last executing test programs: 11m9.02817524s ago: executing program 2 (id=1116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4024e3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x410480, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82928167e19dc77f, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x60100) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x600e82) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x14) 11m5.956651174s ago: executing program 2 (id=1124): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x15}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec180000060a0b04000000000000000002000000c0180480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000000020000000a0001006f776e65720000003800018007000100727400002c00028008000240000000020800014000000014080001400000000a080002400000000108000240000000000c0001800700010072740000381801800a00010072616e676500000028180280441004800410010005962c100356ed69d838dfe9f911d0c2d22748aa21150c9e20a5546364402d074628a28cccbe047e0489aaf5f1e11e68383a2c048bb21539cfb5aa6b8742378a50adee4cefa910a655dfd5e246e7eeed67b4ec0230bbd9f06ceafa0939255fd8172c3931c10ef37cf85fd984476689d32c329c2a0b17648166651d8f58f876ed8302b77a3fc39bdc830d71bb39e613cda9e2971df443dde2d858c5c20024a7e13828e2882a4249e5febe3a1b06948152e7e2062d07be2d36008d4d4af3dd26d5ccf3bffcd844e8564096e31c2fd48157767e9b1dd481c2ffaed6393651332f0d9ed4ec042941def789a605126269576786252867af79f6e963bb2b4ab70e1f0b5c54f772104e4c36b1e77b4d38189557607eb673d8b6d5c18c844294541a458f7dbd8eae6fa0598665b34a55da6ba158d8ba9d4fcbbc9d3abd134eccd702daf46f17893d77b4e32f78b56cde2a6fe3764f58c55e6f6e5de59c24c0d8875ba4079565023f69c254015b7193b0924f0874bee7c089895852ab9f2946f2ffb47755371e22b937cd35fc03496fd7ee79d1cd98086b7525d682fe4a621f461b2cedae6e2046d76affe72e7ed340bf4414758690d733a1f0ee49f704ba26f1d0c6b9a9d04807f1aced0530a9faba539c85c870558496282db8b674a21b99cab5519f265b295e663507ade444b5bcabe6fa306e5179a62c911d162bc7b30ab3333bedf6133ea73d01875a3986605088c0af13b39fd09ebfa106617dce8b23aefaefb7deb3af4950e4b3d4b88ecc81d808589967b5519a482ff7f53f4ab76825af49f23f1c9e8dd71bcc457b727c1da5545e621c17e7fbc30bf048796815203f7778b2e90d7c68c8b45cd7361e7c0db9ea571e772fdd102455756175a6afd4f7f1bf574e9d60738c478dd65635491f38d31d1daf8f6323ad6c4c0704b2adb5f6192504217b86555b1e367cd8de2044662e091a54625a22769344ef541978dd7ae4a4ed8db2c908f5afe46a4256de3e6d585a99e5dc6c731308106e6c95c689124b12724b730cfed5ecc894398213d6d2b0c81e4808f24753a913ea853d0a78bdcf8edb68963402d16fda0215ea01cf1148b58ed4d8196baffc2fbe5ac7d4ab4465e785e0a65fcc76048a5ca113b1a853827b462e5d4fcc1ed1a6b3828ec803d30b3765383ba156c4890eee7fe64fcacb8e07b1796444063c5111b6a9379ec7d5b4746abe700f590c125827fa60e36258580dcf1367c3ef407f8a1d64ba611062d42fe79c34be8b7fc5aefcc728f104af6392182f093ab03e49e4c8936a8316f63bad118cc719a19a62507b7fb91e8ce065fd9c547940e5c4c97c1c19fc9ef9cbc2d211afba659a8c39e7464ac5ac286fcaed19ab747352914d02900a6b9dd03e22cfafd104fe25aae03d0d71b5059d778c1de00b54de8124ab6fc7df9ba15af2fe9e778d694ec9b152914268597dcabcd145146b3fcad5f2bfb8d107d010f39fd7015e5e1de00a179c01606754822747c92d57db653c87fa2fbafeffbdac7c5da421a1a158bbb502257e8bf7384a73eace3ba6b7b1e2cde7e1a03ab532f103fe077bfec4b70c8208c4ab4b3d0a87268785c828098e0ecefa1274d5f58583915d480fec83c2b113d4f45342ac313c3919ba6e979cedcf07bb76baee467e9117b4f955d134ce9612cc0b8f603b1088296b549dc92873c2ddac8baac9e494da5e035818e6a9d0e1099a21a1b23a950a58e323e04a418cca8aef019a5decfa9aa4192f213cb60ce8009a1f2358c5538bd6a35b3f7e3f3427ac92f7e842bf1e6bfcb79d913e5b91aa3aa05b2847a5ffe00888fb19f2d9e78cc45df642e55be037f8ae61bfd2c63547bf85d72afa28e50f7e4bf971e63bca90f313280b6ef62dde95735a3c79cbe8641174c3c4f48012947f2d25c36aa9939f0f5f151004c802b0074278aaa43debb4b33cc2e4b625b702024cb39550d7de22bb7f3782061311b5cc8b6e0ba8ce695b85d2846f16e9a72ed614d88e3e49d28fd0e47ba7d6d1743510445120a6d23d449391c96539d596495ca5bcaace3679d4d363dec23897d9d75ddedfbe5c3a38cdceef05b2a429c8f733b611282b4e6dc02289243e056d9ca66d2d120a7d7fff18494f9efd6285deff4a07ac475145f1bc27497fe8b7c2496a8211516dcc4658d6c10fe27367fbdeaa4b62b539e5b79c776e031c77414443f8abca5a0dc8ac3f8218fe453c8dab0808a7c29c7b6a473a87d90c87673466c5b54da11ba942ea3af03bd451357c23fbcb5621903a47ceaa6a89bde38aa490226c867ecb9c50d4f85d5161f058785d46cc6dd9888c15e307c1a673f594eb8635aaa1d94d12f36db7e83a578097e95b9538fc95b9c6e60e0bf055b58d836ed396238b7b357a3096058791f663069f0e1ce71fde80f7d858b50b2b7531041b6cc69a476321ba6e8542fbdc970f29ff421f005ee3a607c8eb4806c8e163dba82aad59547bc6feabed00819416dd66eb37a9d5bf289ba9a76a4e06d3bf0a8d44e116f5b4435d7e7b1fdc038933d9df24c74a72d5d7af1a96400835834db9ab57fcd53caea37a9ce2b698a6118fa4ceb2d74f9cdbcfaba54f5576c9711a99a2298746ac22d6e3d83176303a22f830df2c88f29c59a9e199e87612e78232bc93f59b8ff783f3b3ce96d978e40ae4e52a2fa3702bf58297be763861bdbb47a3d6b458953e7bcf985b534a2bc6467e9df0bcd095b4f69b4a344ebefeabfc6263ee8d16392aab57d23391ce721d64197a810481671551b13ea024c43514e6a70667cea1bf242a97882434c30c6948ee59e729d36ec9e6faf871914ca8fe7a1419153c11f8eb8bcdee4fd63246ced94c5179c44f58836e2d0a04477e7dd16610beb3385f6cb91a1049417ce5afe2989d254363db2a729b70ee2bb4f4f4b06667f51277fd9fa850b5960c54ce0dd72488005ed51ff409f3c0cba6ea5076ba2f35ceaa3b4e7ebcc9eeda28244e6dc0191018fb27078790b4cf1d351d22335884a2e1e7a176f274adaa16addf404dd3f665a5248ed346da5a382d99853250e7e8265c276e739c1cf5508f5f6bb6ba7abb00833081bc613c00174a03a28dd204d3cee5d2578286e25511448c1f88af397f4d98df1289e28f4c3b9119013c38fbdb47a41e1127eeed931d4e8f741c218776d7ff7ec5146d2cfdb2249e083b85b3dc3d83446e5f7d10a2340decdf4935e256fbac0370d249f4814593d45de2229c8366d0c04c5b73e4ffa4a73a9b4d060fc7c9165ec254478c989b08219932f0da57c9a140b0297571d6bc2a5db1f7f0d0477590f45596fdfe8bf7bd5ff79dd5d5b88863a88982794884b9be7793ebd10bd10c9cbae1e5243de5649881937355407f249d5ddc3efd3bd4114d9954fa25bc8b5d8205afece8c84b5dc5adeee875d021b010fd21640ff57ed4d410501dd861778cf50efebe1078eba0f5deb5e27f2c9454a2acb8c8698412e4ef7b79d3c7f5fd04ad125a491edf8c36ab2d03316f316c3ce18d7ba1816583ff0928f37a2043dfc072d3c28252e3702bdbc5c7d6d9dcce19adb3d75a53e9fb960d78e93302cc31792d3f15031374abed685baadef43245b9ea3a1aaafcf54b537825a3cf0087b5fee8d541b471c4963d44cbfed161edb6ce31e5008178712421c03ce5a69b39c9b0b1ca131ff35c6ccf2ebcaa59f56ae4618bcd054d8189cb794694913d6cae220a0128f8e106e7768ebe06f511bc371b90bfd4194e9e3f4e2ea614674255eddda568013806b198abc23d018d48aa8c23806ff9034f94397de26a1a7bfbbf9a59210ee51d156e02b5497abf60c6d807974637305d7d7bd966c5c8192d22a2993cad4fcab43f581d5330190d9eac2b4b97dfeb4f884cbecc89a2e48b6d5105669612607060c17cdb9db0998f5a436108693ce8e1475e9e4833ff8b477b815095dd524a2f70389753004599b005bc38d69a164b84c29be66885f07a88e35917747fdd99fdc3fc3a4830dd6c7a62dccbdbcf591cfafd30a205e1e5cdb9e72058d7c4b64df7fa6eae762448bfc8786a5977764cf41f29912f959079bb0e05e03c4c669065fb9f4f4103cf5f4ea477b4daf015f3ca4e846bc6058c1dc85953fb20830132ee822861da37da574f3f47581dacb77fe5182aae788755d620eef97e19f202b475c48f014d1f303b4161b750d17822bdca9768965ef2bc74c10eaa31d2aa133300191682bb603eff475b8d836322bdda0a2c08b27a2d2fa0c96e08c469b7a919e49b3c7115092a4e4fd273e3212716a70f82d570b7faaf72c1e9ad33a5d9955f4be79f58d78ae828de4029fbaee5e97fff02f8d9bda938f0c11384cdb136da4828a6cde17a729f311d7eb9538b83b1616b149f4461bd483a0560f4831fab9c412dde7d4f131230bdaa958fc1fd26f1726a24524d57a90c32c0a9fc7b368af1a38c09233d05db83f9d566ecfa12810551cb7fa69c448d564885f174773b90eefdc80c03f6305d43d0e8c72bb5e9d7523217ee04a1d2fe589a9335e6e291e65c694af9371e0ae4578492ca48eee9fe538d827b11118b199977cfd29f24fff38224e5c2796e7ed4817a7ab61f6769ed3ad3071a67b5c1098fe414ae9ee27141c725db4333ba4b26ef6ca257b6b2508c371812e7ead0aa93ec9468cbce337d7b48248d2c9743736c442a3121b0853a3c1fcc8fa8641a313d50b1420c63cb94ea923949b44250f711da51fd5fc0b0194815c698b1f38bae041583bc8bcfbfb9229512d1cbd61b20ff6ee1c960a3568c89e78423753d1b984712bb042516df57da793ca2db5de9a157efa6e3c6653551d1a13d274fa40aa68bcbfe82b9bf046f925f9e4e8e7ce0e4756bc3c2e7ce3f530bea0af8c53ca5fb1242108ad0e7838dad8d9f29125cb217f74718630c9f3f5907325189738a67b49b5e129298ab843a4f8fb88922ca53145a79e71b46867a1414e64d726a2d40730af24ad4ceb240eb6a1f2956307b42ec9c61de245b06bb8e28c0ad3e06f1ab42a1fc105b9bd6d0a45240addda2e938efdbce2df6201c9faba03813bcf5c3f6352fe00539dc53822f4e6f1fe6a62b1f7b703c970dcf8fc6ee52c59d665166bd7d27b1a4bf05242967c262fa61d4220895d9536556306ef1e6cfcaa594a63c8d15d0712fcb7693492f21e8326cc2cd14a68170f1fc2e21c5c54159783f9ab41a93d947b0b96793166b2c19cae3f5301f7c45bde97c3c0c4b8821f3cab3edd3de9e2cb07123b76aedeaef4d18e9751550b82ccfeca51992e4aa7f20f8c37c5fb45c232a07c15f87d6ca4aaabf5aacb19042379533787f93bd0640a05a382fbe0fe16ba2ffd98fbec20a0212af5975605d9db6dbda11ff839b173d9c37175ad14e404436f4140a3d97a1ea910aa67624fb9099258fdba38abfcef8e0c328eeb4745289529d0096441b932ec41ed5366341cbb7aa5bbc5843bc706a2277394d5bec290a545146abb20007b578a1e0990cb2e36d9354fc76b874b59edb74e14ca4cd9b816ebc302463ec6c2ff457d22ce9affa5afaa3517cfcce854eee78dbd0ddff52f632b2fd5ffab6af577aa22c81ebac2b6e2b45107a17ad5f80f2b17bd681df2492c979744cfbc66d1d33c4968908f3de0c0e7ad2c70ef676d274708d2791ad97cae7d412bcf9e9be23bbc3d32165010b4bca0dce2694d9a76b88d20effb6571c0e3517ec3883034f65deefe8b40fa2854d2e65e6a7cf11cef40d0b75961b5b70dfc765abf9831149a5dcc649740ce845875c9901b34a969ed43c1b7e31ddd897eeabb8288628c53c000280080003400000000208000180fffffffd080003400000000308000180fffffffc080003400000000308000180fffffffb08000180000000030800024000000000d002048044000280080003400000000308000180ffffffff080003400000000308000340000000030800034000000002080003400000000308000180fffffffb0800034000000003400002800900020073797a300000000008000340000000020900020073797a3000000000080003400000000108000180fffffffc0900020073797a32000000000c00028008000180fffffffca1000100a043a928690c708f1df9888914e1499396c72fc220102c222437bb432e05b0b7e998a303233471ca4afda2491a5c4329d5ade960138e2898127fad0bb06cc3c8abd37903d08cbf7ffd83e9e4082bbbd2092ccccdd5e7786f59937a911555a8b974a7cb3fd71dfa07affa2169573d51c317e7b0d7eed68a361b8cc3606f973f6da82279f31962c4e0d3eb348e2c9e8016d57a004522d667320e6103a9580000002e0001006b7a98263328440dcfaa118a8f95f453821178bef38e56ed34968c07d6e0b0105b8e2d61bab943fde9310000540002800800034000000002080003400000000408000340000000040800034000000004080001800000000008000340000000040900020073797a32000000000900020073797a310000000008000180ffffffff60000100bbbf9393e49fa09da846887163d7b1f2ccb3170e6a4f9e6cc945d0f2558e430b02be5455498a121fdf624958e95980b0cd8083dd67d6503b0aa564c4923197dfbb3fa07206119e68e9940ea28f68ec360a7b9ad1b9894c1a5d8724ac280002800900020073797a300000000008000180fffffffe08000180ffffffff08000180ffffffff5300010069034d2725bf14e3478a0f75071c5c4f533cdc2a187262ecd8f27332551a518cfbdbf4e7a069cb1dbba13d4668e5f2a60b87b05abbb2084579f1e342a10b7f5efb4cf9502061d6babe86fd503c315500370001000473c0f7b8a0f72a69616a9155bff65a4966865a531712ab3753b4ec468bf9fda28688b15bf3c0828d67f2b6d5e5e1b6b224b90008000140000000155c030380f8000100038786b4331b61d029539dcd10bec20d81e92f4ebff3e9cdbb48486eb9e70753093ae261cc71fe9e80fd2ab591e6b7685323e9455029efaa426b0dc87f6dd9658f7f25d7ddfa8f37357b71154c44ea880e96d55f4bc8d58b8e61824d3c2248c175045ba073c60b648a7495361172aee99c72bdb51909deaa1867fddd0febf78531df5e59ae136a238c010649ec23f47e3693c5b190f9a3fe6edbb9cb90fe8e8d71d5958473bde002b09fde886f778853e7ecfa29ca9458ed24bc9bf9fcede6ca0b1fe643e0b98215c61c457c32b4850f8e2bc0f668417206d051e977c840139614fcdd4ef96fb3c2d42e64098c21be5980cf1f0e0c00028008000180fffffffb8f00010092600ca210f46dc1ce204b931329bfb580e261d23b3d259dec86a986809aec64ab76667dfd4537454be06b6c62cbe913951c07dc59fbd6f4142313b67d29efc98d5288f37e2b571fcc32439734412c99fb007b4b646bda88f68bcdeb2aa8d5dbf56bf1aada3695a3f98ff58739084916476e2fd959c9420a8da4dc1330bb2ba74793ac759f6c77d72d90ac0089000100811425b220f6847fa3291bc6db480e01af2f585d17cd8aafe0e78c8985aa7b88c10038e1ddc59969fc475d4993cde28012e3d07f4187fd5cd1277c36961c95ac2d387f31552427b864a97c4cf244355aa6391d0732697e5afff9ee845980200e7e8636aa837e0500fb8c4e7d09ab5fb83790d5b437100ae4331a1dfbdc5c5025c664806308000000b1000100fda47f7eabdb2bc85895903cb098befc3a6ce0785ea819ed05aea12a06cd6ed25f18a0cff44bcf2b9680f46ffcf4eaf78d41a06b26bea89fb1afe04c2254b9f7ca4fa3fcc24e9d485c222ee809e0ba1caa1d92a3963eb36063c13de8ac34715754aa06e7964598e46b3f80ab5eb18e226459aad5eab2a175f50d46dd66acb584562aa26f9600f22972f70b7e92157989668fb1d39d62317c947f608f00b33c870050910f05fc563649548baf36000000540002800900020073797a3200000000080003400000000308000180fffffffb0900020073797a300000000008000340000000010900020073797a320000000008000180fffffffd0900020073797a310000000014000280080001800000000008000180ffffffff1a000100420be1b2178ebc9de4b980153e17854efdc5a39099a90000bc000380280002800900020073797a30000000000800034000000004080003400000000308000340000000018d0001000500df2420d88581c01b6eb3663bb697813d1afdbcb1a59b0789c917a0d4233dbe9b049d22f2e0413494cf71680b4b5423382873a61fa14c2c120fa943e9c583c49d70114c56954c7f02095f00a3323c6aa73e8e0c0cb32a23591ef63a758f4966d97d34d6b0ff8b5e195413eeeab8a3fab90ba75caf2c5742669cdcb5609464aa86c135d4e6a362d90000000800024000000001e0000380db000100bc1e040dbcc244d1e63eec6cbb74ce334b3f49e5f4e2ab674552cc58a07aac3d8150f31a4a0b9e4fc13d36d63e4621466005725974712c871accd5f91703264a9bf96676ca2e21d3c3b7a6f82c6df636246a87dc2438ef8fc8fa7fc5adf81e71e1c2b68fbcf2f931b2c3c1412e29a8f71be571a107b1000bec796e16be70b32db0a0a7970fe0e534ebc26047c50e5638e900ecc30cb2e7d4c9b872d4b13089b968f54decbf49f6d11258cf82994f66c9a10e39698087ec0d59a979c33488e2c47caac1c4e001e5f2ee70cdf013cf8e904e8f209631fd1e000900010073797a30000000000900020073797a32"], 0x1914}}, 0x4048010) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x30, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x10, 0x0, 0x5be9, {[@generic={0xfe, 0x6, "7819f3cf"}, @generic={0x3, 0x2}, @md5sig={0x13, 0x12, "2c9ef3ae7765984857336c478719ad73"}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x15}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x30, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x10, 0x0, 0x5be9, {[@generic={0xfe, 0x6, "7819f3cf"}, @generic={0x3, 0x2}, @md5sig={0x13, 0x12, "2c9ef3ae7765984857336c478719ad73"}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async) 11m5.719342462s ago: executing program 2 (id=1126): syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x62, 0xda, 0x20, 0x2040, 0x4901, 0x4777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x30, 0x8e, 0x72, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x8, 0xa0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xfffd, 0x40, 0x6}, {0x6, 0x24, 0x1a, 0x9fb, 0x24}, [@mbim_extended={0x8, 0x24, 0x1c, 0xff7f, 0x5, 0xffff}, @country_functional={0x10, 0x24, 0x7, 0x0, 0xffff, [0x3, 0xe182, 0x8, 0x1000, 0x54d]}, @obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2d, 0xd5, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x9, 0xda}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x51, 0xf0}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x31, 0x9, 0x0, 0x20, 0x10}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0x5f, &(0x7f0000000140)=@string={0x5f, 0x3, "a5515f3912381637bf984eff6fd1e5978c685b3cb9aecf6c6031d4f109717962298bac288e54b23823a72e0e82eec08443fee89918a7e15255eaae9ccf4a55c72d1298eae66ad75f585e0a6338d9d8b5da16485c1423941677b7ff17a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x860}}]}) 11m4.03301608s ago: executing program 2 (id=1131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f00000002c0)={0xa, @sliced={0x8001, [0x6, 0x6, 0x6, 0xe8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x8002, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x4, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x1000, 0x7f, 0xa62c, 0x7, 0x4, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x46, 0x9, 0x7, 0xfce8], 0x2}}) unshare(0x26020480) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r10, 0x11, 0xf4, &(0x7f0000000040)=0x3a, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="084702006ad30000"], 0x48}}, 0x40800) 11m2.711950256s ago: executing program 2 (id=1136): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8885) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 11m2.44595714s ago: executing program 2 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x8}], @generic="f7c0a0535df469ed44af0062a057460c62463a5d807af8ddf7648a293e53b3fc48e8205c73004398"}}}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async) fcntl$getown(r6, 0x9) (async) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x2fc6, 0x9, 0xfffffffffffffffa, 0x5aec, 0x5, 0x3, 0x4, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x537, 0x1c, 0x7fffffffffffffff, 0x965, 0x51c}, &(0x7f0000000180)={0x6, 0xf8c9734, 0x0, 0x93, 0x8, 0xafc, 0x3, 0x2}, &(0x7f0000000240), &(0x7f0000000340)={&(0x7f0000000280)={[0x7]}, 0x8}) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 11m1.942807446s ago: executing program 32 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x8}], @generic="f7c0a0535df469ed44af0062a057460c62463a5d807af8ddf7648a293e53b3fc48e8205c73004398"}}}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async) fcntl$getown(r6, 0x9) (async) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x2fc6, 0x9, 0xfffffffffffffffa, 0x5aec, 0x5, 0x3, 0x4, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x537, 0x1c, 0x7fffffffffffffff, 0x965, 0x51c}, &(0x7f0000000180)={0x6, 0xf8c9734, 0x0, 0x93, 0x8, 0xafc, 0x3, 0x2}, &(0x7f0000000240), &(0x7f0000000340)={&(0x7f0000000280)={[0x7]}, 0x8}) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 8m44.744861108s ago: executing program 3 (id=1671): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) read$FUSE(r1, 0x0, 0x0) 8m44.606975054s ago: executing program 3 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x800005, 0x0, 0x0, 0x41000, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de000000ffffff7fa600000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000100)={0x80, 0xfffffffd, 0x3, 0xc, 0x2, 0x7}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="800000000001010400000000000000000a000000440001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000000600034000020000060012400003"], 0x80}}, 0x0) mknodat(r2, &(0x7f0000000000)='./file0/../file0\x00', 0x400, 0x2000200) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r7 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) dup2(r6, r7) 8m43.491071012s ago: executing program 3 (id=1677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) shutdown(r0, 0x0) syz_usb_connect(0x5, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011001228d5d4021040805efb40102030109026a07040110000d09041740030202ff050d2402"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 8m41.683971684s ago: executing program 3 (id=1683): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "ebae"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m40.474291784s ago: executing program 3 (id=1690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000019580)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) r7 = dup(r6) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000540)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe508597648224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001c00", "90be8b1c551267408ede306003d8a0f6bd00"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x3a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x10041, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000340)={0x3, 0x3, 0x79a, 0x0, 0xe, 0x7fff}) 8m39.970498319s ago: executing program 3 (id=1691): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x1, 0x14c, &(0x7f0000000300)}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b) 8m39.505897683s ago: executing program 33 (id=1691): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x1, 0x14c, &(0x7f0000000300)}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b) 1m45.184190748s ago: executing program 4 (id=3368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) pipe(&(0x7f0000000380)) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r4, 0x0, &(0x7f0000000e00)="4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c0c4c4c4cb132051e80cdcea9a6499e5cc009c1cb020e9136dfabbada14328d13da8ae144ef00046d6a05d514ef3c484626000000000000000000009259c5f86dfd22dd347dc58399bfaff88cb9eaba0fb39aa41948184804ede60765566a23ec35475eb9ca897332a87d439729a8a9708a959f7216e47e867c3c9a01b9423ccd8d8ea0e1a3af5f59da28155131397ac2c9e081904111c9206d9405c2b2", 0xffffffffffffffe5, 0x1c}) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x2, 0x0, &(0x7f0000000100)=[{0xfffffffffffffffe, 0xffffffffffffffff}, {0x3, 0x96}]}) (async) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) (async) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmmsg$inet6(r7, 0x0, 0x0, 0x20000805) (async) shutdown(r7, 0x1) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m44.458144926s ago: executing program 4 (id=3369): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1m44.299310733s ago: executing program 4 (id=3373): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cf6ffffff070905810300020000000904010000020d00000904010102020d0000090582022000000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x85, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x0, 0xf0, 0x80, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x73, {{0xa, 0x24, 0x6, 0x0, 0x0, "2a99304b3b"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2, 0xc46b}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x7fff, 0xff, 0x3, 0x1, 0x8}, @dmm={0x7, 0x24, 0x14, 0xd, 0xf}, @obex={0x5, 0x24, 0x15, 0x4a51}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x71, 