last executing test programs: 20m42.453501806s ago: executing program 32 (id=1867): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = socket$inet6(0xa, 0xa, 0x7) recvmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001bc0)=""/4096, 0x1000}, 0xfffffa16}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000002bc0)=""/78, 0x4e}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x3, &(0x7f0000003c40)=""/192, 0xc0}, 0x100}, {{&(0x7f0000003d00)=@nl=@unspec, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003d80)=""/205, 0xcd}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/10, 0xa}], 0x3, &(0x7f0000004f00)=""/128, 0x80}, 0x9}], 0x3, 0x10141, &(0x7f0000005040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0xffff0002, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x94) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_open_dev$video(0x0, 0x485, 0x40042) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r9, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) 18m43.234685423s ago: executing program 33 (id=2341): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x70, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xfffc, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x5, 0x48}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0x10000, 0x7, 0x80}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000002040)=0x80000001) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) r5 = dup3(r3, r4, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYRES32=r5], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x2, "b9d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r6, 0x0, 0x0) (rerun: 64) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "f100"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r6, &(0x7f0000000100)={0x14, &(0x7f0000000140)={0x0, 0x30, 0xc, {0xc, 0x23, "250900000038a2198a43"}}, 0x0}, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_settime(0x0, &(0x7f00000001c0)={0x77359400}) 14m12.406041777s ago: executing program 34 (id=3497): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="d558b7f133c6b89599c1d1082505a8a440000102030109021b000101071c060904000a000000000000000000009300328821bda0fe12230041c87ef37cabe1d44340d802f3b87b44e100191c12e61243d5dc933bdac5ed6ccc9565b1dc4b1c6d29f5267a91c46a36537d4bc4922af2a2e1946f2fc2210f3794"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x8, 0x2, 0x5, 0x10, 0x3}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}]}) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0x2, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0x9, 0x6, 0xffe, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb30, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x4, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x200000001, 0x9, 0x1, 0xe0000000000000, 0xd, 0x2432, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0x1a0, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x3, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0xfffffffffffffffa, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x200) unshare(0x2c020400) socket(0x15, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x3290040, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @remote, 0x6}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="86af5cfaaae20044622ba705f70b952fdd2c071ec3c6ae", 0x17}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 10m48.712719687s ago: executing program 35 (id=4285): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x50, 0x6000, @fd, 0x1000, 0x0, 0x0, 0x5, 0x0, {0x3}}) (async) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x400) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3d03) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004020000040000000a0000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRESHEX], 0x48) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x0, 0x1000, &(0x7f000081d000/0x1000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x5, 0x7], 0x100000, 0x240046}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{0x80000007, 0xfffffffe, 0x80000001, 0x582d, 0x7ff}, {0x4, 0x5, 0xb8, 0xfffffff8, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xd3, "45d35c0754ea04ac3a704d6d04febab45282adee6fd5d36460b717a5cf1c1bfeda936f9a2d9a23f9d10d33761251f6b93557c155e1b26adcf01a7b51e43c34f936982421c6c15e2ca5c4c985b9461d23fe58c18bfc542ff3ccacf7679fccb3d7e96be927935382726cdcaba3c8038bda1b46ec03ae306cc376176128f603511c3bd6cffbf1dc149687b5be1e955939ff053abc58c4190c41291ff156eb35e8b038791c6b4e2ccd9bf93d61ab268b94dad0f4725a1d32c7973cdbc9af28835cc631ce0d3ed6b452e9eccd2e9b032fbfab284c8a"}, &(0x7f00000002c0)=0xdb) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xfffffffb, 0x200}}, './file0\x00'}) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m51.462435716s ago: executing program 6 (id=4486): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xff}, 0x8) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xfff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x72}, 0x8) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r2, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000140)="3defe1ced9d4fbb1686ebc7966cd684320bc10992bf50c67c470ae1ed321ca73f01dc8d711b7d83bae5dc86d79bad77f0e638ab52d74", 0x36, &(0x7f0000000180)=""/8, 0x8}) (async) bind$rds(r2, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000002740)={&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/108, 0x6c}], 0x2, &(0x7f0000002580)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xff}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x14}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001340)=""/23, 0x17}, &(0x7f0000001380), 0x24}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000013c0)=""/4096, 0x1000}, &(0x7f00000023c0), 0x40}}, @fadd={0x58, 0x114, 0x6, {{0x380000}, &(0x7f0000002400), &(0x7f0000002440)=0x4, 0x3, 0x3ff, 0x3, 0x6, 0x0, 0x3}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x2}, &(0x7f0000002480)=0x6, &(0x7f00000024c0)=0xfcf, 0x0, 0x1, 0x2, 0x7, 0x4f, 0x8000000000000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xe5}, @cswp={0x58, 0x114, 0x7, {{0xa0000, 0x1}, &(0x7f0000002500)=0x6, &(0x7f0000002540)=0x40, 0xd, 0xd3eb, 0x8000, 0xb, 0x20, 0xae3b}}], 0x1b0}, 0x804) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000002780), &(0x7f00000027c0)=0x4) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x24, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000002900)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000002940)=0x5) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000029c0)={0x3, 0x7, 0x3}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = accept4$inet(r6, &(0x7f0000002a00)={0x2, 0x0, @empty}, &(0x7f0000002a40)=0x10, 0x80800) (async) open_tree(r5, &(0x7f0000002a80)='./file0\x00', 0x88900) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002bc0)={'syztnl1\x00', &(0x7f0000002b00)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x3, 0xb, {{0x25, 0x4, 0x1, 0x11, 0x94, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, {[@ssrr={0x89, 0x7, 0x47, [@dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp_addr={0x44, 0x2c, 0x6f, 0x1, 0x8, [{@broadcast, 0x3}, {@multicast2, 0x5}, {@broadcast, 0x79}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@multicast1, 0x8}]}, @end, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}, @ssrr={0x89, 0x1b, 0xf9, [@multicast2, @private=0xa010101, @loopback, @remote, @local, @broadcast]}, @generic={0xca711333d43db144, 0x9, "726d8a1dbf073b"}, @timestamp={0x44, 0x20, 0xa8, 0x0, 0x7, [0x0, 0x101, 0x2, 0x0, 0x4, 0x0, 0x6]}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=@newtclass={0x4c, 0x28, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xc}, {0xc, 0xfff2}, {0x2, 0x10}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_netem={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) (async) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1f0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000002d00), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$KDGETLED(r10, 0x4b31, &(0x7f0000002d80)) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x18000) (async) ioctl$DVB_DVR_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000002ec0)={0x7fff, 0x0, r7}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000002f00)={r1, 0x2}, &(0x7f0000002f40)=0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002fc0)={0x4, &(0x7f0000002f80)=[{0x9, 0x6, 0x6, 0x6}, {0x48, 0x2, 0x7, 0xc85e}, {0x2, 0x8, 0x5, 0x9}, {0x0, 0x3a, 0x4, 0x1ff}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 9m51.291079083s ago: executing program 6 (id=4487): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c0b0}, 0x20000000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, 0x0) capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x9c, 0x8, 0x7, 0x76, 0x7, 0x53}) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 9m50.899521369s ago: executing program 6 (id=4488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f003000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r7, 0x4, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) recvmmsg(r6, &(0x7f00000040c0)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000002c00)=""/217, 0xd9}, {&(0x7f0000002d00)=""/200, 0xc8}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x3, &(0x7f0000003e00)}}, {{&(0x7f0000003e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003ec0)=""/15, 0xf}, {&(0x7f0000003f00)=""/143, 0x8f}, {&(0x7f0000003fc0)=""/155, 0x9b}], 0x3}, 0x8}], 0x3, 0x40000100, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 9m48.19645223s ago: executing program 6 (id=4498): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 9m47.842378876s ago: executing program 6 (id=4499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x2, 0xfffffffc, 0x0, 0x0, 0x190, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x1, 0x2000000069ec2dea, 0x2, 0x40000006, 0x6dc9, 0x3ff, 0x9, 0x3, 0xe000, 0x601d824b499141fb, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) read$FUSE(r1, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638a00fe00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) 9m47.43291417s ago: executing program 6 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}, {0x0, 0x600}], 0x2) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)={0x13c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc00000}, @NL80211_ATTR_VENDOR_DATA={0xee, 0xc5, "3b99d04a1b83dcf85096d95ab7652c18d0f5c86e9bb8e9ac7e1d6eeb68f4e6cafc7422b2f924218b82c9b6ba9377fe05c85140a8557203b27f27e9e9c139d8f9b5ee3fc779ed13faae3885b5d3b2b86b593c3bbec0bfa690c29daac32100f4a640795e18c536cb88afe767a1eceadb6e1ae9e0a87e4089c845b43ff45d4b55faddc0381546cacf3ce783a6634c41c470421dd1c84c9ee7f2f73af20be3f4067412e00499fdab74cf530945d3fb3ea2e689fc7e79d0e0e239d624978f2a070dc8acb9454cae0655dea419aa02a2339802b5b4268387383577f12b60a4b51122674c07c456233f730ee704"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x67}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9408}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x13c}, 0x1, 0x0, 0x0, 0x814}, 0x4004011) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000b40)=""/4111, 0x100f}], 0x7}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80c00) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, &(0x7f0000001440)) accept4(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x1000) 9m46.599805546s ago: executing program 36 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}, {0x0, 0x600}], 0x2) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)={0x13c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc00000}, @NL80211_ATTR_VENDOR_DATA={0xee, 0xc5, "3b99d04a1b83dcf85096d95ab7652c18d0f5c86e9bb8e9ac7e1d6eeb68f4e6cafc7422b2f924218b82c9b6ba9377fe05c85140a8557203b27f27e9e9c139d8f9b5ee3fc779ed13faae3885b5d3b2b86b593c3bbec0bfa690c29daac32100f4a640795e18c536cb88afe767a1eceadb6e1ae9e0a87e4089c845b43ff45d4b55faddc0381546cacf3ce783a6634c41c470421dd1c84c9ee7f2f73af20be3f4067412e00499fdab74cf530945d3fb3ea2e689fc7e79d0e0e239d624978f2a070dc8acb9454cae0655dea419aa02a2339802b5b4268387383577f12b60a4b51122674c07c456233f730ee704"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x67}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9408}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x13c}, 0x1, 0x0, 0x0, 0x814}, 0x4004011) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000b40)=""/4111, 0x100f}], 0x7}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80c00) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, &(0x7f0000001440)) accept4(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x1000) 3m47.450620031s ago: executing program 0 (id=5827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000130000000000000000005aaadf04fc1c0a0a", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000010c0)={0x3, 0x3, 0x7f, 0x8000000000000000, 0x6e, 0x1000, 0x3, 0x240000000000000}, 0x0, &(0x7f0000001140)={0x8, 0x1, 0x3, 0x6, 0x5, 0x9, 0x8}, &(0x7f0000001180), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m47.082522946s ago: executing program 0 (id=5830): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="1d581f85", 0x4}]) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000180)={0x11, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f00000002c0)={0x20, 0x0, 0x0, 0x8000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x64) creat(&(0x7f0000000000)='./file0\x00', 0x20e07a3bceb9fd48) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3m46.05077222s ago: executing program 0 (id=5836): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000400)=""/142) (fail_nth: 3) 3m44.663209811s ago: executing program 0 (id=5842): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002cc49520d753715f18b620233f68456bede118a2e5f1e6ab17bba285b880dd0cb310ece75d9b9ff9b76e834a7a4ed20039062d9070b6a6bf61d3f40874250df961b661ede19dc2d7704f7cca9e3c4210e66611b90caad1cef4eea0416c333e307016dfd6c1f206a9a9bbec32ca88d1bc3905ddda7e180828d77202d5d7c68f28d95d5f8ed275f0f24916e7", @ANYRES16=r2, @ANYBLOB="33030000000004000000150000000c0001800800030007000000"], 0x20}}, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendfile(r3, r0, 0x0, 0xffba83) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r5, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x220) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000580), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="8e", 0x1, r10) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r8, 0x400000000000007c) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r9, 0xe1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 3m44.544666665s ago: executing program 0 (id=5844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m39.774490871s ago: executing program 0 (id=5853): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000000041a9e5", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 3m39.476194381s ago: executing program 37 (id=5853): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000000041a9e5", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 2m38.585971991s ago: executing program 7 (id=6079): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x208080, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) 2m35.381661344s ago: executing program 7 (id=6086): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000ffffffc900", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 2m35.315711633s ago: executing program 7 (id=6088): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0, 0x40000103}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) (async) lseek(r2, 0x101, 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.844414085s ago: executing program 7 (id=6091): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @private, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r9 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.578651294s ago: executing program 7 (id=6100): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000000000002800005b3600c12aa1e04272ace900002c0500004ada481284eccdaf5e0e0b88dc1a3100b031cc7d38ed50013d194f0324fdd17f6e3e475805deab195f0fc2d3acee11d26a377ae6ee94bb544e385917cb62fb540c6ed46a34a7b12c86920d49095ab2367cf66cd0fed6819fbe070004e2fbd13b8d78bf03efbafc717f1b2670727e67688bb916377a76f25dcd7fe0193baddbdd0980e9089d7037"], 0x18}, 0x440e0) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000000000002800005b3600c12aa1e04272ace900002c0500004ada481284eccdaf5e0e0b88dc1a3100b031cc7d38ed50013d194f0324fdd17f6e3e475805deab195f0fc2d3acee11d26a377ae6ee94bb544e385917cb62fb540c6ed46a34a7b12c86920d49095ab2367cf66cd0fed6819fbe070004e2fbd13b8d78bf03efbafc717f1b2670727e67688bb916377a76f25dcd7fe0193baddbdd0980e9089d7037"], 0x18}, 0x440e0) 2m31.446905592s ago: executing program 7 (id=6101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000fcffff1f00"/20, @ANYRESHEX=r2, @ANYBLOB="46000600000000002c00128009000100626f6e64000000001c0002800500010004000000050006000100000008001c003b010000", @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xe, 0x8000, 0x0, 0x9, 0x5, 0x6, 0xfa0f}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x5, 0x2, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x316}}], 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) 2m16.268607488s ago: executing program 38 (id=6101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000fcffff1f00"/20, @ANYRESHEX=r2, @ANYBLOB="46000600000000002c00128009000100626f6e64000000001c0002800500010004000000050006000100000008001c003b010000", @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xe, 0x8000, 0x0, 0x9, 0x5, 0x6, 0xfa0f}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x5, 0x2, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x316}}], 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) 2m12.242678904s ago: executing program 9 (id=6157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}, 0x1, 0x0, 0x900000000000000}, 0x0) 2m12.031761953s ago: executing program 9 (id=6159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m11.464854253s ago: executing program 9 (id=6161): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x1, 0xe, 0x8000, 0xffffffff, 0xa0, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x2000005, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x7, 0x5, 0x80000001, 0x8, 0x40, 0x9, 0xc, 0x80000001, 0x4, 0x5, 0xd, 0xfffffff7, 0x3, 0x0, 0x56f, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x4, 0xbffffc00, 0x3, 0x4, 0x101, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x2, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0x1, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x5c78, 0x1, 0x8, 0x3, 0x1, 0x1, 0x8, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x45aa, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x28000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x3, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000cc0)={0x2020}, 0x2020) sendmmsg$unix(r4, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) recvmmsg(r3, &(0x7f0000000040), 0x0, 0x120, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0xe, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000008e65610f7ac0f0004001d00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m11.170906513s ago: executing program 9 (id=6163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0xbc}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0xbc}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) (async) 2m10.922051593s ago: executing program 9 (id=6165): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000040)=""/108) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x604000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) sendfile(r2, r1, 0x0, 0x23b) r10 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000140)="1c736cace2471093a13bfad40f2df5ba6b", 0x2000b) 2m8.47454091s ago: executing program 9 (id=6167): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x7ff, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000100)='vxfs\x00', 0x1) syz_open_dev$vim2m(0x0, 0x2c, 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x4, 0x8cd, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x7, 0x2, 0xff, 0xd7}, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="0f24000203100b1c100a0904feffff00000f00000000"], 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x15, &(0x7f00000001c0)=@string={0x15, 0x3, "7d99d2af48f88c97bef7ffa952afa70bf71173"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) setns(r3, 