usb 6-1: USB disconnect, device number 13 [ 1394.869678][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 1394.877552][T32028] syzkaller0: entered allmulticast mode [ 1394.883575][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1394.892804][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1394.904088][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1394.914765][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1394.925039][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1394.935071][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1394.945861][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1394.958229][ T5875] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1394.968010][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.985014][ T5875] usb 2-1: Product: syz [ 1394.991004][ T5875] usb 2-1: Manufacturer: syz [ 1394.995740][ T5875] usb 2-1: SerialNumber: syz [ 1395.021451][ T5875] usb 2-1: config 0 descriptor?? [ 1395.050121][ T5875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1395.241832][T31985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.331047][T25590] udevd[25590]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.358919][T31985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.425563][ T5875] usb 2-1: USB disconnect, device number 55 [ 1395.475586][T32096] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1395.485068][T32096] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 1395.513429][T32096] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1395.526164][T31994] chnl_net:caif_netlink_parms(): no params data found [ 1395.822748][T16298] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1395.982422][T16298] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1395.992588][T16298] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.166052][T31994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.175188][T31994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.185465][T31994] bridge_slave_0: entered allmulticast mode [ 1396.195069][T31994] bridge_slave_0: entered promiscuous mode [ 1396.219256][T16298] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1396.278006][T16298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.448996][T31994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.498490][T31994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.528131][T31994] bridge_slave_1: entered allmulticast mode [ 1396.553956][T31994] bridge_slave_1: entered promiscuous mode [ 1396.560937][T16298] usb 6-1: usb_control_msg returned -32 [ 1396.566700][T16298] usbtmc 6-1:16.0: can't read capabilities [ 1396.635635][ T5833] Bluetooth: hci0: command tx timeout [ 1396.814765][T32238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1396.883670][T31994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.040857][T16298] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1397.074090][T31994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.150284][ T5905] usb 6-1: USB disconnect, device number 14 [ 1397.181667][T16298] usb 2-1: device descriptor read/64, error -71 [ 1397.231917][T31994] team0: Port device team_slave_0 added [ 1397.264591][T31994] team0: Port device team_slave_1 added [ 1397.352048][T31994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.371499][T31994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.437477][T31994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.469265][T31994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.490912][T31994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.516909][T16298] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1397.543963][T31994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.699490][T16298] usb 2-1: device descriptor read/64, error -71 [ 1397.809744][T16298] usb usb2-port1: attempt power cycle [ 1398.178871][T16298] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1398.204680][T16298] usb 2-1: device descriptor read/8, error -71 [ 1398.245126][T31994] hsr_slave_0: entered promiscuous mode [ 1398.261803][T31994] hsr_slave_1: entered promiscuous mode [ 1398.280483][T31994] debugfs: 'hsr0' already exists in 'hsr' [ 1398.286452][T31994] Cannot create hsr debugfs directory [ 1398.293663][T32338] syzkaller0: entered promiscuous mode [ 1398.299211][T32338] syzkaller0: entered allmulticast mode [ 1398.459612][T16298] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1398.540294][T16298] usb 2-1: device descriptor read/8, error -71 [ 1398.700572][ T5833] Bluetooth: hci0: command tx timeout [ 1398.710410][T16298] usb usb2-port1: unable to enumerate USB device [ 1399.116847][T32441] netlink: 'syz.5.6300': attribute type 5 has an invalid length. [ 1399.154106][T32441] netlink: 'syz.5.6300': attribute type 4 has an invalid length. [ 1399.166780][T32441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6300'. [ 1399.354407][T31994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1399.375066][T31994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1399.397754][T31994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1399.434424][T31994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1399.634708][T32477] Set syz0 is full, maxelem 0 reached [ 1399.643992][T31994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.692594][T31994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.708336][T21829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.715520][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.733066][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.740240][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.805792][T32485] loop8: detected capacity change from 0 to 8 [ 1399.856876][T31994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.889186][T32485] Dev loop8: unable to read RDB block 8 [ 1399.935564][T32485] loop8: unable to read partition table [ 1400.012048][T32485] loop8: partition table beyond EOD, truncated [ 1400.019483][T32485] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1400.051331][T31994] veth0_vlan: entered promiscuous mode [ 1400.097524][T31994] veth1_vlan: entered promiscuous mode [ 1400.197044][T32495] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6311'. [ 1400.214196][T31994] veth0_macvtap: entered promiscuous mode [ 1400.243006][T31994] veth1_macvtap: entered promiscuous mode [ 1400.272705][T32495] team0: Port device team_slave_0 removed [ 1400.297426][T32495] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1400.399305][T31994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.416309][T31994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.431949][T21837] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.447809][T21827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.468759][T21827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.478573][T21827] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.730476][T21829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.769247][T21829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.781159][ T5833] Bluetooth: hci0: command tx timeout [ 1400.853658][T21829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.877580][ T29] audit: type=1804 audit(1771591310.523:1619): pid=32514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6314" name="/newroot/361/file1" dev="fuse" ino=1 res=1 errno=0 [ 1400.908206][T21829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.836460][T32547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.862610][ T5833] Bluetooth: hci0: command tx timeout [ 1403.274160][ T980] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1403.376611][T32599] netlink: 'syz.6.6336': attribute type 32 has an invalid length. [ 1403.389783][ T47] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1403.443770][ T980] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1403.459505][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.467506][ T980] usb 6-1: Product: syz [ 1403.476013][ T980] usb 6-1: Manufacturer: syz [ 1403.481948][ T980] usb 6-1: SerialNumber: syz [ 1403.549558][ T47] usb 8-1: Using ep0 maxpacket: 16 [ 1403.556620][ T47] usb 8-1: config 0 has an invalid interface number: 46 but max is 0 [ 1403.564949][ T47] usb 8-1: config 0 has no interface number 0 [ 1403.571313][ T47] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1403.582724][ T47] usb 8-1: config 0 interface 46 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1403.595304][ T47] usb 8-1: config 0 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1403.607360][ T47] usb 8-1: config 0 interface 46 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1403.620151][ T47] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1403.631760][ T47] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1403.642846][ T47] usb 8-1: config 0 interface 46 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1403.656466][ T47] usb 8-1: New USB device found, idVendor=178d, idProduct=02be, bcdDevice=c1.21 [ 1403.659536][T16298] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1403.666407][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.681615][ T47] usb 8-1: Product: syz [ 1403.686517][ T47] usb 8-1: Manufacturer: syz [ 1403.691749][ T47] usb 8-1: SerialNumber: syz [ 1403.697394][ T980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1403.712390][ T47] usb 8-1: config 0 descriptor?? [ 1403.717745][ T980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1403.732967][ T980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1403.745780][ T980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1403.756710][ T980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1403.767307][ T980] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1403.825444][T16298] usb 7-1: device descriptor read/64, error -71 [ 1403.950179][T32587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.963745][T32587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.974590][T32587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.984028][T32587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.005888][ T47] usb 8-1: USB disconnect, device number 2 [ 1404.079708][T16298] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1404.219585][T16298] usb 7-1: device descriptor read/64, error -71 [ 