0xe}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x67, 0x7, 0x4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xf5, 0x8, 0x20, 0xb8}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}, {0x2e, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x83e}}, {0x54, &(0x7f00000002c0)=@string={0x54, 0x3, "9ec630958f74db674ef20b46a0e1b5aa8fd0b36643096c2971f0d52399572997ff49e69cc457809543c4a9fae0387b85c0cc2c4bb51135c80ae305cc8646bc2f24f8aaed5976f1e41973547e254703b9bfc9"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @empty, 0x2}, 0x1c) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xc, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m43.308066303s ago: executing program 4 (id=3376): r0 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r0, &(0x7f0000001980)=""/235, 0xeb) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905a3000000000000090507"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) flistxattr(r0, &(0x7f0000001980)=""/235, 0xeb) (async) getpid() (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_pidfd_open(r1, 0x0) (async) setns(r4, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905a3000000000000090507"], 0x0) (async) 1m42.548716905s ago: executing program 4 (id=3378): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x194, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x9, 0x7, 0x5, 0x722, 0x13, 0x7, 0x7c, 0x34, 0xb763599953cb092d, {0x400000, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000002100)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x44050) r4 = io_uring_setup(0x2c49, &(0x7f0000003c40)={0x0, 0xaaf5, 0x100, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400917000000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r6, 0x0, 0x0) 1m42.1979594s ago: executing program 4 (id=3381): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r1, r2+60000000}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) unshare(0x40000000) 1m40.648397312s ago: executing program 34 (id=3381): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r1, r2+60000000}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) unshare(0x40000000) 8.744248127s ago: executing program 7 (id=3719): socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x201, @tick=0x8f, 0x0, {0xea, 0xfc}, 0x1, 0x2, 0x1}) socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x83, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x75, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @remote, {[@end]}}, {0x4e23, 0x0, 0x5d, 0x0, @gue={{0x1, 0x0, 0x0, 0xd3, 0x0, @void}, "c1ece8fee56ba7b65728ec28d3ef7d1306d21bcecc3aa4a07ec8f9bf4a284be667dcbcb41fc7115a621b8a59dde86e50885b6dfb908015c66dbca0565bc4f7668f61fc800353b3152551c27150dba9e6d9"}}}}}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000580)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.840139889s ago: executing program 0 (id=3727): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg(r1, 0x0, 0x40844) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r2, 0x0, 0x607a9e0a432a4785) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) (async) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f00000006c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f00000007c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000001900)=""/194, 0xc2}, {&(0x7f0000001a80)=""/128, 0x80}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/2, 0x2}], 0x9, &(0x7f00000008c0)=""/4109, 0x100d}, 0x0) (async) recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f00000006c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f00000007c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000001900)=""/194, 0xc2}, {&(0x7f0000001a80)=""/128, 0x80}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/2, 0x2}], 0x9, &(0x7f00000008c0)=""/4109, 0x100d}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x295, 0x0, 0xffffffffffffffff}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="40002000180002000400000000000000020000400000ff090024000014001680100008800c00028008000100040000000006001d004e24000008000100ffffff"], 0x40}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="40002000180002000400000000000000020000400000ff090024000014001680100008800c00028008000100040000000006001d004e24000008000100ffffff"], 0x40}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 5.867739079s ago: executing program 1 (id=3733): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x90000014}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)="da95710b18f13d70157b2f8a85fb18ff60be9e92bdf98abab9f06d7600"/43, 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="247d7f75290ede7a6188c69ea138ff0f0000000000003fc760e2eeddb4ecef102758a68d638189e3179d5f0e4aab57b956ebe4f9c40fae694257856344fe6d3128", 0x1}], 0x1, 0x0, 0xfffffffffffffc7b}}], 0x2, 0x0) close(r4) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) getdents(r5, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') 5.818494005s ago: executing program 0 (id=3734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000001880)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x4f, 0x1, 0x1, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x34325258}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x17, 0x0, [0x2c280, 0x7, 0x3c59, 0x8, 0x7f, 0x1, 0x161, 0x3ff, 0x1, 0x771, 0x0, 0x10, 0x80000001, 0xeb46, 0x8000, 0x6b439782]}, {0x2b, 0x0, [0xfff, 0x4, 0x4, 0x1, 0xfffffffa, 0x3, 0x1ff, 0x7, 0x3f, 0xfffffffe, 0x60bf, 0x5, 0x1, 0x6, 0x7, 0x200]}], r4, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000001940)={0x1, 0x10, 0xfa00, {&(0x7f0000001900), r4}}, 0x18) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f00000018c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private1}) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f0000003f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9bf5054}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16f9a160}, @NFTA_HOOK_DEV={0x14}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWSET={0x16b8, 0x9, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x1674, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14fc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14ec, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x33c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "0195df64cf8b6b9073f78ae5ff0aed2b9d05abfe37dffe3c3ccb367a41c6b35da345701b49d4c6b4a4e4ed1b7d8fca4497993341e35c7035ac49d36c52bf6a8d86a2b9094958feb285ccb7c26b4c7a97511718b520261cc39c6e28019a67cdeda8714d4d6c92fa1358df2e084e71"}, @NFTA_DATA_VALUE={0x6b, 0x1, "7d238bcca8d7a589e58ee385c936a5dd7ac63d49e0b1fb2eb878f08d45543d5ebb18d987008de0cf14afb125a809faf9eecb974741be628e8d6269a2003eb2c4f07a48a91ac7df65ab142e4110562f3ebf535e103f6428ae9f7e76049dca9bc117c427f5836869"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "5266879d30eb050a89585f2389c5b2bab9a5c346e74516bd6f2ca1348f502051d1b45904235b12dbff1485431d492a61b82e40d6bfaaa042973ce490fa9933f740d322e26d4a97d320dd800a6c0b5668258884603385b933c7ac057d0cdd506660fc92c1fadea902aba96dacd84ed88dff8f2df79a82e481b1e6057192373717a24deebfebbb8ccd716897a4c31fffd2529efe68d58bdc9c02403a57b29ad040a94405e8"}, @NFTA_DATA_VALUE={0x2f, 0x1, "21447b0e9e65b6de90ead02cf8af7b213b9bf073052a210506f010598b5fbf38bf8180878a78a8ac4b2c68"}, @NFTA_DATA_VALUE={0x77, 0x1, "d819db8a6b089c91a2d77761831e84f73dd6d8751119c901bb3165bad35cbcf787a2f44569abc46a53cd151af88985bdfae03e3df27a1d2620a15b1335ff0b33600f1b15acd9d7d231477d257b8cfa9831a887da0550dca284a128061013de13c27fe880a5a27fe29d79041abb8b6c029934de"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "5d1b9f0bcf32ee44e118ca71653f66145c13d1cf47f34b94f3634d9ac588b7e18184320b30ba16c97e84376495fff92135932d606ad71af004a94509ef6d796690b592da26f19d46b982dcafd694b8846ea8f04f0b4f503981699c4867ef23bcdb8c3cbe99ae"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_MASK={0x1130, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "2aae1bdcd8eb74fcb541ad9fa531f6da2e84bfbddb2f82d9b5fc6dce527f11073115a0d77b697198687d2bda57fd93aef01e543a08232a66c82bb09a8526eef673a815e37a72a82f09673d1cc53f4e676ed2d4dbb2fe69a51389f7ca5d68a367d0cb9f606ea403ea103b41b40aec3ff7661c468b6188caf6fb8be32f71d7621580879dddf71d96eefda75d2a38775bd8d8a3b84bb914c778e2a6435a647d1d7db7"}, @NFTA_DATA_VALUE={0x1e, 0x1, "ba8d2225b117195b9bef00c6091ee9bead7d10701ec2b800eb4d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_XOR={0x74, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x13c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xdc, 0x3, "9360dcd06a88a190ba584b20d3f8f56b34fb593d97940d6b271bfa2cf435f6474301d353145c8b1bb09f8b11810e3e5b077374b6f086f77f1665f01f60b711b94e643c03d00d90b6988891f0026619cf0cab7aefdf764b53e148461973d8033dfea4f5a4709559e6ba727c639ada1ff83f0b9a510fdc44cc1f1643a70cefd7dd18277c2536d31fe0888985ce3f880bb24355e6b8880661810a2384e86826adc11ebac9cbad64320d0b468168679c3edb2da262585434e10103fb6c468835adc9e4b563fbf75c8f82eb1a038e54fce18426173a6c2bc64b51"}, @NFTA_MATCH_NAME={0xc, 0x1, 'comment\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x1768}}, 0x8000) 5.756586571s ago: executing program 1 (id=3735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000340)="c4e34d4970070066bad10466ed262e6444d9ecc4e2dd3984c655000000b805000000b97d0000000f01c164410f07653e66440f38814d000f770f9d6900640f01f8", 0x41}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.643569102s ago: executing program 5 (id=3737): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x16) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff}) read$FUSE(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1e, 0x0, 0x11) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x5f, r3}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 5.61729341s ago: executing program 7 (id=3738): futex_waitv(&(0x7f00000001c0)=[{0x1, &(0x7f0000000100)=0x100000001, 0x2}, {0x6, &(0x7f0000000180)=0x6, 0x2}], 0x2, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1) syz_io_uring_setup(0x17b2, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='syz2\x00', &(0x7f0000000240)='/dev/fuse\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643d5c2cd017ce94300b15957d8d796384f2672b3423f3dd8bb8558900000037ace9bf6421b6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2bc, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x290, 0x4, 0x0, 0x1, [{0x28c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x27c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x278, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "544d2969b55fba50c87eef33bc28a7937a0d275537ac5f1653cbdec37ea3270ffdc08eed1a5d6c1bdfe1"}, @NFTA_DATA_VALUE={0xdb, 0x1, "cc647d42ff3019c68e2158fb54046adde3b5464edf1a8e2d046bc7ead4f2129c6e0629356da15eb264d65f34dc75a8704124584b60f4270cde2f0a574916300ff5026db1298f356ffcd9560d5d2e232764211d8b3ed01abeab14402ebd869e02d0b8cb9aeba7fa90ee89c76d4069625d5f4a7e6ae25f9464f5f8e9e58918263cc24ba5f24df292363a32c1c3eee2bbc882d7bac110d3143ed752161dd782cc81c9e870e5a7dc0a9581183cac622af0434d8611064d27b38a10cf4911089b78a335f679c094e1fa2a53fd28df6e99e5cbbb9098fbbd0b3c"}, @NFTA_DATA_VALUE={0xc6, 0x1, "952fb8eb4e98c4fde849cf45452b42603fa16935e3c8aef0e9ec17a7f56f60b03db71b8c343e73c2d7aadc7a6aadb3c7b3e234d93a56ecb72b25cae22c4e3c4361640870e514207c5c204074eefa9662b84be2b38b7e86487370bc44e4316d0a9f5ceaee60fb90beec328660319afd910854fa7fe1febbcf733bc7909b6d4c511140b90e97410369e1a7143b06c401d075182e96db9b9543a041786d4789c0c68ab9c43cac15d198ccd4914646e59a736507e22fd43af387d2ae736582c848cc4f20"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc, 0x1, "917077004c88aa83"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2e4}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r6, r7, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r5}, 0x50) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) 5.557605052s ago: executing program 0 (id=3739): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 5.292301687s ago: executing program 0 (id=3740): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0xa00000000000000, 0x0) 5.198974407s ago: executing program 0 (id=3741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x8) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x69af) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) 4.720274761s ago: executing program 5 (id=3742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0xdabc1632b6853cfc, &(0x7f0000000100)={r4, r5+60000000}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) readv(r6, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/123, 0x7b}], 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_settime(0xdabc1632b6853cfc, &(0x7f0000000100)={r4, r5+60000000}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) readv(r6, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/123, 0x7b}], 0x1) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 4.616801709s ago: executing program 7 (id=3744): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.408134853s ago: executing program 1 (id=3745): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffff800, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x8080) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4800) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff97) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x1, 0x6, 0x2}, 0x4}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r10, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r11 = inotify_init1(0x80000) inotify_add_watch(r11, &(0x7f0000000140)='./file0\x00', 0x100) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3c3}}, 0x20}}, 0x0) 3.975195548s ago: executing program 6 (id=3746): r0 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x73, {0x73, 0x5, "c2a4ab3eb94212eeabeacc370e4ac31038006853ea5cac467411f197bab407187e5d048f8d9390bf02ff942234ba175a7fc3defd165e78973344f87711e1a7bd44047fe5c2f84382feb467f6098ab7a7e8d123b8e0766799123456aa4cbf780852a0274883aafeb8d08da281ddb2a2d369"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000140)={0x20, 0x8, 0xa7, "fcca87b4d6a9282e9abc1ec32e16a47c2fe2b8bec7fa7a06ae23c5bf4b7c831ae21da692e68770242eef7d899e920841924fc0f288586b418c543926d8a64a6205daa84ea7160a1266bafd3a2f87b60cbd58a97c12d8f58cc881ab77bf40cfb00e963482b73a38d42cc7780518c14dace853716b7bec327c7cdcd7849987ab1fc6e04dc425d24628494473ff82f1f5bfa4cfd0607157c4e4f1f3b9d5438c27d6c39f892614de9c"}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000640)={0x21, 0x0, 0x1, '9'}}) 3.503246753s ago: executing program 5 (id=3747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080000000a140306000000000000000006001500"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0xe7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb2, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881e"}, {@device_a, @device_b, 0xb6, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f1"}]}, 0x1a2) getdents64(0xffffffffffffffff, &(0x7f00000010c0)=""/4067, 0xfe3) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1b8}}], 0x1, 0x4008040) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000080002de531414000c000280050001000000000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.363824382s ago: executing program 1 (id=3748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080000000a140306000000000000000006001500"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0xe7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb2, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881e"}, {@device_a, @device_b, 0xb6, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f1"}]}, 0x1a2) getdents64(0xffffffffffffffff, &(0x7f00000010c0)=""/4067, 0xfe3) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b000000000000000030100000800000003d57dd64b5a8166065a02760943f069b39ddb989097348e7ab5b0ae76b377770e0a01558e379c56be6818562bfd3526d23205d05a879bed2f7c82517d38426b8f8429f4659f8a4abdc8a0599fb95cd01be16c5cc4b49dae0da71eb938f12b747eede376cc0993c5e5b9cf74c25159af1111daf4095cd37296088102eb13e4221aad195be07f276ed81ed1395a69aa9234f4fcaefa03ef0a336f6b977324980000000000000029000000000000003a056d939623c59d3bb231546ec9392d1b6d06db940358d5ce73a24a4f4bcd18405edf131308059350a49b26b7a97221676794228a726a87a737e5b361e229ccce89d497b0e6f7ac6955f7093f352867a324e396d5e3a0674912b1cc510826536c6a4f39239e6f19d1f9de8f6d5906abf66095d2807b87bc1c06baa52ce622efcd0000000000000030000000000000000a01000009d800004d831bac0a7598bcea73b2eb3344c1e98eca1eb037ed9812c162f35274d300004000000000000000010100000100000078fa1f1346d5d3ca3e96cb968267e099540f40e0eba43e3389c072a437602a2a7f2375e3a4e1c4753ef7cc64820000000000"], 0x1b8}}], 0x1, 0x4008040) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000080002de531414000c000280050001000000000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.86805688s ago: executing program 6 (id=3749): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r3, 0x4080}, {r3, 0x400}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) sendmmsg$inet6(r4, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="c3d19f9e36", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000013c0)="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", 0x47c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000003d00)='+', 0x1}], 0x1}}], 0x3, 0x4000001) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000010000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x8, 0xe}) 2.167394984s ago: executing program 0 (id=3750): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x8000}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_WAIT_FOR_RESUME(r7, 0x5523) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) 1.853186192s ago: executing program 7 (id=3751): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x2000000000000000, 0x0) 1.604192094s ago: executing program 6 (id=3752): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x1, 0x6) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r5, &(0x7f0000000540)={0x2020}, 0x2020) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.585277986s ago: executing program 7 (id=3753): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknod$loop(0x0, 0x2000, 0x0) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x80000) 1.386576914s ago: executing program 5 (id=3754): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010400000000000000000900000004000380300002802c00018014000300fc000000000000000000ff000000002014000400fc000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000200), 0xa8040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = eventfd2(0x4008, 0x80002) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000001c0)={0x7f, 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, r2, 0x5e866000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xc7, 0x0, 0x1}) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.236020941s ago: executing program 5 (id=3755): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x2042) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)={0x1, 0x0, [{0x1, 0xf0, &(0x7f0000000a00)=""/240}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000380)=0x4000000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x0, 0x5}]}]}}, &(0x7f00000003c0)=""/65, 0x32, 0x41, 0x0, 0x8}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000000200000010000005080200", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r7, 0xe, &(0x7f00000001c0)=[{0x0}], 0x1}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0000000900000020c70000060000000300000041de36f9bef07696a9b16723eb", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000000000000100"/28], 0x50) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="85100000030000007da61000ffffffff18580000d90b6e410ea8d51e000000001800000000000000000100e654ff00ff0f0000184f0000fcffffff0000000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xd6, &(0x7f0000000180)=""/214, 0x41100, 0x68, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x7, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x1, r1, r6, r7, r10, r2, r0, r13, r14], &(0x7f0000000640)=[{0x5, 0x5, 0x8, 0x9}, {0x1, 0x4, 0x8, 0x8}, {0x3, 0x1, 0x10, 0x6}, {0x2, 0x1, 0xd, 0x7}, {0x3, 0x5, 0x3, 0x4}, {0x4, 0x1, 0xfffffc00, 0xa}], 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 1.18742952s ago: executing program 5 (id=3756): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212c7"], 0x0) 739.361262ms ago: executing program 6 (id=3757): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x3}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x7, 0x9, 0xfffffffc}) 596.498562ms ago: executing program 7 (id=3758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0xff}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat$urandom(0xffffff9c, &(0x7f0000003580), 0x80100, 0x0) pread64(r2, 0x0, 0x0, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x4) setsockopt$inet6_udp_int(r6, 0x88, 0x1, &(0x7f0000000080), 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) memfd_create(0x0, 0x3) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r7) syz_usb_control_io$hid(r0, 0x0, 0x0) 576.16616ms ago: executing program 1 (id=3759): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x6, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = epoll_create(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4030, r1}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@deltclass={0x68, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x3, 0x1}, {0xf, 0x7}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xfb}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @TCA_RATE={0x6, 