0x24020000) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x3a8e5b6e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 2m7.949774358s ago: executing program 3 (id=6171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x500, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x3c}}, 0x0) 2m6.981986883s ago: executing program 3 (id=6172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001700)=ANY=[@ANYBLOB="0001000016000000001a000000000000000001ac1414aa0000000000000000000000004e2300014e2300050a0020203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x100}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @empty, @multicast}}}}, 0x0) 2m6.690371256s ago: executing program 3 (id=6173): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000b00000012e400300000000006506020001cd00007118bf1400000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 2m6.082843495s ago: executing program 3 (id=6175): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 2m5.791370747s ago: executing program 3 (id=6176): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000040)=""/108) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x604000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) sendfile(r2, r1, 0x0, 0x23b) r10 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000140)="1c736cace2471093a13bfad40f2df5ba6b", 0x2000b) 2m1.627730281s ago: executing program 3 (id=6179): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) pread64(r2, 0x0, 0x0, 0x7f) lseek(r2, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x2c020400) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x80c, 0x5, 0x35314258, 0x6, 0x0, [{0x8, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x8, 0x1ff}, {0x800, 0x7fff}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x4, 0x2}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m53.18714344s ago: executing program 39 (id=6167): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x7ff, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000100)='vxfs\x00', 0x1) syz_open_dev$vim2m(0x0, 0x2c, 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x4, 0x8cd, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x7, 0x2, 0xff, 0xd7}, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="0f24000203100b1c100a0904feffff00000f00000000"], 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x15, &(0x7f00000001c0)=@string={0x15, 0x3, "7d99d2af48f88c97bef7ffa952afa70bf71173"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) setns(r3, 0x24020000) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x3a8e5b6e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1m46.529492638s ago: executing program 40 (id=6179): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) pread64(r2, 0x0, 0x0, 0x7f) lseek(r2, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x2c020400) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x80c, 0x5, 0x35314258, 0x6, 0x0, [{0x8, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x8, 0x1ff}, {0x800, 0x7fff}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x4, 0x2}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 17.748866204s ago: executing program 5 (id=6219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x0, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x80) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @private2, 0x1}, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x81}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}, @in={0x2, 0x4e20, @empty}], 0xb0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x5f359000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r8, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r9, 0x0, 0x7) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 17.708647999s ago: executing program 5 (id=6227): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000004740)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00050000000500010004"], 0x4c}}, 0x0) 17.701309201s ago: executing program 2 (id=6228): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a00200067000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000046b5af24c87334b800ff0100000000000000000000000000000000000000000080ffffffffffffff000000005400000000000000037f00009b21562b39706cad9000000040000000000000000000000000000000000a0010000100"/133], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000f70a0010000104000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="e33f62f009", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 11.548813998s ago: executing program 4 (id=6232): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x2000c000) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x1, @remote, 0x1}]}, &(0x7f0000000140)=0x10) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340), &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000380)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 9.146146091s ago: executing program 1 (id=6235): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005"], 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d96000010000000000000000000000be5a941000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 9.093898148s ago: executing program 5 (id=6236): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x10028f, 0x1002, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) io_setup(0xa, &(0x7f00000001c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4000000000000000, 0x0, &(0x7f0000000140)=[0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000680), 0x9, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r9, 0xc0106441, &(0x7f00000006c0)={0x0, 0x0, 0x1000}) r10 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r11 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x0, 0x0) syz_usb_control_io$lan78xx(r11, &(0x7f0000000300)={0x14, &(0x7f00000002c0)={0x40, 0xc, 0x13, {0x13, 0xc, "299ad868809cb17cc45f78b471787bcbd2"}}, &(0x7f0000000380)={0x0, 0x3, 0x64, @string={0x64, 0x3, "49f147e6006b933921a89c0eb632443ff7c77cc9848782f9c146a8d58a7ce1e37def006151422dda6318a22da59f99f0a37c8599171cc4b122552be0e8c50630f89fa4590dc3fd1aa0a1020a96f501fb83478731ff15b7969f55d9e4c3164353a867"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000480)={0x0, 0x31, 0x4a, "b6c223f4cbe8d9509f695dde8b17d5dc969c802c5da083ff584bc040fab4094f16e0946fe299467c81587ba81943d5ce86da489296447dfdbd7dfeb4d4db08f8581193115330f203457a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0xfffffff9}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x60}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "c7feaae33c1e53075d3dad66c3ea4295985a64d50878cbdebbf61006705a95d5ef94033e5464709c8702c31ab5d4c4"}}) keyctl$dh_compute(0x17, &(0x7f0000000800)={r10, r10, r10}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'md5-generic\x00'}}) keyctl$revoke(0x3, r10) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000100)={r8}) 9.009260289s ago: executing program 8 (id=6237): socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000280)=@e={0xff, 0xa, 0xa, 0x2, @SEQ_NOTEON=@special, 0xa, 0x0, 0x4}) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r2, &(0x7f00000001c0)="a5830a602214f6b4e928d758f38a5a7cb4b31c0900000000000000784caa11d6", 0x20) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0xa) (async) socket$kcm(0x11, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r5, 0x1, 0x28, &(0x7f0000000500), &(0x7f0000000580)=0x10) (async) r6 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x3, &(0x7f00000000c0)='sourCe', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES64=r3, @ANYRES64=r3, @ANYRES32=r0, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x4004835) 8.954996337s ago: executing program 2 (id=6238): socket(0x10, 0x3, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1, 0x0, 0x3, 0x22}, 0x4}) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r10, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r10}}, 0x1c) (async) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async) socket(0x840000000002, 0x3, 0xff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 8.76562842s ago: executing program 1 (id=6239): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x593200, 0x0, 0x4, 0x0, &(0x7f0000000340)=0x9}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000600)=0x1) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x8054) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000003bb0634100000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800011027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d588380003c1000000"], 0xfd6c) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)) read(r4, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) (async) unshare(0x20000400) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) creat(0x0, 0xecf86c37d53049cc) 8.580265829s ago: executing program 8 (id=6240): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022a92f1c7a8be65af64ff36c3af67beb3e028192f84698ae2f4b6a665d3c55ea515e1781071df528a83736ccdea61cb808c321fa38e86929dbe4b6abbe9c591397"], 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() map_shadow_stack(&(0x7f0000bd9000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000015000100fdffffff00000000021800ff", @ANYRES32=r3, @ANYBLOB="14000300796574683000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r7, &(0x7f00000002c0)='./file0\x00', r7, &(0x7f00000003c0)='./bus\x00', 0x0) 8.321719452s ago: executing program 1 (id=6241): r0 = io_uring_setup(0x57e, &(0x7f0000000300)={0x0, 0x375, 0x10, 0x0, 0x2c4}) close(r0) r1 = socket$inet6(0xa, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) listen(r1, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 7.378519667s ago: executing program 4 (id=6242): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x8, 0x400000) r1 = io_uring_setup(0x4234, &(0x7f0000000040)={0x0, 0x6f55, 0x1, 0x3, 0x2e4}) io_uring_enter(r1, 0x3b73, 0xa27c, 0x26, &(0x7f00000000c0)={[0x9]}, 0x8) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000005600)=[{0x3, 0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/175, 0xaf}], &(0x7f00000012c0)=[0xff, 0x1, 0xf0e, 0xfffffffffffffff7, 0x2, 0x3, 0x7f, 0x2]}, {0x0, 0x0, 0x0, &(0x7f0000001300), &(0x7f0000001340)=[0x8, 0x6, 0x8, 0x8, 0x7, 0x0, 0x4]}, {0x6, 0x1, 0x0, &(0x7f0000001800)=[{&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/122, 0x7a}, {&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/208, 0xd0}, {&(0x7f0000001740)=""/148, 0x94}], &(0x7f0000001880)=[0x8, 0xfffffffffffffff7, 0x9, 0xe3, 0x2f57, 0x3, 0xda, 0x6, 0x1ff]}, {0x2, 0x1, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001900)=""/151, 0x97}, {&(0x7f00000019c0)=""/4096, 0x1000}], &(0x7f0000002a00)=[0x4, 0x9, 0xf1f, 0xc, 0x0]}, {0x3, 0x1, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002a40)=""/220, 0xdc}, {&(0x7f0000002b40)=""/184, 0xb8}, {&(0x7f0000002c00)=""/252, 0xfc}], &(0x7f0000002d40)=[0xe, 0x3, 0xfffffffffffffffd, 0x101]}, {0x3, 0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002d80)=""/186, 0xba}, {&(0x7f0000002e40)=""/155, 0x9b}, {&(0x7f0000002f00)=""/170, 0xaa}], &(0x7f0000003000)=[0x8, 0x9, 0x7]}, {0x8, 0x1, 0x0, &(0x7f0000005500)=[{&(0x7f0000003040)=""/175, 0xaf}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/203, 0xcb}, {&(0x7f0000004200)=""/67, 0x43}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/130, 0x82}, {&(0x7f0000005340)=""/225, 0xe1}, {&(0x7f0000005440)=""/178, 0xb2}], &(0x7f0000005580)=[0x7, 0x55f, 0xd9, 0x9, 0x0, 0x1, 0x0, 0x7, 0x80000001]}], 0x7) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000005700)=[@ioring_restriction_sqe_op={0x1, 0xb}, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0xe}, @ioring_restriction_sqe_op={0x1, 0x1f}], 0x5) pipe2(&(0x7f0000005780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f00000057c0)=0x27) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000005800)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000005840)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000005880)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000058c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000005980)={&(0x7f0000005900)=[r4, r5, r6, 0x0, 0x0, r7], &(0x7f0000005940)=[0x78, 0x7, 0x1], 0x2, 0x6, 0x4}) ioctl$int_in(r1, 0x73, &(0x7f00000059c0)=0x200) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000005a00)={0x6, 0x7fffffffffffffff, 0x6, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000005b40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005b00)={&(0x7f0000005a80)={0x68, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf5}]}}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2e16}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa8a}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000010) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000005b80), 0x38c80, 0x0) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f0000005bc0)=""/161) r9 = io_uring_setup(0x77b9, &(0x7f0000005c80)={0x0, 0xfc40, 0x1000, 0x3, 0x2ad}) io_uring_enter(r9, 0x22d6, 0x2418, 0x41, &(0x7f0000005d00)={[0x9]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000005d40)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) uname(&(0x7f0000005d80)=""/204) sysfs$3(0x3) ioctl$TIOCSBRK(r2, 0x5427) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000005e80)) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000005ec0)={0xa000, 0x100000, 0x1}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000007180)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0xf, '\x00', 0x0, r2, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000007200)={&(0x7f0000005f00)="bce8b392f5480316afd7c89a626822c47f1fdb0846f1655faaafeac6b8b26dc23977e7bc54b2afe233f6c7867ff84bead314f14db7ee0dfe12d44e058295d9c0ed0dd843387cb0cbf09809dcb1cedd72051135badcec606dbadd4acbf9d0485958b89242777e8d2cf75b22ef8b251f37a97b451bd8cfd72c", &(0x7f0000005f80)=""/193, &(0x7f0000006080)="27e58bcc7c4c3e7d56f66d2aa243e4640109367e0505c1d0dde0d3bacd7b6e21bc38b640da4a706afca4eb6943faeb94b17ea5dbb0b2a685d3cd5bf1da87262c79a24f1102aa6327464314f988f37e4c508fbbc7c17001c2093a0ee2ce1601f59629d3b40a77c9889f2eac89c6e808c3e45e60080056642b3a1d3c85d72f44d982d92ef6a40af9a08045a9193c74408b7c0d500f6eff0ad99fb855d734e71c1367b3755b389feeef8566a11960911559e47ee38b8b1e6413469d65da6dd981db95f7ae28d75ff90440877a97abf2", &(0x7f0000006180)="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", 0xc230, r11}, 0x38) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000007240)={0x9, 0x6, 0xfffffff9, 0x4, 0x7, "8af6718744ce7d5fda009625a17967350d3ab3"}) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f00000093c0)=[{0x2, 0x1, 0x0, &(0x7f0000007400)=[{&(0x7f00000072c0)=""/108, 0x6c}, {&(0x7f0000007340)=""/142, 0x8e}], &(0x7f0000007440)=[0x91, 0x9, 0x2, 0x3]}, {0x1, 0x0, 0x0, &(0x7f0000007580)=[{&(0x7f0000007480)=""/222, 0xde}], &(0x7f00000075c0)=[0x7, 0x7, 0x0, 0x6, 0x4, 0x7, 0x1]}, {0x9, 0x0, 0x0, &(0x7f0000008b80)=[{&(0x7f0000007600)=""/64, 0x40}, {&(0x7f0000007640)=""/91, 0x5b}, {&(0x7f00000076c0)=""/156, 0x9c}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/211, 0xd3}, {&(0x7f0000008880)=""/147, 0x93}, {&(0x7f0000008940)=""/126, 0x7e}, {&(0x7f00000089c0)=""/193, 0xc1}, {&(0x7f0000008ac0)=""/188, 0xbc}], &(0x7f0000008c40)=[0x6, 0x400]}, {0x0, 0x1, 0x0, &(0x7f0000008c80), &(0x7f0000008cc0)=[0x10, 0x4, 0x4, 0xe67, 0x81]}, {0x2, 0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000008d00)=""/151, 0x97}, {&(0x7f0000008dc0)=""/164, 0xa4}], &(0x7f0000008ec0)=[0x7]}, {0x2, 0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f0000008f00)=""/22, 0x16}, {&(0x7f0000008f40)=""/44, 0x2c}], &(0x7f0000008fc0)=[0x6, 0x100000000, 0x3, 0x5, 0xfff, 0x8]}, {0x5, 0x1, 0x0, &(0x7f0000009300)=[{&(0x7f0000009000)=""/213, 0xd5}, {&(0x7f0000009100)=""/123, 0x7b}, {&(0x7f0000009180)=""/171, 0xab}, {&(0x7f0000009240)=""/9, 0x9}, {&(0x7f0000009280)=""/68, 0x44}], &(0x7f0000009380)=[0x7, 0x9d6b, 0xd, 0x9, 0x100000000, 0x8, 0x7]}], 0x7) 7.122360916s ago: executing program 1 (id=6243): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fsopen(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd1f5950fb", 0x5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 6.687707497s ago: executing program 4 (id=6244): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.417832761s ago: executing program 2 (id=6245): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x5319) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000014c0)=""/4096, 0x1000, 0x547) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffe19, 0x0, 0x0}, 0x50) lseek(r3, 0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) keyctl$describe(0x6, r5, &(0x7f00000000c0)=""/118, 0x76) connect$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x2000400c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 5.197580774s ago: executing program 8 (id=6246): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) (async) r4 = syz_open_dev$I2C(0x0, 0x58, 0x202000) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x601, 0x7f, &(0x7f00000009c0)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409ea706b665945461437464"}], 0x2}) syz_usb_control_io(r3, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = epoll_create1(0x80000) r7 = socket(0x1, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000140)={0x60000008}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180), 0x4) 4.63768957s ago: executing program 1 (id=6247): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000040)=""/108) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x604000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x4, 0x7, 0x8}}, 0x5, &(0x7f00000002c0), 0x3}}) sendfile(r2, r1, 0x0, 0x23b) r10 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000140)="1c736cace2471093a13bfad40f2df5ba6b", 0x2000b) 4.114316597s ago: executing program 4 (id=6248): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a00200067000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000046b5af24c87334b800ff010000000000000000000000000000000000000000000030000000000000000000005400000000000000037f00009b21562b39706cad9000000040000000000000000000000000000000000a0010000100"/133], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000f70a0010000104000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="e33f62f009", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.835806966s ago: executing program 8 (id=6249): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005"], 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000005245000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.657668866s ago: executing program 8 (id=6250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800e0ffb704000002000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_usb_connect$uac1(0x3, 0x8a, &(0x7f0000002a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x9, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7b, 0x0, 0x3, 0x2b, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0xd4, 0x7}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6f, 0x80, {0x7, 0x25, 0x1, 0xc, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7d, 0x1, 0x4, {0x7, 0x25, 0x1, 0xc, 0x10, 0x3}}}}}}}}]}}, 0x0) 1.50645139s ago: executing program 2 (id=6251): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x815}, 0x4040) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x103e}}, 0x1006) 1.428965679s ago: executing program 5 (id=6252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.309334404s ago: executing program 4 (id=6253): r0 = io_uring_setup(0x57e, &(0x7f0000000300)={0x0, 0x375, 0x10, 0x0, 0x2c4}) close(r0) r1 = socket$inet6(0xa, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x10, 0x198}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x5, r3, 0x29, {0x2, 0x7}, 0xff}, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x204031, 0xffffffffffffffff, 0x42795000) listen(r1, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 1.038518454s ago: executing program 2 (id=6254): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000030000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb0000000400000000050019"], 0xc8}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 962.95633ms ago: executing program 4 (id=6255): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x15) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './cgroup'}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/133, 0x85}], 0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x24, 0x6, @broadcast}, 0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) sendto$inet6(r0, &(0x7f00000010c0)="05035050827c5e8ec0ff", 0xa, 