last executing test programs: 31m35.218091995s ago: executing program 1 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x2, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005200b9f901000000000018000a0004000500000004060b80"], 0x1c}}, 0x4048014) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x123a80, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) 31m32.062450812s ago: executing program 1 (id=1098): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x40080, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x7ff, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0xffff, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x7, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x7, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x7, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r5 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(r6, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 31m30.391309063s ago: executing program 1 (id=1102): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_clone(0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x20000000, &(0x7f0000000340)) ptrace$setregs(0xd, r2, 0x100, &(0x7f00000000c0)="cf17ec64eeeacce71c24a3dba5dedf039c661af61920d4a28bffafc17205287dd41a9faae4cd7eef5988a4a57d0e309262718db5eca0e5b5a604bba75c25a6893fb8452d1d82c6d54dafd9cb3fed2bd84125eb551225df858dc23f31b3a1a1d9b6ed05e45e056d3688299d49792ca8c8e9e3476f48239cfad47f35ded3c64725755444a17ed1bbab4532141d6af7ee0bd1929416ac2f37f8ed8ea27b24f99a6712aa") 31m28.495167137s ago: executing program 1 (id=1107): unshare(0x2c020400) msgget$private(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r5, 0x0) ftruncate(r5, 0xc17a) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb400000000000000045000028000000edff029078000000000000000011e0907800000000000100010000130000000000"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff903000006a1082000000000204000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0xa3, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ccba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e0132269c182e5d0186448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190d54bd6f6c2c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e90e21fa13a89", 0x247}], 0x1}}], 0x1, 0x4000001) r8 = dup(r7) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x94}}, 0x11) read$FUSE(r8, &(0x7f00000075c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) shutdown(r8, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r9], 0x0) syz_usb_control_io(r10, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000040)=0x1) 31m24.936428998s ago: executing program 1 (id=1116): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x83686000) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, r1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2fabf79a662a1914000000000000002900"/31], 0x18}}], 0x1, 0x810) r4 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 31m24.374068031s ago: executing program 1 (id=1117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) fchdir(r3) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) acct(0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000000)=""/40, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 31m23.158998904s ago: executing program 32 (id=1117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) fchdir(r3) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) acct(0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000000)=""/40, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 6m59.410860706s ago: executing program 4 (id=5067): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000003a8b87c1b39afd18de0000000000000000b7fed121c223aa51000023bb9c4d7dc18f547ea342f4e17f4900f3e1f29aa7ea13104aad278d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) 6m55.60851055s ago: executing program 4 (id=5080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) 6m54.493981221s ago: executing program 4 (id=5082): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) 6m50.911017685s ago: executing program 4 (id=5092): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @empty, @void, {@generic={0x4305}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="016f000d01000000f70b14"], 0x36) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89901) 6m47.960300648s ago: executing program 4 (id=5101): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ff8}]}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x7b7, 0x0, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1900020a1003020c000821f0000a1003020c0005030d004da38e7dfc1f30bf938ca6a065a07ceed8e91bca2f662c4f3b97f3d464ec3f02149a608cc92b4c5c00724b6b98fdac64c98f1565f68a358f31de4453587453208857a7b719859c73ab83bab16a3d3fbd4820d6976bca7ee73e4f8559f4678d980125aad23378dc7c3a9199d88727da481b5be7676d"], 0x4, [{0x0, 0x0}, {0x27, 0x0}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r10, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r10, 0x0) poll(&(0x7f0000000000)=[{r10, 0x5208}], 0x1, 0x800) pipe2$9p(&(0x7f0000000200), 0x80) 6m47.311289133s ago: executing program 4 (id=5105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x206, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, &(0x7f0000000040)=0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x3f3, 0x101000) (async) syz_open_dev$usbmon(0x0, 0x3f3, 0x101000) poll(0x0, 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r6, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x1800000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) 6m45.818392868s ago: executing program 33 (id=5105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x206, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, &(0x7f0000000040)=0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x3f3, 0x101000) (async) syz_open_dev$usbmon(0x0, 0x3f3, 0x101000) poll(0x0, 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r6, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x1800000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) 2m35.238636312s ago: executing program 6 (id=5770): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3a1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r9 = socket$inet(0x2, 0x1, 0x100) listen(r9, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m34.979903859s ago: executing program 6 (id=5772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x4c, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x20}, 0x2) 2m34.509828398s ago: executing program 6 (id=5773): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x80047437, &(0x7f0000000140)=0xffff) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r5, 0x7, &(0x7f0000019080)=""/33}) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) ftruncate(0xffffffffffffffff, 0x100000001) 2m31.558054619s ago: executing program 6 (id=5779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xe, 0x0, 0xfc, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) r4 = socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r6, &(0x7f00000000c0), 0x0, 0x0, 0x1) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000250001002abd7000ffdbdf25090000001640ad"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x200001c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) kcmp(0x0, r7, 0x6, r4, r1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m29.869001377s ago: executing program 6 (id=5783): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x20, 0x0, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2902, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xa}) (async) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r4, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r4, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x10, 0x6, 0x2) (async) sendmsg$nl_route_sched(r3, 0x0, 0x4000800) (async) getpeername$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf8000000000000000000000000000000001000004d2"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a0000007b92eff4724cbce576b7af494e4c29acd2dfde21b37ec555fb"], 0x44}}, 0x0) 2m28.769830203s ago: executing program 6 (id=5785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001900010900000000fddbdf25021800000000ff010020000008000100ac14140008000700ac5414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xc8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) socket(0x22, 0x80000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) semtimedop(0x0, &(0x7f0000000580), 0x0, 0x0) 2m19.777748951s ago: executing program 0 (id=5814): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x26020480) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000040)={r4, @in={{0xa, 0x4, @multicast1}}, 0xffff}, 0x90) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="40032e000000ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e728e"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.609776834s