0x5, {0xa, 0x2c}}, @TCA_RATE={0x6, 0x5, {0x5, 0xfc}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1, 0xf1}}]}, 0x68}}, 0x0) (async) epoll_wait(r3, &(0x7f0000000180), 0x0, 0xe) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r9, r9, 0x0, 0x7) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000202, 0x0, 0x0) (async) munlockall() (async) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 248.236497ms ago: executing program 1 (id=3760): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 244.1004ms ago: executing program 6 (id=3761): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 0s ago: executing program 6 (id=3762): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4011040000010000009f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x370, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd81d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4741}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfca1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5870}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd892}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f9fd3d91c6f8e3f3a751ccd350501df460343ee32ca525efd7"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9e895c54237e5ff7c419e710856808db49f0b51e"}}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "5615678465af4454805181ccdf262f64e48ab09a04a48e390236ba17c195ee74b9315d6320883eae282884d81f2684807fbae188cb2720920fb10bbeef1a5a2acc05a5a3f6548554e662dd1465ef713e9963125d98009dafaaf0fdd543c21cbfd751dff2cd2dce0b4ee60e161fdca6bbfde2890ef676ebf3653c02b26c1eb4ed46ac77c2fabb3d2caf6d77a85303e7ce43ddcf3da4f75a915c392b65"}, @TIPC_NLA_NODE_ID={0x90, 0x3, "c42927eaf9c6c9611c131f2144bec44b3dc62cb302301a67b4700e52239501fac172f5bb86a0b1b1d05320a734dcb10740cc670de5734c30c61f6c0eec535e53a91ce6329ff4754da7cebf0676da0afadb8934f9633ab692b082bf671ea3f3e310b16ee0cb7263496d57161992ceab4c9b7c608ce9432829638d6762d43872d744a2b892a8f00022cda8f15a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x370}, 0x1, 0x0, 0x0, 0xc050}, 0x8001) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x20, 0x31, 0xe2, {0xe2, 0x2, "dc77cddec3b7a1725d750b8f93401b07eb0896a9e27d145b873faee3c29647aa49b0b4b6f68deaeca7ba29ad96235197db76689aeefc76644bb533db8f87c9fa8acb695c1982acebb3728fac40ba2a16c0182dd5b8f49561456264256872c414052801dba04efb3cf1c963e0b8b035e2a5fb3bdae5dae52493851ad23ee463881af39f1f71037bc2e27d3c2a34335561ed9333c655fb5c00c3ddb033e8fead282352e49a62ab0ad3e89eae686437e7f3b8abb2ee79b3345a39d55c996cfea260ffc09fabfaf841cfecfc524251112175842697261d4d3d5979eb5e08909f57fb"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000007c0)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0xb, 0x4, 0x23}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d42ebbbed3caabf939c91cdc089e82a4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "86cffd666ad09d1a49911bbef4388efb"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x0, 0x0, "0f167479", "7aee2c9e"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0x9, 0x3, 0x2, 0x2}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000008c0)={0x0, 0x17, 0xc1, "4a0d32f5a5ae6adcfcf86a192199c9505faa5c1bd5a1cf4f58fe21a8ec5050e67120a1bc2df20bc816a348bd42441de0dabbe4e33577c021046b265d582ee66601e72178fbb437e5d842d4f964bbd5cc2b9b729edd6f00ac2fab64ce6d02464877feb9a6859fa4c9499853cafb329e12cdb462df67bcdc563470c28daf30dbfa60a7dde639f92794d23e9973b8b9462292196d7a8d85197a742fadfd7ea8bcc4bc5e16dff24c5d14865f7e03e2414c96743005c759a7857cfc0d4d99b379a391da"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0xd19621d54f90c737}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xa56b}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xe7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "83a7"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xfe01}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "de35"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x8c}, &(0x7f0000000d40)={0x40, 0x1e, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0xb}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) userfaultfd(0x801) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x4000000000002ad, 0x20008050) (async) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000480)={r7, 0x80, 0xd90}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000500)={r7, 0x100, 0xc848}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 860.776645][ T10] usb usb2-port1: unable to enumerate USB device [ 861.986196][ T5928] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 862.160051][ T5928] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 862.175037][ T5928] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 862.196050][ T5928] usb 6-1: Product: syz [ 862.215959][ T5928] usb 6-1: Manufacturer: syz [ 862.220579][ T5928] usb 6-1: SerialNumber: syz [ 862.263522][ T5928] usb 6-1: config 0 descriptor?? [ 862.288718][ T5928] ch341 6-1:0.0: ch341-uart converter detected [ 862.596365][ T5929] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 862.769283][ T5929] usb 2-1: device descriptor read/64, error -71 [ 863.016154][ T5929] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 863.170793][ T5929] usb 2-1: device descriptor read/64, error -71 [ 863.301247][ T5929] usb usb2-port1: attempt power cycle [ 863.380875][ T5882] syz_tun (unregistering): left allmulticast mode [ 863.389582][T16377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.406737][T16377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.424016][ T5882] syz_tun (unregistering): left promiscuous mode [ 863.424072][T16377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.446412][ T5882] bridge0: port 1(syz_tun) entered disabled state [ 863.454610][T16377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.464425][T16377] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.627570][ T5928] ch341-uart ttyUSB0: failed to read break control: -71 [ 863.673408][ T5929] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 863.714087][ T5928] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 863.749885][ T5929] usb 2-1: device descriptor read/8, error -71 [ 863.772009][ T5928] usb 6-1: USB disconnect, device number 117 [ 863.856262][ T5928] ch341 6-1:0.0: device disconnected [ 864.005986][ T5929] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 864.037914][ T5929] usb 2-1: device descriptor read/8, error -71 [ 864.146541][ T5929] usb usb2-port1: unable to enumerate USB device [ 864.417733][T18564] chnl_net:caif_netlink_parms(): no params data found [ 865.516220][ T5870] Bluetooth: hci2: command tx timeout [ 865.757237][T18599] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 867.331241][T18616] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 867.601742][ T5870] Bluetooth: hci2: command tx timeout [ 868.170081][ T8620] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 868.188851][T18643] program syz.6.3240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.654708][ T8620] bond1 (unregistering): Released all slaves [ 869.142897][ T8620] bond0 (unregistering): Released all slaves [ 869.423784][ T8620] bond2 (unregistering): Released all slaves [ 869.482811][T18616] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.527581][T18616] bond0: (slave team0): Enslaving as an active interface with an up link [ 869.677367][ T5870] Bluetooth: hci2: command tx timeout [ 869.692420][T18644] geneve2: entered allmulticast mode [ 869.878270][T18564] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.074832][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.083410][T18564] bridge_slave_0: entered allmulticast mode [ 870.091443][T18564] bridge_slave_0: entered promiscuous mode [ 870.095640][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.099939][T18564] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.103817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.112101][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.124039][T18564] bridge_slave_1: entered allmulticast mode [ 870.133243][T18564] bridge_slave_1: entered promiscuous mode [ 870.154087][ T8620] tipc: Left network mode [ 870.424890][T18664] loop5: detected capacity change from 0 to 7 [ 870.460953][T18664] Dev loop5: unable to read RDB block 7 [ 870.481167][T18564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.498692][T18664] loop5: unable to read partition table [ 870.514485][T18664] loop5: partition table beyond EOD, truncated [ 870.526341][T18664] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 870.557121][T18564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.571173][ T5238] Dev loop5: unable to read RDB block 7 [ 870.601175][ T5238] loop5: unable to read partition table [ 870.621457][ T5238] loop5: partition table beyond EOD, truncated [ 870.932485][T18685] IPv4: Oversized IP packet from 127.202.26.0 [ 871.191718][T18564] team0: Port device team_slave_0 added [ 871.365579][T18564] team0: Port device team_slave_1 added [ 871.417434][T18695] syzkaller1: entered promiscuous mode [ 871.424224][T18695] syzkaller1: entered allmulticast mode [ 871.695990][ T981] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 871.780328][ T5870] Bluetooth: hci2: command tx timeout [ 871.855001][T18564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.855015][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.855029][T18564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.867867][T18564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.867884][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.867907][T18564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.990531][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.990550][ T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.992546][ T981] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.992570][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.992589][ T981] usb 2-1: Product: syz [ 871.992603][ T981] usb 2-1: Manufacturer: syz [ 871.992618][ T981] usb 2-1: SerialNumber: syz [ 872.067266][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.117058][ T8620] hsr_slave_0: left promiscuous mode [ 872.117696][ T8620] hsr_slave_1: left promiscuous mode [ 872.118152][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.244821][ T981] usb 2-1: 0:2 : does not exist [ 872.258735][ T981] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 872.323140][ T981] usb 2-1: USB disconnect, device number 121 [ 872.525427][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.296261][ T5936] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 873.372912][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 873.456247][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 873.483323][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.493987][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 873.516224][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 873.568786][ T5936] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 873.580532][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 873.607889][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 873.642163][ T5936] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 873.669784][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.685126][ T5936] hub 6-1:1.0: bad descriptor, ignoring hub [ 873.719716][ T5936] hub 6-1:1.0: probe with driver hub failed with error -5 [ 873.738739][ T5936] cdc_wdm 6-1:1.0: skipping garbage [ 873.748991][ T5936] cdc_wdm 6-1:1.0: skipping garbage [ 873.758339][ T5936] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 874.006282][ T5936] usb 6-1: USB disconnect, device number 118 [ 874.585494][T18564] hsr_slave_0: entered promiscuous mode [ 874.617572][T18564] hsr_slave_1: entered promiscuous mode [ 874.623937][T18564] debugfs: 'hsr0' already exists in 'hsr' [ 874.632593][T18744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.648544][T18564] Cannot create hsr debugfs directory [ 874.656363][T18744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.716359][ T5936] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 874.910804][ T5936] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 874.920418][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.931004][ T5936] usb 5-1: Product: syz [ 874.935233][ T5936] usb 5-1: Manufacturer: syz [ 874.965959][ T5928] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 875.097145][ T5936] usb 5-1: SerialNumber: syz [ 875.119818][ T5936] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 875.234315][ T5929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 875.377483][ T5928] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 875.387371][ T5928] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 875.399186][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 875.430676][ T5928] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 875.530544][ T5928] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 876.146481][T18740] syz.1.3265 (18740): drop_caches: 2 [ 876.177661][ T5928] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 876.207692][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 876.229720][ T5928] usb 6-1: Product: syz [ 876.233978][ T5928] usb 6-1: Manufacturer: syz [ 876.254950][ T5928] cdc_wdm 6-1:1.0: skipping garbage [ 876.263327][ T5928] cdc_wdm 6-1:1.0: skipping garbage [ 876.276266][ T5928] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 876.300771][ T5928] cdc_wdm 6-1:1.0: Unknown control protocol [ 876.414373][T15860] usb 5-1: USB disconnect, device number 36 [ 876.498513][ T5929] usb 5-1: Service connection timeout for: 256 [ 876.577003][ T5929] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 876.624744][ T5929] ath9k_htc: Failed to initialize the device [ 876.653048][T15860] usb 5-1: ath9k_htc: USB layer deinitialized [ 878.107308][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 878.114165][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 878.120931][ T981] usb 6-1: USB disconnect, device number 119 [ 878.125705][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 878.133510][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 878.139574][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 878.425245][T18564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 878.541410][T18564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 878.663593][T18564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 878.705802][T18564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 879.072081][T18564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.307516][T18564] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.407695][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.414869][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.460164][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.467318][ T8614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.565279][T18564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.612398][T18564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.817168][T18564] veth0_vlan: entered promiscuous mode [ 879.895344][T18564] veth1_vlan: entered promiscuous mode [ 880.259533][T18564] veth0_macvtap: entered promiscuous mode [ 880.282489][T18564] veth1_macvtap: entered promiscuous mode [ 880.559393][T18564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.749311][T18564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.836797][T18719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.920090][T18719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.977126][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.047735][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.516343][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 881.540067][ T8620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.563067][ T8620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.678858][ T8616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.690587][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 881.710226][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 881.722021][ T8616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.729610][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.752184][ T10] usb 2-1: Product: syz [ 881.775816][ T10] usb 2-1: Manufacturer: syz [ 881.793216][ T10] usb 2-1: SerialNumber: syz [ 881.876576][T18833] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 881.896224][ T10] usb 2-1: config 0 descriptor?? [ 882.238907][ T10] usb 2-1: ignoring: not an USB2CAN converter [ 882.322335][T18817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.332486][T18817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.344817][T18817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.413232][T18817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.006040][ T981] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 883.185240][T18862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.198036][ T981] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.206918][ T981] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 883.211701][T18862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.240085][ T981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.319099][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.336111][ T981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 883.338072][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.365988][ T981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 883.464219][ T981] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.475072][ T981] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.494032][ T981] usb 6-1: Product: syz [ 883.524622][T18873] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3284'. [ 883.534012][ T981] usb 6-1: Manufacturer: syz [ 883.560402][ T981] cdc_wdm 6-1:1.0: skipping garbage [ 883.569814][ T981] cdc_wdm 6-1:1.0: skipping garbage [ 883.585600][ T981] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 883.605350][ T981] cdc_wdm 6-1:1.0: Unknown control protocol [ 883.639410][T18876] netlink: 'syz.4.3284': attribute type 4 has an invalid length. [ 883.911695][T18880] tipc: Started in network mode [ 883.917106][T18880] tipc: Node identity 8a9e3b588114, cluster identity 4711 [ 883.931449][T18880] tipc: Enabled bearer , priority 0 [ 883.941273][T18880] syzkaller0: entered promiscuous mode [ 883.947164][T18880] syzkaller0: entered allmulticast mode [ 883.973217][T18880] tipc: Resetting bearer [ 883.984577][T18879] tipc: Resetting bearer [ 884.030797][T18879] tipc: Disabling bearer [ 884.376700][ T981] usb 2-1: USB disconnect, device number 122 [ 885.792682][ T5929] usb 6-1: USB disconnect, device number 120 [ 886.526480][T18924] erspan0: entered promiscuous mode [ 886.762328][T18926] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 887.053453][T18931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.103430][T18931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.277734][T18935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.799667][T18941] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 887.836951][T18941] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 887.878911][T18941] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 887.889364][T18941] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 887.902501][T18941] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 887.924761][T18941] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 887.940437][T18941] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 887.968684][T18941] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 887.984839][T18941] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 888.006760][T18941] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 888.496679][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 888.975577][T18970] vlan2: entered promiscuous mode [ 889.268225][T18979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.285456][T18979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.434231][T18988] netlink: 'syz.5.3306': attribute type 1 has an invalid length. [ 889.445362][T18988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.496063][ T981] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 889.661738][T18992] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.3306'. [ 889.672383][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3306'. [ 890.332991][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 890.816691][T19014] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.955129][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3315'. [ 891.139348][T19020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 891.152217][ T30] audit: type=1326 audit(1759010807.953:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19019 comm="syz.4.3315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73d798eec9 code=0x0 [ 891.992730][T19049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.002004][T19049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.012298][T19049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.032808][T19049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.176262][ T30] audit: type=1326 audit(1759010808.963:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19050 comm="syz.5.3325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9f578eec9 code=0x0 [ 892.226528][ T10] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 