0x890, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) 350.56128ms ago: executing program 1 (id=6257): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000140000000000800024000"], 0x110}}, 0x0) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) 198.26411ms ago: executing program 8 (id=6258): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000500)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x240c4044}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) r4 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) (async) r9 = syz_io_uring_setup(0x231, &(0x7f0000002200)={0x0, 0x0, 0x10100, 0x201, 0x1}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x309000, 0x84, 0x2}, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000380)=""/90) (async) pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000400)="0f576cd5b3eda9978bafb23c3023f9ba64880c9d0d7e4bf648a57c41f291acc3b7d4c7dd1fb4d64fa85a18da481006245cc632b2c5a76d4bc28d6e6934dc3bb9f84f6a2f9a11292b199c28c8a74faff31c04fdea6e8651a423101f912144d7e524273de138ce489692b712b28f49c66f706ca475487fa6f7b36eedb0ef4fa2f91fe0a82858b795119e8642a885acdd5ed4e0e9a29f384542201ff6543c502327fb2758c1ecf205777ba6fa08be9d2908ff06598c6af44c5e0fb625b0d9d957ae7e16e7f8468fb74327f983697816c8361c6bebf363465d263d1a188974321865776be4a55e623479b6a9ca2079", 0xed}, {&(0x7f0000000500)="9ea26369651a8051dd048dd32e6fd34b2e8a54ed05360879c875e5cc0eda6c848a5e2f8ce8fd00976f5e25ce3f7ea550bd9afb8416ba55bc02beb16cdbe386ae93db2dac04224fafc18e898d2802d1bddf694461895f7d23f0502f1cdc741d3157e3c1602022b4367fd0a6e0f9154869ab77fd8dc84b8f3b32bcc262874a5c4035a38395ad763964678818f1fe2327eeddbf06d56ece6998ae2bbd35381acd694ec88119a1c6df3c266a06b7d275b3f3388d18a8ccb05fd044e1b02b9ce2982d8a28b39fbb1f28be3f76aad1911f", 0xce}, {&(0x7f0000000600)="6383e2bad5b5ce961c9915e711c940772f7eba3c3081d635231570d327ddb086f2abd5af04a112d7ceb2d1fd91216fa9e4f9c19ad0063f82f3d7fd43b2edf870362a26b58d23e6a27df86ca4ade3c271e691714c02c62593434282064ee38854b27ecdabc5a4c1df1dd10999335d81b0e98f5ae32b295ff739f3799bb9719b2e2bfedc6b9079d1af812ea552bd172b0d24ec2f802789ba", 0x97}, {&(0x7f00000006c0)="1039ec622d89c4b9744ecab940e5310cd603f2cfacf2b8150a0b1442d7e0affeb4f4340d1414fd80a34a83c6e1bf80636002044783b40f71cc7cdb1a2b261d94f21273d4c5b8b8f71c2acbf2", 0x4c}, {&(0x7f00000008c0)="33ad078268cff83578862f1d5583e16472d16f73c8bc54c809ec6e03b6bb7651293a1b588f750d3cd9cb6261cd693d84cd8864890ae9211f57d671d141205d77cc9a1cb185b1906f954b0ef546c1", 0x4e}, {&(0x7f0000000040)="ef2221b81c9701a5e5b39f4782e57dfb969b6dbbecffc9c3941b01eb339dc72ed146", 0x22}, {&(0x7f00000007c0)="d859dfd7010346ee1f16acba98ce84fff33fa5e21408ece2dbf7a7463cb198d5ec948eedbd17a4e009c2596de644870f3d919463f6ebe257d63d555c15250946b66112f26588a1512f09e95aeaa671ed8bb851a1714e62299f0bff4c54a9428d47", 0x61}], 0x7, 0x0, 0x100) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 37.685232ms ago: executing program 5 (id=6259): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 0s ago: executing program 2 (id=6260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xd8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f3"}, {0x20, 0x10a, 0x800, "c133a12a91872b3730467c92a3"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x7, 0x4}], 0x148}, 0x4000c010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x840) (async) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xc0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a0000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) brk(0x7ff877c47fff) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x0, '\x00', @p_u32=0x0}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0xfff3, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 0733 [ 1551.005936][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.041542][ T5897] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1551.059428][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.069794][ T5897] usb 9-1: config 0 descriptor?? [ 1551.138793][T28176] netlink: 'syz.9.5764': attribute type 1 has an invalid length. [ 1551.174515][T28176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1552.555476][T28203] bond7: Removing last arp target with arp_interval on [ 1552.604117][T28203] bond7: entered promiscuous mode [ 1552.610167][T28203] bond7: entered allmulticast mode [ 1552.660107][T28203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.073239][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5772'. [ 1553.288173][ T5897] usbhid 9-1:0.0: can't add hid device: -71 [ 1553.303933][ T5897] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1553.363680][ T5897] usb 9-1: USB disconnect, device number 64 [ 1553.584111][T28206] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1554.934694][T28224] netlink: 203340 bytes leftover after parsing attributes in process `syz.8.5775'. [ 1555.082219][T28239] netlink: set zone limit has 8 unknown bytes [ 1556.439395][T22148] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1556.599212][T22148] usb 10-1: Using ep0 maxpacket: 32 [ 1556.628612][T22148] usb 10-1: config 7 has an invalid interface number: 8 but max is 0 [ 1556.655820][T22148] usb 10-1: config 7 has no interface number 0 [ 1556.672080][T22148] usb 10-1: config 7 interface 8 has no altsetting 0 [ 1556.691659][T22148] usb 10-1: New USB device found, idVendor=048d, idProduct=9006, bcdDevice=36.6e [ 1556.725606][T22148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.774750][T22148] usb 10-1: Product: syz [ 1556.795515][T22148] usb 10-1: Manufacturer: syz [ 1556.822718][T22148] usb 10-1: SerialNumber: syz [ 1557.133409][T22148] usb 10-1: USB disconnect, device number 59 [ 1557.480550][T28277] FAULT_INJECTION: forcing a failure. [ 1557.480550][T28277] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.536968][T28277] CPU: 0 UID: 0 PID: 28277 Comm: syz.7.5790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.536993][T28277] Tainted: [L]=SOFTLOCKUP [ 1557.536998][T28277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1557.537006][T28277] Call Trace: [ 1557.537011][T28277] [ 1557.537017][T28277] dump_stack_lvl+0xe8/0x150 [ 1557.537041][T28277] should_fail_ex+0x412/0x560 [ 1557.537061][T28277] should_failslab+0xa8/0x100 [ 1557.537079][T28277] __kmalloc_noprof+0xe8/0x760 [ 1557.537095][T28277] ? __kasan_kmalloc+0x93/0xb0 [ 1557.537109][T28277] ? ovs_nla_copy_actions+0x68/0x3d0 [ 1557.537191][T28277] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1557.537207][T28277] ovs_nla_copy_actions+0x68/0x3d0 [ 1557.537219][T28277] ? __asan_memcpy+0x40/0x70 [ 1557.537234][T28277] ovs_flow_cmd_new+0x615/0xe80 [ 1557.537271][T28277] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1557.537319][T28277] ? __nla_parse+0x40/0x60 [ 1557.537339][T28277] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1557.537359][T28277] genl_family_rcv_msg_doit+0x22a/0x330 [ 1557.537376][T28277] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1557.537396][T28277] ? bpf_lsm_capable+0x9/0x20 [ 1557.537413][T28277] ? security_capable+0x7e/0x2c0 [ 1557.537434][T28277] genl_rcv_msg+0x61c/0x7a0 [ 1557.537449][T28277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.537461][T28277] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1557.537478][T28277] ? __lock_acquire+0x6b5/0x2cf0 [ 1557.537501][T28277] netlink_rcv_skb+0x232/0x4b0 [ 1557.537519][T28277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.537531][T28277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1557.537557][T28277] ? down_read+0x272/0x2e0 [ 1557.537569][T28277] ? genl_rcv+0xd/0x40 [ 1557.537581][T28277] genl_rcv+0x28/0x40 [ 1557.537599][T28277] netlink_unicast+0x80f/0x9b0 [ 1557.537619][T28277] ? __pfx_netlink_unicast+0x10/0x10 [ 1557.537632][T28277] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1557.537647][T28277] ? netlink_sendmsg+0x650/0xb40 [ 1557.537663][T28277] ? skb_put+0x11b/0x210 [ 1557.537682][T28277] netlink_sendmsg+0x813/0xb40 [ 1557.537704][T28277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.537722][T28277] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1557.537740][T28277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1557.537756][T28277] ____sys_sendmsg+0x972/0x9f0 [ 1557.537773][T28277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.537790][T28277] ? import_iovec+0x73/0xa0 [ 1557.537813][T28277] ___sys_sendmsg+0x2a5/0x360 [ 1557.537828][T28277] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.537860][T28277] ? __fget_files+0x2a/0x420 [ 1557.537877][T28277] ? __fget_files+0x3a0/0x420 [ 1557.537901][T28277] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1557.537915][T28277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1557.537936][T28277] ? __pfx_ksys_write+0x10/0x10 [ 1557.537971][T28277] do_syscall_64+0x14d/0xf80 [ 1557.537990][T28277] ? trace_irq_disable+0x3b/0x150 [ 1557.538019][T28277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.538040][T28277] ? clear_bhb_loop+0x40/0x90 [ 1557.538067][T28277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.538087][T28277] RIP: 0033:0x7f7f0859c799 [ 1557.538108][T28277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.538126][T28277] RSP: 002b:00007f7f067f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.538150][T28277] RAX: ffffffffffffffda RBX: 00007f7f08815fa0 RCX: 00007f7f0859c799 [ 1557.538165][T28277] RDX: 0000000020008054 RSI: 0000200000000000 RDI: 0000000000000003 [ 1557.538179][T28277] RBP: 00007f7f067f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.538192][T28277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1557.538205][T28277] R13: 00007f7f08816038 R14: 00007f7f08815fa0 R15: 00007f7f0893fa48 [ 1557.538239][T28277] [ 1557.962995][T28277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1558.863892][T28293] netlink: 'syz.8.5795': attribute type 1 has an invalid length. [ 1558.913558][T28293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.270313][T28297] netlink: 203340 bytes leftover after parsing attributes in process `syz.7.5792'. [ 1559.317837][T28306] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 1559.338305][T28306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.809230][ T5897] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1560.004420][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.025048][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1560.060947][ T5897] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1560.090960][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1560.142936][ T5897] usb 2-1: SerialNumber: syz [ 1561.153132][T28321] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5803'. [ 1561.163136][T28321] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1562.415027][T28331] input: syz1 as /devices/virtual/input/input109 [ 1562.552303][T28331] netlink: 'syz.8.5806': attribute type 21 has an invalid length. [ 1562.579424][T28331] IPv6: NLM_F_CREATE should be specified when creating new route [ 1562.662436][ T5897] usb 2-1: 0:2 : does not exist [ 1562.667425][ T5897] usb 2-1: unit 5: unexpected type 0x0d [ 1562.835224][ T5897] usb 2-1: USB disconnect, device number 67 [ 1562.864889][T28336] netlink: 'syz.1.5808': attribute type 1 has an invalid length. [ 1562.886851][T28336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1562.887773][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.327253][T28347] netlink: 'syz.9.5813': attribute type 1 has an invalid length. [ 1563.352869][T28347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.457658][T28353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.769853][ T5911] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1563.828232][T28348] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1563.952771][ T5911] usb 10-1: Using ep0 maxpacket: 16 [ 1563.977921][ T5911] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1564.019878][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.050246][ T5911] usb 10-1: Product: syz [ 1564.072940][ T5911] usb 10-1: Manufacturer: syz [ 1564.091281][ T5911] usb 10-1: SerialNumber: syz [ 1564.136951][ T5911] usb 10-1: config 0 descriptor?? [ 1564.168566][ T5911] hub 10-1:0.0: bad descriptor, ignoring hub [ 1564.196319][ T5911] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1565.504570][T28385] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1566.109452][T28392] netlink: 'syz.7.5825': attribute type 1 has an invalid length. [ 1566.145686][T28392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1566.195008][T28392] FAULT_INJECTION: forcing a failure. [ 1566.195008][T28392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.239656][T28392] CPU: 1 UID: 0 PID: 28392 Comm: syz.7.5825 Tainted: G L syzkaller #0 PREEMPT(full) [ 1566.239692][T28392] Tainted: [L]=SOFTLOCKUP [ 1566.239700][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.239711][T28392] Call Trace: [ 1566.239720][T28392] [ 1566.239729][T28392] dump_stack_lvl+0xe8/0x150 [ 1566.239766][T28392] should_fail_ex+0x412/0x560 [ 1566.239798][T28392] _copy_from_user+0x2d/0xb0 [ 1566.239829][T28392] kstrtouint_from_user+0xd6/0x180 [ 1566.239943][T28392] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1566.239989][T28392] proc_fail_nth_write+0x8e/0x210 [ 1566.240021][T28392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1566.240056][T28392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1566.240087][T28392] vfs_write+0x29a/0xb90 [ 1566.240119][T28392] ? __pfx_vfs_write+0x10/0x10 [ 1566.240143][T28392] ? __fget_files+0x2a/0x420 [ 1566.240178][T28392] ? __fget_files+0x3a0/0x420 [ 1566.240207][T28392] ? __fget_files+0x2a/0x420 [ 1566.240246][T28392] ksys_write+0x150/0x270 [ 1566.240272][T28392] ? __pfx_ksys_write+0x10/0x10 [ 1566.240307][T28392] do_syscall_64+0x14d/0xf80 [ 1566.240327][T28392] ? trace_irq_disable+0x3b/0x150 [ 1566.240356][T28392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.240376][T28392] ? clear_bhb_loop+0x40/0x90 [ 1566.240401][T28392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.240420][T28392] RIP: 0033:0x7f7f0855cfce [ 1566.240440][T28392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1566.240457][T28392] RSP: 002b:00007f7f067f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1566.240480][T28392] RAX: ffffffffffffffda RBX: 00007f7f067f66c0 RCX: 00007f7f0855cfce [ 1566.240495][T28392] RDX: 0000000000000001 RSI: 00007f7f067f60a0 RDI: 0000000000000004 [ 1566.240509][T28392] RBP: 00007f7f067f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.240522][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.240535][T28392] R13: 00007f7f08816038 R14: 00007f7f08815fa0 R15: 00007f7f0893fa48 [ 1566.240568][T28392] [ 1566.599556][T22148] usb 10-1: USB disconnect, device number 60 [ 1566.828925][T28416] kvm: pic: non byte write [ 1566.929199][T22148] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1567.099150][T22148] usb 10-1: Using ep0 maxpacket: 8 [ 1567.120687][T22148] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1567.135466][T22148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.165939][T22148] usb 10-1: Product: syz [ 1567.177042][T22148] usb 10-1: Manufacturer: syz [ 1567.187361][T22148] usb 10-1: SerialNumber: syz [ 1567.243991][ T5927] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1567.439537][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 1567.451831][T22148] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1567.472174][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.473939][T22148] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1567.531684][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1567.593950][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1567.618199][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.678868][T22148] usb 10-1: USB disconnect, device number 61 [ 1567.700047][ T5927] usb 2-1: Product: syz [ 1567.743184][ T5927] usb 2-1: Manufacturer: syz [ 1567.760329][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1567.827401][ T5927] usb 2-1: SerialNumber: syz [ 1568.097643][ T5927] usb 2-1: 0:2 : does not exist [ 1568.122333][ T5927] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1568.289980][ T5927] usb 2-1: USB disconnect, device number 68 [ 1568.402216][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1568.433254][T28436] FAULT_INJECTION: forcing a failure. [ 1568.433254][T28436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.492113][T28436] CPU: 0 UID: 0 PID: 28436 Comm: syz.0.5836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.492148][T28436] Tainted: [L]=SOFTLOCKUP [ 1568.492157][T28436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1568.492168][T28436] Call Trace: [ 1568.492176][T28436] [ 1568.492185][T28436] dump_stack_lvl+0xe8/0x150 [ 1568.492221][T28436] should_fail_ex+0x412/0x560 [ 1568.492252][T28436] _copy_to_user+0x31/0xb0 [ 1568.492285][T28436] handle_eviocgbit+0x194/0x1e0 [ 1568.492394][T28436] evdev_ioctl_handler+0x1315/0x1fe0 [ 1568.492434][T28436] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 1568.492478][T28436] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1568.492532][T28436] ? __fget_files+0x2a/0x420 [ 1568.492566][T28436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1568.492594][T28436] ? __pfx_evdev_ioctl+0x10/0x10 [ 1568.492621][T28436] __se_sys_ioctl+0xfc/0x170 [ 1568.492649][T28436] do_syscall_64+0x14d/0xf80 [ 1568.492667][T28436] ? trace_irq_disable+0x3b/0x150 [ 1568.492696][T28436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.492716][T28436] ? clear_bhb_loop+0x40/0x90 [ 1568.492742][T28436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.492763][T28436] RIP: 0033:0x7fe0f759c799 [ 1568.492783][T28436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.492800][T28436] RSP: 002b:00007fe0f845a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1568.492823][T28436] RAX: ffffffffffffffda RBX: 00007fe0f7816090 RCX: 00007fe0f759c799 [ 1568.492839][T28436] RDX: 0000200000000400 RSI: 0000000080404532 RDI: 0000000000000003 [ 1568.492852][T28436] RBP: 00007fe0f845a090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.492865][T28436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.492877][T28436] R13: 00007fe0f7816128 R14: 00007fe0f7816090 R15: 00007fe0f793fa48 [ 1568.492912][T28436] [ 1568.959321][T22148] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1569.129555][T22148] usb 10-1: Using ep0 maxpacket: 8 [ 1569.136898][T22148] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1569.154859][T22148] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1569.185317][T22148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.222088][T22148] usb 10-1: Product: syz [ 1569.238712][T22148] usb 10-1: Manufacturer: syz [ 1569.257842][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1569.257863][ T30] audit: type=1400 audit(1773133128.866:2164): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 10-1: SerialNumber: syz [ 1569.481600][T22148] usb 10-1: config 0 descriptor?? [ 1569.493054][T22148] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1569.512240][T27555] syz_tun (unregistering): left allmulticast mode [ 1569.654318][T27555] tipc: Resetting bearer [ 1570.762518][T28474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1571.029485][T22148] gspca_sonixj: reg_w1 err -110 [ 1571.034606][T22148] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1573.754663][T27555] tipc: Disabling bearer [ 1573.797196][ T5927] usb 10-1: USB disconnect, device number 62 [ 1573.986674][T22592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.279238][ T5927] usb 10-1: new full-speed USB device number 63 using dummy_hcd [ 1574.381886][T21878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1574.397461][T21878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1574.406513][T21878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1574.415138][T21878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1574.423148][T21878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1574.460998][T22592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.491364][ T5927] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1574.516852][ T5927] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1574.539552][T22148] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1574.557396][ T5927] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.591151][ T5927] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1574.633657][ T5927] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1574.633707][ T5927] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1574.633733][ T5927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.642171][T22592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.646884][ T5927] usb 10-1: config 0 descriptor?? [ 1574.744395][T22148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.755665][T22148] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1574.763405][T22592] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1574.768405][T22148] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1574.784410][T22148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.792516][T22148] usb 2-1: Product: syz [ 1574.796710][T22148] usb 2-1: Manufacturer: syz [ 1574.801489][T22148] usb 2-1: SerialNumber: syz [ 1574.819866][T22148] cdc_mbim 2-1:1.0: skipping garbage [ 1574.821071][T22592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.891878][T28484] tun0: tun_chr_ioctl cmd 1074025675 [ 1574.897237][T28484] tun0: persist disabled [ 1575.024152][T28491] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1575.131461][T28494] chnl_net:caif_netlink_parms(): no params data found [ 1575.159336][ T5927] hid-alps 0003:044E:120C.004B: unbalanced delimiter at end of report description [ 1575.180400][ T5927] hid-alps 0003:044E:120C.004B: parse failed [ 1575.192383][ T5927] hid-alps 0003:044E:120C.004B: probe with driver hid-alps failed with error -22 [ 1575.300687][T28508] bond4: Removing last arp target with arp_interval on [ 1575.311722][T28508] bond4: entered promiscuous mode [ 1575.316825][T28508] bond4: entered allmulticast mode [ 1575.322915][T28508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1575.361608][T22592] bridge_slave_1: left allmulticast mode [ 1575.367431][T22592] bridge_slave_1: left promiscuous mode [ 1575.377835][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.403528][T22592] bridge_slave_0: left allmulticast mode [ 1575.411368][T22592] bridge_slave_0: left promiscuous mode [ 1575.417415][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.968749][T22592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.986774][T22592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.004323][T22592] bond0 (unregistering): Released all slaves [ 1576.032198][T22592] bond1 (unregistering): Released all slaves [ 1576.078403][T22592] bond2 (unregistering): Released all slaves [ 1576.133275][T22592] bond3 (unregistering): Released all slaves [ 1576.181556][T22592] bond4 (unregistering): (slave veth3): Releasing active interface [ 1576.192098][T22592] dummy0: entered promiscuous mode [ 1576.205885][T22592] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1576.228227][T22592] bond4 (unregistering): Released all slaves [ 1576.265886][T22592] bond5 (unregistering): Released all slaves [ 1576.308465][T22592] bond6 (unregistering): Released all slaves [ 1576.374777][T22592] bond7 (unregistering): Released all slaves [ 1576.413378][T22592] bond8 (unregistering): Released all slaves [ 1576.499306][T21878] Bluetooth: hci1: command tx timeout [ 1576.537182][ T5927] usb 10-1: USB disconnect, device number 63 [ 1576.666620][T22592] tipc: Left network mode [ 1576.728094][T28494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.768771][T28494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.783341][T28494] bridge_slave_0: entered allmulticast mode [ 1576.811301][T28494] bridge_slave_0: entered promiscuous mode [ 1576.875929][T28494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.884376][T28494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.894774][T28494] bridge_slave_1: entered allmulticast mode [ 1576.918145][T28494] bridge_slave_1: entered promiscuous mode [ 1577.027527][T22592] batman_adv: batadv0: Interface deactivated: macsec1 [ 1577.056444][T22592] batman_adv: batadv0: Removing interface: macsec1 [ 1577.238204][T28494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.281852][T28494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.330479][T22592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.344685][T22592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.355917][T22592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.394427][T22592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.444461][T22592] veth1_macvtap: left promiscuous mode [ 1577.478105][T22592] veth0_macvtap: left promiscuous mode [ 1577.505943][T22592] veth1_vlan: left allmulticast mode [ 1577.524967][T22592] veth1_vlan: left promiscuous mode [ 1577.537211][T22148] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1577.555106][T22148] cdc_mbim 2-1:1.0: bind() failure [ 1577.584684][T22148] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1577.602585][T22148] cdc_ncm 2-1:1.1: bind() failure [ 1577.626499][T22148] usb 2-1: USB disconnect, device number 69 [ 1577.792706][T28549] kvm: kvm [28547]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2000000 [ 1577.831203][ T5897] IPVS: starting estimator thread 0... [ 1577.852938][T22592] pim6reg (unregistering): left allmulticast mode [ 1577.939739][T28555] IPVS: using max 50 ests per chain, 120000 per kthread [ 1578.048815][T22592] team0 (unregistering): Port device macvlan0 removed [ 1578.303661][T22592] team0 (unregistering): Port device team_slave_1 removed [ 1578.355940][T22592] team0 (unregistering): Port device team_slave_0 removed [ 1578.413635][T28565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1578.583479][T21878] Bluetooth: hci1: command tx timeout [ 1578.797798][T28494] team0: Port device team_slave_0 added [ 1578.812567][T28494] team0: Port device team_slave_1 added [ 1579.090817][T28494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.116476][T28494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.220541][T28494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.279808][T28494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.300630][T28494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.409969][T28494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.711364][T28494] hsr_slave_0: entered promiscuous mode [ 1579.738219][T28494] hsr_slave_1: entered promiscuous mode [ 1579.749199][T28494] debugfs: 'hsr0' already exists in 'hsr' [ 1579.767693][T28494] Cannot create hsr debugfs directory [ 1579.801924][T22592] IPVS: stop unused estimator thread 0... [ 1579.939268][ T5897] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1580.109233][ T5897] usb 10-1: Using ep0 maxpacket: 32 [ 1580.135141][ T5897] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.159145][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1580.205227][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1580.251195][ T5897] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1580.287272][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.307318][ T5897] usb 10-1: config 0 descriptor?? [ 1580.331106][T28590] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1580.355858][ T5897] hub 10-1:0.0: USB hub found [ 1580.557731][ T5897] hub 10-1:0.0: 2 ports detected [ 1580.659331][T21878] Bluetooth: hci1: command tx timeout [ 1581.123449][T28626] netlink: 'syz.1.5887': attribute type 1 has an invalid length. [ 1581.149502][T28626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.281829][T28623] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1581.483473][T28623] xt_CT: No such helper "snmp" [ 1581.717607][T28494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1581.731496][T28494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1581.745431][T28494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1581.764142][T28494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1581.954766][T28494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.006448][T28494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.024755][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.031980][T11661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.057583][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.064821][T11661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.122460][ T5897] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1582.124185][ T5911] usb 10-1: USB disconnect, device number 64 [ 1582.215475][T28494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.290971][T28494] veth0_vlan: entered promiscuous mode [ 1582.307223][T28494] veth1_vlan: entered promiscuous mode [ 1582.361883][T28494] veth0_macvtap: entered promiscuous mode [ 1582.375832][T28494] veth1_macvtap: entered promiscuous mode [ 1582.480754][T28494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.518711][T28494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.603162][T27529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.639380][T27529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.720529][T27529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.739897][T21878] Bluetooth: hci1: command tx timeout [ 1582.754405][T27529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.159728][T11678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.192313][T11678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.486530][T11663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.538861][T11663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.612322][T28671] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1583.839150][T28671] usb 2-1: Invalid ep0 maxpacket: 64 [ 1584.050617][T28671] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1584.301176][T28671] usb 2-1: Invalid ep0 maxpacket: 64 [ 1584.327945][T28671] usb usb2-port1: attempt power cycle [ 1584.699614][T28671] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1584.778769][T28671] usb 2-1: Invalid ep0 maxpacket: 64 [ 1584.931536][T28671] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1584.991470][ T30] audit: type=1326 audit(1773133144.596:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989d9c799 code=0x7ffc0000 [ 1584.991552][T28671] usb 2-1: Invalid ep0 maxpacket: 64 [ 1585.107857][T28671] usb usb2-port1: unable to enumerate USB device [ 1585.178795][ T30] audit: type=1326 audit(1773133144.606:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989d9c799 code=0x7ffc0000 [ 1585.255670][ T30] audit: type=1326 audit(1773133144.606:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989d9c799 code=0x7ffc0000 [ 1585.343885][ T30] audit: type=1326 audit(1773133144.606:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe989d9c502 code=0x7ffc0000 [ 1585.367002][ T5897] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1585.444088][ T30] audit: type=1326 audit(1773133144.606:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe989d9c597 code=0x7ffc0000 [ 1585.474149][ T30] audit: type=1326 audit(1773133144.606:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe989d59491 code=0x7ffc0000 [ 1585.497735][ T30] audit: type=1326 audit(1773133144.636:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe989d9d589 code=0x7ffc0000 [ 1585.523816][ T30] audit: type=1326 audit(1773133144.636:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe989d9c799 code=0x7ffc0000 [ 1585.557856][ T5897] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1585.567401][ T5897] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.579494][ T5897] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1585.589124][ T5897] usb 10-1: config 1 has no interface number 0 [ 1585.596324][ T30] audit: type=1326 audit(1773133144.636:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe989d594fb code=0x7ffc0000 [ 1585.623267][ T5897] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1585.638141][ T5897] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1585.715237][ T30] audit: type=1326 audit(1773133144.636:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28721 comm="syz.9.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989d9c799 code=0x7ffc0000 [ 1585.749733][ T5897] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1585.761198][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.781541][ T5897] usb 10-1: Product: syz [ 1585.785924][ T5897] usb 10-1: Manufacturer: syz [ 1585.793110][ T5897] usb 10-1: SerialNumber: syz [ 1585.864664][T28736] netlink: 'syz.8.5904': attribute type 1 has an invalid length. [ 1585.902270][T28736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1586.247927][T28671] usb 10-1: USB disconnect, device number 65 [ 1586.659393][ T5911] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1586.843960][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.904240][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.943809][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1586.991202][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1587.005913][T28757] netlink: 203340 bytes leftover after parsing attributes in process `syz.8.5906'. [ 1587.025931][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.049979][ T5911] usb 2-1: config 0 descriptor?? [ 1587.209146][ T5897] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1587.403590][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.439104][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.499107][ T5897] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1587.543022][ T5911] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1587.589156][ T5897] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1587.649104][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.701502][ T5897] usb 10-1: config 0 descriptor?? [ 1587.748136][ T24] usb 2-1: USB disconnect, device number 74 [ 1587.794686][T28770] fido_id[28770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1588.212517][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1588.353848][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5908'. [ 1588.401212][ T5897] usbhid 10-1:0.0: can't add hid device: -71 [ 1588.414378][ T5897] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1588.432916][T28778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.461804][ T5897] usb 10-1: USB disconnect, device number 66 [ 1588.826336][T28778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.019572][ T5897] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1589.159957][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1589.255977][T28810] fuse: Unknown parameter 'fdø4½K' [ 1589.274459][T28810] loop7: detected capacity change from 0 to 16384 [ 1589.430841][ T5897] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1589.579229][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1589.687597][T28823] netlink: 'syz.9.5916': attribute type 1 has an invalid length. [ 1589.708687][ T5897] usb usb2-port1: attempt power cycle [ 1589.714597][T28823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1589.846396][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5918'. [ 1589.931112][T28831] fuse: Unknown parameter '0x000000000000000bÿÿ00000000000000000000' [ 1590.069418][ T5897] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1590.122812][ T5897] usb 2-1: device descriptor read/8, error -71 [ 1590.389468][ T5897] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1590.454267][ T5897] usb 2-1: device descriptor read/8, error -71 [ 1590.589432][ T5897] usb usb2-port1: unable to enumerate USB device [ 1590.918033][T28853] kvm: pic: non byte write [ 1591.271484][T28859] netlink: 203340 bytes leftover after parsing attributes in process `syz.9.5921'. [ 1591.541768][T28877] netlink: 'syz.8.5924': attribute type 13 has an invalid length. [ 1592.392009][T28902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1592.964948][T28910] kvm: pic: non byte write [ 1593.319186][T18748] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1593.470018][T18748] usb 10-1: device descriptor read/64, error -71 [ 1593.699806][ T5897] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1593.739274][T18748] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1593.910018][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 1593.919481][T18748] usb 10-1: device descriptor read/64, error -71 [ 1593.930811][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.946241][ T5897] usb 4-1: config 0 has no interface number 0 [ 1593.955289][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.978402][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.013232][ T5897] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1594.047244][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.056172][T18748] usb usb10-port1: attempt power cycle [ 1594.091730][ T5897] usb 4-1: config 0 descriptor?? [ 1594.293348][T28947] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1594.409229][T18748] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1594.464176][T18748] usb 10-1: device descriptor read/8, error -71 [ 1594.739434][T18748] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1594.757783][ T5897] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.004D/input/input110 [ 1594.760103][T28671] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1594.806266][T18748] usb 10-1: device descriptor read/8, error -71 [ 1594.915702][ T5897] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.004D/input/input111 [ 1594.952141][T18748] usb usb10-port1: unable to enumerate USB device [ 1594.987351][T28671] usb 9-1: config 0 has no interfaces? [ 1594.991631][ T5897] uclogic 0003:28BD:0071.004D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 1595.024558][T28671] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1595.060749][T28671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.093797][ T5897] usb 4-1: USB disconnect, device number 81 [ 1595.138578][T28671] usb 9-1: config 0 descriptor?? [ 1595.218810][T28961] fido_id[28961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1595.397848][T28956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.429767][T28956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.467736][T28671] usb 9-1: USB disconnect, device number 65 [ 1595.531099][T28969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5941'. [ 1596.059158][ T5911] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1596.232410][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 1596.263699][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.307288][T28986] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1596.329959][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.354412][ T5911] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1596.408726][ T5911] usb 9-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1596.480220][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.533779][ T5911] usb 9-1: config 0 descriptor?? [ 1596.619459][T28671] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1596.829523][T28671] usb 10-1: Using ep0 maxpacket: 16 [ 1596.845838][T28671] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1596.886681][T28671] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.947229][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1596.964100][T28671] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1596.980890][T28997] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.5942'. [ 1597.008735][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.016608][T28671] usb 10-1: config 1 has no interface number 1 [ 1597.033067][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.052698][T28671] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1597.075345][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.129611][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.143726][T28671] usb 10-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1597.166178][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.207744][T28671] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1597.228047][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.259355][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.268513][T28671] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.309952][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.319943][T28671] usb 10-1: Product: syz [ 1597.332492][T28671] usb 10-1: Manufacturer: syz [ 1597.339509][ T5911] asus 0003:0B05:1807.004E: unknown main item tag 0x0 [ 1597.348926][T28671] usb 10-1: SerialNumber: syz [ 1597.373955][ T5911] asus 0003:0B05:1807.004E: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.8-1/input0 [ 1597.479235][ T5911] asus 0003:0B05:1807.004E: Asus input not registered [ 1597.513771][ T5911] asus 0003:0B05:1807.004E: probe with driver asus failed with error -12 [ 1597.621215][ T5911] usb 9-1: USB disconnect, device number 66 [ 1597.655276][T29009] netlink: 'syz.9.5944': attribute