1404.339879][T16298] usb usb7-port1: attempt power cycle [ 1404.399686][ T47] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1404.413074][ T980] usb 6-1: USB disconnect, device number 15 [ 1404.611236][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1404.661195][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1404.674142][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.692507][ T47] usb 3-1: config 0 descriptor?? [ 1404.924843][T16298] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1404.971012][T16298] usb 7-1: device descriptor read/8, error -71 [ 1404.981193][ T47] smsusb:smsusb_probe: board id=8, interface number 0 [ 1404.991271][ T47] smsusb:smsusb_probe: Device initialized with return code -19 [ 1405.358121][T16298] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1405.400750][T16298] usb 7-1: device descriptor read/8, error -71 [ 1405.424152][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6347'. [ 1405.502276][T32675] tipc: Enabling of bearer rejected, failed to enable media [ 1405.522194][T16298] usb usb7-port1: unable to enumerate USB device [ 1405.538981][T32675] tipc: Enabling of bearer rejected, already enabled [ 1405.660944][T32690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6350'. [ 1406.499437][ T7017] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1406.603173][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6358'. [ 1406.612452][T32732] netlink: 'syz.7.6358': attribute type 18 has an invalid length. [ 1406.612529][T32737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6358'. [ 1406.620926][T32732] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6358'. [ 1406.641614][T32737] netlink: 'syz.7.6358': attribute type 18 has an invalid length. [ 1406.670056][ T7017] usb 2-1: Using ep0 maxpacket: 32 [ 1406.677290][T32737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6358'. [ 1406.686563][ T7017] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1406.702743][ T7017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.729205][ T7017] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.0/input/input83 [ 1406.738518][ T5905] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1406.809558][ T47] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1406.911083][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.934693][ T5905] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1406.947258][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.960073][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1406.968456][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.968696][ T5905] usb 6-1: config 0 descriptor?? [ 1406.985845][T32751] FAULT_INJECTION: forcing a failure. [ 1406.985845][T32751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.999308][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.009792][ T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1407.023424][T32751] CPU: 1 UID: 0 PID: 32751 Comm: syz.7.6362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.023452][T32751] Tainted: [L]=SOFTLOCKUP [ 1407.023460][T32751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1407.023470][T32751] Call Trace: [ 1407.023478][T32751] [ 1407.023485][T32751] dump_stack_lvl+0xe8/0x150 [ 1407.023517][T32751] should_fail_ex+0x412/0x560 [ 1407.023542][T32751] _copy_from_iter+0x1d3/0x1670 [ 1407.023563][T32751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1407.023597][T32751] ? __pfx_policy_nodemask+0x10/0x10 [ 1407.023617][T32751] ? __pfx__copy_from_iter+0x10/0x10 [ 1407.023643][T32751] ? set_page_refcounted+0xa0/0x1e0 [ 1407.023663][T32751] ? page_copy_sane+0x4e/0x270 [ 1407.023685][T32751] copy_page_from_iter+0xdd/0x170 [ 1407.023710][T32751] tun_get_user+0x1d4b/0x3dd0 [ 1407.023731][T32751] ? tun_get_user+0x6ff/0x3dd0 [ 1407.023774][T32751] ? aa_file_perm+0x440/0x1630 [ 1407.023795][T32751] ? __pfx_tun_get_user+0x10/0x10 [ 1407.023841][T32751] ? ref_tracker_alloc+0x363/0x4d0 [ 1407.023863][T32751] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1407.023889][T32751] ? tun_get+0x1c/0x2f0 [ 1407.023915][T32751] ? tun_get+0x1c/0x2f0 [ 1407.023934][T32751] ? tun_get+0x1c/0x2f0 [ 1407.023955][T32751] tun_chr_write_iter+0x113/0x200 [ 1407.023978][T32751] vfs_write+0x61d/0xb90 [ 1407.024000][T32751] ? __pfx_vfs_write+0x10/0x10 [ 1407.024025][T32751] ? __fget_files+0x2a/0x420 [ 1407.024054][T32751] ksys_write+0x150/0x270 [ 1407.024074][T32751] ? __pfx_ksys_write+0x10/0x10 [ 1407.024102][T32751] do_syscall_64+0x14d/0xf80 [ 1407.024126][T32751] ? trace_irq_disable+0x3b/0x150 [ 1407.024151][T32751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.024169][T32751] ? clear_bhb_loop+0x40/0x90 [ 1407.024190][T32751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.024207][T32751] RIP: 0033:0x7f1cc3d5cece [ 1407.024225][T32751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1407.024240][T32751] RSP: 002b:00007f1cc4bd8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1407.024259][T32751] RAX: ffffffffffffffda RBX: 00007f1cc4bd96c0 RCX: 00007f1cc3d5cece [ 1407.024271][T32751] RDX: 0000000000000086 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1407.024282][T32751] RBP: 00007f1cc4bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.024293][T32751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.024303][T32751] R13: 00007f1cc4016038 R14: 00007f1cc4015fa0 R15: 00007f1cc413fa48 [ 1407.024329][T32751] [ 1407.279504][ T47] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1407.289096][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.301278][ T47] usb 7-1: config 0 descriptor?? [ 1407.399307][T32726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.412293][T32726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.429474][ T5905] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 1407.446541][ T5905] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0055/input/input84 [ 1407.723467][ T47] microsoft 0003:045E:07DA.0056: unknown main item tag 0x3 [ 1407.730769][ T47] microsoft 0003:045E:07DA.0056: unknown main item tag 0x6 [ 1407.738035][ T47] microsoft 0003:045E:07DA.0056: item fetching failed at offset 32/34 [ 1407.748025][ T47] microsoft 0003:045E:07DA.0056: parse failed [ 1407.754700][ T47] microsoft 0003:045E:07DA.0056: probe with driver microsoft failed with error -22 [ 1407.919034][ T47] usb 7-1: USB disconnect, device number 82 [ 1407.975707][ T305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.988116][ T305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.083011][ T5898] usb 3-1: USB disconnect, device number 69 [ 1408.957231][ T5177] bcm5974 2-1:16.0: could not read from device [ 1409.010739][ T5177] bcm5974 2-1:16.0: could not read from device [ 1409.033941][ T7017] usb 2-1: USB disconnect, device number 60 [ 1409.045810][ T5177] bcm5974 2-1:16.0: could not read from device [ 1409.064164][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6377'. [ 1409.203660][ T5905] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1409.274641][ T5905] usb 6-1: USB disconnect, device number 16 [ 1409.367948][ T406] fido_id[406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1409.529602][T16298] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1409.537656][ T5898] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1409.679488][ T5905] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1409.709438][T16298] usb 8-1: Using ep0 maxpacket: 16 [ 1409.716848][T16298] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1409.730644][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1409.741697][T16298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1409.755624][ T5898] usb 3-1: not running at top speed; connect to a high speed hub [ 1409.764944][ T5898] usb 3-1: config 7 has an invalid interface number: 136 but max is 0 [ 1409.773523][ T5898] usb 3-1: config 7 has no interface number 0 [ 1409.779953][ T5898] usb 3-1: config 7 interface 136 has no altsetting 0 [ 1409.789040][T16298] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1409.798655][T16298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.807544][T16298] usb 8-1: Product: syz [ 1409.811780][T16298] usb 8-1: Manufacturer: syz [ 1409.816571][T16298] usb 8-1: SerialNumber: syz [ 1409.822452][ T5898] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=be.0c [ 1409.833249][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.841305][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1409.847455][T16298] usb 8-1: config 0 descriptor?? [ 1409.852621][ T5905] usb 6-1: no configurations [ 1409.857217][ T5905] usb 6-1: can't read configurations, error -22 [ 1409.864725][ T5898] usb 3-1: Product: syz [ 1409.871027][T16298] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1409.880823][ T5898] usb 3-1: Manufacturer: syz [ 1409.885403][ T5898] usb 3-1: SerialNumber: syz [ 1409.890030][T16298] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1410.009774][ T47] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1410.019504][ T5905] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1410.117038][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.136/input/input85 [ 1410.128740][ T5177] bcm5974 3-1:7.136: could not read from device [ 1410.136216][ T5177] bcm5974 3-1:7.136: could not read from device [ 1410.148265][ T5177] bcm5974 3-1:7.136: could not read from device [ 1410.149976][ T5898] usb 3-1: USB disconnect, device number 70 [ 1410.163761][ T5177] bcm5974 3-1:7.136: could not read from device [ 1410.172986][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1410.177100][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.181640][ T5905] usb 6-1: no configurations [ 1410.193974][ T47] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1410.205587][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.218035][ T5905] usb 6-1: can't read configurations, error -22 [ 1410.225017][ T47] usb 7-1: config 0 descriptor?? [ 1410.246466][ T5905] usb usb6-port1: attempt power cycle [ 1410.474845][T16298] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1410.483760][T16298] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1410.491455][T16298] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1410.498425][T16298] em28xx 8-1:0.0: No AC97 audio processor [ 1410.599547][ T5905] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1410.624910][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1410.631404][ T5905] usb 6-1: no configurations [ 1410.648122][ T47] hid-alps 0003:044E:1215.0057: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.6-1/input0 [ 1410.649638][ T5905] usb 6-1: can't read configurations, error -22 [ 1410.691727][T16298] usb 7-1: USB disconnect, device number 83 [ 1410.762319][ T468] fido_id[468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1410.781804][ T482] xt_limit: Overflow, try lower: 0/0 [ 1410.829558][ T5905] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1410.869973][ T488] FAULT_INJECTION: forcing a failure. [ 1410.869973][ T488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.872794][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1410.883329][ T488] CPU: 1 UID: 0 PID: 488 Comm: syz.2.6386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.883362][ T488] Tainted: [L]=SOFTLOCKUP [ 1410.883369][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1410.883379][ T488] Call Trace: [ 1410.883388][ T488] [ 1410.883396][ T488] dump_stack_lvl+0xe8/0x150 [ 1410.883425][ T488] should_fail_ex+0x412/0x560 [ 1410.883449][ T488] _copy_to_user+0x31/0xb0 [ 1410.883474][ T488] simple_read_from_buffer+0xe1/0x170 [ 1410.883508][ T488] proc_fail_nth_read+0x1bb/0x230 [ 1410.883534][ T488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1410.883558][ T488] ? rw_verify_area+0x2a6/0x4d0 [ 1410.883574][ T488] ? tun_chr_write_iter+0x18a/0x200 [ 1410.883594][ T488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1410.883616][ T488] vfs_read+0x20c/0xa70 [ 1410.883631][ T488] ? fdget_pos+0x246/0x320 [ 1410.883657][ T488] ? __pfx___mutex_lock+0x10/0x10 [ 1410.883683][ T488] ? __pfx_vfs_read+0x10/0x10 [ 1410.883701][ T488] ? __fget_files+0x2a/0x420 [ 1410.883727][ T488] ? __fget_files+0x3a0/0x420 [ 1410.883747][ T488] ? __fget_files+0x2a/0x420 [ 1410.883777][ T488] ksys_read+0x150/0x270 [ 1410.883795][ T488] ? __pfx_ksys_read+0x10/0x10 [ 1410.883822][ T488] do_syscall_64+0x14d/0xf80 [ 1410.883844][ T488] ? trace_irq_disable+0x3b/0x150 [ 1410.883867][ T488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.883884][ T488] ? clear_bhb_loop+0x40/0x90 [ 1410.883905][ T488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.883922][ T488] RIP: 0033:0x7fb45055cece [ 1410.883938][ T488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1410.883951][ T488] RSP: 002b:00007fb44e7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1410.883970][ T488] RAX: ffffffffffffffda RBX: 00007fb44e7f66c0 RCX: 00007fb45055cece [ 1410.883983][ T488] RDX: 000000000000000f RSI: 00007fb44e7f60a0 RDI: 0000000000000004 [ 1410.883994][ T488] RBP: 00007fb44e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.884003][ T488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.884014][ T488] R13: 00007fb450816038 R14: 00007fb450815fa0 R15: 00007fb45093fa48 [ 1410.884041][ T488] [ 1411.126138][ T5905] usb 6-1: no configurations [ 1411.132719][ T5905] usb 6-1: can't read configurations, error -22 [ 1411.146656][ T5905] usb usb6-port1: unable to enumerate USB device [ 1411.163875][ T29] audit: type=1326 audit(1771591320.813:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=495 comm="syz.2.6389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb45059c629 code=0x0 [ 1411.503396][T16298] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1411.669452][T16298] usb 7-1: Using ep0 maxpacket: 32 [ 1411.676352][T16298] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1411.684618][T16298] usb 7-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1411.695345][T16298] usb 7-1: config 0 has no interface number 0 [ 1411.702509][T16298] usb 7-1: too many endpoints for config 0 interface 2 altsetting 193: 163, using maximum allowed: 30 [ 1411.713610][T16298] usb 7-1: config 0 interface 2 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1411.726914][T16298] usb 7-1: config 0 interface 2 has no altsetting 0 [ 1411.736362][T16298] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1411.745615][T16298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.753642][T16298] usb 7-1: Product: syz [ 1411.757859][T16298] usb 7-1: Manufacturer: syz [ 1411.762541][T16298] usb 7-1: SerialNumber: syz [ 1411.769264][T16298] usb 7-1: config 0 descriptor?? [ 1412.137728][ T29] audit: type=1804 audit(1771591321.783:1621): pid=508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6391" name="/newroot/131/file1" dev="tmpfs" ino=699 res=1 errno=0 [ 1412.336473][ T47] usb 8-1: USB disconnect, device number 3 [ 1412.347327][ T515] syzkaller0: entered promiscuous mode [ 1412.356437][ T515] syzkaller0: entered allmulticast mode [ 1412.366657][ T47] em28xx 8-1:0.0: Disconnecting em28xx [ 1412.395338][ T47] em28xx 8-1:0.0: Freeing device [ 1412.405162][ T525] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.420700][ T525] binder: 521:525 ioctl 4018620d 200000000040 returned -16 [ 1412.528702][ T541] Set syz0 is full, maxelem 0 reached [ 1412.642162][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6400'. [ 1412.681977][ T545] bridge_slave_0: left allmulticast mode [ 1412.687641][ T545] bridge_slave_0: left promiscuous mode [ 1412.701176][ T545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.716572][ T545] bridge_slave_1: left allmulticast mode [ 1412.724282][ T545] bridge_slave_1: left promiscuous mode [ 1412.731206][ T545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.745638][ T545] bond0: (slave bond_slave_0): Releasing backup interface [ 1412.755767][ T545] bond0: (slave bond_slave_1): Releasing backup interface [ 1412.778246][ T545] team0: Port device team_slave_0 removed [ 1412.794955][ T545] team0: Port device team_slave_1 removed [ 1412.804640][ T545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.813833][ T545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.824501][ T545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.832664][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6400'. [ 1412.847373][ T545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.858613][ T545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1413.029734][ T5905] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1413.179513][ T7013] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1413.211594][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1413.223266][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1413.234542][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1413.244703][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1413.258258][ T5905] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1413.267981][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.278983][ T5905] usb 3-1: config 0 descriptor?? [ 1413.329796][ T7013] usb 8-1: Using ep0 maxpacket: 32 [ 1413.337617][ T7013] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1413.348166][ T7013] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1413.363307][ T7013] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.373995][ T7013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.383047][ T7013] usb 8-1: Product: Ћ [ 1413.387207][ T7013] usb 8-1: Manufacturer: 쁏艴緮뱛퐂璨⍚꩙螦瑞銺䤂ň난곃鯮폦㐑㇦熎㜂嚹吽쒂걓㔡栤즇쇉淏ƍ捔쎐墨౛᱀ꕇᵡ첧ꖕ꜇⼣翟폷꙯㴁ዥ익毅ɒ椝崠䏀ﵘɅ짘ᪧႏ蓪⤾ꚃ褠룚₹顨㼃ᮛ읙᱖ꮞ툟꾙╁鋮㫴ⰱૃ╛掞䉻 [ 1413.415568][ T7013] usb 8-1: SerialNumber: 〉 [ 1413.663775][ T7013] cdc_ncm 8-1:1.0: bind() failure [ 1413.674755][ T579] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1413.747423][ T5905] plantronics 0003:047F:FFFF.0058: ignoring exceeding usage max [ 1413.763152][ T7013] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1413.818792][ T7013] cdc_ncm 8-1:1.1: bind() failure [ 1413.853871][ T5905] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1413.863033][ T7013] usb 8-1: USB disconnect, device number 4 [ 1413.950261][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.960055][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.163437][T16298] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1414.208955][T16298] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input86 [ 1414.357371][T16298] usb 7-1: USB disconnect, device number 84 [ 1414.567987][ T621] xt_hashlimit: size too large, truncated to 1048576 [ 1414.873046][T25459] Bluetooth: hci4: command 0x0406 tx timeout [ 1414.946849][ T627] 8021q: VLANs not supported on vxcan0 [ 1415.139450][T16298] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1415.389900][ T47] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1415.539721][ T47] usb 8-1: Using ep0 maxpacket: 16 [ 1415.548576][ T47] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1415.558059][ T7013] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1415.565706][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.574231][ T47] usb 8-1: Product: syz [ 1415.578786][ T47] usb 8-1: Manufacturer: syz [ 1415.583545][ T47] usb 8-1: SerialNumber: syz [ 1415.591774][ T47] usb 8-1: config 0 descriptor?? [ 1415.719874][ T7013] usb 7-1: Using ep0 maxpacket: 32 [ 1415.727912][ T7013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1415.742598][ T7013] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1415.752498][ T7013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.761640][ T7013] usb 7-1: Product: syz [ 1415.761740][ T648] syzkaller0: entered promiscuous mode [ 1415.765832][ T7013] usb 7-1: Manufacturer: syz [ 1415.765851][ T7013] usb 7-1: SerialNumber: syz [ 1415.782335][ T648] syzkaller0: entered allmulticast mode [ 1415.784901][ T7013] usb 7-1: config 0 descriptor?? [ 1416.003672][ T47] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1416.019300][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1416.030496][ T47] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1416.043772][ T47] usb 8-1: media controller created [ 1416.057709][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1416.200389][ T7013] gs_usb 7-1:0.0: Configuring for 256 interfaces [ 1416.206990][ T7013] gs_usb 7-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 1416.217855][ T47] zl10353_read_register: readreg error (reg=127, ret==0) [ 1416.225446][ T7013] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 1416.233830][ T47] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1416.246342][ T47] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1416.266481][ T47] usb 8-1: USB disconnect, device number 5 [ 1416.304176][ T47] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1416.411790][ T638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.420651][ T638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.489564][T16298] usb 3-1: device descriptor read/64, error -71 [ 1416.729584][T16298] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1416.738015][T16298] usb 3-1: device reset changed ep0 maxpacket size! [ 1416.745725][ T7017] usb 3-1: USB disconnect, device number 71 [ 1416.919493][ T7017] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1417.085351][ T708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.096103][ T708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.120371][ T7017] usb 3-1: Using ep0 maxpacket: 16 [ 1417.126990][ T7017] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1417.136964][ T7017] usb 3-1: config 0 has no interface number 0 [ 1417.143850][ T7017] usb 3-1: config 0 interface 119 has no altsetting 0 [ 1417.154620][ T7017] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 1417.164143][ T7017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.172401][ T7017] usb 3-1: Product: syz [ 1417.176641][ T7017] usb 3-1: Manufacturer: syz [ 1417.181802][ T7017] usb 3-1: SerialNumber: syz [ 1417.188986][ T7017] usb 3-1: config 0 descriptor?? [ 1417.321037][ T7013] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1417.511722][ T7013] usb 8-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 1417.522227][ T7013] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1417.531280][ T7013] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1417.546846][ T7013] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1417.556112][ T7013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.564378][ T7013] usb 8-1: Product: syz [ 1417.568632][ T7013] usb 8-1: Manufacturer: syz [ 1417.574370][ T7013] usb 8-1: SerialNumber: syz [ 1417.585923][ T7013] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1417.593725][ T7013] cdc_ncm 8-1:1.0: bind() failure [ 1417.784084][ T708] binder: 707:708 ioctl 808c563d 200000000500 returned -22 [ 1417.784597][ T709] binder: 707:709 ioctl 808c563d 200000000500 returned -22 [ 1417.814251][T16298] usb 8-1: USB disconnect, device number 6 [ 1418.019633][ T5905] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1418.102351][ T734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=539148999 (1078297998 ns) > initial count (4211076 ns). Using initial count to start timer. [ 1418.182588][ T5905] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1418.191336][ T5905] usb 6-1: config 0 has no interface number 0 [ 1418.197716][ T5905] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1418.209461][ T5905] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1418.220764][ T5905] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1418.230195][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.243279][ T5905] usb 6-1: config 0 descriptor?? [ 1418.254307][ T722] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1418.267860][ T5905] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1418.311987][ T5905] usb 7-1: USB disconnect, device number 85 [ 1418.361078][ T7013] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1418.507269][ T767] syzkaller0: entered promiscuous mode [ 1418.512857][ T767] syzkaller0: entered allmulticast mode [ 1418.532552][ T7013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.558474][ T7013] usb 2-1: config 0 has no interfaces? [ 1418.572258][ T7013] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1418.581957][ T7013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.590591][ T7013] usb 2-1: Product: syz [ 1418.596176][ T7013] usb 2-1: Manufacturer: syz [ 1418.604808][ T7013] usb 2-1: SerialNumber: syz [ 1418.615947][ T7013] usb 2-1: config 0 descriptor?? [ 1418.769269][ T785] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6424'. [ 1418.847686][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.861214][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.891737][ T47] usb 2-1: USB disconnect, device number 61 [ 1419.144183][ T7017] usb 3-1: USB disconnect, device number 72 [ 1419.165833][ T796] usb 6-1: USB disconnect, device number 21 [ 1419.491796][ T833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'. [ 1419.509648][ T7017] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1419.690544][ T7017] usb 3-1: Using ep0 maxpacket: 16 [ 1419.712385][ T7017] usb 3-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 1419.737735][ T7017] usb 3-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 1419.803306][ T7017] usb 3-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.839472][ T7017] usb 3-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.854059][ T842] xt_hashlimit: size too large, truncated to 1048576 [ 1419.885078][ T7017] usb 3-1: config 173 interface 0 has no altsetting 0 [ 1419.929170][ T7017] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1419.964662][ T7017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.070262][ T980] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1420.220472][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.236228][ T980] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1420.236261][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1420.236296][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1420.239262][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1420.239299][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1420.239320][ T980] usb 2-1: Product: syz [ 1420.239335][ T980] usb 2-1: Manufacturer: syz [ 1420.239489][ T980] usb 2-1: SerialNumber: syz [ 1420.253166][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.254249][ T980] usb 2-1: config 0 descriptor?? [ 1420.254926][ T843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1420.274133][ T980] usb 2-1: selecting invalid altsetting 0 [ 1420.449942][ T884] syzkaller0: entered promiscuous mode [ 1420.449962][ T884] syzkaller0: entered allmulticast mode [ 1420.472598][ T839] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 1420.532105][ T980] usb 2-1: USB disconnect, device number 62 [ 1420.691070][ T7017] usb 3-1: USB disconnect, device number 73 [ 1421.170769][ T937] fuse: Bad value for 'fd' [ 1421.353468][ T943] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1422.187378][ T967] syzkaller0: entered promiscuous mode [ 1422.193357][ T967] syzkaller0: entered allmulticast mode [ 1422.537024][ T1000] Set syz0 is full, maxelem 0 reached [ 1422.912580][ T1027] tipc: Started in network mode [ 1422.913346][ T1033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1422.960932][ T1027] tipc: Node identity 8690b1013966, cluster identity 4711 [ 1422.983540][ T1027] tipc: Enabled bearer , priority 0 [ 1423.002619][ T1039] syzkaller0: entered promiscuous mode [ 1423.009770][ T796] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1423.018695][ T1039] syzkaller0: entered allmulticast mode [ 1423.034117][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.042121][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.157113][ T1027] tipc: Resetting bearer [ 1423.167835][ T1026] tipc: Resetting bearer [ 1423.223974][ T796] usb 6-1: device descriptor read/64, error -71 [ 1423.232458][ T1026] tipc: Disabling bearer [ 1423.479459][ T796] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1423.642695][ T796] usb 6-1: device descriptor read/64, error -71 [ 1423.789879][ T796] usb usb6-port1: attempt power cycle [ 1423.881113][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.941288][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.079762][T16298] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1424.120270][ T7013] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1424.139484][ T796] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1424.160093][ T796] usb 6-1: device descriptor read/8, error -71 [ 1424.229453][T16298] usb 8-1: Using ep0 maxpacket: 8 [ 1424.236251][T16298] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1424.245083][T16298] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1424.253753][T16298] usb 8-1: can't read configurations, error -22 [ 1424.281160][ T7013] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 1424.289626][ T7013] usb 3-1: config 160 has no interface number 0 [ 1424.295986][ T7013] usb 3-1: config 160 interface 200 has no altsetting 0 [ 1424.304791][ T7013] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1424.315968][ T7013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.325176][ T7013] usb 3-1: Product: syz [ 1424.330690][ T7013] usb 3-1: Manufacturer: syz [ 1424.335279][ T7013] usb 3-1: SerialNumber: syz [ 1424.389472][T16298] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1424.409706][ T796] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1424.440651][ T796] usb 6-1: device descriptor read/8, error -71 [ 1424.550039][ T796] usb usb6-port1: unable to enumerate USB device [ 1424.558192][T16298] usb 8-1: Using ep0 maxpacket: 8 [ 1424.559820][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.574475][T16298] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1424.586828][T16298] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1424.591034][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.597432][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.611909][T16298] usb 8-1: can't read configurations, error -22 [ 1424.623209][T16298] usb usb8-port1: attempt power cycle [ 1424.631677][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.647985][ T7013] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1424.656339][ T7013] usb 3-1: MIDIStreaming interface descriptor not found [ 1424.759708][ T47] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1424.782169][ T7013] usb 3-1: USB disconnect, device number 74 [ 1424.814439][T25590] udevd[25590]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.909779][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1424.920604][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.949477][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.959242][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1424.969609][T16298] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1424.980026][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.990089][T16298] usb 