892.426921][ T10] usb 5-1: device descriptor read/64, error -71 [ 892.900188][ T10] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 893.136012][ T10] usb 5-1: device descriptor read/64, error -71 [ 893.246213][ T10] usb usb5-port1: attempt power cycle [ 893.320790][T19060] FAULT_INJECTION: forcing a failure. [ 893.320790][T19060] name failslab, interval 1, probability 0, space 0, times 0 [ 893.348287][T19060] CPU: 0 UID: 0 PID: 19060 Comm: syz.6.3327 Not tainted syzkaller #0 PREEMPT(full) [ 893.348304][T19060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.348311][T19060] Call Trace: [ 893.348316][T19060] [ 893.348322][T19060] dump_stack_lvl+0x189/0x250 [ 893.348339][T19060] ? __pfx____ratelimit+0x10/0x10 [ 893.348351][T19060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.348363][T19060] ? __pfx__printk+0x10/0x10 [ 893.348380][T19060] ? __pfx___might_resched+0x10/0x10 [ 893.348398][T19060] should_fail_ex+0x414/0x560 [ 893.348416][T19060] should_failslab+0xa8/0x100 [ 893.348433][T19060] kmem_cache_alloc_noprof+0x73/0x3c0 [ 893.348446][T19060] ? security_inode_alloc+0x39/0x330 [ 893.348460][T19060] security_inode_alloc+0x39/0x330 [ 893.348471][T19060] inode_init_always_gfp+0x9ed/0xdc0 [ 893.348493][T19060] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 893.348508][T19060] alloc_inode+0x82/0x1b0 [ 893.348523][T19060] new_inode+0x22/0x170 [ 893.348535][T19060] shmem_get_inode+0x346/0xe90 [ 893.348554][T19060] shmem_mknod+0x18c/0x3e0 [ 893.348568][T19060] shmem_mkdir+0x33/0x70 [ 893.348579][T19060] vfs_mkdir+0x303/0x510 [ 893.348596][T19060] do_mkdirat+0x247/0x590 [ 893.348610][T19060] ? __pfx_do_mkdirat+0x10/0x10 [ 893.348624][T19060] ? getname_flags+0x1e5/0x540 [ 893.348636][T19060] __x64_sys_mkdirat+0x87/0xa0 [ 893.348650][T19060] do_syscall_64+0xfa/0x3b0 [ 893.348661][T19060] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.348671][T19060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.348681][T19060] ? clear_bhb_loop+0x60/0xb0 [ 893.348693][T19060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.348702][T19060] RIP: 0033:0x7f8acd18d617 [ 893.348713][T19060] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.348722][T19060] RSP: 002b:00007f8ace015e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 893.348734][T19060] RAX: ffffffffffffffda RBX: 00007f8ace015ef0 RCX: 00007f8acd18d617 [ 893.348741][T19060] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 893.348748][T19060] RBP: 0000200000000180 R08: 0000000000000000 R09: 0000000000000000 [ 893.348754][T19060] R10: 0000200000000180 R11: 0000000000000246 R12: 00002000000001c0 [ 893.348761][T19060] R13: 00007f8ace015eb0 R14: 0000000000000000 R15: 0000200000000400 [ 893.348777][T19060] [ 893.727116][ T10] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 893.759695][ T10] usb 5-1: device descriptor read/8, error -71 [ 893.781786][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3329'. [ 893.835338][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3329'. [ 893.885681][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 893.894960][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 894.016139][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 894.047840][ T10] usb 5-1: device descriptor read/8, error -71 [ 894.173057][ T10] usb usb5-port1: unable to enumerate USB device [ 895.817643][T19086] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3334'. [ 895.939529][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.949883][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.526535][T16307] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 896.689462][T16307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 896.698987][T16307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 896.722925][T16307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.751489][T16307] usb 2-1: Product: syz [ 896.757493][T19104] FAULT_INJECTION: forcing a failure. [ 896.757493][T19104] name failslab, interval 1, probability 0, space 0, times 0 [ 896.767244][T16307] usb 2-1: Manufacturer: syz [ 896.785285][T16307] usb 2-1: SerialNumber: syz [ 896.794446][T19104] CPU: 0 UID: 0 PID: 19104 Comm: syz.0.3339 Not tainted syzkaller #0 PREEMPT(full) [ 896.794467][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 896.794478][T19104] Call Trace: [ 896.794485][T19104] [ 896.794493][T19104] dump_stack_lvl+0x189/0x250 [ 896.794519][T19104] ? __pfx____ratelimit+0x10/0x10 [ 896.794538][T19104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.794557][T19104] ? __pfx__printk+0x10/0x10 [ 896.794584][T19104] ? __pfx___might_resched+0x10/0x10 [ 896.794600][T19104] ? fs_reclaim_acquire+0x7d/0x100 [ 896.794622][T19104] should_fail_ex+0x414/0x560 [ 896.794653][T19104] should_failslab+0xa8/0x100 [ 896.794681][T19104] __kmalloc_noprof+0xcb/0x4f0 [ 896.794706][T19104] ? security_inode_init_security+0x107/0x3f0 [ 896.794732][T19104] security_inode_init_security+0x107/0x3f0 [ 896.794753][T19104] ? __pfx_shmem_initxattrs+0x10/0x10 [ 896.794776][T19104] ? __pfx_security_inode_init_security+0x10/0x10 [ 896.794798][T19104] ? set_cached_acl+0xd2/0x180 [ 896.794820][T19104] ? simple_acl_create+0x184/0x1b0 [ 896.794847][T19104] shmem_mknod+0x1f6/0x3e0 [ 896.794870][T19104] shmem_mkdir+0x33/0x70 [ 896.794889][T19104] vfs_mkdir+0x303/0x510 [ 896.794929][T19104] do_mkdirat+0x247/0x590 [ 896.794946][T19104] ? __pfx_do_mkdirat+0x10/0x10 [ 896.794961][T19104] ? getname_flags+0x1e5/0x540 [ 896.794973][T19104] __x64_sys_mkdirat+0x87/0xa0 [ 896.794986][T19104] do_syscall_64+0xfa/0x3b0 [ 896.794997][T19104] ? lockdep_hardirqs_on+0x9c/0x150 [ 896.795007][T19104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.795017][T19104] ? clear_bhb_loop+0x60/0xb0 [ 896.795029][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.795039][T19104] RIP: 0033:0x7fd8eb18d617 [ 896.795050][T19104] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.795059][T19104] RSP: 002b:00007fd8ebfc5e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 896.795070][T19104] RAX: ffffffffffffffda RBX: 00007fd8ebfc5ef0 RCX: 00007fd8eb18d617 [ 896.795078][T19104] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 896.795084][T19104] RBP: 0000200000000180 R08: 0000000000000000 R09: 0000000000000000 [ 896.795091][T19104] R10: 0000200000000180 R11: 0000000000000246 R12: 00002000000001c0 [ 896.795098][T19104] R13: 00007fd8ebfc5eb0 R14: 0000000000000000 R15: 0000200000000400 [ 896.795113][T19104] [ 897.169378][ T10] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 897.305992][ T10] usb 6-1: device descriptor read/64, error -71 [ 897.496367][T16307] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 897.546329][ T10] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 897.707048][ T10] usb 6-1: device descriptor read/64, error -71 [ 897.818977][ T10] usb usb6-port1: attempt power cycle [ 898.166000][ T10] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 898.216891][ T10] usb 6-1: device descriptor read/8, error -71 [ 898.496121][ T10] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 898.580337][ T10] usb 6-1: device descriptor read/8, error -71 [ 898.700364][ T10] usb usb6-port1: unable to enumerate USB device [ 899.102306][ T9] usb 2-1: USB disconnect, device number 124 [ 899.126435][ T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 899.163795][ T9] usblp0: removed [ 899.324168][ T10] usb 5-1: device descriptor read/64, error -71 [ 899.615989][ T10] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 899.816137][ T10] usb 5-1: device descriptor read/64, error -71 [ 899.966269][ T10] usb usb5-port1: attempt power cycle [ 900.386566][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 900.482143][ T10] usb 5-1: device descriptor read/8, error -71 [ 900.893601][ T10] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 901.107699][T19149] loop5: detected capacity change from 0 to 7 [ 901.457931][T19149] Dev loop5: unable to read RDB block 7 [ 901.486751][T19149] loop5: unable to read partition table [ 901.496782][ T10] usb 5-1: device descriptor read/8, error -71 [ 901.503214][T19149] loop5: partition table beyond EOD, truncated [ 901.523488][T19149] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 901.577998][ T5238] Dev loop5: unable to read RDB block 7 [ 901.585965][ T5238] loop5: unable to read partition table [ 901.616516][ T10] usb usb5-port1: unable to enumerate USB device [ 901.628192][ T5238] loop5: partition table beyond EOD, truncated [ 901.981819][T19157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.076740][T19157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.347117][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 902.617581][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 902.640810][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 902.756560][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 902.796611][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 902.808033][T19169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.818562][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 902.830031][T19169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.861966][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 902.871236][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 902.882358][ T10] usb 5-1: Product: syz [ 902.887687][ T10] usb 5-1: Manufacturer: syz [ 902.914449][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 902.922901][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 902.947665][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 902.969389][T19169] netlink: 'syz.6.3357': attribute type 1 has an invalid length. [ 902.985494][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 903.760923][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3360'. [ 904.382240][T19190] FAULT_INJECTION: forcing a failure. [ 904.382240][T19190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.450076][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 904.459791][T19193] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3363'. [ 904.470886][T19190] CPU: 1 UID: 0 PID: 19190 Comm: syz.6.3362 Not tainted syzkaller #0 PREEMPT(full) [ 904.470904][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 904.470911][T19190] Call Trace: [ 904.470915][T19190] [ 904.470920][T19190] dump_stack_lvl+0x189/0x250 [ 904.470938][T19190] ? __pfx____ratelimit+0x10/0x10 [ 904.470949][T19190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.470961][T19190] ? __pfx__printk+0x10/0x10 [ 904.470975][T19190] ? __might_fault+0xb0/0x130 [ 904.470995][T19190] should_fail_ex+0x414/0x560 [ 904.471013][T19190] _copy_from_user+0x2d/0xb0 [ 904.471027][T19190] memdup_user+0x5e/0xd0 [ 904.471039][T19190] strndup_user+0x68/0xd0 [ 904.471050][T19190] __se_sys_mount+0x9c/0x410 [ 904.471066][T19190] ? exc_page_fault+0x76/0xf0 [ 904.471077][T19190] ? __pfx___se_sys_mount+0x10/0x10 [ 904.471091][T19190] ? do_user_addr_fault+0xc8a/0x1390 [ 904.471104][T19190] ? do_syscall_64+0xbe/0x3b0 [ 904.471114][T19190] ? __x64_sys_mount+0x20/0xc0 [ 904.471132][T19190] do_syscall_64+0xfa/0x3b0 [ 904.471148][T19190] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.471164][T19190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.471180][T19190] ? clear_bhb_loop+0x60/0xb0 [ 904.471201][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.471216][T19190] RIP: 0033:0x7f8acd19066a [ 904.471232][T19190] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.471248][T19190] RSP: 002b:00007f8ace015e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 904.471263][T19190] RAX: ffffffffffffffda RBX: 00007f8ace015ef0 RCX: 00007f8acd19066a [ 904.471271][T19190] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 904.471278][T19190] RBP: 0000200000000180 R08: 00007f8ace015ef0 R09: 0000000000000000 [ 904.471284][T19190] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 904.471291][T19190] R13: 00007f8ace015eb0 R14: 0000000000000000 R15: 0000200000000400 [ 904.471306][T19190] [ 904.673798][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.033455][ T5936] usb 5-1: USB disconnect, device number 46 [ 905.127720][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 905.189845][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.215698][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.306115][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 905.314648][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 905.329495][ T10] usb 2-1: config 0 has no interface number 0 [ 905.346918][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.376082][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 905.393650][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 905.411175][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.428125][ T10] usb 2-1: Product: syz [ 905.432723][ T10] usb 2-1: Manufacturer: syz [ 905.450851][ T10] usb 2-1: SerialNumber: syz [ 905.496763][ T10] usb 2-1: config 0 descriptor?? [ 905.972704][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 905.974701][T19218] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 905.988102][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input63 [ 905.993842][T19218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.044627][T19218] fuse: Invalid rootmode [ 906.240594][T19200] binder: BINDER_SET_CONTEXT_MGR already set [ 906.254434][T19200] binder: 19198:19200 ioctl 4018620d 200000000040 returned -16 [ 906.262465][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 906.407634][ T5936] usb 2-1: USB disconnect, device number 125 [ 906.438052][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.500641][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 906.513991][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.524269][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.538188][ T5936] appletouch 2-1:0.85: input: appletouch disconnected [ 906.576032][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3374'. [ 906.586538][ T9] usb 5-1: Product: syz [ 906.595246][ T9] usb 5-1: Manufacturer: syz [ 906.600121][ T9] usb 5-1: SerialNumber: syz [ 906.825966][T19220] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 906.900458][ T9] cdc_ncm 5-1:1.0: bind() failure [ 906.930654][T19236] FAULT_INJECTION: forcing a failure. [ 906.930654][T19236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.106395][T19222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.159837][T19236] CPU: 0 UID: 0 PID: 19236 Comm: syz.1.3375 Not tainted syzkaller #0 PREEMPT(full) [ 907.159862][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 907.159872][T19236] Call Trace: [ 907.159880][T19236] [ 907.159889][T19236] dump_stack_lvl+0x189/0x250 [ 907.159915][T19236] ? __pfx____ratelimit+0x10/0x10 [ 907.159935][T19236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.159956][T19236] ? __pfx__printk+0x10/0x10 [ 907.159977][T19236] ? __might_fault+0xb0/0x130 [ 907.160009][T19236] should_fail_ex+0x414/0x560 [ 907.160038][T19236] _copy_from_user+0x2d/0xb0 [ 907.160060][T19236] memdup_user+0x5e/0xd0 [ 907.160080][T19236] strndup_user+0x68/0xd0 [ 907.160100][T19236] __se_sys_mount+0x9c/0x410 [ 907.160126][T19236] ? exc_page_fault+0x76/0xf0 [ 907.160148][T19236] ? __pfx___se_sys_mount+0x10/0x10 [ 907.160181][T19236] ? do_user_addr_fault+0xc8a/0x1390 [ 907.160203][T19236] ? do_syscall_64+0xbe/0x3b0 [ 907.160221][T19236] ? __x64_sys_mount+0x20/0xc0 [ 907.160248][T19236] do_syscall_64+0xfa/0x3b0 [ 907.160266][T19236] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.160284][T19236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.160302][T19236] ? clear_bhb_loop+0x60/0xb0 [ 907.160323][T19236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.160340][T19236] RIP: 0033:0x7f8b44d9066a [ 907.160357][T19236] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.160372][T19236] RSP: 002b:00007f8b45bf9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 907.160390][T19236] RAX: ffffffffffffffda RBX: 00007f8b45bf9ef0 RCX: 00007f8b44d9066a [ 907.160404][T19236] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 907.160417][T19236] RBP: 0000200000000180 R08: 00007f8b45bf9ef0 R09: 0000000000000000 [ 907.160430][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 907.160442][T19236] R13: 00007f8b45bf9eb0 R14: 0000000000000000 R15: 0000200000000400 [ 907.160472][T19236] [ 907.400786][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 907.407655][ T9] cdc_ncm 5-1:1.1: bind() failure [ 907.497639][ T9] usb 5-1: USB disconnect, device number 47 [ 907.547447][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 907.638653][T19241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3377'. [ 907.658016][T19241] (unnamed net_device) (uninitialized): option ad_select: invalid value (3) [ 908.472333][T18719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.127907][ T5936] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 909.159618][T18719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.213463][T19259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.318250][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 909.375782][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 909.435674][ T5936] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 909.435720][T18719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.469488][ T5936] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 909.550164][ T5936] usb 2-1: config 8 has no interface number 0 [ 909.635989][ T5936] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.658361][ T5936] usb 2-1: config 8 interface 132 has no altsetting 0 [ 909.690223][ T5936] usb 2-1: string descriptor 0 read error: -22 [ 909.700626][ T5936] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 909.709748][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.741106][ T5936] usb-storage 2-1:8.132: USB Mass Storage device detected [ 909.859966][T18719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.957667][ T5936] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 909.977415][T19265] sctp: [Deprecated]: syz.5.3384 (pid 19265) Use of int in maxseg socket option. [ 909.977415][T19265] Use struct sctp_assoc_value instead [ 910.015864][T19269] loop5: detected capacity change from 0 to 7 [ 910.033737][T19265] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3384'. [ 910.055473][T19269] Dev loop5: unable to read RDB block 7 [ 910.095268][T19269] loop5: unable to read partition table [ 910.167040][T19269] loop5: partition table beyond EOD, truncated [ 910.216065][T19269] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 910.383334][T19272] FAULT_INJECTION: forcing a failure. [ 910.383334][T19272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.419575][T18719] bridge_slave_1: left allmulticast mode [ 910.442261][T18719] bridge_slave_1: left promiscuous mode [ 910.487145][T18719] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.526008][T19272] CPU: 1 UID: 0 PID: 19272 Comm: syz.5.3387 Not tainted syzkaller #0 PREEMPT(full) [ 910.526032][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 910.526044][T19272] Call Trace: [ 910.526052][T19272] [ 910.526061][T19272] dump_stack_lvl+0x189/0x250 [ 910.526081][T19272] ? __pfx____ratelimit+0x10/0x10 [ 910.526092][T19272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.526104][T19272] ? __pfx__printk+0x10/0x10 [ 910.526118][T19272] ? __might_fault+0xb0/0x130 [ 910.526137][T19272] should_fail_ex+0x414/0x560 [ 910.526155][T19272] _copy_from_user+0x2d/0xb0 [ 910.526169][T19272] __se_sys_mount+0x18a/0x410 [ 910.526188][T19272] ? __pfx___se_sys_mount+0x10/0x10 [ 910.526201][T19272] ? do_user_addr_fault+0xc8a/0x1390 [ 910.526213][T19272] ? do_syscall_64+0xbe/0x3b0 [ 910.526224][T19272] ? __x64_sys_mount+0x20/0xc0 [ 910.526239][T19272] do_syscall_64+0xfa/0x3b0 [ 910.526249][T19272] ? lockdep_hardirqs_on+0x9c/0x150 [ 910.526260][T19272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.526269][T19272] ? clear_bhb_loop+0x60/0xb0 [ 910.526281][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.526290][T19272] RIP: 0033:0x7fc9f579066a [ 910.526300][T19272] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.526308][T19272] RSP: 002b:00007fc9f65fde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 910.526320][T19272] RAX: ffffffffffffffda RBX: 00007fc9f65fdef0 RCX: 00007fc9f579066a [ 910.526327][T19272] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 910.526334][T19272] RBP: 0000200000000180 R08: 00007fc9f65fdef0 R09: 0000000000000000 [ 910.526343][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 910.526350][T19272] R13: 00007fc9f65fdeb0 R14: 0000000000000000 R15: 0000200000000400 [ 910.526365][T19272] [ 910.528070][T19272] fuse: Invalid rootmode [ 910.783284][T19276] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 910.798556][T18719] bridge_slave_0: left allmulticast mode [ 910.815520][T19276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.855126][T16377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.870689][T19276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.885092][T16377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.895400][T16377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.908825][T16377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.918936][T16377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.960150][T18719] bridge_slave_0: left promiscuous mode [ 