ago: executing program 0 (id=5826): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6a01a604009c110000000000000000000000ffffe0000002ff0200000000000000000000000000014e234e20009c9078"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18f1d162a5985f7ef467a43a807cb75d34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7f96bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a873085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb30a138c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74dda2ae43ee2514b55aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e468401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bfed1def9e19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af47806eaa6b875304738f1129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87d69809af59268f3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6198ca6d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401e760f82cfc86ac19a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd59a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e67", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0x3, {0x7, 0x29, 0x80, 0x0, 0xc0f7, 0x2, 0x8, 0x87fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x80086601, 0x0) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a010300004887608d0000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300776c616e30000000000000000000000014000000110001"], 0xa4}, 0x1, 0x1000000}, 0x0) 2m13.595978295s ago: executing program 0 (id=5834): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 2m13.484992594s ago: executing program 34 (id=5785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001900010900000000fddbdf25021800000000ff010020000008000100ac14140008000700ac5414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xc8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) socket(0x22, 0x80000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) semtimedop(0x0, &(0x7f0000000580), 0x0, 0x0) 2m13.381971638s ago: executing program 0 (id=5838): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) close_range(r0, r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x24000840) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x2000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1fc}, 0x1c) 2m13.243201831s ago: executing program 0 (id=5839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r5 = accept$alg(r0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8, 0x80003}) sendto$inet6(r7, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0x0, 0x7ffffffe}, 0xc5f}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000640)={0x2, @win={{0x0, 0x5, 0x33524742, 0x3}, 0x5, 0x1, 0x0, 0x6, 0x0, 0xff}}) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = epoll_create(0x3) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16, @ANYRES64=r12], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x40000002}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r12, 0x40309410, &(0x7f0000000840)={0x8, 0x7, 0x0, 0x0, 0x2, [0x10000, 0x9, 0x4, 0xfff]}) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r12, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/133, 0x85, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x100cb, &(0x7f0000008000)={0x0, 0x989680}) io_setup(0x1, &(0x7f00000012c0)) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0), 0x181201, 0x0) write$eventfd(r13, &(0x7f0000000b00)=0x2, 0x8) 2m12.364522651s ago: executing program 0 (id=5840): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x20000000) socket(0x840000000002, 0x3, 0xfa) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) unshare(0x62040200) unshare(0x28040680) r4 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x11d, 0xcc, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4212, r6, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000040)='vto_da_allos\x00\xe9\x82\xdb ', 0x0) 1m57.256554295s ago: executing program 35 (id=5840): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x20000000) socket(0x840000000002, 0x3, 0xfa) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) unshare(0x62040200) unshare(0x28040680) r4 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x11d, 0xcc, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4212, r6, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000040)='vto_da_allos\x00\xe9\x82\xdb ', 0x0) 19.711736433s ago: executing program 5 (id=6327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ffff2b9d7000ffdbdf250000000000000000000029862c0a3d51de10559b328eb08fb16c63c70ca416d0069ba19ea85e2393790d00000000000000dbe5a17898ba8631844b736acde77c2354d4e0819c40a49511995c61844e7d5bd4d5dbe703dcbc95fe99247bb4dcbbfd84b9b94ccdf2a83b5c33cb7d604e11e7a5dafae6e33ec3108169423a7d1a3b54ef0f4ff8fb85e5b59a87"], 0x40}, 0x1, 0x0, 0x0, 0x20084001}, 0x20040040) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140300001400010125bd7000fddbdf2501"], 0x314}, 0x1, 0x2000000, 0x0, 0x404c0dc}, 0x0) 19.477385444s ago: executing program 5 (id=6328): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000010008108090f9bec674cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 17.834638757s ago: executing program 5 (id=6337): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x14, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 15.659254594s ago: executing program 5 (id=6340): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000fef000/0x3000)=nil, 0x3000}}) 13.765075804s ago: executing program 5 (id=6346): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) 13.529993402s ago: executing program 5 (id=6347): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x2a, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0xfffffffffffffca3, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2100, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x795d}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = accept4$unix(r4, 0x0, &(0x7f0000000400), 0x80800) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[{0x8, 0x9, 0xa0, 0x3}, {0xff79, 0x44, 0x20, 0x7}, {0x0, 0x0, 0x1, 0x2}, {0x10, 0x6, 0x0, 0xfab}, {0x8c32, 0x0, 0xbe, 0x9}, {0xa, 0xe, 0x6, 0x97c}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002580)=ANY=[@ANYBLOB="1c020000020801080000000000000000030000000600024000f700001ac919f57c931cf14fe95b92f6c7eca27de1c9d2c9a29619a6d53fdabc77ef53917b550c4c5ad29ff48e4a83f99c350773005b5e3a4d5e8b7c829512e96cd52de30261dc53b02716c2983011c5275dc18119130159e733a14d4a15b357a90867e1f193d1560c5b19b1a3e877aefe5d776c65ef4f53980ad26fa8601c628e9e23a3d6a29435e71d90de4c4cf3fc0e20a0b99a125d08b019000000000b086f9357f8d605680cffb532c03d1de75a49ca580068a83e456f68aa000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24004001) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000003c0)=0x2c) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) lchown(&(0x7f0000000240)='./file0\x00', r2, r9) 11.812367167s ago: executing program 2 (id=6352): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = syz_io_uring_setup(0x499, &(0x7f0000000480)={0x0, 0x707b, 0x10, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x8, {0x9, 0xf, 0x3, 0x5}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000100001c0"]) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) copy_file_range(r9, &(0x7f0000000000)=0x7, r9, 0x0, 0x7, 0x0) setsockopt$packet_buf(r9, 0x107, 0x5, &(0x7f0000000200)="80d056ab592c0867ef", 0x9) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xa5c, 0x47425247, 0x8, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) r10 = socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x181800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000480)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x9, 0x610, 0x99}, 0xfffffcef) 9.220545536s ago: executing program 2 (id=6361): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x11, r0, 0xe1423000) 8.68932665s ago: executing program 8 (id=6364): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r1, 0x104, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) getdents64(r1, &(0x7f0000000200)=""/208, 0xd0) 8.542051207s ago: executing program 8 (id=6365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000180)="22a2e76b7830eb778fe63761cf49e99f1e45595f478111bc9d03fa45d784b9ae351d556da13f33c3815ecf16e0e440531f475fd6f767b4e1bc4d012bb6fca277f7", 0x41, 0xfffffffffffffffb) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYBLOB, @ANYRESDEC=0x0]) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$sock(r3, &(0x7f0000005dc0)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0x30}}], 0x1, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000280)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x7fff7ff9}]}) r5 = socket(0x10, 0xa, 0x5) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1c, 0x100, 0x70bd28, 0x25dfdbfc, {0x19, 0x0, 0x0, 0x0, 0x20, 