8-1: Using ep0 maxpacket: 8 [ 1424.997026][T16298] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1425.006161][ T47] usb 2-1: config 0 descriptor?? [ 1425.012493][T16298] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1425.028996][ T47] hub 2-1:0.0: USB hub found [ 1425.038550][T16298] usb 8-1: can't read configurations, error -22 [ 1425.179946][T16298] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1425.200153][T16298] usb 8-1: Using ep0 maxpacket: 8 [ 1425.213707][T16298] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1425.222610][T16298] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1425.232355][T16298] usb 8-1: can't read configurations, error -22 [ 1425.235040][ T47] hub 2-1:0.0: 1 port detected [ 1425.239025][T16298] usb usb8-port1: unable to enumerate USB device [ 1425.359556][ T796] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1425.504676][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.516570][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.532933][ T796] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1425.591164][ T796] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1425.618809][ T796] usb 7-1: config 0 has no interfaces? [ 1425.624735][ T796] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1425.644337][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.660930][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.691426][ T796] usb 7-1: config 0 descriptor?? [ 1425.708752][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.909201][ T1161] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1425.975983][ T796] usb 7-1: USB disconnect, device number 86 [ 1426.069217][ T1213] netlink: 'syz.5.6481': attribute type 10 has an invalid length. [ 1426.084236][ T1213] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1426.096007][ T1213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1426.209490][ T7013] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1426.231956][ T1221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6483'. [ 1426.301203][ T47] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1426.308818][ T47] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1426.333250][ T47] usbhid 2-1:0.0: can't add hid device: -32 [ 1426.350643][ T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1426.369477][ T7013] usb 8-1: Using ep0 maxpacket: 8 [ 1426.384829][ T7013] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1426.398374][ T7013] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1426.410411][ T7013] usb 8-1: can't read configurations, error -22 [ 1426.549529][ T7013] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1426.699559][ T7013] usb 8-1: Using ep0 maxpacket: 8 [ 1426.714925][ T7013] usb 8-1: device descriptor read/all, error -71 [ 1426.729982][ T7013] usb usb8-port1: attempt power cycle [ 1426.739588][ T796] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1426.893655][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1426.904918][ T796] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1426.914524][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.924840][ T796] usb 3-1: config 0 descriptor?? [ 1426.936096][ T1221] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1426.952835][ T796] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 1427.084138][ T7013] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1427.113224][ T7013] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 1427.121706][ T7013] usb 8-1: config 1 has no interface number 1 [ 1427.127878][ T7013] usb 8-1: too many endpoints for config 1 interface 4 altsetting 8: 192, using maximum allowed: 30 [ 1427.143964][ T7013] usb 8-1: config 1 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 1427.157862][ T1232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6483'. [ 1427.167228][ T7013] usb 8-1: config 1 interface 4 has no altsetting 0 [ 1427.186319][ T7013] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1427.204273][ T7013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.227227][ T7013] usb 8-1: Product: syz [ 1427.236717][ T7013] usb 8-1: Manufacturer: syz [ 1427.249897][ T7013] usb 8-1: SerialNumber: syz [ 1427.273388][ T5177] bcm5974 3-1:0.0: could not read from device [ 1427.280964][ T5177] bcm5974 3-1:0.0: could not read from device [ 1427.306646][ T5177] bcm5974 3-1:0.0: could not read from device [ 1427.309016][ T796] usb 3-1: USB disconnect, device number 75 [ 1427.326934][ T5177] bcm5974 3-1:0.0: could not read from device [ 1427.341170][ T5177] bcm5974 3-1:0.0: could not read from device [ 1427.488364][ T7013] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1427.498946][ T7013] usb 8-1: found format II with max.bitrate = 1025, frame size=9 [ 1427.524982][ T7013] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1427.601588][ T796] usb 2-1: USB disconnect, device number 63 [ 1427.615831][ T7013] usb 8-1: USB disconnect, device number 13 [ 1427.622657][ T1295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1427.678621][T26808] udevd[26808]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.208946][ T1335] FAULT_INJECTION: forcing a failure. [ 1428.208946][ T1335] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.224937][ T1335] CPU: 1 UID: 0 PID: 1335 Comm: syz.7.6496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.224965][ T1335] Tainted: [L]=SOFTLOCKUP [ 1428.224972][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1428.224981][ T1335] Call Trace: [ 1428.224989][ T1335] [ 1428.224997][ T1335] dump_stack_lvl+0xe8/0x150 [ 1428.225024][ T1335] should_fail_ex+0x412/0x560 [ 1428.225046][ T1335] should_failslab+0xa8/0x100 [ 1428.225069][ T1335] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1428.225093][ T1335] ? __alloc_skb+0x186/0x7d0 [ 1428.225112][ T1335] ? __alloc_skb+0x1d0/0x7d0 [ 1428.225130][ T1335] ? __local_bh_enable_ip+0xd0/0x130 [ 1428.225155][ T1335] __alloc_skb+0x1d0/0x7d0 [ 1428.225181][ T1335] netlink_sendmsg+0x5d4/0xb40 [ 1428.225210][ T1335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.225234][ T1335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1428.225257][ T1335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1428.225277][ T1335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.225297][ T1335] ____sys_sendmsg+0xa68/0xad0 [ 1428.225326][ T1335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.225356][ T1335] ? import_iovec+0x73/0xa0 [ 1428.225389][ T1335] ___sys_sendmsg+0x2a5/0x360 [ 1428.225416][ T1335] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.225467][ T1335] ? __fget_files+0x2a/0x420 [ 1428.225489][ T1335] ? __fget_files+0x3a0/0x420 [ 1428.225519][ T1335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1428.225544][ T1335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1428.225575][ T1335] ? __pfx_ksys_write+0x10/0x10 [ 1428.225600][ T1335] do_syscall_64+0x14d/0xf80 [ 1428.225622][ T1335] ? trace_irq_disable+0x3b/0x150 [ 1428.225643][ T1335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.225659][ T1335] ? clear_bhb_loop+0x40/0x90 [ 1428.225678][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.225694][ T1335] RIP: 0033:0x7f1cc3d9c629 [ 1428.225713][ T1335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.225727][ T1335] RSP: 002b:00007f1cc4bd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.225746][ T1335] RAX: ffffffffffffffda RBX: 00007f1cc4015fa0 RCX: 00007f1cc3d9c629 [ 1428.225759][ T1335] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1428.225771][ T1335] RBP: 00007f1cc4bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.225783][ T1335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.225794][ T1335] R13: 00007f1cc4016038 R14: 00007f1cc4015fa0 R15: 00007f1cc413fa48 [ 1428.225822][ T1335] [ 1428.727953][ T1350] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1428.828729][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6504'. [ 1428.839313][ T7017] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1429.009493][T16298] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1429.020108][ T7017] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1429.045405][ T7017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1429.071970][ T7017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1429.111831][ T7017] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1429.126276][ T7017] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1429.144464][T16298] usb 3-1: device descriptor read/64, error -71 [ 1429.169766][ T7017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.210654][ T7017] usb 6-1: config 0 descriptor?? [ 1429.399498][T16298] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1429.544657][T16298] usb 3-1: device descriptor read/64, error -71 [ 1429.628405][ T1383] FAULT_INJECTION: forcing a failure. [ 1429.628405][ T1383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1429.656957][ T7017] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1429.675692][T16298] usb usb3-port1: attempt power cycle [ 1429.687189][ T1383] CPU: 0 UID: 0 PID: 1383 Comm: syz.7.6508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.687217][ T1383] Tainted: [L]=SOFTLOCKUP [ 1429.687225][ T1383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.687237][ T1383] Call Trace: [ 1429.687244][ T1383] [ 1429.687252][ T1383] dump_stack_lvl+0xe8/0x150 [ 1429.687281][ T1383] should_fail_ex+0x412/0x560 [ 1429.687307][ T1383] _copy_from_user+0x2d/0xb0 [ 1429.687331][ T1383] sk_setsockopt+0x2b3/0x2e80 [ 1429.687362][ T1383] ? __pfx_sk_setsockopt+0x10/0x10 [ 1429.687382][ T1383] ? aa_sk_perm+0x15a/0x960 [ 1429.687403][ T1383] ? aa_sk_perm+0x82d/0x960 [ 1429.687428][ T1383] ? __pfx_aa_sk_perm+0x10/0x10 [ 1429.687455][ T1383] ? __fget_files+0x2a/0x420 [ 1429.687477][ T1383] ? aa_sock_opt_perm+0xff/0x1a0 [ 1429.687500][ T1383] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1429.687523][ T1383] do_sock_setsockopt+0x11b/0x1b0 [ 1429.687550][ T1383] __x64_sys_setsockopt+0x13d/0x1b0 [ 1429.687576][ T1383] do_syscall_64+0x14d/0xf80 [ 1429.687600][ T1383] ? trace_irq_disable+0x3b/0x150 [ 