type 39 has an invalid length. [ 1597.815433][ T5897] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1597.991777][ T5897] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1598.024137][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.054359][ T5897] usb 4-1: config 0 descriptor?? [ 1598.095489][ T5897] cp210x 4-1:0.0: cp210x converter detected [ 1598.428460][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5951'. [ 1598.492966][T29019] macvlan2: entered promiscuous mode [ 1598.505464][ T5897] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1598.515379][T29019] bond0: entered promiscuous mode [ 1598.536223][T29019] bond_slave_0: entered promiscuous mode [ 1598.552237][T29019] bond_slave_1: entered promiscuous mode [ 1598.567981][T29019] dummy0: entered promiscuous mode [ 1598.595137][T29019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1598.666514][ T5897] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1599.039018][ T5920] usb 4-1: USB disconnect, device number 82 [ 1599.077360][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1599.098513][ T5920] cp210x 4-1:0.0: device disconnected [ 1599.523646][T28671] usb 10-1: USB disconnect, device number 71 [ 1600.235729][T17328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1600.258268][T17328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1600.284390][T17328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1600.298632][T17328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1600.308225][T17328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1601.434164][T29073] chnl_net:caif_netlink_parms(): no params data found [ 1601.966429][T29073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.015606][T29073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.057347][T29073] bridge_slave_0: entered allmulticast mode [ 1602.123369][T29073] bridge_slave_0: entered promiscuous mode [ 1602.164986][T29073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.217049][T29073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.245985][T29086] netlink: 203340 bytes leftover after parsing attributes in process `syz.8.5963'. [ 1602.270581][T29073] bridge_slave_1: entered allmulticast mode [ 1602.286840][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5964'. [ 1602.335187][T29073] bridge_slave_1: entered promiscuous mode [ 1602.419263][T17328] Bluetooth: hci5: command tx timeout [ 1602.427339][T29099] netlink: 'syz.7.5964': attribute type 11 has an invalid length. [ 1602.479657][T29099] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.5964'. [ 1602.661035][T29073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.780532][T29073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.053244][T29073] team0: Port device team_slave_0 added [ 1603.114578][T29073] team0: Port device team_slave_1 added [ 1603.402242][T17328] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1603.485997][T29073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.540433][T29073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.609179][T29073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.643081][T29073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.656233][T29073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.690019][ T5920] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1603.736643][T29073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.837618][T29073] hsr_slave_0: entered promiscuous mode [ 1603.844804][T29073] hsr_slave_1: entered promiscuous mode [ 1603.852339][T29073] debugfs: 'hsr0' already exists in 'hsr' [ 1603.858205][T29073] Cannot create hsr debugfs directory [ 1603.882681][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 1603.915433][ T5920] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1603.942550][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.947272][T29120] netlink: 'syz.9.5970': attribute type 1 has an invalid length. [ 1603.990576][ T5920] usb 4-1: config 0 descriptor?? [ 1604.044124][ T5920] as10x_usb: device has been detected [ 1604.064987][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1604.130024][ T5920] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1604.183618][ T5920] as10x_usb: error during firmware upload part1 [ 1604.240164][ T5920] Registered device nBox DVB-T Dongle [ 1604.509415][T17328] Bluetooth: hci5: command tx timeout [ 1605.104264][T29141] program syz.8.5974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1605.289760][T29073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1605.455516][T29073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1605.573550][T29073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1605.618750][T29073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1605.652559][T29149] netlink: 'syz.8.5975': attribute type 13 has an invalid length. [ 1606.167806][T29073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.190935][T29073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.222699][T22577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.229870][T22577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.256425][T29164] trusted_key: encrypted_key: insufficient parameters specified [ 1606.293506][T22577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.300668][T22577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.545620][ T5889] usb 4-1: USB disconnect, device number 83 [ 1606.579179][T17328] Bluetooth: hci5: command tx timeout [ 1606.588483][T29073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.635833][ T5889] Unregistered device nBox DVB-T Dongle [ 1606.657684][ T5889] as10x_usb: device has been disconnected [ 1606.802004][T29073] veth0_vlan: entered promiscuous mode [ 1606.870086][T29073] veth1_vlan: entered promiscuous mode [ 1606.974705][T29073] veth0_macvtap: entered promiscuous mode [ 1607.010913][T29073] veth1_macvtap: entered promiscuous mode [ 1607.072684][T29073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.153322][T29073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.178296][T22577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.208449][T22577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.258471][T22577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.288755][T22577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.397095][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.403767][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.591718][T11661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.629482][T11661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.716270][T29174] netlink: 172 bytes leftover after parsing attributes in process `syz.8.5979'. [ 1607.739167][T11663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.756296][T11663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.819792][T29167] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1608.093428][T29179] kvm: pic: non byte write [ 1608.660552][T17328] Bluetooth: hci5: command tx timeout [ 1610.621708][T29221] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1611.362933][T29226] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5983'. [ 1611.795678][T29242] kvm: pic: non byte write [ 1612.435203][T29248] kvm: pic: non byte write [ 1612.821729][T27529] wlan0: Trigger new scan to find an IBSS to join [ 1613.160638][T29266] bond4: entered promiscuous mode [ 1613.207584][T29266] bond4: entered allmulticast mode [ 1613.229535][T29266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1614.466829][T29293] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6006'. [ 1614.849470][T28671] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1615.016194][T28671] usb 2-1: Using ep0 maxpacket: 16 [ 1615.038194][T28671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.056767][T28671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.097488][T28671] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1615.131667][T28671] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1615.149024][T28671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.171665][T28671] usb 2-1: config 0 descriptor?? [ 1615.602552][T29298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.639895][T29298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.753630][T28671] hid_parser_main: 31 callbacks suppressed [ 1615.753648][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1615.779652][ T5889] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1615.809201][T28671] microsoft 0003:045E:07DA.004F: ignoring exceeding usage max [ 1615.855294][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1615.869202][T11661] wlan0: Trigger new scan to find an IBSS to join [ 1615.918359][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1615.956175][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1615.966554][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.001211][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.012267][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.022840][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.050613][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.057971][ T5889] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1616.082398][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.093646][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.109469][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.133046][ T5889] usb 9-1: config 0 descriptor?? [ 1616.140532][T28671] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1616.185763][T29306] program syz.9.6010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1616.196499][T28671] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004F/input/input112 [ 1616.269386][T28671] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1616.366487][ T5889] usbhid 9-1:0.0: can't add hid device: -71 [ 1616.397885][ T5889] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1616.430443][ T5889] usb 9-1: USB disconnect, device number 67 [ 1616.924043][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079988c00: rx timeout, send abort [ 1616.935922][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079988c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1616.939309][ T5898] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 1616.989324][ T5897] usb 2-1: USB disconnect, device number 79 [ 1617.152253][ T5898] usb 9-1: device descriptor read/64, error -71 [ 1617.249545][T18748] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1617.412571][T18748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.429216][ T5898] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1617.454654][T18748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.488536][T18748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1617.535267][T18748] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1617.599616][ T5898] usb 9-1: device descriptor read/64, error -71 [ 1617.634690][T18748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.676440][T29360] trusted_key: encrypted_key: insufficient parameters specified [ 1617.689988][T18748] usb 4-1: config 0 descriptor?? [ 1617.759743][ T5898] usb usb9-port1: attempt power cycle [ 1618.207935][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1618.207957][ T30] audit: type=1326 audit(1773133177.816:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29335 comm="syz.3.6014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4393d9c799 code=0x0 [ 1618.379334][ T5898] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 1618.430694][ T5898] usb 9-1: device descriptor read/8, error -71 [ 1618.580736][T18748] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1618.784868][T29381] netlink: 'syz.1.6019': attribute type 10 has an invalid length. [ 1618.823635][T29381] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1618.833940][T22584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.529870][T18748] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1619.689192][T18748] usb 2-1: device descriptor read/64, error -71 [ 1619.777473][T29401] netlink: 10 bytes leftover after parsing attributes in process `syz.7.6023'. [ 1619.787097][T29400] netlink: 10 bytes leftover after parsing attributes in process `syz.7.6023'. [ 1619.939441][T28671] usb 4-1: reset high-speed USB device number 84 using dummy_hcd [ 1619.971299][T18748] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1620.111106][T18748] usb 2-1: device descriptor read/64, error -71 [ 1620.201843][T29410] FAULT_INJECTION: forcing a failure. [ 1620.201843][T29410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1620.239251][T18748] usb usb2-port1: attempt power cycle [ 1620.255579][T29410] CPU: 1 UID: 0 PID: 29410 Comm: syz.7.6025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.255615][T29410] Tainted: [L]=SOFTLOCKUP [ 1620.255624][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1620.255645][T29410] Call Trace: [ 1620.255654][T29410] [ 1620.255664][T29410] dump_stack_lvl+0xe8/0x150 [ 1620.255699][T29410] should_fail_ex+0x412/0x560 [ 1620.255732][T29410] _copy_from_user+0x2d/0xb0 [ 1620.255757][T29410] ___sys_sendmsg+0x1c6/0x360 [ 1620.255776][T29410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1620.255808][T29410] ? __fget_files+0x2a/0x420 [ 1620.255825][T29410] ? __fget_files+0x3a0/0x420 [ 1620.255848][T29410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1620.255862][T29410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1620.255880][T29410] ? __pfx_ksys_write+0x10/0x10 [ 1620.255899][T29410] do_syscall_64+0x14d/0xf80 [ 1620.255913][T29410] ? trace_irq_disable+0x3b/0x150 [ 1620.255931][T29410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.255944][T29410] ? clear_bhb_loop+0x40/0x90 [ 1620.255959][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.255971][T29410] RIP: 0033:0x7f7f0859c799 [ 1620.255985][T29410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.255996][T29410] RSP: 002b:00007f7f067f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1620.256011][T29410] RAX: ffffffffffffffda RBX: 00007f7f08815fa0 RCX: 00007f7f0859c799 [ 1620.256020][T29410] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1620.256027][T29410] RBP: 00007f7f067f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.256035][T29410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.256042][T29410] R13: 00007f7f08816038 R14: 00007f7f08815fa0 R15: 00007f7f0893fa48 [ 1620.256060][T29410] [ 1620.749424][T18748] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1620.790448][T18748] usb 2-1: device descriptor read/8, error -71 [ 1620.861120][ T5911] usb 4-1: USB disconnect, device number 84 [ 1621.063169][T18748] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1621.102036][T18748] usb 2-1: device descriptor read/8, error -71 [ 1621.221624][T18748] usb usb2-port1: unable to enumerate USB device [ 1623.700637][T28671] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1623.869481][T28671] usb 2-1: Using ep0 maxpacket: 8 [ 1623.877567][T28671] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1623.885234][T28671] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1623.896906][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1623.908747][T28671] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1623.924757][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1623.937975][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1623.955230][T28671] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1623.973453][T28671] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1623.983764][T28671] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1623.991758][T28671] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1624.003882][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1624.015782][T28671] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.031335][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1624.043138][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1624.056190][T28671] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1624.070649][T22149] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1624.080237][T28671] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1624.089812][T28671] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1624.097303][T28671] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1624.108938][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1624.121027][T28671] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.133148][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1624.146856][T28671] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1624.170901][T28671] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1624.194425][T28671] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1624.224288][T28671] usb 2-1: string descriptor 0 read error: -22 [ 1624.241370][T22149] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1624.253618][T28671] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1624.263108][T22149] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1624.273509][T28671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.282129][T22149] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1624.302479][T22149] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.318839][T28671] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1624.332647][T22149] usb 9-1: config 0 descriptor?? [ 1624.352818][T29442] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1624.723559][ T5898] usb 2-1: USB disconnect, device number 84 [ 1625.342835][T29477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6041'. [ 1625.732165][T29485] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1625.899427][T28671] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1626.099788][T28671] usb 4-1: Using ep0 maxpacket: 16 [ 1626.124377][T28671] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.157902][T28671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1626.199863][T28671] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1626.230536][T28671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.262280][T28671] usb 4-1: Product: syz [ 1626.279933][T28671] usb 4-1: Manufacturer: syz [ 1626.298743][T28671] usb 4-1: SerialNumber: syz [ 1627.001399][T28671] usb 4-1: 0:2 : does not exist [ 1627.068565][T28671] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1627.139632][ T5898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1627.241047][ T5898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1627.477964][T29507] kvm: pic: non byte write [ 1627.482030][T28671] usb 4-1: USB disconnect, device number 85 [ 1627.684481][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1627.959547][T28671] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1628.069381][T29505] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6044'. [ 1628.103105][T29523] netlink: 'syz.1.6051': attribute type 9 has an invalid length. [ 1628.111324][T22577] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1628.148633][T29523] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1628.171114][T28671] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1628.211835][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.290933][T28671] usb 4-1: config 0 has no interfaces? [ 1628.347875][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.421490][T28671] usb 4-1: config 0 has no interfaces? [ 1628.469532][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.578706][T28671] usb 4-1: config 0 has no interfaces? [ 1628.647721][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.731877][T28671] usb 4-1: config 0 has no interfaces? [ 1628.773125][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.839638][T28671] usb 4-1: config 0 has no interfaces? [ 1628.875547][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.949094][T28671] usb 4-1: config 0 has no interfaces? [ 1628.984406][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.043455][T28671] usb 4-1: config 0 has no interfaces? [ 1629.070600][T28671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.185555][T28671] usb 4-1: config 0 has no interfaces? [ 1629.208419][T27529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1629.219455][T28671] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1629.249411][T28671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.259687][T27529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1629.310253][T28671] usb 4-1: config 0 descriptor?? [ 1629.368500][T29529] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6055'. [ 