0x14, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) close_range(r4, 0xffffffffffffffff, 0x0) 8.145824484s ago: executing program 3 (id=6367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 7.958128915s ago: executing program 3 (id=6369): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) (async, rerun: 32) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (rerun: 32) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13440, 0x1, 0xfff7fffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 7.916630138s ago: executing program 2 (id=6370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x464, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x264}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x84f6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2d7c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x6}}}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a4}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7118}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf52}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3e6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7a4d}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9c, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0x1785}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private0, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfee3, @private1, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x20004850}, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x110, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xec, 0x1, 0x0, 0x1, [@nested={0xe8, 0x10, 0x0, 0x1, [@nested={0xe3, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e507b5292958158c869ba94bde249b83b1efc1cd3328ebf32d1f1dbe7680a7b3c529af0c870c0bb9648b60bfc81de02e599f6d4aa037c6bd68d903e2845fbd793f5f5e07bb6289e147bb8b27f4314d49b10ea6bd6d2251543691af05a8cf1909426180fede04e04a4b0fa132adb1d97b45607d12956ae33e1361fe275961922413c5b19b022e6dc564d3c195772726fa0412c203ea1218faa7d74f9e0d7082b7b"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x110}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0xc8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_ACT={0x94, 0x3, [@m_mpls={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_TTL={0x0, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x0, 0x4, 0x8}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdb107}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0x26, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4) 7.654277386s ago: executing program 3 (id=6372): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x7, 0x2, 0x81, 0xffffffffefffff14, 0x2, 0x100000000, 0x3]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.429122756s ago: executing program 8 (id=6377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) r2 = syz_open_dev$midi(0x0, 0x3, 0x4a243) r3 = socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f0000000240)={0x0, 0x9, 0xfff, 0x0, 0x7f}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004874) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x80, 0xcb25, 0x7, 0xcb25, 0x0, 0x3}) 5.514215082s ago: executing program 7 (id=6378): prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) 5.3199842s ago: executing program 7 (id=6379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 5.201862817s ago: executing program 7 (id=6380): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x11, 0xffffffffffffffff, 0xe1423000) 4.461182426s ago: executing program 3 (id=6381): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000010008108090f9bec674cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000fef000/0x3000)=nil, 0x3000}}) 4.309954203s ago: executing program 2 (id=6382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) syz_mount_image$fuse(&(0x7f0000000100), 0x0, 0x80405, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000b64000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x40010, r3, 0x0) mbind(&(0x7f0000b67000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000140)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x10002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000180)=0x1) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = getpid() setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)}}], 0x1, 0x40811) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010010004fcffffff3f00000000000000", @ANYRES16=r6, @ANYRES32], 0x44}, 0x1, 0x300000000000000, 0x0, 0x20000000}, 0x8810) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000083e6449002500450000280000000000019078ac1414bbac1414aa0d0090780008003a000000065e157e"], 0x0) 3.207762696s ago: executing program 8 (id=6383): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') removexattr(0x0, &(0x7f00000001c0)=@known='system.advise\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x6, {0x4, 0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.045418177s ago: executing program 8 (id=6384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x117) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000034d56"]) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x32600) r10 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r10, 0x4d10, 0x2, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)=0x9) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 3.023832325s ago: executing program 7 (id=6385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$inet6(r0, 0x0, 0x20008814) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x9, 0x0, 0xe7}}}}}}, 0x0) 2.529560954s ago: executing program 7 (id=6386): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r1, 0x104, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) getdents64(r1, &(0x7f0000000200)=""/208, 0xd0) 2.216500546s ago: executing program 7 (id=6387): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000180)="22a2e76b7830eb778fe63761cf49e99f1e45595f478111bc9d03fa45d784b9ae351d556da13f33c3815ecf16e0e440531f475fd6f767b4e1bc4d012bb6fca277f7", 0x41, 0xfffffffffffffffb) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYBLOB, @ANYRESDEC=0x0]) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$sock(r3, &(0x7f0000005dc0)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0x30}}], 0x1, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000280)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x7fff7ff9}]}) r5 = socket(0x10, 0xa, 0x5) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1c, 0x100, 0x70bd28, 0x25dfdbfc, {0x19, 0x0, 0x0, 0x0, 0x20, 0x14, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) close_range(r4, 0xffffffffffffffff, 0x0) 2.152102264s ago: executing program 3 (id=6388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r2], 0x38}}, 0x10) 368.140474ms ago: executing program 8 (id=6389): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000300)=[{0x50, 0x1801, 0x0, 0x0}, {0x794, 0x5201, 0x0, 0x0}, {0x2a2, 0x1a00, 0x3c00, 0x0}], 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x583a7c5d, 0x80000) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x2, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "5d0792a24eef"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x7f, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x1e}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xd3, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x1, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xd6, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0xe6, 0x8, 0x5, 0x10, 0x4}, 0x2e, &(0x7f0000000780)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x69, 0x9, 0x5, 0x8, 0x96}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "471f7c2dd98fbf8095b2cb26799a0fa3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xfe, 0x4, 0x5}]}, 0x2, [{0xb4, &(0x7f0000000840)=@string={0xb4, 0x3, "fbe4071affe9f09a33b577d333ea28a4d9ffae2e6114ecce6a2b2ea4ae35a5bfe7c06d32d2f33dfe87cbe86ee5a2ffdaf49b50632ac87e796dfef453d190455cd9d8771c4745f09b17f76beaf3f565d746d7ede5fdf3fb0f638a5924a98933b56d38dc254d830bf5dc4092ecac55d66c55db542788500014d5753d9dbf588a42cd8602503d2abac6907231258e1cb1eb871dd22f14dca87cc83cac81af406895a8bf450ab7bb67d2ecc5a3c2f82233aceac8"}}, {0xb2, &(0x7f0000000900)=@string={0xb2, 0x3, "271c82ddac90ca71940f8136310ecc2b32627e466cbc037916617c8b9c6e8ba5216f7a67bf41d9b3c958e31784d3c4493433488af9f8426641162a97f1d6a27ff39c1e88c44c940039365c3c2773b69277a0433a6315bd4a8da07089f977067c92e8238ada2960c13ebd3281fe2b9c6e80abe8b6c881db91717e25a582c3856a2fe95f664adfe7be634a27947000906f4410cf0456788d7c99f47d23f951cd253f6e0f9ccd275ccec662ed157bca887f"}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x4, 0x0, 0x65b7, 0x9, 'syz1\x00', 0x4}, 0x4, 0x30, 0x9, r3, 0x0, 0x8, 'syz0\x00', &(0x7f0000000280)}) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, 0x0, &(0x7f0000000540)={0x76004860, 0x6f17, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x200001, 