1429.687622][ T1383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.687641][ T1383] ? clear_bhb_loop+0x40/0x90 [ 1429.687661][ T1383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.687678][ T1383] RIP: 0033:0x7f1cc3d9c629 [ 1429.687695][ T1383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.687710][ T1383] RSP: 002b:00007f1cc4bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1429.687729][ T1383] RAX: ffffffffffffffda RBX: 00007f1cc4016090 RCX: 00007f1cc3d9c629 [ 1429.687742][ T1383] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 1429.687753][ T1383] RBP: 00007f1cc4bb8090 R08: 0000000000000004 R09: 0000000000000000 [ 1429.687764][ T1383] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.687776][ T1383] R13: 00007f1cc4016128 R14: 00007f1cc4016090 R15: 00007f1cc413fa48 [ 1429.687802][ T1383] [ 1430.655955][T16298] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1430.756708][T16298] usb 3-1: device descriptor read/8, error -71 [ 1430.856154][ T980] usb 6-1: USB disconnect, device number 26 [ 1431.225463][ T1422] futex_wake_op: syz.1.6513 tries to shift op by 32; fix this program [ 1431.237728][ T1422] syzkaller0: entered promiscuous mode [ 1431.237772][T16298] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1431.245486][ T7013] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1431.247620][ T1422] syzkaller0: entered allmulticast mode [ 1431.389455][ T7013] usb 8-1: Using ep0 maxpacket: 8 [ 1431.630959][ T7013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.644799][ T7013] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1431.654435][ T7013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.670801][ T7013] usb 8-1: config 0 descriptor?? [ 1431.735107][T16298] usb 3-1: device descriptor read/8, error -71 [ 1431.928869][ T7013] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1431.940304][T16298] usb usb3-port1: unable to enumerate USB device [ 1432.320522][ T1435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.403974][ T1435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.628143][ T1447] vti0: entered promiscuous mode [ 1435.639822][ T1447] vti0: entered allmulticast mode [ 1435.734026][ T7013] usb 8-1: USB disconnect, device number 14 [ 1436.561810][T16298] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1436.906653][T16298] usb 3-1: Using ep0 maxpacket: 32 [ 1437.040137][T16298] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1437.078334][T16298] usb 3-1: config 0 has no interface number 0 [ 1437.106422][T16298] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1437.503819][T16298] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1437.547089][T16298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.633744][T16298] usb 3-1: Product: syz [ 1437.637914][T16298] usb 3-1: Manufacturer: syz [ 1437.714881][T16298] usb 3-1: SerialNumber: syz [ 1437.791630][T16298] usb 3-1: config 0 descriptor?? [ 1438.018186][ T1487] FAULT_INJECTION: forcing a failure. [ 1438.018186][ T1487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.089655][ T1487] CPU: 1 UID: 0 PID: 1487 Comm: syz.1.6521 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.089684][ T1487] Tainted: [L]=SOFTLOCKUP [ 1438.089691][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.089702][ T1487] Call Trace: [ 1438.089709][ T1487] [ 1438.089716][ T1487] dump_stack_lvl+0xe8/0x150 [ 1438.089745][ T1487] should_fail_ex+0x412/0x560 [ 1438.089770][ T1487] _copy_from_iter+0x1d3/0x1670 [ 1438.089795][ T1487] ? rcu_is_watching+0x15/0xb0 [ 1438.089823][ T1487] ? __pfx__copy_from_iter+0x10/0x10 [ 1438.089852][ T1487] ? netlink_sendmsg+0x650/0xb40 [ 1438.089870][ T1487] ? skb_put+0x11b/0x210 [ 1438.089896][ T1487] netlink_sendmsg+0x6c0/0xb40 [ 1438.089925][ T1487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.089949][ T1487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1438.089971][ T1487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1438.089991][ T1487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.090011][ T1487] ____sys_sendmsg+0xa68/0xad0 [ 1438.090042][ T1487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.090073][ T1487] ? import_iovec+0x73/0xa0 [ 1438.090098][ T1487] ___sys_sendmsg+0x2a5/0x360 [ 1438.090126][ T1487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.090179][ T1487] ? __fget_files+0x2a/0x420 [ 1438.090202][ T1487] ? __fget_files+0x3a0/0x420 [ 1438.090232][ T1487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1438.090258][ T1487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.090290][ T1487] ? __pfx_ksys_write+0x10/0x10 [ 1438.090318][ T1487] do_syscall_64+0x14d/0xf80 [ 1438.090342][ T1487] ? trace_irq_disable+0x3b/0x150 [ 1438.090366][ T1487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.090384][ T1487] ? clear_bhb_loop+0x40/0x90 [ 1438.090404][ T1487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.090421][ T1487] RIP: 0033:0x7f00d059c629 [ 1438.090438][ T1487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.090453][ T1487] RSP: 002b:00007f00d1373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.090479][ T1487] RAX: ffffffffffffffda RBX: 00007f00d0815fa0 RCX: 00007f00d059c629 [ 1438.090492][ T1487] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1438.090504][ T1487] RBP: 00007f00d1373090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.090515][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.090526][ T1487] R13: 00007f00d0816038 R14: 00007f00d0815fa0 R15: 00007f00d093fa48 [ 1438.090553][ T1487] [ 1439.847561][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1440.119421][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.461044][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1440.524838][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1440.559127][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1440.945569][T16298] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1441.029218][ T1513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1441.043478][T16298] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1441.129304][T16298] usb 3-1: USB disconnect, device number 80 [ 1441.349474][ T7013] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1441.357280][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1441.561905][ T7013] usb 6-1: device descriptor read/64, error -32 [ 1441.879776][ T7013] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1442.419898][ T7013] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1442.450212][ T7013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.482608][ T7013] usb 6-1: Product: syz [ 1442.497854][ T7013] usb 6-1: Manufacturer: syz [ 1442.503397][ T7013] usb 6-1: SerialNumber: syz [ 1442.519175][ T7013] usb 6-1: config 0 descriptor?? [ 1442.539892][T25766] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1442.588757][ T1544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1442.742621][T25766] usb 2-1: device descriptor read/64, error -71 [ 1442.842093][ T7013] usb 6-1: Firmware version (0.0) predates our first public release. [ 1442.872965][ T7013] usb 6-1: Please update to version 0.2 or newer [ 1442.950780][ T980] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1443.010293][T25766] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1443.084501][ T7013] usb 6-1: Firmware: build [ 1443.149640][T25766] usb 2-1: device descriptor read/64, error -71 [ 1443.202365][ T980] usb 8-1: device descriptor read/64, error -71 [ 1443.269954][T25766] usb usb2-port1: attempt power cycle [ 1444.378962][ T980] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1445.139567][T25766] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1445.151475][ T7013] usb 6-1: USB disconnect, device number 28 [ 1445.209471][ T980] usb 8-1: device descriptor read/64, error -71 [ 1445.291589][ T1573] FAULT_INJECTION: forcing a failure. [ 1445.291589][ T1573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.346478][ T980] usb usb8-port1: attempt power cycle [ 1445.366847][T25766] usb 2-1: device descriptor read/8, error -71 [ 1445.407562][ T1573] CPU: 0 UID: 0 PID: 1573 Comm: syz.6.6536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.407591][ T1573] Tainted: [L]=SOFTLOCKUP [ 1445.407605][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1445.407615][ T1573] Call Trace: [ 1445.407622][ T1573] [ 1445.407630][ T1573] dump_stack_lvl+0xe8/0x150 [ 1445.407659][ T1573] should_fail_ex+0x412/0x560 [ 1445.407684][ T1573] _copy_from_iter+0x1d3/0x1670 [ 1445.407706][ T1573] ? rcu_is_watching+0x15/0xb0 [ 1445.407730][ T1573] ? __pfx__copy_from_iter+0x10/0x10 [ 1445.407756][ T1573] ? netlink_sendmsg+0x650/0xb40 [ 1445.407775][ T1573] ? skb_put+0x11b/0x210 [ 1445.407799][ T1573] netlink_sendmsg+0x6c0/0xb40 [ 1445.407827][ T1573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.407850][ T1573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1445.407872][ T1573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1445.407891][ T1573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.407910][ T1573] ____sys_sendmsg+0xa68/0xad0 [ 1445.407938][ T1573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1445.407965][ T1573] ? import_iovec+0x73/0xa0 [ 1445.407989][ T1573] ___sys_sendmsg+0x2a5/0x360 [ 1445.408016][ T1573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.408067][ T1573] ? __fget_files+0x2a/0x420 [ 1445.408088][ T1573] ? __fget_files+0x3a0/0x420 [ 1445.408118][ T1573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1445.408145][ T1573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1445.408175][ T1573] ? __pfx_ksys_write+0x10/0x10 [ 1445.408201][ T1573] do_syscall_64+0x14d/0xf80 [ 1445.408224][ T1573] ? trace_irq_disable+0x3b/0x150 [ 1445.408245][ T1573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.408260][ T1573] ? clear_bhb_loop+0x40/0x90 [ 1445.408276][ T1573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.408289][ T1573] RIP: 0033:0x7f154119c629 [ 1445.408303][ T1573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.408315][ T1573] RSP: 002b:00007f1542143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.408330][ T1573] RAX: ffffffffffffffda RBX: 00007f1541415fa0 RCX: 00007f154119c629 [ 1445.408352][ T1573] RDX: 00000000200088c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 