910.990707][T18719] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.127854][ T9] usb 2-1: USB disconnect, device number 126 [ 911.274368][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.294958][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.777522][T18719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.790018][T18719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.800916][T18719] bond0 (unregistering): Released all slaves [ 911.817187][T19290] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 911.831900][T19289] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 912.164434][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3395'. [ 912.464654][T18719] hsr_slave_0: left promiscuous mode [ 912.497850][T18719] hsr_slave_1: left promiscuous mode [ 912.513234][T18719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.534493][T18719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.558236][T18719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.572582][T18719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.632876][T18719] veth1_macvtap: left promiscuous mode [ 912.650612][T18719] veth0_macvtap: left promiscuous mode [ 912.670049][T18719] veth1_vlan: left promiscuous mode [ 912.690703][T18719] veth0_vlan: left promiscuous mode [ 912.987727][ T5870] Bluetooth: hci0: command tx timeout [ 913.126497][T15860] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 913.309099][T15860] usb 2-1: Using ep0 maxpacket: 8 [ 913.316800][T15860] usb 2-1: config index 0 descriptor too short (expected 29970, got 18) [ 913.342034][T15860] usb 2-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 913.369883][T15860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 913.404993][T15860] usb 2-1: config 0 has no interface number 0 [ 913.417848][T15860] usb 2-1: too many endpoints for config 0 interface 97 altsetting 109: 101, using maximum allowed: 30 [ 913.433661][T15860] usb 2-1: config 0 interface 97 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 913.468769][T15860] usb 2-1: config 0 interface 97 has no altsetting 0 [ 913.493102][T15860] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 913.501625][T19323] loop5: detected capacity change from 0 to 7 [ 913.505765][T15860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.521614][T15860] usb 2-1: Product: syz [ 913.526048][ T5867] Dev loop5: unable to read RDB block 7 [ 913.527276][T15860] usb 2-1: Manufacturer: syz [ 913.537888][ T5867] loop5: unable to read partition table [ 913.538465][T15860] usb 2-1: SerialNumber: syz [ 913.543759][ T5867] loop5: partition table beyond EOD, truncated [ 913.564387][T15860] usb 2-1: config 0 descriptor?? [ 913.580831][T19323] Dev loop5: unable to read RDB block 7 [ 913.593833][T19323] loop5: unable to read partition table [ 913.600138][T19323] loop5: partition table beyond EOD, truncated [ 913.607606][T19323] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 914.558078][T19332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.701163][T19341] FAULT_INJECTION: forcing a failure. [ 914.701163][T19341] name failslab, interval 1, probability 0, space 0, times 0 [ 914.735651][T19341] CPU: 0 UID: 0 PID: 19341 Comm: syz.0.3401 Not tainted syzkaller #0 PREEMPT(full) [ 914.735677][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 914.735688][T19341] Call Trace: [ 914.735696][T19341] [ 914.735705][T19341] dump_stack_lvl+0x189/0x250 [ 914.735724][T19341] ? __pfx____ratelimit+0x10/0x10 [ 914.735741][T19341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.735761][T19341] ? __pfx__printk+0x10/0x10 [ 914.735790][T19341] ? __pfx___might_resched+0x10/0x10 [ 914.735812][T19341] should_fail_ex+0x414/0x560 [ 914.735843][T19341] should_failslab+0xa8/0x100 [ 914.735873][T19341] kmem_cache_alloc_noprof+0x73/0x3c0 [ 914.735896][T19341] ? getname_flags+0xb8/0x540 [ 914.735916][T19341] getname_flags+0xb8/0x540 [ 914.735938][T19341] user_path_at+0x24/0x60 [ 914.735958][T19341] __se_sys_mount+0x2d3/0x410 [ 914.735990][T19341] ? __pfx___se_sys_mount+0x10/0x10 [ 914.736020][T19341] ? do_syscall_64+0xbe/0x3b0 [ 914.736033][T19341] ? __x64_sys_mount+0x20/0xc0 [ 914.736051][T19341] do_syscall_64+0xfa/0x3b0 [ 914.736071][T19341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.736088][T19341] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 914.736105][T19341] ? clear_bhb_loop+0x60/0xb0 [ 914.736127][T19341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.736142][T19341] RIP: 0033:0x7fd8eb19066a [ 914.736153][T19341] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.736161][T19341] RSP: 002b:00007fd8ebfc5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 914.736173][T19341] RAX: ffffffffffffffda RBX: 00007fd8ebfc5ef0 RCX: 00007fd8eb19066a [ 914.736180][T19341] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 914.736187][T19341] RBP: 0000200000000180 R08: 00007fd8ebfc5ef0 R09: 0000000000000000 [ 914.736194][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 914.736203][T19341] R13: 00007fd8ebfc5eb0 R14: 0000000000000000 R15: 0000200000000400 [ 914.736233][T19341] [ 915.002344][T18719] team0 (unregistering): Port device team_slave_1 removed [ 915.061905][T16377] Bluetooth: hci0: command tx timeout [ 915.121384][T19343] fuse: Invalid rootmode [ 915.144482][T18719] team0 (unregistering): Port device team_slave_0 removed [ 915.439217][T19350] fuse: Bad value for 'user_id' [ 915.468532][T19350] fuse: Bad value for 'user_id' [ 916.295784][T19359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.312897][T19359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.454307][T19281] chnl_net:caif_netlink_parms(): no params data found [ 916.477368][ T5936] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 916.641668][ T5936] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 916.655640][ T5936] usb 6-1: New USB device strings: Mfr=240, Product=2, SerialNumber=3 [ 916.664065][ T5936] usb 6-1: Product: syz [ 916.673250][ T5936] usb 6-1: Manufacturer: syz [ 916.685997][ T5936] usb 6-1: SerialNumber: syz [ 916.700491][ T5936] usb 6-1: config 0 descriptor?? [ 916.741705][T19281] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.763999][T19281] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.771436][T19281] bridge_slave_0: entered allmulticast mode [ 916.779944][T19281] bridge_slave_0: entered promiscuous mode [ 916.790033][T19281] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.806307][T19281] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.813743][T19281] bridge_slave_1: entered allmulticast mode [ 916.823670][T19281] bridge_slave_1: entered promiscuous mode [ 916.884505][T15860] usb 2-1: USB disconnect, device number 127 [ 917.100509][ T30] audit: type=1800 audit(1759010833.903:1838): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3406" name="bus" dev="ramfs" ino=90325 res=0 errno=0 [ 917.128094][T16377] Bluetooth: hci0: command tx timeout [ 917.145164][T19281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.149780][T19281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.263603][T19281] team0: Port device team_slave_0 added [ 917.267225][T19281] team0: Port device team_slave_1 added [ 917.394074][T19281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.404540][T19281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.454742][T19281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.474287][T19281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.481724][T19281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.514120][T19281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.616242][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 917.753576][T19281] hsr_slave_0: entered promiscuous mode [ 917.787316][T19281] hsr_slave_1: entered promiscuous mode [ 917.794255][T19281] debugfs: 'hsr0' already exists in 'hsr' [ 917.809171][T19281] Cannot create hsr debugfs directory [ 917.818797][ T5929] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.851362][ T5929] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 917.907276][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.917075][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 917.929407][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 917.958771][ T5929] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 917.968124][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.978097][ T5929] usb 2-1: Product: syz [ 918.013621][ T5929] usb 2-1: Manufacturer: syz [ 918.041267][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 918.053914][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 918.070889][ T5929] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 918.088092][ T5929] cdc_wdm 2-1:1.0: Unknown control protocol [ 918.667969][T19395] FAULT_INJECTION: forcing a failure. [ 918.667969][T19395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.713961][T19395] CPU: 0 UID: 0 PID: 19395 Comm: syz.0.3411 Not tainted syzkaller #0 PREEMPT(full) [ 918.713986][T19395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 918.713998][T19395] Call Trace: [ 918.714005][T19395] [ 918.714014][T19395] dump_stack_lvl+0x189/0x250 [ 918.714040][T19395] ? __pfx____ratelimit+0x10/0x10 [ 918.714062][T19395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.714083][T19395] ? __pfx__printk+0x10/0x10 [ 918.714119][T19395] should_fail_ex+0x414/0x560 [ 918.714147][T19395] strncpy_from_user+0x36/0x290 [ 918.714176][T19395] getname_flags+0xf3/0x540 [ 918.714200][T19395] user_path_at+0x24/0x60 [ 918.714222][T19395] __se_sys_mount+0x2d3/0x410 [ 918.714252][T19395] ? __pfx___se_sys_mount+0x10/0x10 [ 918.714283][T19395] ? do_syscall_64+0xbe/0x3b0 [ 918.714300][T19395] ? __x64_sys_mount+0x20/0xc0 [ 918.714327][T19395] do_syscall_64+0xfa/0x3b0 [ 918.714345][T19395] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.714364][T19395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.714381][T19395] ? clear_bhb_loop+0x60/0xb0 [ 918.714401][T19395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.714419][T19395] RIP: 0033:0x7fd8eb19066a [ 918.714437][T19395] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.714453][T19395] RSP: 002b:00007fd8ebfc5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 918.714472][T19395] RAX: ffffffffffffffda RBX: 00007fd8ebfc5ef0 RCX: 00007fd8eb19066a [ 918.714486][T19395] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 918.714495][T19395] RBP: 0000200000000180 R08: 00007fd8ebfc5ef0 R09: 0000000000000000 [ 918.714506][T19395] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 918.714517][T19395] R13: 00007fd8ebfc5eb0 R14: 0000000000000000 R15: 0000200000000400 [ 918.714546][T19395] [ 919.145723][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.154669][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.187581][T19281] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 919.196964][T16377] Bluetooth: hci0: command tx timeout [ 919.213192][T19281] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 919.301947][T19281] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 919.320587][ T5936] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 919.343488][ T5936] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 919.380099][T19281] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 919.405852][ T5936] usb 6-1: USB disconnect, device number 125 [ 919.779294][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 919.792081][T19417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.858595][ T5936] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 919.970397][T19417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.024739][ T5936] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 920.044392][ T5936] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 920.061591][ T5936] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.084350][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.123036][T19409] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 920.147801][ T5936] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.347236][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.356218][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.482194][ T981] usb 2-1: USB disconnect, device number 2 [ 920.655791][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.665555][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.689738][ T30] audit: type=1326 audit(1759010837.453:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 920.760521][T19281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.910731][ T30] audit: type=1326 audit(1759010837.453:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9f578d710 code=0x7ffc0000 [ 921.055084][T19281] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.361838][ T30] audit: type=1326 audit(1759010837.453:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9f578eacb code=0x7ffc0000 [ 921.448936][T19433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.482358][ T30] audit: type=1326 audit(1759010837.453:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9f578eacb code=0x7ffc0000 [ 921.591900][ T30] audit: type=1326 audit(1759010837.483:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 921.622060][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.629295][T18040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.673085][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.680292][T18040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.785146][ T30] audit: type=1326 audit(1759010837.483:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 921.930905][ T30] audit: type=1326 audit(1759010837.483:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.124434][ T30] audit: type=1326 audit(1759010837.483:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.241768][ T30] audit: type=1326 audit(1759010837.483:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.252934][T19281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.372725][ T30] audit: type=1326 audit(1759010837.483:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.453987][ T30] audit: type=1326 audit(1759010837.483:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.586007][ T30] audit: type=1326 audit(1759010837.483:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f578eec9 code=0x7ffc0000 [ 922.673337][T19281] veth0_vlan: entered promiscuous mode [ 922.771291][T19281] veth1_vlan: entered promiscuous mode [ 923.027650][ T10] usb 6-1: USB disconnect, device number 126 [ 923.028021][T19281] veth0_macvtap: entered promiscuous mode [ 923.148083][T19281] veth1_macvtap: entered promiscuous mode [ 923.279145][T19281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.304044][T19281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.379562][T18719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.379625][T18719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.379662][T18719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.379697][T18719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.482904][T19461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.483301][T19461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.510690][T19461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.512928][T19461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.732286][ T8621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.732308][ T8621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.865004][T18040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.882228][T18040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.108370][T19480] tipc: Enabled bearer , priority 0 [ 924.132674][T19480] syzkaller0: entered promiscuous mode [ 924.151858][T19480] syzkaller0: entered allmulticast mode [ 924.200119][T19480] tipc: Resetting bearer [ 924.233261][T19479] tipc: Resetting bearer [ 924.329909][T19479] tipc: Disabling bearer [ 924.356412][ T5936] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 924.520493][ T5936] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 924.538023][ T5936] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 924.571639][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 924.602923][ T5936] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 924.630339][ T5936] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 924.679522][ T5936] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 924.705825][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 924.729697][ T5936] usb 2-1: Product: syz [ 924.738569][ T5936] usb 2-1: Manufacturer: syz [ 924.760317][ T5936] cdc_wdm 2-1:1.0: skipping garbage [ 924.778815][ T5936] cdc_wdm 2-1:1.0: skipping garbage [ 924.794463][ T5936] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 924.812871][ T5936] cdc_wdm 2-1:1.0: Unknown control protocol [ 924.996832][ T9] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 925.053215][ T30] audit: type=1326 audit(1759010841.853:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19499 comm="syz.6.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acd18eec9 code=0x7ffc0000 [ 925.166267][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 925.180731][ T9] usb 6-1: no configurations [ 925.186470][ T9] usb 6-1: can't read configurations, error -22 [ 925.337322][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 925.506045][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 925.514557][ T9] usb 6-1: no configurations [ 925.521194][ T9] usb 6-1: can't read configurations, error -22 [ 925.529144][ T9] usb usb6-port1: attempt power cycle [ 925.569886][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.578887][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.876030][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 925.896580][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 925.902322][ T9] usb 6-1: no configurations [ 925.907039][ T9] usb 6-1: can't read configurations, error -22 [ 926.036063][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 926.056654][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 926.062446][ T9] usb 6-1: no configurations [ 926.067523][ T9] usb 6-1: can't read configurations, error -22 [ 926.074131][ T9] usb usb6-port1: unable to enumerate USB device [ 926.396262][T16377] Bluetooth: hci5: command 0x0405 tx timeout [ 926.396698][T19487] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 926.414170][T19487] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 927.026225][ T10] usb 2-1: USB disconnect, device number 3 [ 927.197647][T19531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3439'. [ 927.318481][T19533] kernel profiling enabled (shift: 17) [ 927.328519][T19533] netlink: 'syz.6.3437': attribute type 10 has an invalid length. [ 927.336458][T19487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.345152][T19533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3437'. [ 927.355757][T19533] bridge0: port 1(dummy0) entered blocking state [ 927.362739][T19533] bridge0: port 1(dummy0) entered disabled state [ 927.369352][T19533] dummy0: entered allmulticast mode [ 927.377082][T19533] dummy0: entered promiscuous mode [ 927.396579][T19533] bridge0: port 1(dummy0) entered blocking state [ 927.403027][T19533] bridge0: port 1(dummy0) entered forwarding state [ 927.409971][T19487] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 927.569988][T19487] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 927.578564][T19487] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 927.864055][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'. [ 928.205973][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 928.254654][T19550] use of bytesused == 0 is deprecated and will be removed in the future, [ 928.267769][T19550] use the actual size instead. [ 928.375984][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 928.382545][ T5928] usb 2-1: too many configurations: 219, using maximum allowed: 8 [ 928.408651][ T5928] usb 2-1: New USB device found, idVendor=2770, idProduct=ab88, bcdDevice=3a.b1 [ 928.418095][ T5928] usb 2-1: New USB device strings: Mfr=88, Product=0, SerialNumber=216 [ 928.426933][ T5928] usb 2-1: Manufacturer: syz [ 928.431537][ T5928] usb 2-1: SerialNumber: syz [ 928.441782][ T5928] usb 2-1: config 0 descriptor?? [ 928.856223][T19559] input: syz1 as /devices/virtual/input/input64 [ 928.878453][T19559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.898149][T19561] bond_slave_1: entered promiscuous mode [ 928.900436][T19559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.031324][T19544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.055375][T19544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.416499][T15860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 929.580760][T15860] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 929.614107][T15860] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 929.630601][T15860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 929.640923][T15860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 929.658268][T15860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 929.682527][T15860] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 929.713226][T15860] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 929.725121][T15860] usb 6-1: Product: syz [ 929.731970][T15860] usb 6-1: Manufacturer: syz [ 929.757629][T15860] cdc_wdm 6-1:1.0: skipping garbage [ 929.770787][T15860] cdc_wdm 6-1:1.0: skipping garbage [ 929.784595][T15860] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 929.797785][T15860] cdc_wdm 6-1:1.0: Unknown control protocol [ 929.855482][T19585] fuse: Bad value for 'fd' [ 930.308024][T19595] hub 9-0:1.0: USB hub found [ 930.314744][T19595] hub 9-0:1.0: 1 port detected [ 930.731089][ T5928] usb 2-1: USB disconnect, device number 4 [ 931.118840][T19599] bond1 (unregistering): Released all slaves [ 931.532136][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.543476][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.596273][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 931.784030][ T5928] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 931.793594][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.811211][ T5928] usb 2-1: Product: syz [ 931.815473][ T5928] usb 2-1: Manufacturer: syz [ 931.825372][ T5928] usb 2-1: SerialNumber: syz [ 931.940903][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.961086][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.122282][T15860] usb 6-1: USB disconnect, device number 5 [ 933.001281][T19609] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.052765][T19636] FAULT_INJECTION: forcing a failure. [ 933.052765][T19636] name failslab, interval 1, probability 0, space 0, times 0 [ 933.092217][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.5.3466 Not tainted syzkaller #0 PREEMPT(full) [ 933.092247][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.092260][T19636] Call Trace: [ 933.092268][T19636] [ 933.092277][T19636] dump_stack_lvl+0x189/0x250 [ 933.092303][T19636] ? __pfx____ratelimit+0x10/0x10 [ 933.092315][T19636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.092327][T19636] ? __pfx__printk+0x10/0x10 [ 933.092342][T19636] ? __pfx___might_resched+0x10/0x10 [ 933.092352][T19636] ? fs_reclaim_acquire+0x7d/0x100 [ 933.092371][T19636] should_fail_ex+0x414/0x560 [ 933.092403][T19636] should_failslab+0xa8/0x100 [ 933.092429][T19636] __kmalloc_cache_noprof+0x70/0x3d0 [ 933.092452][T19636] ? alloc_fs_context+0x61/0x7d0 [ 933.092469][T19636] alloc_fs_context+0x61/0x7d0 [ 933.092483][T19636] ? do_raw_read_unlock+0x3d/0x80 [ 933.092495][T19636] ? _raw_read_unlock+0x28/0x50 [ 933.092505][T19636] ? get_fs_type+0x407/0x480 [ 933.092525][T19636] do_new_mount+0x16f/0x9e0 [ 933.092555][T19636] ? ns_capable+0x8a/0xf0 [ 933.092573][T19636] ? __pfx_do_new_mount+0x10/0x10 [ 933.092597][T19636] ? path_mount+0x61c/0xfe0 [ 933.092613][T19636] ? user_path_at+0x44/0x60 [ 933.092630][T19636] __se_sys_mount+0x317/0x410 [ 933.092648][T19636] ? __pfx___se_sys_mount+0x10/0x10 [ 933.092670][T19636] ? do_syscall_64+0xbe/0x3b0 [ 933.092689][T19636] ? __x64_sys_mount+0x20/0xc0 [ 933.092717][T19636] do_syscall_64+0xfa/0x3b0 [ 933.092735][T19636] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.092753][T19636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.092763][T19636] ? clear_bhb_loop+0x60/0xb0 [ 933.092775][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.092785][T19636] RIP: 0033:0x7fc9f579066a [ 933.092796][T19636] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.092812][T19636] RSP: 002b:00007fc9f65fde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 933.092831][T19636] RAX: ffffffffffffffda RBX: 00007fc9f65fdef0 RCX: 00007fc9f579066a [ 933.092845][T19636] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 933.092858][T19636] RBP: 0000200000000180 R08: 00007fc9f65fdef0 R09: 0000000000000000 [ 933.092871][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 933.092883][T19636] R13: 00007fc9f65fdeb0 R14: 0000000000000000 R15: 0000200000000400 [ 933.092908][T19636] [ 934.651577][ T5928] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 934.695113][ T5928] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 934.707437][ T5928] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 934.739561][ T5928] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 934.766858][ T5928] usb 2-1: USB disconnect, device number 5 [ 934.938395][T19667] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3474'. [ 935.294538][T19680] tipc: Enabled bearer , priority 0 [ 935.306144][ T981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 935.306904][T19680] syzkaller0: entered promiscuous mode [ 935.330623][T19684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=511 (1022 ns) > initial count (2 ns). Using initial count to start timer. [ 935.369380][T19680] syzkaller0: entered allmulticast mode [ 935.408069][T19688] FAULT_INJECTION: forcing a failure. [ 935.408069][T19688] name failslab, interval 1, probability 0, space 0, times 0 [ 935.443554][T19680] tipc: Resetting bearer [ 935.456812][T19688] CPU: 1 UID: 0 PID: 19688 Comm: syz.7.3479 Not tainted syzkaller #0 PREEMPT(full) [ 935.456836][T19688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 935.456847][T19688] Call Trace: [ 935.456855][T19688] [ 935.456863][T19688] dump_stack_lvl+0x189/0x250 [ 935.456889][T19688] ? __pfx____ratelimit+0x10/0x10 [ 935.456910][T19688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.456931][T19688] ? __pfx__printk+0x10/0x10 [ 935.456957][T19688] ? __pfx___might_resched+0x10/0x10 [ 935.456975][T19688] ? fs_reclaim_acquire+0x7d/0x100 [ 935.456996][T19688] should_fail_ex+0x414/0x560 [ 935.457027][T19688] should_failslab+0xa8/0x100 [ 935.457053][T19688] __kmalloc_cache_noprof+0x70/0x3d0 [ 935.457077][T19688] ? fuse_init_fs_context+0x55/0x210 [ 935.457105][T19688] fuse_init_fs_context+0x55/0x210 [ 935.457127][T19688] ? __pfx_fuse_init_fs_context+0x10/0x10 [ 935.457156][T19688] alloc_fs_context+0x64e/0x7d0 [ 935.457192][T19688] do_new_mount+0x16f/0x9e0 [ 935.457221][T19688] ? ns_capable+0x8a/0xf0 [ 935.457239][T19688] ? __pfx_do_new_mount+0x10/0x10 [ 935.457261][T19688] ? path_mount+0x61c/0xfe0 [ 935.457284][T19688] ? user_path_at+0x44/0x60 [ 935.457313][T19688] __se_sys_mount+0x317/0x410 [ 935.457345][T19688] ? __pfx___se_sys_mount+0x10/0x10 [ 935.457375][T19688] ? do_syscall_64+0xbe/0x3b0 [ 935.457395][T19688] ? __x64_sys_mount+0x20/0xc0 [ 935.457422][T19688] do_syscall_64+0xfa/0x3b0 [ 935.457439][T19688] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.457458][T19688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.457475][T19688] ? clear_bhb_loop+0x60/0xb0 [ 935.457497][T19688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.457515][T19688] RIP: 0033:0x7fd2f119066a [ 935.457532][T19688] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.457547][T19688] RSP: 002b:00007fd2f1fabe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 935.457567][T19688] RAX: ffffffffffffffda RBX: 00007fd2f1fabef0 RCX: 00007fd2f119066a [ 935.457580][T19688] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 935.457593][T19688] RBP: 0000200000000180 R08: 00007fd2f1fabef0 R09: 0000000000000000 [ 935.457605][T19688] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 935.457617][T19688] R13: 00007fd2f1fabeb0 R14: 0000000000000000 R15: 0000200000000400 [ 935.457644][T19688] [ 935.471182][T19679] tipc: Resetting bearer [ 935.719375][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 935.738011][ T981] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 935.748676][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.782518][ T981] usb 2-1: Product: syz [ 935.786793][ T981] usb 2-1: Manufacturer: syz [ 935.794890][ T981] usb 2-1: SerialNumber: syz [ 935.825473][ T981] usb 2-1: config 0 descriptor?? [ 935.831677][T19679] tipc: Disabling bearer [ 936.032124][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 936.049903][T19703] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3482'. [ 936.065760][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 936.086845][T19704] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3481'. [ 936.120966][T19709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.135726][T19709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.145462][ T981] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 936.177422][ T981] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 936.196027][T19710] netlink: 'syz.5.3483': attribute type 6 has an invalid length. [ 936.228013][T19703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.422818][ T981] usb 2-1: USB disconnect, device number 6 [ 936.463496][T19703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.497391][T19714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3484'. [ 937.291339][T19732] FAULT_INJECTION: forcing a failure. [ 937.291339][T19732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.346921][T19736] loop5: detected capacity change from 0 to 7 [ 937.357054][T19732] CPU: 1 UID: 0 PID: 19732 Comm: syz.1.3487 Not tainted syzkaller #0 PREEMPT(full) [ 937.357078][T19732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 937.357088][T19732] Call Trace: [ 937.357097][T19732] [ 937.357105][T19732] dump_stack_lvl+0x189/0x250 [ 937.357132][T19732] ? __pfx____ratelimit+0x10/0x10 [ 937.357153][T19732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.357173][T19732] ? __pfx__printk+0x10/0x10 [ 937.357196][T19732] ? __might_fault+0xb0/0x130 [ 937.357232][T19732] should_fail_ex+0x414/0x560 [ 937.357269][T19732] _copy_from_user+0x2d/0xb0 [ 937.357293][T19732] ___sys_sendmsg+0x158/0x2a0 [ 937.357318][T19732] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.357377][T19732] ? __fget_files+0x2a/0x420 [ 937.357393][T19732] ? __fget_files+0x3a0/0x420 [ 937.357420][T19732] __x64_sys_sendmsg+0x19b/0x260 [ 937.357446][T19732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.357477][T19732] ? __pfx_ksys_write+0x10/0x10 [ 937.357497][T19732] ? rcu_is_watching+0x15/0xb0 [ 937.357521][T19732] ? do_syscall_64+0xbe/0x3b0 [ 937.357545][T19732] do_syscall_64+0xfa/0x3b0 [ 937.357563][T19732] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.357582][T19732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.357600][T19732] ? clear_bhb_loop+0x60/0xb0 [ 937.357622][T19732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.357639][T19732] RIP: 0033:0x7f8b44d8eec9 [ 937.357655][T19732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.357671][T19732] RSP: 002b:00007f8b45bfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.357690][T19732] RAX: ffffffffffffffda RBX: 00007f8b44fe5fa0 RCX: 00007f8b44d8eec9 [ 937.357704][T19732] RDX: 0000000008000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 937.357716][T19732] RBP: 00007f8b45bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 937.357727][T19732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.357738][T19732] R13: 00007f8b44fe6038 R14: 00007f8b44fe5fa0 R15: 00007f8b4510fa28 [ 937.357768][T19732] [ 937.569647][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.643769][T19736] Dev loop5: unable to read RDB block 7 [ 937.676552][T19736] loop5: unable to read partition table [ 937.716278][T19736] loop5: partition table beyond EOD, truncated [ 937.743373][T19736] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 937.792675][T19746] FAULT_INJECTION: forcing a failure. [ 937.792675][T19746] name failslab, interval 1, probability 0, space 0, times 0 [ 937.805398][T19746] CPU: 1 UID: 0 PID: 19746 Comm: syz.6.3490 Not tainted syzkaller #0 PREEMPT(full) [ 937.805422][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 937.805434][T19746] Call Trace: [ 937.805441][T19746] [ 937.805450][T19746] dump_stack_lvl+0x189/0x250 [ 937.805475][T19746] ? __pfx____ratelimit+0x10/0x10 [ 937.805496][T19746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.805516][T19746] ? __pfx__printk+0x10/0x10 [ 937.805543][T19746] ? __pfx___might_resched+0x10/0x10 [ 937.805561][T19746] ? fs_reclaim_acquire+0x7d/0x100 [ 937.805584][T19746] should_fail_ex+0x414/0x560 [ 937.805614][T19746] should_failslab+0xa8/0x100 [ 937.805640][T19746] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 937.805665][T19746] ? vfs_parse_monolithic_sep+0x21f/0x310 [ 937.805696][T19746] kmemdup_nul+0x36/0xf0 [ 937.805718][T19746] vfs_parse_monolithic_sep+0x21f/0x310 [ 937.805743][T19746] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 937.805770][T19746] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 937.805804][T19746] ? alloc_fs_context+0x665/0x7d0 [ 937.805838][T19746] do_new_mount+0x273/0x9e0 [ 937.805869][T19746] ? ns_capable+0x8a/0xf0 [ 937.805886][T19746] ? __pfx_do_new_mount+0x10/0x10 [ 937.805908][T19746] ? path_mount+0x61c/0xfe0 [ 937.805930][T19746] ? user_path_at+0x44/0x60 [ 937.805959][T19746] __se_sys_mount+0x317/0x410 [ 937.805990][T19746] ? __pfx___se_sys_mount+0x10/0x10 [ 937.806021][T19746] ? do_syscall_64+0xbe/0x3b0 [ 937.806038][T19746] ? __x64_sys_mount+0x20/0xc0 [ 937.806065][T19746] do_syscall_64+0xfa/0x3b0 [ 937.806083][T19746] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.806101][T19746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.806119][T19746] ? clear_bhb_loop+0x60/0xb0 [ 937.806139][T19746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.806161][T19746] RIP: 0033:0x7f8acd19066a [ 937.806178][T19746] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.806194][T19746] RSP: 002b:00007f8ace015e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.806213][T19746] RAX: ffffffffffffffda RBX: 00007f8ace015ef0 RCX: 00007f8acd19066a [ 937.806227][T19746] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 937.806239][T19746] RBP: 0000200000000180 R08: 00007f8ace015ef0 R09: 0000000000000000 [ 937.806250][T19746] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 937.806262][T19746] R13: 00007f8ace015eb0 R14: 0000000000000000 R15: 0000200000000400 [ 937.806291][T19746] [ 938.052487][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.136901][ T5238] Dev loop5: unable to read RDB block 7 [ 938.142628][ T5238] loop5: unable to read partition table [ 938.149482][ T5238] loop5: partition table beyond EOD, truncated [ 938.444011][T19753] loop6: detected capacity change from 0 to 524287999 [ 939.348851][T19793] FAULT_INJECTION: forcing a failure. [ 939.348851][T19793] name failslab, interval 1, probability 0, space 0, times 0 [ 939.362202][T19793] CPU: 0 UID: 0 PID: 19793 Comm: syz.7.3501 Not tainted syzkaller #0 PREEMPT(full) [ 939.362225][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 939.362236][T19793] Call Trace: [ 939.362244][T19793] [ 939.362252][T19793] dump_stack_lvl+0x189/0x250 [ 939.362284][T19793] ? __pfx____ratelimit+0x10/0x10 [ 939.362304][T19793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.362325][T19793] ? __pfx__printk+0x10/0x10 [ 939.362354][T19793] ? __pfx___might_resched+0x10/0x10 [ 939.362376][T19793] should_fail_ex+0x414/0x560 [ 939.362406][T19793] should_failslab+0xa8/0x100 [ 939.362432][T19793] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 939.362456][T19793] ? __alloc_skb+0x112/0x2d0 [ 939.362480][T19793] __alloc_skb+0x112/0x2d0 [ 939.362504][T19793] netlink_sendmsg+0x5c6/0xb30 [ 939.362535][T19793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.362558][T19793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 939.362578][T19793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 939.362598][T19793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.362618][T19793] __sock_sendmsg+0x219/0x270 [ 939.362647][T19793] ____sys_sendmsg+0x505/0x830 [ 939.362675][T19793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.362706][T19793] ? import_iovec+0x74/0xa0 [ 939.362733][T19793] ___sys_sendmsg+0x21f/0x2a0 [ 939.362757][T19793] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.362816][T19793] ? __fget_files+0x2a/0x420 [ 939.362832][T19793] ? __fget_files+0x3a0/0x420 [ 939.362859][T19793] __x64_sys_sendmsg+0x19b/0x260 [ 939.362883][T19793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.362915][T19793] ? __pfx_ksys_write+0x10/0x10 [ 939.362935][T19793] ? rcu_is_watching+0x15/0xb0 [ 939.362958][T19793] ? do_syscall_64+0xbe/0x3b0 [ 939.362982][T19793] do_syscall_64+0xfa/0x3b0 [ 939.362999][T19793] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.363017][T19793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.363034][T19793] ? clear_bhb_loop+0x60/0xb0 [ 939.363056][T19793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.363073][T19793] RIP: 0033:0x7fd2f118eec9 [ 939.363090][T19793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.363106][T19793] RSP: 002b:00007fd2f1fac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.363125][T19793] RAX: ffffffffffffffda RBX: 00007fd2f13e5fa0 RCX: 00007fd2f118eec9 [ 939.363139][T19793] RDX: 0000000008000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 939.363152][T19793] RBP: 00007fd2f1fac090 R08: 0000000000000000 R09: 0000000000000000 [ 939.363164][T19793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.363175][T19793] R13: 00007fd2f13e6038 R14: 00007fd2f13e5fa0 R15: 00007fd2f150fa28 [ 939.363206][T19793] [ 939.630583][ T5936] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 939.790362][ T5936] usb 2-1: config 1 interface 0 has no altsetting 0 [ 939.811325][ T5936] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 939.843486][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.865675][T19799] AppArmor: change_hat: Invalid input '>dio#' [ 939.902159][ T5936] usb 2-1: Product: syz [ 939.912709][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 939.943257][ T5936] usb 2-1: Manufacturer: syz [ 939.956185][ T5936] usb 2-1: SerialNumber: syz [ 940.047419][T19807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.060206][T19807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.068671][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 940.076523][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.084707][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 940.100483][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.113212][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.125074][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 940.139104][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.146852][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 940.163840][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.177127][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.192961][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 940.233903][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.242137][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 940.264584][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.288146][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.315315][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 940.332316][ T5928] usb 6-1: string descriptor 0 read error: -22 [ 940.339675][ T5928] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 940.349035][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.380877][ T5928] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 940.397203][ T5936] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 940.427626][ T5936] usb 2-1: USB disconnect, device number 7 [ 940.450346][ T5936] usblp1: removed [ 941.791447][T19829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.287220][ T10] usb 6-1: USB disconnect, device number 6 [ 942.384628][T19840] tipc: Enabled bearer , priority 0 [ 942.461248][T19840] tipc: Disabling bearer [ 942.995205][T19853] fuse: Invalid rootmode [ 943.223859][T19857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3515'. [ 943.600880][T19871] fuse: Invalid rootmode [ 943.610736][T19871] FAULT_INJECTION: forcing a failure. [ 943.610736][T19871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.624007][T19871] CPU: 0 UID: 0 PID: 19871 Comm: syz.0.3521 Not tainted syzkaller #0 PREEMPT(full) [ 943.624030][T19871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 943.624040][T19871] Call Trace: [ 943.624049][T19871] [ 943.624056][T19871] dump_stack_lvl+0x189/0x250 [ 943.624082][T19871] ? __pfx____ratelimit+0x10/0x10 [ 943.624103][T19871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.624123][T19871] ? __pfx__printk+0x10/0x10 [ 943.624159][T19871] should_fail_ex+0x414/0x560 [ 943.624190][T19871] _copy_to_user+0x31/0xb0 [ 943.624215][T19871] simple_read_from_buffer+0xe1/0x170 [ 943.624245][T19871] proc_fail_nth_read+0x1b3/0x220 [ 943.624268][T19871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.624291][T19871] ? rw_verify_area+0x2a6/0x4d0 [ 943.624312][T19871] ? __lock_acquire+0xab9/0xd20 [ 943.624334][T19871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.624357][T19871] vfs_read+0x200/0xa30 [ 943.624377][T19871] ? fdget_pos+0x247/0x320 [ 943.624398][T19871] ? __pfx___mutex_lock+0x10/0x10 [ 943.624419][T19871] ? __pfx_vfs_read+0x10/0x10 [ 943.624443][T19871] ? __fget_files+0x2a/0x420 [ 943.624464][T19871] ? __fget_files+0x3a0/0x420 [ 943.624479][T19871] ? __fget_files+0x2a/0x420 [ 943.624505][T19871] ksys_read+0x145/0x250 [ 943.624529][T19871] ? __pfx_ksys_read+0x10/0x10 [ 943.624549][T19871] ? rcu_is_watching+0x15/0xb0 [ 943.624573][T19871] ? do_syscall_64+0xbe/0x3b0 [ 943.624597][T19871] do_syscall_64+0xfa/0x3b0 [ 943.624615][T19871] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.624634][T19871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.624653][T19871] ? clear_bhb_loop+0x60/0xb0 [ 943.624673][T19871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.624690][T19871] RIP: 0033:0x7fd8eb18d8dc [ 943.624706][T19871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 943.624722][T19871] RSP: 002b:00007fd8ebfc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 