0x8001}) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cd", 0x5) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="100000"], 0x20}}], 0x2, 0x20008005) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000240), 0x80040, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x20000102, &(0x7f0000000100)=ANY=[@ANYRESHEX=r6], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="361d362ff382c53fcbd314acbb49", 0x0, 0xe5, 0x0, 0x2a, 0x0, &(0x7f0000000600)="654d37c12248a45504aa25a5a29986fcaa7015f2a8a87c85991189c79dfb64b57d0239f75aaecaee094c", 0x0}, 0x50) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000140)={{0xa, 0x4, 0x10, 0x9, 'syz0\x00', 0x9}, 0x1, [0x80000001, 0x8000000000000000, 0x10001, 0x5, 0x8000000000000000, 0x5, 0x7, 0x100000001, 0x1, 0x7fff, 0x8, 0xcb, 0x100, 0xa2b8, 0xc, 0xfffffffffffffffd, 0x1, 0x100, 0x79, 0x4, 0x1f, 0x57eb, 0x3, 0xfffffffffffffffb, 0x3, 0x731, 0xfa1, 0x7365a6d3, 0xffffffff, 0x6, 0x7f, 0x9, 0xfffffffffffffff8, 0x3, 0x4, 0x3, 0x25, 0x5, 0x6, 0x9, 0x100000001, 0x7, 0x0, 0x7, 0x123, 0xfffffffffffffff8, 0x7, 0x7, 0xba1, 0x1, 0xf, 0x7fff, 0x9, 0x8001, 0x2, 0x1, 0x80, 0x8, 0xfffffffffffffbff, 0x0, 0xdb, 0x401, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x5, 0x2, 0xd, 0x907, 0xfffffffffffffffb, 0x9, 0x7, 0xff, 0x6, 0x5, 0x9, 0xa9, 0x3, 0x4, 0x81, 0x0, 0xbc, 0x7, 0x7fffffffffffffff, 0x8, 0xdea4, 0x500000000, 0x6, 0x2, 0x5, 0x4, 0xff, 0x0, 0x9, 0x33a2, 0x1, 0x9, 0x4, 0x40, 0xd, 0x100, 0x80, 0x5, 0x3, 0x7fffffff, 0x7, 0x2, 0xffff, 0x0, 0x4, 0xa2e, 0x7fffffffffffffff, 0xbb87, 0x2, 0xabfc, 0x1b9d, 0x80000000, 0x4, 0x5, 0xa, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x1, 0x7ff, 0x1]}) 178.130062ms ago: executing program 2 (id=6390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 55.324948ms ago: executing program 2 (id=6391): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000fef000/0x3000)=nil, 0x3000}}) 0s ago: executing program 3 (id=6392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x464, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x264}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x84f6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2d7c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x6}}}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a4}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7118}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf52}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3e6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7a4d}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9c, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0x1785}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private0, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfee3, @private1, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x20004850}, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x110, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xec, 0x1, 0x0, 0x1, [@nested={0xe8, 0x10, 0x0, 0x1, [@nested={0xe3, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e507b5292958158c869ba94bde249b83b1efc1cd3328ebf32d1f1dbe7680a7b3c529af0c870c0bb9648b60bfc81de02e599f6d4aa037c6bd68d903e2845fbd793f5f5e07bb6289e147bb8b27f4314d49b10ea6bd6d2251543691af05a8cf1909426180fede04e04a4b0fa132adb1d97b45607d12956ae33e1361fe275961922413c5b19b022e6dc564d3c195772726fa0412c203ea1218faa7d74f9e0d7082b7b"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x110}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0xc8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_ACT={0x94, 0x3, [@m_mpls={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_TTL={0x0, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x0, 0x4, 0x8}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdb107}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0x26, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4) kernel console output (not intermixed with test programs): 87 using dummy_hcd [ 2160.125714][ T5958] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2160.135304][T13481] usb 4-1: Using ep0 maxpacket: 16 [ 2160.147249][T13481] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.174260][T13481] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2160.184609][T13481] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2160.194800][T13481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.226331][T13481] usb 4-1: config 0 descriptor?? [ 2160.328193][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2160.345229][ T5958] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2160.354347][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.388352][ T5958] usb 6-1: config 0 descriptor?? [ 2160.618565][ T5958] ath6kl: Failed to submit usb control message: -71 [ 2160.643337][ T5958] ath6kl: unable to send the bmi data to the device: -71 [ 2160.659850][ T5958] ath6kl: Unable to send get target info: -71 [ 2160.676290][ T5958] ath6kl: Failed to init ath6kl core: -71 [ 2160.727064][ T5958] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2160.738312][T13481] nzxt-smart2 0003:1E71:2009.0059: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2160.784993][ T5958] usb 6-1: USB disconnect, device number 30 [ 2160.848204][T28801] fuse: Unknown parameter 'user_id00000000000000000000' [ 2161.080109][T26436] usb 4-1: USB disconnect, device number 87 [ 2161.212536][T28810] fido_id[28810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2161.717490][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5716'. [ 2161.727698][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5716'. [ 2161.751768][T28820] syzkaller0: entered promiscuous mode [ 2161.757534][T28820] syzkaller0: entered allmulticast mode [ 2161.837486][T28825] program syz.6.5714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2162.132396][T28832] ip6tnl1: entered promiscuous mode [ 2162.139932][T28832] ip6tnl1: entered allmulticast mode [ 2162.921017][T28835] sctp: [Deprecated]: syz.6.5714 (pid 28835) Use of int in maxseg socket option. [ 2162.921017][T28835] Use struct sctp_assoc_value instead [ 2163.605959][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5720'. [ 2163.726951][T28839] macsec1: entered allmulticast mode [ 2164.782059][T28852] FAULT_INJECTION: forcing a failure. [ 2164.782059][T28852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.826889][T28852] CPU: 1 UID: 0 PID: 28852 Comm: syz.6.5726 Not tainted syzkaller #0 PREEMPT(full) [ 2164.826944][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2164.826958][T28852] Call Trace: [ 2164.826968][T28852] [ 2164.826978][T28852] dump_stack_lvl+0x189/0x250 [ 2164.827010][T28852] ? __pfx____ratelimit+0x10/0x10 [ 2164.827034][T28852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2164.827059][T28852] ? __pfx__printk+0x10/0x10 [ 2164.827088][T28852] ? __might_fault+0xb0/0x130 [ 2164.827129][T28852] should_fail_ex+0x414/0x560 [ 2164.827166][T28852] _copy_from_iter+0x1de/0x1790 [ 2164.827198][T28852] ? _copy_from_iter+0x24f/0x1790 [ 2164.827228][T28852] ? __pfx__copy_from_iter+0x10/0x10 [ 2164.827249][T28852] ? sock_alloc_send_pskb+0x875/0x990 [ 2164.827285][T28852] ? __pfx__copy_from_iter+0x10/0x10 [ 2164.827319][T28852] ? page_copy_sane+0x16a/0x280 [ 2164.827346][T28852] copy_page_from_iter+0xdd/0x170 [ 2164.827376][T28852] skb_copy_datagram_from_iter+0x306/0x720 [ 2164.827417][T28852] packet_sendmsg+0x3797/0x5080 [ 2164.827456][T28852] ? aa_label_strn_parse+0xb00/0x1090 [ 2164.827504][T28852] ? __pfx___might_resched+0x10/0x10 [ 2164.827523][T28852] ? __lock_acquire+0xab9/0xd20 [ 2164.827571][T28852] ? __pfx_packet_sendmsg+0x10/0x10 [ 2164.827598][T28852] ? aa_sk_perm+0x81e/0x950 [ 2164.827642][T28852] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2164.827679][T28852] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2164.827703][T28852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2164.827725][T28852] ? __pfx_packet_sendmsg+0x10/0x10 [ 2164.827754][T28852] __sock_sendmsg+0x219/0x270 [ 2164.827789][T28852] ____sys_sendmsg+0x505/0x830 [ 2164.827821][T28852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2164.827862][T28852] ? import_iovec+0x74/0xa0 [ 2164.827893][T28852] ___sys_sendmsg+0x21f/0x2a0 [ 2164.827923][T28852] ? __pfx____sys_sendmsg+0x10/0x10 [ 2164.827988][T28852] ? __fget_files+0x2a/0x420 [ 2164.828006][T28852] ? __fget_files+0x3a0/0x420 [ 2164.828036][T28852] __x64_sys_sendmsg+0x19b/0x260 [ 2164.828066][T28852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2164.828103][T28852] ? __pfx_ksys_write+0x10/0x10 [ 2164.828127][T28852] ? rcu_is_watching+0x15/0xb0 [ 2164.828154][T28852] ? do_syscall_64+0xbe/0x3b0 [ 2164.828182][T28852] do_syscall_64+0xfa/0x3b0 [ 2164.828203][T28852] ? lockdep_hardirqs_on+0x9c/0x150 [ 2164.828225][T28852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.828246][T28852] ? clear_bhb_loop+0x60/0xb0 [ 2164.828271][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.828292][T28852] RIP: 0033:0x7fcfae58ec29 [ 2164.828311][T28852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2164.828330][T28852] RSP: 002b:00007fcfaf470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2164.828352][T28852] RAX: ffffffffffffffda RBX: 00007fcfae7d5fa0 RCX: 00007fcfae58ec29 [ 2164.828368][T28852] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 2164.828382][T28852] RBP: 00007fcfaf470090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.828395][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.828408][T28852] R13: 00007fcfae7d6038 R14: 00007fcfae7d5fa0 R15: 00007fcfae8ffa28 [ 2164.828440][T28852] [ 2165.152204][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.190072][T28856] fuse: Unknown parameter '' [ 2165.730139][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.736762][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.989397][T28869] netlink: 'syz.5.5727': attribute type 21 has an invalid length. [ 2165.997721][T28869] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5727'. [ 2166.036524][T28869] netlink: 'syz.5.5727': attribute type 1 has an invalid length. [ 2166.049552][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5727'. [ 2166.365480][T13481] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2166.581025][T13481] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2166.606931][T13481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.668147][T13481] usb 6-1: config 0 descriptor?? [ 2166.708982][T28888] netlink: 'syz.6.5733': attribute type 20 has an invalid length. [ 2166.717480][T28888] IPv6: NLM_F_CREATE should be specified when creating new route [ 2166.726062][T28888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2166.733506][T28888] IPv6: NLM_F_CREATE should be set when creating new route [ 2167.790911][T28894] program syz.3.5736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2168.007189][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5735'. [ 2168.043883][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5735'. [ 2168.134301][T28897] syzkaller0: entered promiscuous mode [ 2168.140414][T28897] syzkaller0: entered allmulticast mode [ 2168.706775][T28902] sctp: [Deprecated]: syz.3.5736 (pid 28902) Use of int in maxseg socket option. [ 2168.706775][T28902] Use struct sctp_assoc_value instead [ 2168.822423][T13481] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2168.839720][T13481] [drm:udl_init] *ERROR* Selecting channel failed [ 2168.874160][T13481] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 2168.995246][T13481] [drm] Initialized udl on minor 2 [ 2169.044908][T13481] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2169.085818][T13481] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2169.096891][T26436] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2169.163134][T26436] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2169.173458][T13481] usb 6-1: USB disconnect, device number 31 [ 2169.253754][T26436] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2169.792078][T28909] loop3: detected capacity change from 0 to 1 [ 2169.857607][T28909] Dev loop3: unable to read RDB block 1 [ 2169.945258][T28909] loop3: unable to read partition table [ 2170.036450][T28909] loop3: partition table beyond EOD, truncated [ 2170.107257][T28903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2170.125399][T28909] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 2170.245299][T13481] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2170.425809][T13481] usb 3-1: Using ep0 maxpacket: 32 [ 2170.436187][T13481] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 2170.510077][T13481] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 2170.575480][T13481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.632052][T13481] usb 3-1: Product: syz [ 2170.667533][T13481] usb 3-1: Manufacturer: syz [ 2170.672209][T13481] usb 3-1: SerialNumber: syz [ 2170.718858][T13481] usb 3-1: config 0 descriptor?? [ 2170.903275][T28915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5740'. [ 2170.982311][T28915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5740'. [ 2170.985884][T13481] usb 3-1: USB disconnect, device number 95 [ 2171.433780][T28923] FAULT_INJECTION: forcing a failure. [ 2171.433780][T28923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.504778][T28923] CPU: 0 UID: 0 PID: 28923 Comm: syz.0.5745 Not tainted syzkaller #0 PREEMPT(full) [ 2171.504810][T28923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2171.504824][T28923] Call Trace: [ 2171.504833][T28923] [ 2171.504842][T28923] dump_stack_lvl+0x189/0x250 [ 2171.504875][T28923] ? __pfx____ratelimit+0x10/0x10 [ 2171.504898][T28923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2171.504928][T28923] ? __pfx__printk+0x10/0x10 [ 2171.504971][T28923] should_fail_ex+0x414/0x560 [ 2171.505008][T28923] _copy_to_user+0x31/0xb0 [ 2171.505039][T28923] simple_read_from_buffer+0xe1/0x170 [ 2171.505076][T28923] proc_fail_nth_read+0x1b3/0x220 [ 2171.505103][T28923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.505128][T28923] ? rw_verify_area+0x2a6/0x4d0 [ 2171.505153][T28923] ? __lock_acquire+0xab9/0xd20 [ 2171.505188][T28923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.505214][T28923] vfs_read+0x200/0xa30 [ 2171.505240][T28923] ? fdget_pos+0x247/0x320 [ 2171.505263][T28923] ? __pfx___mutex_lock+0x10/0x10 [ 2171.505288][T28923] ? __pfx_vfs_read+0x10/0x10 [ 2171.505317][T28923] ? __fget_files+0x2a/0x420 [ 2171.505340][T28923] ? __fget_files+0x3a0/0x420 [ 2171.505358][T28923] ? __fget_files+0x2a/0x420 [ 2171.505387][T28923] ksys_read+0x145/0x250 [ 2171.505417][T28923] ? __pfx_ksys_read+0x10/0x10 [ 2171.505440][T28923] ? rcu_is_watching+0x15/0xb0 [ 2171.505466][T28923] ? do_syscall_64+0xbe/0x3b0 [ 2171.505494][T28923] do_syscall_64+0xfa/0x3b0 [ 2171.505516][T28923] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.505538][T28923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2171.505559][T28923] ? clear_bhb_loop+0x60/0xb0 [ 2171.505586][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2171.505606][T28923] RIP: 0033:0x7f873f18d63c [ 2171.505624][T28923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2171.505642][T28923] RSP: 002b:00007f874009d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2171.505665][T28923] RAX: ffffffffffffffda RBX: 00007f873f3d5fa0 RCX: 00007f873f18d63c [ 2171.505681][T28923] RDX: 000000000000000f RSI: 00007f874009d0a0 RDI: 0000000000000004 [ 2171.505695][T28923] RBP: 00007f874009d090 R08: 0000000000000000 R09: 0000000000000000 [ 2171.505707][T28923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.505719][T28923] R13: 00007f873f3d6038 R14: 00007f873f3d5fa0 R15: 00007f873f4ffa28 [ 2171.505751][T28923] [ 2172.989108][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5750'. [ 2172.998472][T28948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5750'. [ 2174.061755][T28962] ptrace attach of "./syz-executor exec"[17315] was attempted by ""[28962] [ 2174.136005][T28964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.196498][T28964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.844827][T28950] syzkaller0: entered promiscuous mode [ 2174.850521][T28950] syzkaller0: entered allmulticast mode [ 2176.444050][T28978] program syz.5.5757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2176.939998][T28987] sctp: [Deprecated]: syz.5.5757 (pid 28987) Use of int in maxseg socket option. [ 2176.939998][T28987] Use struct sctp_assoc_value instead [ 2178.742205][T29004] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2180.426439][T26436] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 2180.502255][T29023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 2180.521051][T29023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 2180.543601][T29023] syzkaller0: entered promiscuous mode [ 2180.550736][T29023] syzkaller0: entered allmulticast mode [ 2180.733544][T26436] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2180.866999][T26436] usb 6-1: not running at top speed; connect to a high speed hub [ 2180.975605][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2180.992545][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.066403][T26436] usb 6-1: config 12 has no interface number 0 [ 2181.073570][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2181.084575][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.195609][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2181.223553][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2181.235171][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.353544][T26436] usb 6-1: config 12 has no interface number 0 [ 