1445.408362][ T1573] RBP: 00007f1542143090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.408370][ T1573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.408378][ T1573] R13: 00007f1541416038 R14: 00007f1541415fa0 R15: 00007f154153fa48 [ 1445.408399][ T1573] [ 1446.983488][ T1610] fuse: Bad value for 'fd' [ 1454.766745][ T29] audit: type=1326 audit(1771591364.403:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1454.979479][ T47] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1455.071640][ T29] audit: type=1326 audit(1771591364.403:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1455.379587][ T29] audit: type=1326 audit(1771591364.403:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1455.464375][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1455.545032][ T47] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1455.632876][ T47] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1455.699801][ T29] audit: type=1326 audit(1771591364.403:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1455.731817][ T47] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1455.934110][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.401104][ T29] audit: type=1326 audit(1771591364.403:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1456.424871][ T47] usb 6-1: config 0 descriptor?? [ 1456.639439][ T29] audit: type=1326 audit(1771591364.443:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1456.758176][ T29] audit: type=1326 audit(1771591364.443:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1456.838814][ T29] audit: type=1326 audit(1771591364.443:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1457.130265][T25766] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1457.160102][ T29] audit: type=1326 audit(1771591364.453:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1457.373341][ T47] corsair-cpro 0003:1B1C:0C10.005B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1457.436099][ T29] audit: type=1326 audit(1771591364.453:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d059c629 code=0x7ffc0000 [ 1457.510782][T25766] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1457.566426][ T47] corsair-cpro 0003:1B1C:0C10.005B: probe with driver corsair-cpro failed with error -61 [ 1457.597122][T25766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.869073][ T47] usb 6-1: USB disconnect, device number 29 [ 1457.945012][T25766] usb 2-1: config 0 descriptor?? [ 1457.968657][ T1696] trusted_key: encrypted_key: insufficient parameters specified [ 1458.312471][ T1695] fido_id[1695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1458.993006][ T1680] syzkaller0: entered promiscuous mode [ 1459.026165][ T1680] syzkaller0: entered allmulticast mode [ 1459.990079][ T1739] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6559'. [ 1463.230610][T25766] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1463.282098][T25766] [drm:udl_init] *ERROR* Selecting channel failed [ 1463.399084][T25766] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1463.458117][T25766] [drm] Initialized udl on minor 2 [ 1463.514829][T25766] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1463.535269][T25766] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1463.636859][ T980] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1463.660031][ T980] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1468.059927][ T980] usb 2-1: USB disconnect, device number 68 [ 1469.383335][T25766] IPVS: starting estimator thread 0... [ 1469.580042][ T1831] IPVS: using max 35 ests per chain, 84000 per kthread [ 1470.766631][ T1836] loop8: detected capacity change from 0 to 8 [ 1470.850870][ T1833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.888733][ T1836] Dev loop8: unable to read RDB block 8 [ 1470.921443][ T1836] loop8: unable to read partition table [ 1470.963819][ T1836] loop8: partition table beyond EOD, truncated [ 1471.095718][ T1836] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1476.049389][ C1] sched: DL replenish lagged too much [ 1498.800814][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1498.822807][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.430250][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.452241][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.569376][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1577.576350][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1837/1:b..l [ 1577.584925][ C1] rcu: (detected by 1, t=10503 jiffies, g=224357, q=805732 ncpus=2) [ 1577.593003][ C1] task:syz.5.6571 state:R running task stack:24960 pid:1837 tgid:1837 ppid:27495 task_flags:0x40004c flags:0x00080000 [ 1577.607842][ C1] Call Trace: [ 1577.611121][ C1] [ 1577.614057][ C1] __schedule+0x1585/0x5340 [ 1577.618601][ C1] ? __pfx___schedule+0x10/0x10 [ 1577.623475][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1577.628509][ C1] irqentry_exit+0x599/0x620 [ 1577.633108][ C1] ? trace_irq_disable+0x3b/0x150 [ 1577.638131][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1577.644099][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 1577.649405][ C1] Code: 37 7a 11 00 00 00 00 eb b5 e8 25 64 0b 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 f1 79 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a 4a 0e 0a cc 48 8d 3d d2 1a 73 [ 1577.669022][ C1] RSP: 0018:ffffc9000d03f2c0 EFLAGS: 00000286 [ 1577.675096][ C1] RAX: 5f0f744a48b30300 RBX: 0000000000000202 RCX: 0000000000000046 [ 1577.683072][ C1] RDX: 0000000000000001 RSI: ffffffff8e161e0a RDI: ffffffff8c27a480 [ 1577.691049][ C1] RBP: ffff8880525ec7c0 R08: ffffc9000d03f8f0 R09: 0000000000000000 [ 1577.699019][ C1] R10: ffffc9000d03f418 R11: fffff52001a07e85 R12: 0000000000000001 [ 1577.706997][ C1] R13: 0000000000000001 R14: ffffffff8e7602e0 R15: ffff8880525ebc80 [ 1577.715010][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1577.720141][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 1577.725272][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1577.730393][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 1577.735430][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1577.741589][ C1] arch_stack_walk+0x11b/0x150 [ 1577.746371][ C1] ? free_pgtables+0x663/0xb70 [ 1577.751146][ C1] stack_trace_save+0xa9/0x100 [ 1577.755916][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1577.761302][ C1] kasan_save_stack+0x3e/0x60 [ 1577.765985][ C1] ? kasan_save_stack+0x3e/0x60 [ 1577.770835][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1577.776209][ C1] ? call_rcu+0xee/0x890 [ 1577.780454][ C1] ? kmem_cache_free+0x439/0x630 [ 1577.785380][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 1577.790219][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 1577.795282][ C1] ? __phys_addr+0xd3/0x180 [ 1577.799788][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1577.804996][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1577.811152][ C1] call_rcu+0xee/0x890 [ 1577.815241][ C1] kmem_cache_free+0x439/0x630 [ 1577.820010][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 1577.824868][ C1] __put_anon_vma+0x12b/0x2d0 [ 1577.829546][ C1] unlink_anon_vmas+0x58b/0x730 [ 1577.834407][ C1] free_pgtables+0x663/0xb70 [ 1577.839010][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1577.844130][ C1] ? __pfx_down_write+0x10/0x10 [ 1577.848986][ C1] exit_mmap+0x490/0xa10 [ 1577.853234][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1577.858028][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1577.862720][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1577.867918][ C1] __mmput+0x118/0x430 [ 1577.871987][ C1] exit_mm+0x168/0x220 [ 1577.876059][ C1] do_exit+0x62e/0x2320 [ 1577.880215][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1577.886032][ C1] ? __pfx_do_exit+0x10/0x10 [ 1577.890621][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1577.895997][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1577.901463][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1577.906841][ C1] do_group_exit+0x21b/0x2d0 [ 1577.911430][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1577.916457][ C1] x64_sys_call+0x221a/0x2240 [ 1577.921138][ C1] do_syscall_64+0x14d/0xf80 [ 1577.925733][ C1] ? trace_irq_disable+0x3b/0x150 [ 1577.930763][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.936829][ C1] ? clear_bhb_loop+0x40/0x90 [ 1577.941515][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.947409][ C1] RIP: 0033:0x7f2b0919c629 [ 1577.951821][ C1] RSP: 002b:00007f2b0953fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1577.960225][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b0919c629 [ 1577.968192][ C1] RDX: 0000555567b91808 RSI: 0000000000000000 RDI: 0000000000000000 [ 1577.976160][ C1] RBP: 00007f2b0953fdec R08: 0000000000000000 R09: 00000000000927c0 [ 1577.984121][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000a6 [ 1577.992088][ C1] R13: 00000000000927c0 R14: 0000000000166bd1 R15: 00007f2b0953fe40 [ 1578.000066][ C1] [ 1578.003084][ C1] rcu: rcu_preempt kthread starved for 4094 jiffies! g224357 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1578.014274][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1578.024239][ C1] rcu: RCU grace-period kthread stack dump: [ 1578.030119][ C1] task:rcu_preempt state:R running task stack:27776 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1578.043603][ C1] Call Trace: [ 1578.046884][ C1] [ 1578.049817][ C1] __schedule+0x1585/0x5340 [ 1578.054363][ C1] ? __pfx___schedule+0x10/0x10 [ 1578.059241][ C1] ? schedule+0x90/0x360 [ 1578.063500][ C1] schedule+0x164/0x360 [ 1578.067671][ C1] schedule_timeout+0x158/0x2c0 [ 1578.072529][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1578.077894][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1578.083181][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1578.089001][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1578.094558][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1578.099417][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1578.104629][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1578.109411][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1578.115579][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1578.120873][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1578.126068][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1578.131869][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1578.136468][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1578.141673][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1578.147502][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1578.152438][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1578.157484][ C1] kthread+0x388/0x470 [ 1578.161566][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1578.166768][ C1] ? __pfx_kthread+0x10/0x10 [ 1578.171367][ C1] ret_from_fork+0x51e/0xb90 [ 1578.175986][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1578.181105][ C1] ? __switch_to+0xc7d/0x1450 [ 1578.185790][ C1] ? __pfx_kthread+0x10/0x10 [ 1578.190385][ C1] ret_from_fork_asm+0x1a/0x30 [ 1578.195151][ C1] [ 1578.198153][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1578.204470][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1578.209680][ C0] NMI backtrace for cpu 0 [ 1578.209697][ C0] CPU: 0 UID: 0 PID: 21837 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.209718][ C0] Tainted: [L]=SOFTLOCKUP [ 1578.209724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1578.209733][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1578.209755][ C0] RIP: 0010:unwind_next_frame+0x138f/0x23c0 [ 1578.209778][ C0] Code: 14 24 4d 89 3c 24 41 0f b6 44 2d 00 84 c0 0f 85 02 0e 00 00 c6 03 00 4c 8b 64 24 48 4c 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 6c 0b 00 00 41 0f b6 04 2f 84 c0 0f 85 83 0b 00 00 0f [ 1578.209791][ C0] RSP: 0018:ffffc90000006d98 EFLAGS: 00000246 [ 1578.209803][ C0] RAX: 0000000000000000 RBX: ffffc90000006ea0 RCX: 0000000000000000 [ 1578.209813][ C0] RDX: ffffffff90a495f0 RSI: 0000000000000000 RDI: ffffc90000006ec8 [ 1578.209823][ C0] RBP: dffffc0000000000 R08: ffffc90000006ec7 R09: 0000000000000000 [ 1578.209834][ C0] R10: ffffc90000006eb8 R11: fffff52000000dd9 R12: ffffc90000006eb8 [ 1578.209845][ C0] R13: 1ffff92000000dcf R14: ffffc90000006e68 R15: 1ffffffff21492be [ 1578.209856][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1578.209868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1578.209878][ C0] CR2: 00007f3b884863db CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1578.209892][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1578.209901][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1578.209912][ C0] Call Trace: [ 1578.209917][ C0] [ 1578.209927][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1578.209948][ C0] ? arch_jump_label_transform_apply+0x1c/0x30 [ 1578.209968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1578.209984][ C0] arch_stack_walk+0x11b/0x150 [ 1578.210006][ C0] ? static_key_enable_cpuslocked+0x128/0x240 [ 1578.210029][ C0] stack_trace_save+0xa9/0x100 [ 1578.210043][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1578.210063][ C0] kasan_save_track+0x3e/0x80 [ 1578.210076][ C0] ? kasan_save_track+0x3e/0x80 [ 1578.210089][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1578.210104][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1578.210125][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 1578.210142][ C0] ? synproxy_send_client_synack+0x172/0xe30 [ 1578.210160][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 1578.210180][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 1578.210206][ C0] ? nft_do_chain+0x45e/0x1990 [ 1578.210224][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 1578.210243][ C0] ? nf_hook_slow+0xc5/0x220 [ 1578.210261][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1578.210274][ C0] ? NF_HOOK+0x336/0x3c0 [ 1578.210287][ C0] ? process_backlog+0xaa3/0x1950 [ 1578.210304][ C0] ? __napi_poll+0xae/0x340 [ 1578.210318][ C0] ? net_rx_action+0x627/0xf70 [ 1578.210334][ C0] ? handle_softirqs+0x22a/0x870 [ 1578.210351][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1578.210368][ C0] ? irq_exit_rcu+0x9/0x30 [ 1578.210384][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1578.210404][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1578.210420][ C0] ? smp_call_function_many_cond+0xcea/0x12c0 [ 1578.210435][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 1578.210449][ C0] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 1578.210464][ C0] ? arch_jump_label_transform_apply+0x1c/0x30 [ 1578.210496][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1578.210512][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1578.210534][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 1578.210550][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1578.210572][ C0] __alloc_skb+0x1d0/0x7d0 [ 1578.210592][ C0] synproxy_send_client_synack+0x172/0xe30 [ 1578.210616][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1578.210635][ C0] ? nft_socket_dump+0x290/0x2b0 [ 1578.210652][ C0] ? synproxy_pernet+0x45/0x270 [ 1578.210674][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1578.210697][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1578.210717][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1578.210737][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1578.210759][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1578.210779][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1578.210798][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1578.210818][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1578.210841][ C0] nft_do_chain+0x45e/0x1990 [ 1578.210867][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1578.210900][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1578.210923][ C0] nft_do_chain_inet+0x29d/0x380 [ 1578.210942][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1578.210961][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1578.210978][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1578.210996][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1578.211016][ C0] nf_hook_slow+0xc5/0x220 [ 1578.211035][ C0] NF_HOOK+0x21f/0x3c0 [ 1578.211050][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1578.211065][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1578.211078][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1578.211091][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1578.211107][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1578.211123][ C0] ? skb_dst+0x4f/0xd0 [ 1578.211137][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1578.211153][ C0] NF_HOOK+0x336/0x3c0 [ 1578.211168][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1578.211187][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1578.211200][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1578.211215][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1578.211232][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1578.211246][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1578.211260][ C0] ? process_backlog+0x3eb/0x1950 [ 1578.211276][ C0] process_backlog+0xaa3/0x1950 [ 1578.211297][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1578.211320][ C0] __napi_poll+0xae/0x340 [ 1578.211334][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1578.211352][ C0] net_rx_action+0x627/0xf70 [ 1578.211375][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1578.211391][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1578.211414][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1578.211441][ C0] handle_softirqs+0x22a/0x870 [ 1578.211461][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1578.211481][ C0] __irq_exit_rcu+0x5f/0x150 [ 1578.211499][ C0] irq_exit_rcu+0x9/0x30 [ 1578.211516][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1578.211535][ C0] [ 1578.211540][ C0] [ 1578.211546][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1578.211562][ C0] RIP: 0010:smp_call_function_many_cond+0xcea/0x12c0 [ 1578.211578][ C0] Code: 89 ee 83 e6 01 31 ff e8 24 e3 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cf de 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 b3 de 0b 00 eb e4 44 [ 1578.211591][ C0] RSP: 0018:ffffc9000495f720 EFLAGS: 00000293 [ 1578.211602][ C0] RAX: 0000000000000000 RBX: 1ffff110170e812d RCX: ffff8880282ddac0 [ 1578.211613][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1578.211622][ C0] RBP: ffffc9000495f860 R08: ffffffff901172b7 R09: 1ffffffff2022e56 [ 1578.211632][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: ffff8880b8740968 [ 1578.211643][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 1578.211663][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1578.211681][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1578.211698][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1578.211714][ C0] ? __pfx___text_poke+0x10/0x10 [ 1578.211730][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1578.211743][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1578.211760][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1578.211778][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1578.211798][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1578.211816][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1578.211838][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1578.211854][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1578.211875][ C0] static_key_enable+0x1a/0x20 [ 1578.211894][ C0] toggle_allocation_gate+0xab/0x290 [ 1578.211910][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1578.211930][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1578.211949][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1578.211967][ C0] process_scheduled_works+0xb02/0x1830 [ 1578.211997][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1578.212017][ C0] ? assign_work+0x3d5/0x5e0 [ 1578.212036][ C0] worker_thread+0xa50/0xfc0 [ 1578.212066][ C0] kthread+0x388/0x470 [ 1578.212080][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.212097][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.212111][ C0] ret_from_fork+0x51e/0xb90 [ 1578.212130][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1578.212146][ C0] ? __switch_to+0xc7d/0x1450 [ 1578.212164][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.212178][ C0] ret_from_fork_asm+0x1a/0x30 [ 1578.212210][ C0]