1629.402522][T29529] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6055'. [ 1629.687606][T29532] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6056'. [ 1629.850819][T29536] bond5: entered promiscuous mode [ 1629.866301][T29536] bond5: entered allmulticast mode [ 1629.910077][T29536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1630.019748][ T5898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1630.088586][ T5898] usb 4-1: USB disconnect, device number 86 [ 1630.624788][T29540] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6053'. [ 1630.784955][T29561] kvm: pic: non byte write [ 1631.153063][ T5898] usb 10-1: new low-speed USB device number 72 using dummy_hcd [ 1631.329698][ T5898] usb 10-1: device descriptor read/64, error -71 [ 1631.579233][ T5898] usb 10-1: new low-speed USB device number 73 using dummy_hcd [ 1631.739191][ T5898] usb 10-1: device descriptor read/64, error -71 [ 1631.880730][ T5898] usb usb10-port1: attempt power cycle [ 1632.299499][ T5898] usb 10-1: new low-speed USB device number 74 using dummy_hcd [ 1632.472697][ T5898] usb 10-1: device descriptor read/8, error -71 [ 1632.759237][ T5898] usb 10-1: new low-speed USB device number 75 using dummy_hcd [ 1632.792881][ T5898] usb 10-1: device descriptor read/8, error -71 [ 1632.859283][T29580] bond1: option tlb_dynamic_lb: invalid value (9) [ 1632.870628][T29580] bond1 (unregistering): Released all slaves [ 1632.917684][ T5898] usb usb10-port1: unable to enumerate USB device [ 1632.993216][T29581] bond1: option tlb_dynamic_lb: invalid value (9) [ 1633.012683][T29581] bond1 (unregistering): Released all slaves [ 1633.059349][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1633.549933][T29589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6070'. [ 1634.222340][T29585] delete_channel: no stack [ 1634.279926][ T5898] usb 10-1: new low-speed USB device number 76 using dummy_hcd [ 1634.450123][ T5898] usb 10-1: device descriptor read/64, error -71 [ 1634.774315][ T5898] usb 10-1: new low-speed USB device number 77 using dummy_hcd [ 1635.043828][ T5898] usb 10-1: device descriptor read/64, error -71 [ 1635.254359][ T5898] usb usb10-port1: attempt power cycle [ 1635.419433][T18748] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1635.529471][ T1215] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1635.619750][ T5898] usb 10-1: new low-speed USB device number 78 using dummy_hcd [ 1635.681954][ T5898] usb 10-1: device descriptor read/8, error -71 [ 1635.729557][ T1215] usb 2-1: Using ep0 maxpacket: 16 [ 1635.742035][ T1215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1635.761636][ T1215] usb 2-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40 [ 1635.771752][ T1215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.793770][ T1215] usb 2-1: Product: 熴䗇㴲ዾ織ㆹâ°å­·ê·¥î¤›è•î´‡í‘鯕ࢫϫ殢㊣ꠡ屭⃼슨ᬞᚼî¬é”¦ë†Šì …⩎쮫닊瞬쥪⨤夨éꗱ煨㛱塡鋮ꨕퟣ漤᳧Δì†à©¥x笥舵èŽâ­—쯟ä—㕷᮰毎å‰éž­â´Ÿæ¯‰è›¢ã¾¤æ…»ë–«í‘Ÿî‰³Õ¨æªžèƒŠçŠ±ã©„ی섯嬡䦜è濹䖂ข諉햻䯙薫푊ì¦ä“¶ç¨Žå®¸ï·—ヅá¾æ†Šé®æ¥±â˜ŒäŸ–塦뫤䢌겡쯊᠋ṳ굵˿ãꭆ㙸ᓫ蠘⹟ᬎë¾á€£ê¢·á‚¼ [ 1635.832091][ T1215] usb 2-1: Manufacturer: Р [ 1635.836824][ T1215] usb 2-1: SerialNumber: â°Š [ 1635.939179][ T5898] usb 10-1: new low-speed USB device number 79 using dummy_hcd [ 1635.995656][ T5898] usb 10-1: device descriptor read/8, error -71 [ 1636.096316][ T1215] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1636.127465][ T5898] usb usb10-port1: unable to enumerate USB device [ 1636.323074][ T1215] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1636.355433][ T1215] usb 2-1: USB disconnect, device number 85 [ 1636.406788][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1636.869167][ T1215] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1637.043554][ T1215] usb 2-1: Using ep0 maxpacket: 32 [ 1637.072260][ T1215] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1637.101489][ T1215] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1637.143062][ T1215] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1637.170417][ T1215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1637.194816][ T1215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1637.217733][ T1215] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1637.252875][ T1215] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1637.288743][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.336751][ T1215] usb 2-1: config 0 descriptor?? [ 1637.603374][ T1215] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1637.681720][ T1215] usb 2-1: USB disconnect, device number 86 [ 1637.708402][ T1215] usblp0: removed [ 1638.092578][T29645] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6085'. [ 1638.149724][ T1215] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1638.331358][ T1215] usb 2-1: Invalid ep0 maxpacket: 32 [ 1638.509511][ T1215] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1638.694255][ T1215] usb 2-1: Invalid ep0 maxpacket: 32 [ 1638.714694][ T1215] usb usb2-port1: attempt power cycle [ 1639.129604][ T1215] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1639.182673][ T1215] usb 2-1: Invalid ep0 maxpacket: 32 [ 1639.340068][ T1215] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1639.359394][T29664] netlink: 'syz.8.6092': attribute type 39 has an invalid length. [ 1639.378601][ T1215] usb 2-1: Invalid ep0 maxpacket: 32 [ 1639.398868][ T1215] usb usb2-port1: unable to enumerate USB device [ 1639.919791][ T5911] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1640.079582][ T5911] usb 10-1: Using ep0 maxpacket: 16 [ 1640.090715][ T5911] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.129966][ T5911] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1640.159295][ T5911] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1640.203332][ T5911] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1640.229125][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.237364][ T5911] usb 10-1: Product: syz [ 1640.269298][ T5911] usb 10-1: Manufacturer: syz [ 1640.274140][ T5911] usb 10-1: SerialNumber: syz [ 1640.319165][T28671] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1640.521291][T28671] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1640.579181][T28671] usb 4-1: config 0 has no interfaces? [ 1640.591361][T28671] usb 4-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 1640.608070][ T5911] usb-storage 10-1:1.2: USB Mass Storage device detected [ 1640.639245][T28671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.647301][T28671] usb 4-1: Product: syz [ 1640.679558][T28671] usb 4-1: Manufacturer: syz [ 1640.684231][T28671] usb 4-1: SerialNumber: syz [ 1640.713175][T28671] usb 4-1: config 0 descriptor?? [ 1640.731992][ T5911] usb 10-1: USB disconnect, device number 80 [ 1640.810645][ T8946] udevd[8946]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.942249][T29679] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1640.954616][T29679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.968329][T29679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.985461][ T1215] usb 4-1: USB disconnect, device number 88 [ 1641.196984][T29684] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6097'. [ 1641.299259][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1641.463529][T18748] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1641.642716][T18748] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1641.681728][T18748] usb 4-1: config 220 has an invalid descriptor of length 114, skipping remainder of the config [ 1641.700793][T18748] usb 4-1: config 220 has no interface number 2 [ 1641.786949][T18748] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1641.935178][T18748] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1641.973181][T18748] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1641.997378][T18748] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1642.037624][T18748] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1642.066850][T18748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.103056][T18748] usb 4-1: Product: syz [ 1642.122722][T18748] usb 4-1: Manufacturer: syz [ 1642.141718][T18748] usb 4-1: SerialNumber: syz [ 1642.412669][T18748] usb 4-1: selecting invalid altsetting 0 [ 1642.447430][T18748] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1642.521827][T18748] uvcvideo 4-1:220.0: No valid video chain found. [ 1642.811002][T18748] usb 4-1: selecting invalid altsetting 0 [ 1642.864775][T18748] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1643.075808][T18748] usb 4-1: USB disconnect, device number 89 [ 1644.334080][T29722] kvm: pic: non byte write [ 1644.922659][T29737] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 1645.949196][T18748] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1646.691487][T18748] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 1646.719708][T18748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.969523][T18748] usb 2-1: config 0 has no interface number 0 [ 1646.989167][T18748] usb 2-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1647.050706][T18748] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1647.064928][T18748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.081866][T18748] usb 2-1: Product: syz [ 1647.091405][T18748] usb 2-1: Manufacturer: syz [ 1647.100158][T18748] usb 2-1: SerialNumber: syz [ 1647.120606][T18748] usb 2-1: config 0 descriptor?? [ 1647.556329][T18748] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1647.580346][T18748] usb 2-1: MIDIStreaming interface descriptor not found [ 1647.690142][T18748] usb 2-1: USB disconnect, device number 91 [ 1647.890433][ T1215] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1648.080925][ T1215] usb 4-1: Using ep0 maxpacket: 8 [ 1648.095379][ T1215] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1648.126413][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.174797][ T1215] usb 4-1: Product: syz [ 1648.182107][ T1215] usb 4-1: Manufacturer: syz [ 1648.201415][ T1215] usb 4-1: SerialNumber: syz [ 1648.659205][ T1215] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1648.692308][ T1215] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 1648.891555][ T1215] usb 4-1: USB disconnect, device number 90 [ 1649.826077][T29791] bridge0: port 4(erspan0) entered blocking state [ 1649.843848][T29791] bridge0: port 4(erspan0) entered disabled state [ 1649.896988][T29791] erspan0: entered allmulticast mode [ 1649.928909][T29791] erspan0: entered promiscuous mode [ 1649.948244][T29791] bridge0: port 4(erspan0) entered blocking state [ 1649.955353][T29791] bridge0: port 4(erspan0) entered forwarding state [ 1650.060621][T29794] erspan0: left allmulticast mode [ 1650.082154][T29794] erspan0: left promiscuous mode [ 1650.100231][T29794] bridge0: port 4(erspan0) entered disabled state [ 1650.509521][T18748] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1650.809456][T18748] usb 10-1: Using ep0 maxpacket: 32 [ 1650.818385][T18748] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1650.837728][T18748] usb 10-1: config 0 has no interface number 0 [ 1650.847129][T18748] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1650.862252][T18748] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1650.877314][T18748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.887736][T18748] usb 10-1: Product: syz [ 1650.892595][T18748] usb 10-1: Manufacturer: syz [ 1650.897513][T18748] usb 10-1: SerialNumber: syz [ 1650.907188][T22584] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1650.954867][T18748] usb 10-1: config 0 descriptor?? [ 1650.964197][T29802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1651.233103][T29803] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1651.333500][T18748] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1651.389972][T18748] usb 10-1: USB disconnect, device number 81 [ 1651.726667][T29814] netlink: 830 bytes leftover after parsing attributes in process `syz.9.6132'. [ 1652.018576][T29820] netlink: 'syz.9.6135': attribute type 1 has an invalid length. [ 1652.034281][T29820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1652.152043][T29822] netlink: 'syz.9.6136': attribute type 4 has an invalid length. [ 1652.211262][T29822] netlink: 'syz.9.6136': attribute type 4 has an invalid length. [ 1652.560488][ T1215] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1652.690836][T29829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1652.769558][ T1215] usb 10-1: Using ep0 maxpacket: 16 [ 1652.796188][ T1215] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1652.820309][ T1215] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.838825][ T1215] usb 10-1: Product: syz [ 1652.843979][ T1215] usb 10-1: Manufacturer: syz [ 1652.859194][ T1215] usb 10-1: SerialNumber: syz [ 1653.246662][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1653.301964][ T1215] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1653.822847][ T1215] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1653.961936][ T1215] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1654.058683][ T1215] usb 10-1: media controller created [ 1654.370234][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1654.474534][ T1215] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1654.924598][ T1215] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1654.966610][ T1215] usb 10-1: USB disconnect, device number 82 [ 1655.319236][ T1215] usb 10-1: new full-speed USB device number 83 using dummy_hcd [ 1655.499834][ T1215] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1655.583916][ T1215] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1655.654057][ T1215] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1655.694312][ T1215] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1655.726315][ T1215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.775455][ T1215] usb 10-1: config 0 descriptor?? [ 1655.840252][T29857] futex_wake_op: syz.8.6146 tries to shift op by 32; fix this program [ 1655.949732][T29857] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6146'. [ 1656.214496][ T1215] hid_parser_main: 4 callbacks suppressed [ 1656.214514][ T1215] corsair-psu 0003:1B1C:1C09.0051: unknown main item tag 0x0 [ 1656.231332][ T1215] corsair-psu 0003:1B1C:1C09.0051: unknown main item tag 0x0 [ 1656.269202][ T1215] corsair-psu 0003:1B1C:1C09.0051: unknown main item tag 0x0 [ 1656.304112][ T1215] corsair-psu 0003:1B1C:1C09.0051: unknown main item tag 0x0 [ 1656.346898][ T1215] corsair-psu 0003:1B1C:1C09.0051: unknown main item tag 0x0 [ 1656.416520][T29851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.431500][ T1215] corsair-psu 0003:1B1C:1C09.0051: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 1656.456980][T29851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.549398][ T1215] corsair-psu 0003:1B1C:1C09.0051: unable to initialize device (-90) [ 1656.615603][ T1215] corsair-psu 0003:1B1C:1C09.0051: probe with driver corsair-psu failed with error -90 [ 1656.669230][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1656.730373][ T1215] usb 10-1: USB disconnect, device number 83 [ 1656.982513][T18748] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1657.009518][ T5927] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1657.161160][T18748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 1657.172253][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 1657.182031][T18748] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1657.194574][T18748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.205989][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1657.217352][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.247388][T18748] usb 2-1: config 0 descriptor?? [ 1657.255131][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1657.266075][T29860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1657.283415][ T5927] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1657.309705][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.321800][ T5927] usb 4-1: Product: syz [ 1657.326093][ T5927] usb 4-1: Manufacturer: syz [ 1657.346184][ T5927] usb 4-1: SerialNumber: syz [ 1657.578589][T18748] ath6kl: Failed to submit usb control message: -71 [ 1657.616959][T29860] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1657.626911][T18748] ath6kl: unable to send the bmi data to the device: -71 [ 1657.654702][T18748] ath6kl: Unable to send get target info: -71 [ 1657.693408][T18748] ath6kl: Failed to init ath6kl core: -71 [ 1657.710077][T18748] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1657.754319][T18748] usb 2-1: USB disconnect, device number 92 [ 1657.814942][T21878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1657.827597][T21878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1657.839758][T21878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1657.848310][T21878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1657.856046][T21878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1658.169356][T18748] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1658.359478][T18748] usb 2-1: Using ep0 maxpacket: 8 [ 1658.367521][T18748] usb 2-1: config 1 has an invalid interface number: 126 but max is 0 [ 1658.376621][T18748] usb 2-1: config 1 has no interface number 0 [ 1658.384528][T18748] usb 2-1: config 1 interface 126 has no altsetting 0 [ 1658.394830][T18748] usb 2-1: New USB device found, idVendor=19d2, idProduct=0481, bcdDevice= 0.00 [ 1658.404613][T18748] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1658.413120][T18748] usb 2-1: Product: syz [ 1658.417588][T18748] usb 2-1: SerialNumber: syz [ 1658.476453][T29876] chnl_net:caif_netlink_parms(): no params data found [ 1658.565076][ T5927] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 1658.573631][ T5927] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1658.595823][ T5927] usb 4-1: USB disconnect, device number 91 [ 1658.686764][T29860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.724409][T29860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.765871][T18748] cdc_ether 2-1:1.126: invalid descriptor buffer length [ 1658.783402][T18748] usb 2-1: bad CDC descriptors [ 1658.811585][T18748] usb 2-1: USB disconnect, device number 93 [ 1659.092450][T29876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.143241][T29886] trusted_key: encrypted_key: insufficient parameters specified [ 1659.168210][T29876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.217824][T29876] bridge_slave_0: entered allmulticast mode [ 1659.313711][T29876] bridge_slave_0: entered promiscuous mode [ 1659.332961][T29876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.359696][T29876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.382341][T29876] bridge_slave_1: entered allmulticast mode [ 1659.431202][T29876] bridge_slave_1: entered promiscuous mode [ 1659.850016][T29876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.946264][T29876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.965405][T21878] Bluetooth: hci2: command tx timeout [ 1660.404772][T29876] team0: Port device team_slave_0 added [ 1660.413140][T29876] team0: Port device team_slave_1 added [ 1660.524824][T29876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.548322][T29876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.629633][T29876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.664710][T29876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.679422][T29876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.756404][T29876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.829935][T11663] wlan0: Trigger new scan to find an IBSS to join [ 1661.095483][T29876] hsr_slave_0: entered promiscuous mode [ 1661.130692][T29876] hsr_slave_1: entered promiscuous mode [ 1661.187733][T29876] debugfs: 'hsr0' already exists in 'hsr' [ 1661.207901][T29876] Cannot create hsr debugfs directory [ 1661.897432][T29912] kvm: pic: non byte write [ 1662.019412][T21878] Bluetooth: hci2: command tx timeout [ 1662.637647][T18748] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1662.863262][T18748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1662.887269][T18748] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1662.896647][T18748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.907180][T18748] usb 4-1: Product: syz [ 1662.912040][T18748] usb 4-1: Manufacturer: syz [ 1662.916666][T18748] usb 4-1: SerialNumber: syz [ 1663.864321][T22584] wlan0: Trigger new scan to find an IBSS to join [ 