2181.360567][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2181.385731][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.445568][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2181.464761][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2181.476913][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.487788][T26436] usb 6-1: config 12 has no interface number 0 [ 2181.494563][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2181.556520][T29027] ptrace attach of "./syz-executor exec"[17964] was attempted by "./syz-executor exec"[29027] [ 2181.599421][T29027] dns_resolver: Unsupported server list version (0) [ 2181.615266][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.724676][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2181.742600][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2181.751323][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.768600][T26436] usb 6-1: config 12 has no interface number 0 [ 2181.783967][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2181.855188][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.935757][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2181.976582][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2181.985527][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.032302][T26436] usb 6-1: config 12 has no interface number 0 [ 2182.056881][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2182.093383][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2182.244944][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2182.318496][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2182.339973][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.393252][T26436] usb 6-1: config 12 has no interface number 0 [ 2182.428535][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2182.453981][T29033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.461839][T29033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.494794][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2182.565080][T29039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 2182.714718][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2182.733244][T26436] usb 6-1: config 12 has an invalid interface number: 187 but max is 0 [ 2182.743690][T26436] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.770815][T26436] usb 6-1: config 12 has no interface number 0 [ 2182.786980][T26436] usb 6-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 2182.817651][T26436] usb 6-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2182.850061][T26436] usb 6-1: config 12 interface 187 has no altsetting 0 [ 2182.911864][T26436] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 2182.936456][T26436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.950280][T26436] usb 6-1: Product: syz [ 2182.969345][T26436] usb 6-1: Manufacturer: syz [ 2182.987986][T26436] usb 6-1: SerialNumber: syz [ 2183.153823][T26436] ti_usb_3410_5052 6-1:12.187: TI USB 3410 1 port adapter converter detected [ 2183.194692][T26436] ti_usb_3410_5052 6-1:12.187: missing endpoints [ 2183.259895][T26436] usb 6-1: USB disconnect, device number 32 [ 2183.583285][T29046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2183.838815][T29054] FAULT_INJECTION: forcing a failure. [ 2183.838815][T29054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2183.894696][T29054] CPU: 0 UID: 0 PID: 29054 Comm: syz.5.5775 Not tainted syzkaller #0 PREEMPT(full) [ 2183.894727][T29054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2183.894740][T29054] Call Trace: [ 2183.894750][T29054] [ 2183.894761][T29054] dump_stack_lvl+0x189/0x250 [ 2183.894792][T29054] ? __pfx____ratelimit+0x10/0x10 [ 2183.894814][T29054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2183.894839][T29054] ? __pfx__printk+0x10/0x10 [ 2183.894878][T29054] ? __might_fault+0xb0/0x130 [ 2183.894919][T29054] should_fail_ex+0x414/0x560 [ 2183.894956][T29054] _copy_from_user+0x2d/0xb0 [ 2183.894985][T29054] __se_sys_sendfile64+0xa6/0x190 [ 2183.895009][T29054] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2183.895027][T29054] ? rcu_is_watching+0x15/0xb0 [ 2183.895054][T29054] ? do_syscall_64+0xbe/0x3b0 [ 2183.895081][T29054] do_syscall_64+0xfa/0x3b0 [ 2183.895106][T29054] ? lockdep_hardirqs_on+0x9c/0x150 [ 2183.895127][T29054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.895148][T29054] ? clear_bhb_loop+0x60/0xb0 [ 2183.895182][T29054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.895203][T29054] RIP: 0033:0x7f5e3098ec29 [ 2183.895223][T29054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2183.895285][T29054] RSP: 002b:00007f5e3174f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2183.895320][T29054] RAX: ffffffffffffffda RBX: 00007f5e30bd6090 RCX: 00007f5e3098ec29 [ 2183.895336][T29054] RDX: 0000200000000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 2183.895349][T29054] RBP: 00007f5e3174f090 R08: 0000000000000000 R09: 0000000000000000 [ 2183.895362][T29054] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 2183.895376][T29054] R13: 00007f5e30bd6128 R14: 00007f5e30bd6090 R15: 00007f5e30cffa28 [ 2183.895410][T29054] [ 2184.300114][T29053] ptrace attach of "./syz-executor exec"[17964] was attempted by "./syz-executor exec"[29053] [ 2184.354360][T29053] dns_resolver: Unsupported server list version (0) [ 2185.212851][T29065] team0: Device ipip0 is of different type [ 2186.275273][T28457] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2186.430475][T28457] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2186.438809][T28457] usb 3-1: config 0 has no interface number 0 [ 2186.455313][T28457] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2186.507936][T28457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.675459][T28457] usb 3-1: config 0 descriptor?? [ 2186.782949][T28457] cp210x 3-1:0.1: cp210x converter detected [ 2186.942166][T28457] cp210x 3-1:0.1: failed to get vendor val 0x370b size 1: -121 [ 2186.960768][T28457] cp210x 3-1:0.1: querying part number failed [ 2187.015550][T29079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5781'. [ 2187.024622][T29079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5781'. [ 2187.058640][T28457] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2187.078127][T29079] syzkaller0: entered promiscuous mode [ 2187.159118][T29079] syzkaller0: entered allmulticast mode [ 2187.252132][T29069] ptrace attach of "./syz-executor exec"[27902] was attempted by "./syz-executor exec"[29069] [ 2187.263987][T29069] dns_resolver: Unsupported server list version (0) [ 2189.046438][T12217] usb 3-1: USB disconnect, device number 96 [ 2189.125875][T29104] FAULT_INJECTION: forcing a failure. [ 2189.125875][T29104] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.145272][T22525] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2189.153373][T29104] CPU: 1 UID: 0 PID: 29104 Comm: syz.0.5786 Not tainted syzkaller #0 PREEMPT(full) [ 2189.153395][T29104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2189.153405][T29104] Call Trace: [ 2189.153411][T29104] [ 2189.153418][T29104] dump_stack_lvl+0x189/0x250 [ 2189.153441][T29104] ? __pfx____ratelimit+0x10/0x10 [ 2189.153458][T29104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2189.153476][T29104] ? __pfx__printk+0x10/0x10 [ 2189.153499][T29104] ? __pfx___might_resched+0x10/0x10 [ 2189.153514][T29104] ? fs_reclaim_acquire+0x7d/0x100 [ 2189.153531][T29104] should_fail_ex+0x414/0x560 [ 2189.153564][T29104] should_failslab+0xa8/0x100 [ 2189.153587][T29104] __kmalloc_noprof+0xcb/0x4f0 [ 2189.153608][T29104] ? tomoyo_encode+0x28b/0x550 [ 2189.153627][T29104] tomoyo_encode+0x28b/0x550 [ 2189.153647][T29104] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2189.153665][T29104] ? tomoyo_domain+0xd9/0x130 [ 2189.153685][T29104] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2189.153707][T29104] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2189.153731][T29104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2189.153766][T29104] ? __lock_acquire+0xab9/0xd20 [ 2189.153802][T29104] ? __fget_files+0x2a/0x420 [ 2189.153818][T29104] ? __fget_files+0x2a/0x420 [ 2189.153831][T29104] ? __fget_files+0x3a0/0x420 [ 2189.153843][T29104] ? __fget_files+0x2a/0x420 [ 2189.153858][T29104] security_file_ioctl+0xcb/0x2d0 [ 2189.153880][T29104] __se_sys_ioctl+0x47/0x170 [ 2189.153901][T29104] do_syscall_64+0xfa/0x3b0 [ 2189.153917][T29104] ? lockdep_hardirqs_on+0x9c/0x150 [ 2189.153932][T29104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.153948][T29104] ? clear_bhb_loop+0x60/0xb0 [ 2189.153965][T29104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.153980][T29104] RIP: 0033:0x7f873f18ec29 [ 2189.153993][T29104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2189.154007][T29104] RSP: 002b:00007f874005b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.154023][T29104] RAX: ffffffffffffffda RBX: 00007f873f3d6180 RCX: 00007f873f18ec29 [ 2189.154034][T29104] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2189.154044][T29104] RBP: 00007f874005b090 R08: 0000000000000000 R09: 0000000000000000 [ 2189.154053][T29104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2189.154062][T29104] R13: 00007f873f3d6218 R14: 00007f873f3d6180 R15: 00007f873f4ffa28 [ 2189.154086][T29104] [ 2189.154103][T29104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2189.434019][T12217] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2189.453646][T12217] cp210x 3-1:0.1: device disconnected [ 2189.575632][T22525] usb 7-1: Using ep0 maxpacket: 32 [ 2189.626496][T22525] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2189.785532][T22525] usb 7-1: config 0 has no interface number 0 [ 2189.816856][T22525] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2189.845322][T22525] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.865049][T22525] usb 7-1: Product: syz [ 2189.879069][T22525] usb 7-1: Manufacturer: syz [ 2189.915545][T22525] usb 7-1: SerialNumber: syz [ 2189.959202][T22525] usb 7-1: config 0 descriptor?? [ 2189.999704][T22525] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2190.048263][T22525] usb 7-1: selecting invalid altsetting 1 [ 2190.054061][T22525] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2190.092804][T22525] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2190.141197][T22525] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2190.188401][T22525] usb 7-1: media controller created [ 2190.327320][T22525] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2190.497277][T29126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5792'. [ 2191.247890][T29098] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2191.279485][T22525] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2191.318180][T22525] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2191.728352][T29131] netlink: 'syz.3.5794': attribute type 1 has an invalid length. [ 2191.775435][T29131] netlink: 'syz.3.5794': attribute type 1 has an invalid length. [ 2192.631028][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'. [ 2192.640252][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5800'. [ 2195.353697][T13481] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2195.525600][T13481] usb 3-1: Using ep0 maxpacket: 8 [ 2195.533052][T13481] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2195.566470][T13481] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2195.625261][T13481] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2195.655245][T13481] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2195.687339][T13481] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2195.732138][T13481] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2195.760488][T13481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.003640][T13481] usb 3-1: usb_control_msg returned -32 [ 2196.013478][T13481] usbtmc 3-1:16.0: can't read capabilities [ 2196.291069][T29187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5807'. [ 2196.300837][T29187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2196.308646][T29187] IPv6: NLM_F_CREATE should be set when creating new route [ 2196.465346][T29188] usbtmc 3-1:16.0: control status returned 0 [ 2196.658457][T29190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5808'. [ 2196.738285][T29191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5808'. [ 2197.047792][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5809'. [ 2197.793830][T29203] netlink: 'syz.3.5813': attribute type 1 has an invalid length. [ 2198.093923][T13481] usb 3-1: USB disconnect, device number 97 [ 2198.300132][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5815'. [ 2198.309716][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5815'. [ 2198.323303][T29213] syzkaller0: entered promiscuous mode [ 2198.329637][T29213] syzkaller0: entered allmulticast mode [ 2198.528983][T22451] Bluetooth: hci0: command 0x0406 tx timeout [ 2198.749164][T29216] FAULT_INJECTION: forcing a failure. [ 2198.749164][T29216] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.762208][T29216] CPU: 1 UID: 0 PID: 29216 Comm: syz.2.5816 Not tainted syzkaller #0 PREEMPT(full) [ 2198.762236][T29216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2198.762250][T29216] Call Trace: [ 2198.762259][T29216] [ 2198.762269][T29216] dump_stack_lvl+0x189/0x250 [ 2198.762299][T29216] ? __pfx____ratelimit+0x10/0x10 [ 2198.762321][T29216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.762344][T29216] ? __pfx__printk+0x10/0x10 [ 2198.762376][T29216] ? __pfx___might_resched+0x10/0x10 [ 2198.762396][T29216] ? fs_reclaim_acquire+0x7d/0x100 [ 2198.762421][T29216] should_fail_ex+0x414/0x560 [ 2198.762457][T29216] should_failslab+0xa8/0x100 [ 2198.762504][T29216] __kmalloc_noprof+0xcb/0x4f0 [ 2198.762531][T29216] ? iovec_from_user+0x87/0x250 [ 2198.762562][T29216] iovec_from_user+0x87/0x250 [ 2198.762594][T29216] __import_iovec+0x163/0x7f0 [ 2198.762631][T29216] import_iovec+0x74/0xa0 [ 2198.762662][T29216] ___sys_recvmsg+0x43a/0x510 [ 2198.762696][T29216] ? __pfx____sys_recvmsg+0x10/0x10 [ 2198.762747][T29216] ? __fget_files+0x3a0/0x420 [ 2198.762777][T29216] do_recvmmsg+0x307/0x770 [ 2198.762813][T29216] ? __pfx_do_recvmmsg+0x10/0x10 [ 2198.762854][T29216] ? _copy_from_user+0x94/0xb0 [ 2198.762898][T29216] __x64_sys_recvmmsg+0x1af/0x240 [ 2198.762925][T29216] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2198.762947][T29216] ? rcu_is_watching+0x15/0xb0 [ 2198.762970][T29216] ? do_syscall_64+0xbe/0x3b0 [ 2198.762994][T29216] do_syscall_64+0xfa/0x3b0 [ 2198.763012][T29216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.763030][T29216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.763051][T29216] ? clear_bhb_loop+0x60/0xb0 [ 2198.763072][T29216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.763097][T29216] RIP: 0033:0x7f194c38ec29 [ 2198.763115][T29216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.763130][T29216] RSP: 002b:00007f194a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2198.763149][T29216] RAX: ffffffffffffffda RBX: 00007f194c5d5fa0 RCX: 00007f194c38ec29 [ 2198.763163][T29216] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2198.763175][T29216] RBP: 00007f194a5f6090 R08: 0000200000003700 R09: 0000000000000000 [ 2198.763187][T29216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2198.763197][T29216] R13: 00007f194c5d6038 R14: 00007f194c5d5fa0 R15: 00007f194c6ffa28 [ 2198.763225][T29216] [ 2199.035253][ C1] vkms_vblank_simulate: vblank timer overrun [ 2199.459556][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2199.459572][ T30] audit: type=1326 audit(1758303164.354:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29217 comm="syz.3.5818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa244f8ec29 code=0x0 [ 2199.954066][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5820'. [ 2199.963753][T29225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2199.971675][T29225] IPv6: NLM_F_CREATE should be set when creating new route [ 2200.185829][T29227] program syz.5.5821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2200.707868][T29236] sctp: [Deprecated]: syz.5.5821 (pid 29236) Use of int in maxseg socket option. [ 2200.707868][T29236] Use struct sctp_assoc_value instead [ 2202.043787][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 2202.079252][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 2202.835981][T29264] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 2202.856766][T29264] batadv5: entered promiscuous mode [ 2202.902798][T29264] team0: Port device batadv5 added [ 2203.060159][T29262] hub 9-0:1.0: USB hub found [ 2203.075276][T29262] hub 9-0:1.0: 1 port detected [ 2203.110118][T29268] veth0: entered promiscuous mode [ 2203.118475][T29268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5832'. [ 2203.201714][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5832'. [ 2203.669390][T29273] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 2203.688912][T29273] team0: Port device batadv8 added [ 2203.791009][T29273] hub 9-0:1.0: USB hub found [ 2203.797231][T29273] hub 9-0:1.0: 1 port detected [ 2204.239230][T29282] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 2205.372404][T29280] ptrace attach of "./syz-executor exec"[16751] was attempted by "./syz-executor exec"[29280] [ 2205.383728][T29280] dns_resolver: Unsupported server list version (0) [ 2205.544170][T22451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2205.566255][T22451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2205.576469][T22451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2205.584770][T22451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2205.599916][T22451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2206.636649][T29318] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5843'. [ 