943.624740][T19871] RAX: ffffffffffffffda RBX: 00007fd8eb3e5fa0 RCX: 00007fd8eb18d8dc [ 943.624753][T19871] RDX: 000000000000000f RSI: 00007fd8ebfc60a0 RDI: 0000000000000004 [ 943.624765][T19871] RBP: 00007fd8ebfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 943.624776][T19871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.624786][T19871] R13: 00007fd8eb3e6038 R14: 00007fd8eb3e5fa0 R15: 00007fd8eb50fa28 [ 943.624817][T19871] [ 944.187059][T19877] tipc: Enabled bearer , priority 0 [ 944.194293][T19877] syzkaller0: entered promiscuous mode [ 944.212663][T19877] syzkaller0: entered allmulticast mode [ 944.313087][T19879] tipc: Resetting bearer [ 944.476328][T19876] tipc: Resetting bearer [ 944.484884][T19893] FAULT_INJECTION: forcing a failure. [ 944.484884][T19893] name failslab, interval 1, probability 0, space 0, times 0 [ 944.578836][T19893] CPU: 1 UID: 0 PID: 19893 Comm: syz.7.3527 Not tainted syzkaller #0 PREEMPT(full) [ 944.578853][T19893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 944.578869][T19893] Call Trace: [ 944.578874][T19893] [ 944.578879][T19893] dump_stack_lvl+0x189/0x250 [ 944.578896][T19893] ? __pfx____ratelimit+0x10/0x10 [ 944.578909][T19893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.578920][T19893] ? __pfx__printk+0x10/0x10 [ 944.578935][T19893] ? lowpan_control_write+0x2b0/0x6c0 [ 944.578952][T19893] should_fail_ex+0x414/0x560 [ 944.578970][T19893] should_failslab+0xa8/0x100 [ 944.578986][T19893] __kmalloc_cache_noprof+0x70/0x3d0 [ 944.579000][T19893] ? l2cap_chan_create+0x50/0x760 [ 944.579017][T19893] l2cap_chan_create+0x50/0x760 [ 944.579031][T19893] lowpan_control_write+0x360/0x6c0 [ 944.579044][T19893] ? __pfx_lowpan_control_write+0x10/0x10 [ 944.579059][T19893] ? __pfx___debugfs_file_get+0x10/0x10 [ 944.579071][T19893] ? rcu_read_lock_any_held+0xb3/0x120 [ 944.579082][T19893] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 944.579096][T19893] full_proxy_write+0x127/0x1f0 [ 944.579108][T19893] ? __pfx_full_proxy_write+0x10/0x10 [ 944.579119][T19893] vfs_write+0x27b/0xb30 [ 944.579138][T19893] ? __pfx_vfs_write+0x10/0x10 [ 944.579152][T19893] ? __fget_files+0x2a/0x420 [ 944.579163][T19893] ? __fget_files+0x3a0/0x420 [ 944.579172][T19893] ? __fget_files+0x2a/0x420 [ 944.579185][T19893] ksys_write+0x145/0x250 [ 944.579200][T19893] ? __pfx_ksys_write+0x10/0x10 [ 944.579211][T19893] ? rcu_is_watching+0x15/0xb0 [ 944.579224][T19893] ? do_syscall_64+0xbe/0x3b0 [ 944.579238][T19893] do_syscall_64+0xfa/0x3b0 [ 944.579248][T19893] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.579258][T19893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.579268][T19893] ? clear_bhb_loop+0x60/0xb0 [ 944.579281][T19893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.579290][T19893] RIP: 0033:0x7fd2f118eec9 [ 944.579300][T19893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.579309][T19893] RSP: 002b:00007fd2f1fac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 944.579321][T19893] RAX: ffffffffffffffda RBX: 00007fd2f13e5fa0 RCX: 00007fd2f118eec9 [ 944.579329][T19893] RDX: 000000000000001b RSI: 00002000000006c0 RDI: 0000000000000004 [ 944.579335][T19893] RBP: 00007fd2f1fac090 R08: 0000000000000000 R09: 0000000000000000 [ 944.579341][T19893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.579347][T19893] R13: 00007fd2f13e6038 R14: 00007fd2f13e5fa0 R15: 00007fd2f150fa28 [ 944.579363][T19893] [ 944.580068][T19893] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3527'. [ 944.850805][T19876] tipc: Disabling bearer [ 945.396433][T19888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.743884][T19905] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3531'. [ 946.206116][ T981] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 946.366448][ T981] usb 6-1: device descriptor read/64, error -71 [ 946.445365][T19920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3535'. [ 946.766439][ T981] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 946.946279][ T981] usb 6-1: device descriptor read/64, error -71 [ 947.056399][ T981] usb usb6-port1: attempt power cycle [ 947.543281][ T981] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 947.597014][ T981] usb 6-1: device descriptor read/8, error -71 [ 947.906067][ T981] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 947.926956][ T981] usb 6-1: device descriptor read/8, error -71 [ 948.125133][ T981] usb usb6-port1: unable to enumerate USB device [ 948.643711][T19949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.001039][T16307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 949.216016][T16307] usb 2-1: Using ep0 maxpacket: 32 [ 949.223584][T16307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.255030][T16307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.266805][T16307] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 949.284467][T16307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.313421][T16307] usb 2-1: config 0 descriptor?? [ 949.425174][T16307] hub 2-1:0.0: USB hub found [ 949.643737][T16307] hub 2-1:0.0: 2 ports detected [ 949.853530][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 949.877103][T16307] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 949.891774][T16307] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 950.236078][T16307] usbhid 2-1:0.0: can't add hid device: -71 [ 950.246020][T16307] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 950.306524][T16307] usb 2-1: USB disconnect, device number 8 [ 950.882098][T19970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.436059][ T981] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 951.597987][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.635987][ T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.651808][ T981] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.661838][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.672152][ T981] usb 2-1: Product: syz [ 951.677636][ T981] usb 2-1: Manufacturer: syz [ 951.682405][ T981] usb 2-1: SerialNumber: syz [ 952.124217][ T981] usb 2-1: cannot find UAC_HEADER [ 952.239914][ T981] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 952.306408][ T981] usb 2-1: USB disconnect, device number 9 [ 952.350891][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.457801][T16307] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 952.562724][T19998] fuse: Unknown parameter 'gr' [ 952.608254][T16307] usb 6-1: device descriptor read/64, error -71 [ 953.043778][T20011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.079736][T16307] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 953.090821][T20003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.104170][T20011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.235973][T16307] usb 6-1: device descriptor read/64, error -71 [ 953.346379][T16307] usb usb6-port1: attempt power cycle [ 953.444658][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3560'. [ 953.685932][T16307] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 953.716761][T16307] usb 6-1: device descriptor read/8, error -71 [ 954.276154][T16307] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 954.343341][T16307] usb 6-1: device descriptor read/8, error -71 [ 954.463669][T20029] tipc: Enabled bearer , priority 0 [ 954.471011][T16307] usb usb6-port1: unable to enumerate USB device [ 954.481573][T20029] syzkaller0: entered promiscuous mode [ 954.491324][T20029] syzkaller0: entered allmulticast mode [ 954.557908][T20029] tipc: Resetting bearer [ 954.609236][T20028] tipc: Resetting bearer [ 954.637316][T20028] tipc: Disabling bearer [ 954.772961][T20033] block device autoloading is deprecated and will be removed. [ 956.462145][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3570'. [ 957.788364][T20068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.252078][T20084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.306525][T20087] tipc: Enabled bearer , priority 0 [ 959.313842][T20087] syzkaller0: entered promiscuous mode [ 959.320658][T20087] syzkaller0: entered allmulticast mode [ 959.435097][T20082] tipc: Resetting bearer [ 959.451442][T20091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.484550][T20091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.522459][T20080] tipc: Resetting bearer [ 959.570975][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3578'. [ 959.582262][T20080] tipc: Disabling bearer [ 960.336898][ T5928] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 960.511121][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.537639][ T5928] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 960.575621][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.594266][ T5928] usb 2-1: config 0 descriptor?? [ 961.100648][ T5928] lenovo 0003:04B3:3100.0021: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 961.300607][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.310519][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.379925][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.400554][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.850669][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3591'. [ 961.900384][ T5929] usb 2-1: USB disconnect, device number 10 [ 962.196311][T20139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.456885][T20148] netlink: 'syz.7.3593': attribute type 4 has an invalid length. [ 962.601700][T20147] tipc: Enabled bearer , priority 0 [ 962.612546][T20151] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3593'. [ 962.625200][T20149] syzkaller0: entered promiscuous mode [ 962.647551][T20149] syzkaller0: entered allmulticast mode [ 962.693689][T20144] tipc: Resetting bearer [ 962.737231][T20143] tipc: Resetting bearer [ 962.801596][T20143] tipc: Disabling bearer [ 963.386503][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 963.546517][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 963.556656][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 963.567664][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.584711][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 963.595280][ T5928] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 963.612575][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 963.620742][ T5928] usb 2-1: Product: syz [ 963.632249][ T5928] usb 2-1: SerialNumber: syz [ 963.869243][T20155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.888188][T20155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.952471][ T5928] gspca_main: spca501-2.14.0 probing 0000:0000 [ 963.979326][ T5928] gspca_spca501: reg write: error -71 [ 963.992510][ T5928] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 964.011294][ T5928] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 964.028864][ T5928] usb 2-1: 0:2 : does not exist [ 964.106769][ T5928] usb 2-1: USB disconnect, device number 11 [ 964.947106][T20184] tun0: tun_chr_ioctl cmd 2147767517 [ 965.527329][T20191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.536798][T20191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.778251][T20199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.036977][T20179] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 968.285940][ T981] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 968.460093][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 968.470552][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.486076][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.496588][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 968.556492][ T981] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 968.586272][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.633069][ T981] usb 6-1: config 0 descriptor?? [ 969.155446][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3616'. [ 969.587592][ T981] appleir 0003:05AC:8241.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 969.732444][ T981] usb 6-1: USB disconnect, device number 15 [ 969.797311][T20245] fido_id[20245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 970.736962][T20250] tipc: Enabled bearer , priority 0 [ 970.771404][T20250] syzkaller0: entered promiscuous mode [ 970.800858][T20250] syzkaller0: entered allmulticast mode [ 970.871080][T20249] tipc: Resetting bearer [ 971.237613][T20249] tipc: Disabling bearer [ 971.351914][T20254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.626996][T20259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3622'. [ 971.846370][T20270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.863048][T20270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.160531][T20305] tipc: Enabled bearer , priority 0 [ 974.198989][T20305] syzkaller0: entered promiscuous mode [ 974.204482][T20305] syzkaller0: entered allmulticast mode [ 974.301483][T20304] tipc: Resetting bearer [ 974.335201][T20304] tipc: Disabling bearer [ 975.727846][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3636'. [ 975.737975][T20329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.929224][T20329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.206175][T15860] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 977.370910][T15860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 977.383789][T15860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 977.413361][T15860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.432506][T15860] usb 2-1: Product: syz [ 977.456199][T15860] usb 2-1: Manufacturer: syz [ 977.476458][T15860] usb 2-1: SerialNumber: syz [ 977.931811][T15860] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 979.008797][T20349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.595584][T20354] tipc: Enabled bearer , priority 0 [ 979.612044][T20354] syzkaller0: entered promiscuous mode [ 979.635574][T20354] syzkaller0: entered allmulticast mode [ 979.733003][T20354] tipc: Resetting bearer [ 979.763552][T20353] tipc: Resetting bearer [ 979.811228][T20353] tipc: Disabling bearer [ 980.876657][T15860] usb 2-1: USB disconnect, device number 12 [ 980.897845][T15860] usblp0: removed [ 981.225962][T15860] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 981.266472][T20384] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 981.273014][T20384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 981.326733][T20384] vhci_hcd vhci_hcd.0: Device attached [ 981.390430][T15860] usb 2-1: Using ep0 maxpacket: 8 [ 981.400468][T15860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 981.427176][T15860] usb 2-1: config 3 has an invalid interface number: 182 but max is 0 [ 981.506149][ T10] vhci_hcd: vhci_device speed not set [ 981.516019][T15860] usb 2-1: config 3 has no interface number 0 [ 981.532449][T15860] usb 2-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 981.562531][T15860] usb 2-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 981.566172][ T10] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 981.605923][T15860] usb 2-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 981.716289][T15860] usb 2-1: config 3 interface 182 has no altsetting 0 [ 981.745701][T15860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 981.759548][T15860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.789464][T20389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3651'. [ 981.817291][T15860] usb 2-1: Product: syz [ 981.828979][T15860] usb 2-1: Manufacturer: syz [ 981.888063][T15860] usb 2-1: SerialNumber: syz [ 981.993838][T20385] vhci_hcd: cannot find a urb of seqnum 4 max seqnum 1 [ 982.036358][ T8616] vhci_hcd: stop threads [ 982.040734][ T8616] vhci_hcd: release socket [ 982.045235][ T8616] vhci_hcd: disconnect device [ 982.511131][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 983.308354][T15860] usbtest 2-1:3.182: couldn't get endpoints, -71 [ 983.520355][T15860] usbtest 2-1:3.182: probe with driver usbtest failed with error -71 [ 983.571095][T15860] usb 2-1: USB disconnect, device number 13 [ 986.216050][ T981] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 986.394971][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 986.439633][ T981] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 986.462118][ T981] usb 6-1: config 179 has no interface number 0 [ 986.472270][ T981] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 986.498871][ T981] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 986.520871][ T981] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 986.536966][ T981] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 986.547616][ T981] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 986.563613][ T981] usb 6-1: config 179 interface 65 has no altsetting 0 [ 986.582076][ T981] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 986.594063][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.622684][ T981] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input66 [ 986.636357][T15860] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 986.756244][ T10] vhci_hcd: vhci_device speed not set [ 986.792109][T15860] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 986.816759][T15860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.856441][ T5929] usb 6-1: USB disconnect, device number 16 [ 986.864436][T15860] usb 2-1: config 0 descriptor?? [ 987.083150][T15860] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 987.283721][T15860] [drm:udl_init] *ERROR* Selecting channel failed [ 987.517956][T15860] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 987.691533][T15860] [drm] Initialized udl on minor 2 [ 987.701809][T15860] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 987.728608][T15860] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 987.738243][T20437] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 987.780071][T20437] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 987.792842][T15860] usb 2-1: USB disconnect, device number 14 [ 987.890559][T20437] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 988.436113][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 988.570516][T20460] netlink: 'syz.0.3670': attribute type 8 has an invalid length. [ 988.606150][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 988.618502][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.643420][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.668017][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 988.677840][T20464] syzkaller1: entered promiscuous mode [ 988.683293][T20464] syzkaller1: entered allmulticast mode [ 989.207345][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.220398][ T9] usb 6-1: config 0 descriptor?? [ 989.623924][T20459] delete_channel: no stack [ 989.786709][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 989.793247][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 989.873999][ T9] usb 6-1: USB disconnect, device number 17 [ 989.924465][T20484] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3673'. [ 989.952722][T20484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 989.978652][T20486] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3673'. [ 990.265772][T20486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 993.006143][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.012601][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.204439][T20521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.216276][T20521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.446376][T20437] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 993.616034][T20437] usb 6-1: Invalid ep0 maxpacket: 16 [ 993.765998][T20437] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 993.911680][T20525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3683'. [ 993.942844][T20437] usb 6-1: Invalid ep0 maxpacket: 16 [ 993.945308][T20527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.956536][T20437] usb usb6-port1: attempt power cycle [ 994.015160][T20527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.122249][T20535] tipc: Enabled bearer , priority 0 [ 994.134345][T20535] syzkaller0: entered promiscuous mode [ 994.144533][T20535] syzkaller0: entered allmulticast mode [ 994.316369][T20437] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 994.446684][T20437] usb 6-1: Invalid ep0 maxpacket: 16 [ 994.453463][T20541] tipc: Resetting bearer [ 994.464435][T20533] tipc: Resetting bearer [ 994.515600][T20543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.548855][T20543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.557996][T20533] tipc: Disabling bearer [ 994.586655][T20437] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 994.616342][T20437] usb 6-1: Invalid ep0 maxpacket: 16 [ 994.633999][T20437] usb usb6-port1: unable to enumerate USB device [ 995.310786][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 995.321721][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3692'. [ 995.332892][T20562] netlink: 'syz.1.3692': attribute type 20 has an invalid length. [ 995.353433][T20563] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3690'. [ 996.362729][T20576] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3695'. [ 997.114372][T20581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.125240][T20581] netlink: 'syz.6.3697': attribute type 30 has an invalid length. [ 997.402271][T20586] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3699'. [ 