1663.943531][T29876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1664.075053][T29876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1664.099434][T21878] Bluetooth: hci2: command tx timeout [ 1664.101731][T29876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1664.134792][T29876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1664.340408][T18748] usb 4-1: current rate 47898 is different from the runtime rate 48000 [ 1665.113096][T18748] usb 4-1: USB disconnect, device number 92 [ 1665.129272][T29876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.235121][T29876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.314616][T27529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.321781][T27529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.424017][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.431210][T11674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.800017][T29981] loop8: detected capacity change from 0 to 8 [ 1665.901795][T29981] loop8: detected capacity change from 8 to 7 [ 1666.167267][ T8946] Dev loop8: unable to read RDB block 7 [ 1666.180659][T21878] Bluetooth: hci2: command tx timeout [ 1666.201404][ T8946] loop8: unable to read partition table [ 1666.239883][ T8946] loop8: partition table beyond EOD, truncated [ 1666.439850][T29985] bond1: entered promiscuous mode [ 1666.469384][T29985] bond1: entered allmulticast mode [ 1666.478224][T29985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1666.819281][T11674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.847800][T29981] Dev loop8: unable to read RDB block 7 [ 1666.859109][T29981] loop8: unable to read partition table [ 1666.865039][T29981] loop8: partition table beyond EOD, truncated [ 1666.889857][T29981] loop_reread_partitions: partition scan of loop8 (”Q˜y,øÿÿÿüFê¦)) failed (rc=-5) [ 1667.438997][T29876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.720505][ T5911] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1667.808802][T29876] veth0_vlan: entered promiscuous mode [ 1667.875223][T29876] veth1_vlan: entered promiscuous mode [ 1667.899141][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1667.905997][T29876] veth0_macvtap: entered promiscuous mode [ 1667.915688][T29876] veth1_macvtap: entered promiscuous mode [ 1667.971270][T29876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.998592][T29876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1668.037076][T11663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.081951][T11663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.173261][ T5911] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1668.173543][T11663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.255267][T11663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.349599][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1668.472718][ T5911] usb usb2-port1: attempt power cycle [ 1668.831885][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.842579][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.909555][ T5911] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1668.984291][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1669.259513][ T5911] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1669.300501][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1669.449785][ T5911] usb usb2-port1: unable to enumerate USB device [ 1671.907423][T30035] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1672.469608][T23325] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1672.498575][T11661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.534096][T11661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.605622][T11675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.623793][T11675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.719418][T23325] usb 4-1: Using ep0 maxpacket: 32 [ 1672.764278][T23325] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1672.834243][T23325] usb 4-1: config 0 has no interface number 0 [ 1672.893972][T23325] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1672.949953][T23325] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1673.015361][T30066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6150'. [ 1673.027654][T23325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.143090][T23325] usb 4-1: Product: syz [ 1673.234235][T23325] usb 4-1: Manufacturer: syz [ 1673.345669][T23325] usb 4-1: SerialNumber: syz [ 1673.431227][T23325] usb 4-1: config 0 descriptor?? [ 1674.550806][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1674.589422][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1676.960538][T30112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1677.021077][T30112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.510533][T30112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.719592][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 1679.771200][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 1679.809095][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1679.867035][T23325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 1679.909601][T23325] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -110 [ 1680.311319][T30172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6191'. [ 1680.886186][T30177] netlink: 'syz.8.6194': attribute type 10 has an invalid length. [ 1680.934948][T30177] veth1_macvtap: left promiscuous mode [ 1680.974693][T30177] team0: Device veth1_macvtap failed to register rx_handler [ 1681.470410][T17328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1681.496734][T17328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1681.523908][T17328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1681.540547][T17328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1681.551389][T17328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1682.184288][T30185] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6190'. [ 1682.259296][T11674] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1683.546163][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6197'. [ 1683.619439][T17328] Bluetooth: hci6: command tx timeout [ 1683.993979][T30187] chnl_net:caif_netlink_parms(): no params data found [ 1684.220264][ T5897] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1684.413469][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1684.444123][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 1684.469512][T28671] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1684.475599][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.517490][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1684.533611][T30187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.544394][ T5897] usb 6-1: string descriptor 0 read error: -22 [ 1684.559284][T30187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.566652][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1684.576160][T30187] bridge_slave_0: entered allmulticast mode [ 1684.592611][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.609260][T30187] bridge_slave_0: entered promiscuous mode [ 1684.632837][T30187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.649648][ T5897] usb 6-1: 0:2 : does not exist [ 1684.662811][T30187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.678045][T30187] bridge_slave_1: entered allmulticast mode [ 1684.699308][T28671] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1684.711709][T30187] bridge_slave_1: entered promiscuous mode [ 1684.738543][T28671] usb 2-1: config 0 has no interface number 0 [ 1684.807642][T28671] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1684.872431][T30187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.887648][T28671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.897398][T30187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.946413][T28671] usb 2-1: Product: syz [ 1684.992723][T28671] usb 2-1: Manufacturer: syz [ 1684.997378][T28671] usb 2-1: SerialNumber: syz [ 1685.051310][T28671] usb 2-1: config 0 descriptor?? [ 1685.056811][T30187] team0: Port device team_slave_0 added [ 1685.114936][T30187] team0: Port device team_slave_1 added [ 1685.307396][T30187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.334300][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.415654][T30187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.478582][T30187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.520842][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.583004][T28671] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1685.625637][T30187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.629122][T28671] usb 2-1: Firmware version (0.0) predates our first public release. [ 1685.708141][T17328] Bluetooth: hci6: command tx timeout [ 1685.735120][T28671] usb 2-1: Please update to version 0.2 or newer [ 1685.904168][T28671] usb 2-1: USB disconnect, device number 98 [ 1686.247247][T30187] hsr_slave_0: entered promiscuous mode [ 1686.274895][T30187] hsr_slave_1: entered promiscuous mode [ 1686.293649][T30187] debugfs: 'hsr0' already exists in 'hsr' [ 1686.351426][T30187] Cannot create hsr debugfs directory [ 1686.718924][T30253] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6201'. [ 1687.041619][ T5897] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1687.100953][ T5897] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1687.178748][ T5897] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1687.351618][ T5897] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1687.379579][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1687.481344][ T5897] usb 6-1: USB disconnect, device number 32 [ 1687.780273][T17328] Bluetooth: hci6: command tx timeout [ 1687.864119][T21878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1687.925574][T21878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1687.934562][T21878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1687.943757][T21878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1687.951456][T21878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1688.579217][ T5911] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1688.793273][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.859547][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.919127][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1688.986381][ T5911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1689.019654][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.065476][ T5911] usb 6-1: config 0 descriptor?? [ 1689.314257][T30297] kernel read not supported for file /sg0 (pid: 30297 comm: syz.1.6208) [ 1689.392191][T30277] chnl_net:caif_netlink_parms(): no params data found [ 1689.528508][ T5911] plantronics 0003:047F:FFFF.0052: item fetching failed at offset 5/15 [ 1689.560125][ T5911] plantronics 0003:047F:FFFF.0052: parse failed [ 1689.566544][ T5911] plantronics 0003:047F:FFFF.0052: probe with driver plantronics failed with error -22 [ 1689.796122][T30187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1689.854866][T30187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1689.869599][T21878] Bluetooth: hci6: command tx timeout [ 1690.019855][T21878] Bluetooth: hci4: command tx timeout [ 1690.097734][T18748] usb 6-1: USB disconnect, device number 33 [ 1690.107927][T30277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.171088][T30277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.226085][T30277] bridge_slave_0: entered allmulticast mode [ 1690.275285][T30277] bridge_slave_0: entered promiscuous mode [ 1690.341063][T30187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.378742][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.414017][T30277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.449367][T30277] bridge_slave_1: entered allmulticast mode [ 1690.488215][T30277] bridge_slave_1: entered promiscuous mode [ 1690.535622][T30187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1690.778115][T30277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.823887][T30277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.030421][T30277] team0: Port device team_slave_0 added [ 1691.121798][T30277] team0: Port device team_slave_1 added [ 1691.362938][T30277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.403620][T30277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.517395][T30277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.575188][T30277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.602202][T30277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.699558][T30277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.014942][T30277] hsr_slave_0: entered promiscuous mode [ 1692.049887][T30277] hsr_slave_1: entered promiscuous mode [ 1692.076282][T30277] debugfs: 'hsr0' already exists in 'hsr' [ 1692.099373][T21878] Bluetooth: hci4: command tx timeout [ 1692.106530][T30277] Cannot create hsr debugfs directory [ 1692.264830][T30187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.731606][T30187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.777943][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.785209][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.804943][T30344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6212'. [ 1693.036167][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.043306][T11675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.139636][T18748] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1694.179601][T21878] Bluetooth: hci4: command tx timeout [ 1694.315235][T18748] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1694.347214][T18748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.366951][T30187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.396613][T18748] usb 2-1: config 0 has no interface number 0 [ 1694.424359][T18748] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1694.463607][T18748] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.549324][T18748] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1694.570364][T18748] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1694.602297][T18748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.623851][T18748] usb 2-1: Product: syz [ 1694.641113][T18748] usb 2-1: Manufacturer: syz [ 1694.645769][T18748] usb 2-1: SerialNumber: syz [ 1694.688494][T30187] veth0_vlan: entered promiscuous mode [ 1694.695206][T18748] usb 2-1: config 0 descriptor?? [ 1694.846316][T30187] veth1_vlan: entered promiscuous mode [ 1694.880862][T30277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1694.927200][T30277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1694.940470][T18748] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1695.003558][T30277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1695.046317][T30277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1695.216103][T18748] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 1695.242670][T30187] veth0_macvtap: entered promiscuous mode [ 1695.282467][T18748] usb 2-1: USB disconnect, device number 99 [ 1695.311639][T30187] veth1_macvtap: entered promiscuous mode [ 1695.393532][T10989] udevd[10989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1695.418353][T30187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.508540][T30187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.564046][T11675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.574686][T11675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.617928][T11677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.634814][T11677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.884139][T30277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.027360][T27529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.046288][T30277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.062463][T27529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.171081][T27529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.178233][T27529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.241663][T11661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.251703][T11661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.263241][T21878] Bluetooth: hci4: command tx timeout [ 1696.463475][ T5897] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1696.634361][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.681276][T22584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.688408][T22584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.715371][ T5897] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 1696.757180][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 1696.827876][ T5897] usb 6-1: Product: syz [ 1696.866761][ T5897] usb 6-1: SerialNumber: syz [ 1696.937594][ T5897] usb 6-1: config 0 descriptor?? [ 1696.994133][ T5897] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1697.044847][ T5897] usb 6-1: Detected SIO [ 1697.082696][ T5897] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1697.237799][T30277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.429177][ T5897] usb 6-1: USB disconnect, device number 34 [ 1697.458897][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1697.522087][ T5897] ftdi_sio 6-1:0.0: device disconnected [ 1698.066604][T30277] veth0_vlan: entered promiscuous mode [ 1698.146804][T30277] veth1_vlan: entered promiscuous mode [ 1698.285514][T30277] veth0_macvtap: entered promiscuous mode [ 1698.327079][T30277] veth1_macvtap: entered promiscuous mode [ 1698.377456][T30277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.421912][T30277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.494132][T27529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.555503][T27529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.571634][T27529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.605056][T27529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.792459][T11674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.818482][T11674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.904167][T22584] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1698.941564][T11674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.959087][T11674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.627483][T21878] Bluetooth: hci1: command 0x0406 tx timeout [ 1714.261062][T22584] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1727.219262][T21878] Bluetooth: hci5: command 0x0406 tx timeout [ 1730.284633][T11674] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1730.310827][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.317194][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1745.619828][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1746.260008][T11661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1762.270348][T11674] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1780.955929][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 1781.007235][T30604] fuse: Bad value for 'group_id' [ 1781.012641][T30604] fuse: Bad value for 'group_id' [ 1781.020327][T30613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1781.399445][ T5927] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1781.569152][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1781.579647][ T5927] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1781.588734][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.635291][ T5927] usb 5-1: Product: syz [ 1781.664365][ T5927] usb 5-1: Manufacturer: syz [ 1781.696687][ T5927] usb 5-1: SerialNumber: syz [ 1781.737930][ T5927] usb 5-1: config 0 descriptor?? [ 1781.763855][ T5927] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1781.991230][ T5927] gspca_spca508: reg_read err -32 [ 1782.074132][ T5927] gspca_spca508: reg_read err -71 [ 1782.106508][ T5927] gspca_spca508: reg_read err -71 [ 1782.121150][ T5927] gspca_spca508: reg_read err -71 [ 1782.149169][ T5927] gspca_spca508: reg_read err -71 [ 1782.178922][ T5927] gspca_spca508: reg write: error -71 [ 1782.203181][ T5927] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1782.264335][ T5927] usb 5-1: USB disconnect, device number 69 [ 1782.649414][ T5927] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1782.909602][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1783.411325][ T5927] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1783.449037][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.469170][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1783.495220][ T5927] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1783.526249][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.549295][T17328] Bluetooth: hci2: command 0x0406 tx timeout [ 1783.555419][ T5927] usb 5-1: Product: syz [ 1783.579212][ T5927] usb 5-1: Manufacturer: syz [ 1783.599048][ T5927] usb 5-1: SerialNumber: syz [ 1784.113766][ T5927] usb 5-1: 0:2 : does not exist [ 1784.341281][T30603] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1784.799991][T30650] xt_policy: output policy not valid in PREROUTING and INPUT [ 1784.828313][ T5927] usb 5-1: USB disconnect, device number 70 [ 1785.005875][T30609] udevd[30609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1785.119195][ T5911] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1785.379510][ T5911] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1785.425583][ T5911] usb 6-1: config 0 has no interface number 0 [ 1785.597812][ T5911] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.709356][ T5911] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1785.762151][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.842115][ T5911] usb 6-1: Product: syz [ 1785.872610][ T5911] usb 6-1: Manufacturer: syz [ 1785.929148][ T5911] usb 6-1: SerialNumber: syz [ 1785.981213][ T5911] usb 6-1: config 0 descriptor?? [ 1786.048771][ T5911] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1786.914317][T23325] usb 4-1: USB disconnect, device number 93 [ 1787.019163][ T5927] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1787.209564][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 1787.215217][T30654] could not allocate digest TFM handle md5-generic [ 1787.238179][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.265961][ T5927] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.294911][ T5927] usb 2-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 1787.308341][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.325041][ T5927] usb 2-1: config 0 descriptor?? [ 1787.389464][ T1215] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1787.513083][T30699] trusted_key: encrypted_key: insufficient parameters specified [ 1787.584844][ T1215] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1787.629562][ T1215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.653832][ T5911] usb 2-1: USB disconnect, device number 100 [ 1787.687881][ T1215] usb 5-1: config 0 has no interface number 0 [ 1787.713217][ T1215] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1787.752963][ T1215] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1787.828925][ T1215] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1787.866104][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.896624][ T1215] usb 5-1: Product: syz [ 1787.916104][ T1215] usb 5-1: Manufacturer: syz [ 1787.931317][ T1215] usb 5-1: SerialNumber: syz [ 1788.410249][ T1215] usb 5-1: config 0 descriptor?? [ 1788.848546][ T1215] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1788.888758][ T1215] usb 5-1: USB disconnect, device number 71 [ 1789.761639][T30730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1791.709645][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.716018][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.181295][ T1215] usb 6-1: USB disconnect, device number 35 [ 1792.256750][ T1215] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1792.640481][T30760] kvm: pic: non byte write [ 1792.716719][ T30] audit: type=1326 audit(1773133352.326:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30763 comm="syz.2.6254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1abf9c799 code=0x0 [ 1793.105103][ T30] audit: type=1326 audit(1773133352.696:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.208056][ T30] audit: type=1326 audit(1773133352.706:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.322089][ T30] audit: type=1326 audit(1773133352.906:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.408518][ T30] audit: type=1326 audit(1773133352.906:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.496010][T30777] netlink: 'syz.1.6257': attribute type 3 has an invalid length. [ 1793.531332][ T30] audit: type=1326 audit(1773133352.906:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.552752][T30777] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1793.688051][ T30] audit: type=1326 audit(1773133353.016:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.814230][ T30] audit: type=1326 audit(1773133353.016:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1793.949137][ T30] audit: type=1326 audit(1773133353.016:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1794.079395][ T5927] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1794.123757][ T30] audit: type=1326 audit(1773133353.346:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f0f9c799 code=0x7ffc0000 [ 1794.260302][T11661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1794.313114][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1794.339809][T23325] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1794.343236][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1794.391373][T30805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6263'. [ 1794.400827][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1794.429636][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1794.461174][ T5927] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1794.489405][ T5927] usb 6-1: Manufacturer: syz [ 1794.503116][ T5927] usb 6-1: config 0 descriptor?? [ 1794.519978][ T5927] smsusb:smsusb_probe: board id=9, interface number 0 [ 1794.544630][ T5927] smsusb:smsusb_probe: Device initialized with return code -19 [ 1794.566319][T23325] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1794.645605][T23325] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1794.730752][T30788] netlink: 'syz.5.6259': attribute type 9 has an invalid length. [ 1794.799396][ T5927] usb 6-1: USB disconnect, device number 36 [ 1794.872081][T23325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1794.950314][T23325] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1795.068154][T23325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.107270][T30817] PKCS8: Unsupported PKCS#8 version [ 1795.128126][T23325] usb 2-1: config 0 descriptor?? [ 1795.379463][ T5927] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1795.574588][ T5927] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.625730][ T5927] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1795.672524][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1795.704939][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.737046][ T5927] usb 5-1: Product: syz [ 1795.758127][ T5927] usb 5-1: Manufacturer: syz [ 1795.786274][ T5927] usb 5-1: SerialNumber: syz [ 1795.862609][ T5927] cdc_mbim 5-1:1.0: skipping garbage [ 1796.061129][T30817] netlink: 'syz.4.6264': attribute type 1 has an invalid length. [ 1796.150902][T30830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1796.162658][T30817] netlink: 'syz.4.6264': attribute type 1 has an invalid length. [ 1796.654876][ T5927] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 1796.670687][ T5927] cdc_mbim 5-1:1.0: bind() failure [ 1796.714836][ T5927] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1796.764441][ T5927] cdc_ncm 5-1:1.1: bind() failure [ 1797.124365][T30850] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6268'. [ 1798.270799][T23325] usbhid 2-1:0.0: can't add hid device: -71 [ 1798.305719][T23325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1798.372835][T23325] usb 2-1: USB disconnect, device number 101 [ 1798.734627][T30859] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6269'. [ 1800.022192][ T31] INFO: task syz.7.6101:29701 blocked for more than 143 seconds. [ 1800.052319][ T31] Tainted: G L syzkaller #0 [ 1800.058897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1800.089080][ T31] task:syz.7.6101 state:D stack:28160 pid:29701 tgid:29696 ppid:19035 task_flags:0x400040 flags:0x00080002 [ 1800.129083][ T31] Call Trace: [ 1800.132432][ T31] [ 1800.135396][ T31] __schedule+0x15dd/0x52d0 [ 1800.152635][ T31] ? __pfx___schedule+0x10/0x10 [ 1800.157581][ T31] ? schedule+0x90/0x360 [ 1800.179631][ T31] schedule+0x164/0x360 [ 1800.183871][ T31] schedule_preempt_disabled+0x13/0x30 [ 1800.199607][ T31] __mutex_lock+0x7fe/0x1300 [ 1800.211027][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1800.215860][ T31] ? usbdev_open+0x182/0x770 [ 1800.239670][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1800.244770][ T31] ? bus_find_device+0x27d/0x2d0 [ 1800.289403][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1800.294775][ T31] ? usbdev_open+0xa7/0x770 [ 1800.383251][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1800.388898][ T31] usbdev_open+0x182/0x770 [ 1800.479088][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 1800.484914][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1800.552335][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1800.557542][ T31] chrdev_open+0x4cd/0x5e0 [ 1800.619203][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1800.624230][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1800.656135][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1800.679432][ T31] do_dentry_open+0x785/0x14e0 [ 1800.684294][ T31] vfs_open+0x3b/0x340 [ 1800.688410][ T31] ? path_openat+0x2df0/0x3860 [ 1800.739200][ T31] path_openat+0x2e08/0x3860 [ 1800.743890][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1800.791571][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1800.797126][ T31] ? __pfx_path_openat+0x10/0x10 [ 1800.831614][ T31] ? __x64_sys_openat+0x138/0x170 [ 1800.836719][ T31] ? do_syscall_64+0x14d/0xf80 [ 1800.859005][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.865256][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1800.909765][ T31] do_file_open+0x23e/0x4a0 [ 1800.914362][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1800.943905][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1800.948842][ T31] ? alloc_fd+0x64b/0x6c0 [ 1800.979012][ T31] do_sys_openat2+0x113/0x200 [ 1800.983884][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1801.019266][ T31] ? kfree+0x4d/0x630 [ 1801.023764][ T31] ? rcu_is_watching+0x15/0xb0 [ 1801.028605][ T31] __x64_sys_openat+0x138/0x170 [ 1801.079104][ T31] do_syscall_64+0x14d/0xf80 [ 1801.083771][ T31] ? trace_irq_disable+0x3b/0x150 [ 1801.088845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.139156][ T31] ? clear_bhb_loop+0x40/0x90 [ 1801.143916][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.189083][ T31] RIP: 0033:0x7f7f0855cfce [ 1801.193571][ T31] RSP: 002b:00007f7f06390b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1801.239098][ T31] RAX: ffffffffffffffda RBX: 00007f7f063916c0 RCX: 00007f7f0855cfce [ 1801.247148][ T31] RDX: 0000000000041301 RSI: 00007f7f06390c00 RDI: ffffffffffffff9c [ 1801.309034][ T31] RBP: 00007f7f06390c00 R08: 0000000000000000 R09: 0000000000000000 [ 1801.317078][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1801.387294][ T31] R13: 00007f7f08816308 R14: 00007f7f08816270 R15: 00007f7f0893fa48 [ 1801.419229][ T31] [ 1801.441149][ T31] [ 1801.441149][ T31] Showing all locks held in the system: [ 1801.529147][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1801.534945][ T31] 1 lock held by khungtaskd/31: [ 1801.562060][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1801.589182][ T31] 2 locks held by getty/5583: [ 1801.593919][ T31] #0: ffff8880325710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1801.649197][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1801.689070][ T31] 2 locks held by kworker/1:5/5927: [ 1801.694330][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1801.749013][ T31] #1: ffffc900044c7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1801.779273][ T31] 6 locks held by kworker/0:2/22149: [ 1801.784614][ T31] 3 locks held by kworker/u8:1/22581: [ 1801.809070][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1801.859151][ T31] #1: ffffc90005a17c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1801.909883][ T31] #2: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1801.949065][ T31] 5 locks held by syz-executor/29049: [ 1801.968998][ T31] #0: ffff8880a450cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1802.001153][ T31] #1: ffff8880a450c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1802.029524][ T31] #2: ffffffff8fd595e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1802.069053][ T31] #3: ffff888011ffdaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1802.078556][ T31] #4: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1802.149745][ T31] 2 locks held by syz-executor/29073: [ 1802.155181][ T31] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1802.201569][ T31] #1: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1802.239662][ T31] 1 lock held by syz.7.6101/29701: [ 1802.244909][ T31] #0: ffff88823bee0998 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1802.284977][ T31] 3 locks held by syz-executor/29866: [ 1802.319099][ T31] #0: ffff88808fcd4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1802.349353][ T31] #1: ffff88808fcd40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1802.379177][ T31] #2: ffffffff8fd595e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1802.409143][ T31] 1 lock held by syz-executor/29876: [ 1802.414489][ T31] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1802.449333][ T31] 2 locks held by syz-executor/30174: [ 1802.455230][ T31] #0: ffff8880a7524ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1802.499115][ T31] #1: ffff8880a75240c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1802.508877][ T31] 1 lock held by syz-executor/30187: [ 1802.549281][ T31] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1802.558782][ T31] 3 locks held by syz.4.6264/30841: [ 1802.589518][ T31] #0: ffff88807d9c8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1802.619124][ T31] #1: ffff88807d9c80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1802.628904][ T31] #2: ffffffff8fd595e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1802.689250][ T31] 6 locks held by cmp/30898: [ 1802.693950][ T31] [ 1802.696314][ T31] ============================================= [ 1802.696314][ T31] [ 1802.738998][ T31] NMI backtrace for cpu 0 [ 1802.739027][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.739056][ T31] Tainted: [L]=SOFTLOCKUP [ 1802.739064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.739076][ T31] Call Trace: [ 1802.739085][ T31] [ 1802.739095][ T31] dump_stack_lvl+0xe8/0x150 [ 1802.739131][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1802.739232][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1802.739263][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1802.739292][ T31] sys_info+0x135/0x170 [ 1802.739314][ T31] watchdog+0xfd9/0x1030 [ 1802.739351][ T31] ? watchdog+0x21a/0x1030 [ 1802.739389][ T31] kthread+0x388/0x470 [ 1802.739411][ T31] ? __pfx_watchdog+0x10/0x10 [ 1802.739439][ T31] ? __pfx_kthread+0x10/0x10 [ 1802.739461][ T31] ret_from_fork+0x51e/0xb90 [ 1802.739492][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1802.739517][ T31] ? __switch_to+0xc7d/0x1450 [ 1802.739571][ T31] ? __pfx_kthread+0x10/0x10 [ 1802.739592][ T31] ret_from_fork_asm+0x1a/0x30 [ 1802.739639][ T31] [ 1802.739739][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1802.857249][ C1] NMI backtrace for cpu 1 [ 1802.857276][ C1] CPU: 1 UID: 101 PID: 22461 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.857300][ C1] Tainted: [L]=SOFTLOCKUP [ 1802.857306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.857316][ C1] RIP: 0010:__lock_acquire+0x568/0x2cf0 [ 1802.857343][ C1] Code: 27 90 e8 db 9f 09 03 85 c0 74 1c 83 3d 94 2e 70 0e 00 75 13 48 8d 3d 07 4f 73 0e 48 c7 c6 99 13 01 8e 67 48 0f b9 3a 90 31 c9 <0f> b6 81 c4 00 00 00 84 c0 0f 84 77 ff ff ff 41 0f b6 f4 0f b6 d0 [ 1802.857358][ C1] RSP: 0018:ffffc9000c34f3d0 EFLAGS: 00000006 [ 1802.857374][ C1] RAX: 0000000000000578 RBX: ffff88802d8f8ba0 RCX: ffffffff93c4a988 [ 1802.857387][ C1] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000000000000000 [ 1802.857397][ C1] RBP: ffff88802d8f8bd0 R08: ffffffff823c1eb4 R09: ffffffff8e75e3e0 [ 1802.857409][ C1] R10: dffffc0000000000 R11: fffff94000576b51 R12: 0000000000000004 [ 1802.857420][ C1] R13: ffff88802d8f8bd0 R14: ffff88802d8f8000 R15: 0000000000000001 [ 1802.857432][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 1802.857446][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1802.857458][ C1] CR2: 000056194f275660 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1802.857474][ C1] Call Trace: [ 1802.857482][ C1] [ 1802.857490][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1802.857514][ C1] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 1802.857537][ C1] ? pfn_valid+0xba/0x480 [ 1802.857555][ C1] lock_acquire+0xf0/0x2e0 [ 1802.857574][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1802.857591][ C1] ? pfn_valid+0xba/0x480 [ 1802.857607][ C1] ? pfn_valid+0xba/0x480 [ 1802.857623][ C1] page_table_check_clear+0x164/0x5f0 [ 1802.857640][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1802.857655][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1802.857671][ C1] ? vm_normal_page+0x10d/0x240 [ 1802.857691][ C1] unmap_page_range+0x33d9/0x48f0 [ 1802.857725][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1802.857747][ C1] ? mas_find+0xb0e/0xd30 [ 1802.857770][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1802.857789][ C1] unmap_vmas+0x48f/0x6a0 [ 1802.857812][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1802.857838][ C1] exit_mmap+0x280/0xa10 [ 1802.857854][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1802.857878][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1802.857904][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1802.857926][ C1] __mmput+0x118/0x430 [ 1802.857947][ C1] exit_mm+0x168/0x220 [ 1802.857963][ C1] do_exit+0x6a2/0x23c0 [ 1802.857981][ C1] ? __pfx_do_exit+0x10/0x10 [ 1802.857995][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1802.858015][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1802.858037][ C1] do_group_exit+0x21b/0x2d0 [ 1802.858055][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1802.858071][ C1] x64_sys_call+0x221a/0x2240 [ 1802.858093][ C1] do_syscall_64+0x14d/0xf80 [ 1802.858108][ C1] ? trace_irq_disable+0x3b/0x150 [ 1802.858130][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.858146][ C1] ? clear_bhb_loop+0x40/0x90 [ 1802.858164][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.858179][ C1] RIP: 0033:0x7fdf4e8946c5 [ 1802.858193][ C1] Code: Unable to access opcode bytes at 0x7fdf4e89469b. [ 1802.858202][ C1] RSP: 002b:00007ffde06d30b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1802.858218][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdf4e8946c5 [ 1802.858230][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1802.858241][ C1] RBP: 00007ffde06d36c8 R08: 000056194fd782c0 R09: 0000000000000002 [ 1802.858252][ C1] R10: 0000000000000310 R11: 0000000000000206 R12: 00007ffde06d3100 [ 1802.858271][ C1] R13: 000056194fd798a0 R14: 00007ffde06d3340 R15: 00007ffde06d30f0 [ 1802.858289][ C1] [ 1803.149026][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1803.149050][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.149078][ T31] Tainted: [L]=SOFTLOCKUP [ 1803.149086][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.149098][ T31] Call Trace: [ 1803.149107][ T31] [ 1803.149117][ T31] vpanic+0x56c/0xa60 [ 1803.149151][ T31] ? __pfx___schedule+0x10/0x10 [ 1803.149186][ T31] ? __pfx_vpanic+0x10/0x10 [ 1803.149220][ T31] panic+0xc5/0xd0 [ 1803.149244][ T31] ? __pfx_panic+0x10/0x10 [ 1803.149271][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1803.149326][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1803.149355][ T31] watchdog+0x1023/0x1030 [ 1803.149388][ T31] ? watchdog+0x21a/0x1030 [ 1803.149422][ T31] kthread+0x388/0x470 [ 1803.306457][ T31] ? __pfx_watchdog+0x10/0x10 [ 1803.311155][ T31] ? __pfx_kthread+0x10/0x10 [ 1803.315756][ T31] ret_from_fork+0x51e/0xb90 [ 1803.320359][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1803.325479][ T31] ? __switch_to+0xc7d/0x1450 [ 1803.330163][ T31] ? __pfx_kthread+0x10/0x10 [ 1803.334763][ T31] ret_from_fork_asm+0x1a/0x30 [ 1803.339550][ T31] [ 1803.342879][ T31] Kernel Offset: disabled [ 1803.347198][ T31] Rebooting in 86400 seconds..