998.006336][T20603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.033572][T20603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.844706][T20614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.877619][T20614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.148365][T20623] netlink: 'syz.5.3709': attribute type 10 has an invalid length. [ 999.168534][T20624] netlink: 'syz.5.3709': attribute type 10 has an invalid length. [ 999.179867][T20624] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 999.326368][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 999.487730][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 999.519184][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 999.541599][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 999.569998][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 999.598312][ T9] usb 2-1: Product: syz [ 999.606248][ T9] usb 2-1: Manufacturer: syz [ 999.621706][ T9] usb 2-1: SerialNumber: syz [ 999.645259][ T9] usb 2-1: config 0 descriptor?? [ 999.671290][ T9] usb 2-1: selecting invalid altsetting 0 [ 1000.277544][T20437] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1000.457603][T20437] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1000.504784][ T9] usb 2-1: USB disconnect, device number 15 [ 1000.534003][T20437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.564722][T20437] usb 6-1: config 0 descriptor?? [ 1000.598107][T20437] usb 6-1: selecting invalid altsetting 1 [ 1000.643788][T20437] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1000.659886][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.921147][T20642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.045613][T20651] input: syz0 as /devices/virtual/input/input67 [ 1002.648621][ T9] usb 6-1: USB disconnect, device number 22 [ 1002.749018][T20671] C: renamed from team_slave_0 [ 1002.765162][T20671] netlink: 'syz.5.3722': attribute type 2 has an invalid length. [ 1002.779542][T20671] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3722'. [ 1002.791222][T20671] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1003.979011][T20705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3730'. [ 1004.756489][T20725] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1004.801161][T20729] fuse: Bad value for 'fd' [ 1005.354928][T20719] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1005.722781][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3743'. [ 1005.838526][T20741] dummy0: left allmulticast mode [ 1005.887353][T20741] dummy0: left promiscuous mode [ 1005.895679][T20741] bridge0: port 1(dummy0) entered disabled state [ 1005.899987][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3745'. [ 1005.919508][T20741] batman_adv: batadv0: Adding interface: dummy0 [ 1005.927362][T20741] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.976870][T20741] batman_adv: batadv0: Interface activated: dummy0 [ 1006.038715][T20745] batadv0: mtu less than device minimum [ 1006.099980][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.112815][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.124774][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.136786][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.148758][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.160703][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.172658][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.184619][T20745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1006.435775][T20750] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1006.451558][T20758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.567551][T20750] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1006.594874][T20758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.764495][T20753] bond1: entered promiscuous mode [ 1006.771536][T20753] bond1: entered allmulticast mode [ 1006.811434][T20753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.331729][T20766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.272680][T20767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.373332][T20795] netlink: 'syz.5.3756': attribute type 27 has an invalid length. [ 1009.911415][T15860] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1010.012668][T20795] bond_slave_1: left promiscuous mode [ 1010.019141][T20795] veth0_to_team: left promiscuous mode [ 1010.103658][T15860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.139173][T15860] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1010.234220][T15860] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1010.267665][T15860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.310104][T15860] usb 6-1: Product: syz [ 1010.353014][T15860] usb 6-1: Manufacturer: syz [ 1010.366842][T20814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.375583][T20814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.390895][T15860] usb 6-1: SerialNumber: syz [ 1010.399023][T15860] usb 6-1: config 0 descriptor?? [ 1010.411771][T15860] option 6-1:0.0: GSM modem (1-port) converter detected [ 1010.513547][T20795] gre1: left allmulticast mode [ 1010.615644][T20795] gtp0: left promiscuous mode [ 1010.620441][T20795] gtp0: left allmulticast mode [ 1010.681414][T20795] bond1: left promiscuous mode [ 1010.698149][T20795] geneve2: left promiscuous mode [ 1010.714844][T20795] vlan2: left promiscuous mode [ 1010.723361][T20795] ------------[ cut here ]------------ [ 1010.730566][T20795] WARNING: CPU: 0 PID: 20795 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1010.741805][T20795] Modules linked in: [ 1010.746491][T20795] CPU: 0 UID: 0 PID: 20795 Comm: syz.5.3756 Not tainted syzkaller #0 PREEMPT(full) [ 1010.755912][T20795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1010.766028][T20795] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1010.773239][T20795] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4b c8 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ae 4a c1 f6 e9 ef f8 ff ff e8 a4 4a c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 96 4a c1 f6 e9 39 07 00 00 48 83 7c 24 [ 1010.792946][T20795] RSP: 0018:ffffc9000c136380 EFLAGS: 00010246 [ 1010.799414][T20795] RAX: ffffffff8afe7892 RBX: 0000000000000000 RCX: 0000000000080000 [ 1010.808635][T20795] RDX: ffffc90010355000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1010.817489][T20795] RBP: ffffc9000c136540 R08: ffff88804d611737 R09: 1ffff11009ac22e6 [ 1010.825505][T20795] R10: dffffc0000000000 R11: ffffed1009ac22e7 R12: dffffc0000000000 [ 1010.833559][T20795] R13: 0000000000000070 R14: ffff888058c3a8c0 R15: ffff888058c3a8c0 [ 1010.841597][T20795] FS: 00007fc9f659b6c0(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 1010.850739][T20795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.857411][T20795] CR2: 0000200000404030 CR3: 0000000069b64000 CR4: 00000000003526f0 [ 1010.865391][T20795] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1010.873470][T20795] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1010.881835][T20795] Call Trace: [ 1010.885125][T20795] [ 1010.888153][T20795] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 1010.895028][T20795] ? __pfx___might_resched+0x10/0x10 [ 1010.900448][T20795] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 1010.907604][T20795] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1010.913881][T20795] ieee80211_leave_mesh+0xc5/0x130 [ 1010.919492][T20795] cfg80211_leave_mesh+0x290/0x800 [ 1010.924604][T20795] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 1010.930705][T20795] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1010.937216][T20795] ? __lock_acquire+0xab9/0xd20 [ 1010.942066][T20795] ? do_raw_spin_lock+0x121/0x290 [ 1010.947225][T20795] ? inetdev_event+0x464/0x15b0 [ 1010.952065][T20795] ? igmp_netdev_event+0x7c/0x770 [ 1010.957279][T20795] notifier_call_chain+0x1b6/0x3e0 [ 1010.962384][T20795] __dev_close_many+0x106/0x6f0 [ 1010.967276][T20795] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1010.972632][T20795] ? __pfx___dev_close_many+0x10/0x10 [ 1010.978035][T20795] __dev_change_flags+0x2c7/0x6d0 [ 1010.983052][T20795] ? __pfx___dev_change_flags+0x10/0x10 [ 1010.988645][T20795] ? netif_state_change+0x256/0x3a0 [ 1010.993827][T20795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.999833][T20795] ? __pfx_netif_state_change+0x10/0x10 [ 1011.005374][T20795] netif_change_flags+0x88/0x1a0 [ 1011.010932][T20795] do_setlink+0xc55/0x41c0 [ 1011.015346][T20795] ? __pfx_do_setlink+0x10/0x10 [ 1011.020617][T20795] ? _printk+0xcf/0x120 [ 1011.024783][T20795] ? __pfx____ratelimit+0x10/0x10 [ 1011.029844][T20795] ? __lock_acquire+0xab9/0xd20 [ 1011.034689][T20795] ? __mutex_trylock_common+0x153/0x260 [ 1011.040366][T20795] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1011.046294][T20795] ? rcu_is_watching+0x15/0xb0 [ 1011.051043][T20795] ? trace_contention_end+0x39/0x120 [ 1011.056340][T20795] ? __mutex_lock+0x335/0x1350 [ 1011.061096][T20795] ? rtnl_newlink+0x8db/0x1c70 [ 1011.065886][T20795] ? __pfx___mutex_lock+0x10/0x10 [ 1011.070932][T20795] ? ns_capable+0x8a/0xf0 [ 1011.075416][T20795] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1011.081243][T20795] rtnl_newlink+0x149f/0x1c70 [ 1011.085930][T20795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1011.090955][T20795] ? __pfx___schedule+0x10/0x10 [ 1011.095795][T20795] ? preempt_schedule+0xae/0xc0 [ 1011.100684][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.105782][T20795] ? preempt_schedule_common+0x83/0xd0 [ 1011.111945][T20795] ? preempt_schedule+0xae/0xc0 [ 1011.117637][T20795] ? __pfx_preempt_schedule+0x10/0x10 [ 1011.123031][T20795] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1011.129162][T20795] ? preempt_schedule_thunk+0x16/0x30 [ 1011.134595][T20795] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1011.140075][T20795] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1011.145890][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.151020][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.156212][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.161341][T20795] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1011.166601][T20795] ? __lock_acquire+0xab9/0xd20 [ 1011.171456][T20795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1011.176542][T20795] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1011.181505][T20795] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1011.186823][T20795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.192273][T20795] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1011.199256][T20795] netlink_rcv_skb+0x205/0x470 [ 1011.204012][T20795] ? rcu_is_watching+0x15/0xb0 [ 1011.208808][T20795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.214897][T20795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.221048][T20795] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.226334][T20795] netlink_unicast+0x82f/0x9e0 [ 1011.231102][T20795] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.236423][T20795] ? netlink_sendmsg+0x642/0xb30 [ 1011.241391][T20795] ? skb_put+0x11b/0x210 [ 1011.245637][T20795] netlink_sendmsg+0x805/0xb30 [ 1011.250442][T20795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.255722][T20795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1011.260685][T20795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.265978][T20795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.271271][T20795] __sock_sendmsg+0x219/0x270 [ 1011.276087][T20795] ____sys_sendmsg+0x505/0x830 [ 1011.280845][T20795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.286191][T20795] ? import_iovec+0x74/0xa0 [ 1011.290699][T20795] ___sys_sendmsg+0x21f/0x2a0 [ 1011.295370][T20795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.300604][T20795] ? __fget_files+0x2a/0x420 [ 1011.305175][T20795] ? __fget_files+0x3a0/0x420 [ 1011.309872][T20795] __x64_sys_sendmsg+0x19b/0x260 [ 1011.314805][T20795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1011.320925][T20795] ? rcu_is_watching+0x15/0xb0 [ 1011.325687][T20795] ? do_syscall_64+0xbe/0x3b0 [ 1011.331104][T20795] do_syscall_64+0xfa/0x3b0 [ 1011.335627][T20795] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.340863][T20795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.346966][T20795] ? clear_bhb_loop+0x60/0xb0 [ 1011.351631][T20795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.357576][T20795] RIP: 0033:0x7fc9f578eec9 [ 1011.362005][T20795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.381712][T20795] RSP: 002b:00007fc9f659b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.390180][T20795] RAX: ffffffffffffffda RBX: 00007fc9f59e6270 RCX: 00007fc9f578eec9 [ 1011.398209][T20795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1011.406257][T20795] RBP: 00007fc9f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1011.414242][T20795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.423367][T20795] R13: 00007fc9f59e6308 R14: 00007fc9f59e6270 R15: 00007fc9f5b0fa28 [ 1011.432244][T20795] [ 1011.435289][T20795] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1011.442581][T20795] CPU: 0 UID: 0 PID: 20795 Comm: syz.5.3756 Not tainted syzkaller #0 PREEMPT(full) [ 1011.451963][T20795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.462029][T20795] Call Trace: [ 1011.465319][T20795] [ 1011.468258][T20795] dump_stack_lvl+0x99/0x250 [ 1011.472861][T20795] ? __asan_memcpy+0x40/0x70 [ 1011.477463][T20795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.482678][T20795] ? __pfx__printk+0x10/0x10 [ 1011.487289][T20795] vpanic+0x281/0x750 [ 1011.491259][T20795] ? __pfx__printk+0x10/0x10 [ 1011.495850][T20795] ? __pfx_vpanic+0x10/0x10 [ 1011.500348][T20795] ? is_bpf_text_address+0x26/0x2b0 [ 1011.505542][T20795] panic+0xb9/0xc0 [ 1011.509251][T20795] ? __pfx_panic+0x10/0x10 [ 1011.513657][T20795] __warn+0x31b/0x4b0 [ 1011.517623][T20795] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1011.524198][T20795] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1011.530780][T20795] report_bug+0x2be/0x4f0 [ 1011.535093][T20795] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1011.541663][T20795] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1011.548235][T20795] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 1011.554874][T20795] handle_bug+0x84/0x160 [ 1011.559117][T20795] exc_invalid_op+0x1a/0x50 [ 1011.563608][T20795] asm_exc_invalid_op+0x1a/0x20 [ 1011.568443][T20795] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1011.575645][T20795] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4b c8 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ae 4a c1 f6 e9 ef f8 ff ff e8 a4 4a c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 96 4a c1 f6 e9 39 07 00 00 48 83 7c 24 [ 1011.595234][T20795] RSP: 0018:ffffc9000c136380 EFLAGS: 00010246 [ 1011.601288][T20795] RAX: ffffffff8afe7892 RBX: 0000000000000000 RCX: 0000000000080000 [ 1011.609247][T20795] RDX: ffffc90010355000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1011.617200][T20795] RBP: ffffc9000c136540 R08: ffff88804d611737 R09: 1ffff11009ac22e6 [ 1011.625153][T20795] R10: dffffc0000000000 R11: ffffed1009ac22e7 R12: dffffc0000000000 [ 1011.633105][T20795] R13: 0000000000000070 R14: ffff888058c3a8c0 R15: ffff888058c3a8c0 [ 1011.641065][T20795] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 1011.647743][T20795] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 1011.654691][T20795] ? __pfx___might_resched+0x10/0x10 [ 1011.659964][T20795] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 1011.666031][T20795] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1011.672313][T20795] ieee80211_leave_mesh+0xc5/0x130 [ 1011.677410][T20795] cfg80211_leave_mesh+0x290/0x800 [ 1011.682513][T20795] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 1011.688564][T20795] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1011.695051][T20795] ? __lock_acquire+0xab9/0xd20 [ 1011.699892][T20795] ? do_raw_spin_lock+0x121/0x290 [ 1011.704912][T20795] ? inetdev_event+0x464/0x15b0 [ 1011.709752][T20795] ? igmp_netdev_event+0x7c/0x770 [ 1011.714764][T20795] notifier_call_chain+0x1b6/0x3e0 [ 1011.719862][T20795] __dev_close_many+0x106/0x6f0 [ 1011.724700][T20795] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1011.730069][T20795] ? __pfx___dev_close_many+0x10/0x10 [ 1011.735433][T20795] __dev_change_flags+0x2c7/0x6d0 [ 1011.740444][T20795] ? __pfx___dev_change_flags+0x10/0x10 [ 1011.745977][T20795] ? netif_state_change+0x256/0x3a0 [ 1011.751156][T20795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1011.757124][T20795] ? __pfx_netif_state_change+0x10/0x10 [ 1011.762666][T20795] netif_change_flags+0x88/0x1a0 [ 1011.767596][T20795] do_setlink+0xc55/0x41c0 [ 1011.772008][T20795] ? __pfx_do_setlink+0x10/0x10 [ 1011.776842][T20795] ? _printk+0xcf/0x120 [ 1011.780983][T20795] ? __pfx____ratelimit+0x10/0x10 [ 1011.786011][T20795] ? __lock_acquire+0xab9/0xd20 [ 1011.790873][T20795] ? __mutex_trylock_common+0x153/0x260 [ 1011.796415][T20795] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1011.802300][T20795] ? rcu_is_watching+0x15/0xb0 [ 1011.807048][T20795] ? trace_contention_end+0x39/0x120 [ 1011.812314][T20795] ? __mutex_lock+0x335/0x1350 [ 1011.817414][T20795] ? rtnl_newlink+0x8db/0x1c70 [ 1011.822168][T20795] ? __pfx___mutex_lock+0x10/0x10 [ 1011.827196][T20795] ? ns_capable+0x8a/0xf0 [ 1011.831532][T20795] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1011.837327][T20795] rtnl_newlink+0x149f/0x1c70 [ 1011.841994][T20795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1011.847006][T20795] ? __pfx___schedule+0x10/0x10 [ 1011.851847][T20795] ? preempt_schedule+0xae/0xc0 [ 1011.856676][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.861774][T20795] ? preempt_schedule_common+0x83/0xd0 [ 1011.867228][T20795] ? preempt_schedule+0xae/0xc0 [ 1011.872062][T20795] ? __pfx_preempt_schedule+0x10/0x10 [ 1011.877414][T20795] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1011.883462][T20795] ? preempt_schedule_thunk+0x16/0x30 [ 1011.888827][T20795] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1011.894182][T20795] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1011.899893][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.904989][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.910083][T20795] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.915176][T20795] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1011.920356][T20795] ? __lock_acquire+0xab9/0xd20 [ 1011.925206][T20795] ? __pfx_rtnl_newlink+0x10/0x10 [ 1011.930216][T20795] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1011.935140][T20795] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1011.940233][T20795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.945680][T20795] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1011.952605][T20795] netlink_rcv_skb+0x205/0x470 [ 1011.957366][T20795] ? rcu_is_watching+0x15/0xb0 [ 1011.962110][T20795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1011.967549][T20795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.972821][T20795] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.978004][T20795] netlink_unicast+0x82f/0x9e0 [ 1011.982778][T20795] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.988073][T20795] ? netlink_sendmsg+0x642/0xb30 [ 1011.992994][T20795] ? skb_put+0x11b/0x210 [ 1011.997219][T20795] netlink_sendmsg+0x805/0xb30 [ 1012.001968][T20795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.007236][T20795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1012.012154][T20795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1012.017422][T20795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.022686][T20795] __sock_sendmsg+0x219/0x270 [ 1012.027351][T20795] ____sys_sendmsg+0x505/0x830 [ 1012.032111][T20795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.037405][T20795] ? import_iovec+0x74/0xa0 [ 1012.041894][T20795] ___sys_sendmsg+0x21f/0x2a0 [ 1012.046557][T20795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.051759][T20795] ? __fget_files+0x2a/0x420 [ 1012.056331][T20795] ? __fget_files+0x3a0/0x420 [ 1012.061007][T20795] __x64_sys_sendmsg+0x19b/0x260 [ 1012.065932][T20795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.071387][T20795] ? rcu_is_watching+0x15/0xb0 [ 1012.076136][T20795] ? do_syscall_64+0xbe/0x3b0 [ 1012.080795][T20795] do_syscall_64+0xfa/0x3b0 [ 1012.085279][T20795] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.090458][T20795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.096514][T20795] ? clear_bhb_loop+0x60/0xb0 [ 1012.101181][T20795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.107054][T20795] RIP: 0033:0x7fc9f578eec9 [ 1012.111452][T20795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.131044][T20795] RSP: 002b:00007fc9f659b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.139448][T20795] RAX: ffffffffffffffda RBX: 00007fc9f59e6270 RCX: 00007fc9f578eec9 [ 1012.147410][T20795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1012.155363][T20795] RBP: 00007fc9f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.163319][T20795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.171269][T20795] R13: 00007fc9f59e6308 R14: 00007fc9f59e6270 R15: 00007fc9f5b0fa28 [ 1012.179231][T20795] [ 1012.182504][T20795] Kernel Offset: disabled [ 1012.186813][T20795] Rebooting in 86400 seconds..