2206.652846][T29301] chnl_net:caif_netlink_parms(): no params data found [ 2206.704277][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5843'. [ 2206.737739][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5843'. [ 2206.748148][T29318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5843'. [ 2207.203797][T29301] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.235465][T29301] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.263582][T29301] bridge_slave_0: entered allmulticast mode [ 2207.280624][T29301] bridge_slave_0: entered promiscuous mode [ 2207.341561][T29335] vlan0: entered allmulticast mode [ 2207.351038][T29335] macvtap0: entered allmulticast mode [ 2207.351065][T29335] veth0_macvtap: entered allmulticast mode [ 2207.418777][T29301] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.431939][T29301] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.441803][T29301] bridge_slave_1: entered allmulticast mode [ 2207.450716][T29301] bridge_slave_1: entered promiscuous mode [ 2207.588896][T29301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2207.622912][T29301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2207.725569][T26318] Bluetooth: hci3: command tx timeout [ 2207.801588][T29301] team0: Port device team_slave_0 added [ 2207.811718][T29344] tipc: Enabled bearer , priority 0 [ 2207.890347][T29301] team0: Port device team_slave_1 added [ 2208.188379][T29350] tipc: Resetting bearer [ 2208.206445][T29301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2208.230619][T29301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2208.308364][T29301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2208.324714][T29301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2208.332962][T29301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2208.403036][T29301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2208.603295][T29353] block device autoloading is deprecated and will be removed. [ 2208.627366][T29340] tipc: Disabling bearer [ 2208.766982][T29301] hsr_slave_0: entered promiscuous mode [ 2208.773903][T29301] hsr_slave_1: entered promiscuous mode [ 2208.810656][T29301] debugfs: 'hsr0' already exists in 'hsr' [ 2208.828265][T29301] Cannot create hsr debugfs directory [ 2208.875663][T29349] ptrace attach of "./syz-executor exec"[16751] was attempted by "./syz-executor exec"[29349] [ 2208.953849][T29349] dns_resolver: Unsupported server list version (0) [ 2209.809244][T26318] Bluetooth: hci3: command tx timeout [ 2210.136060][T29301] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2210.169688][T29301] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2210.209791][T29301] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2210.263269][T29301] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2210.984523][T29301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2211.110605][T29301] 8021q: adding VLAN 0 to HW filter on device team0 [ 2211.158594][T17478] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.166368][T17478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2211.303129][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.311423][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2211.411838][T29384] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 2211.685537][T13481] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2211.712662][T29301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2211.837242][T13481] usb 4-1: Using ep0 maxpacket: 8 [ 2211.854750][T13481] usb 4-1: config index 0 descriptor too short (expected 37870, got 18) [ 2211.875905][T29301] veth0_vlan: entered promiscuous mode [ 2211.885469][T26318] Bluetooth: hci3: command tx timeout [ 2211.904862][T29301] veth1_vlan: entered promiscuous mode [ 2211.914920][T13481] usb 4-1: config 253 has too many interfaces: 82, using maximum allowed: 32 [ 2211.935580][T13481] usb 4-1: config 253 has an invalid descriptor of length 111, skipping remainder of the config [ 2211.955907][T13481] usb 4-1: config 253 has 0 interfaces, different from the descriptor's value: 82 [ 2211.966630][T13481] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 2211.977898][T13481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.053827][T29301] veth0_macvtap: entered promiscuous mode [ 2212.094689][T29301] veth1_macvtap: entered promiscuous mode [ 2212.336221][T29301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.389362][T29301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.416188][T13481] usb 4-1: string descriptor 0 read error: -71 [ 2212.448376][T13481] usb 4-1: USB disconnect, device number 88 [ 2212.484271][T16817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.506160][T16817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.589025][T16817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.608352][T16817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2213.004819][T17478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.033686][T17478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.124320][T16817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.136286][T16817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.303237][T29397] input: syz1 as /devices/virtual/input/input70 [ 2213.347964][T29397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5861'. [ 2213.974896][T26318] Bluetooth: hci3: command tx timeout [ 2215.850253][T29407] ptrace attach of "./syz-executor exec"[22459] was attempted by "./syz-executor exec"[29407] [ 2215.892595][T29407] dns_resolver: Unsupported server list version (0) [ 2216.587081][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 2218.469588][T22451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2218.489611][T22451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2218.518504][T22451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2218.545584][T22451] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2218.554497][T22451] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2218.579192][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803138b400: rx timeout, send abort [ 2218.587917][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803138b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2219.911093][T29458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2219.921160][T29438] chnl_net:caif_netlink_parms(): no params data found [ 2219.971923][T12217] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2220.150930][T12217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.175560][T12217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.230056][T12217] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2220.251311][T12217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.286745][T12217] usb 6-1: config 0 descriptor?? [ 2220.436932][T29467] vlan0: entered allmulticast mode [ 2220.515659][T29438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.543292][T29438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.571921][T29438] bridge_slave_0: entered allmulticast mode [ 2220.587425][T29438] bridge_slave_0: entered promiscuous mode [ 2220.609644][T29438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.630627][T29438] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.650996][T29438] bridge_slave_1: entered allmulticast mode [ 2220.671175][T29438] bridge_slave_1: entered promiscuous mode [ 2220.685516][T26318] Bluetooth: hci6: command tx timeout [ 2220.717923][T12217] pyra 0003:1E7D:2CF6.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 2220.874039][T29438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.919610][T29438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2221.070212][T29438] team0: Port device team_slave_0 added [ 2221.103745][T29438] team0: Port device team_slave_1 added [ 2221.116931][T22451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2221.138780][T22451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2221.155260][T22451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2221.169110][T22451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2221.185665][T22451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2221.392268][T29438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.401116][T29438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.434173][T29438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.450803][T29438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.483916][T29438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.644693][T29438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.973579][T29438] hsr_slave_0: entered promiscuous mode [ 2222.031095][T29438] hsr_slave_1: entered promiscuous mode [ 2222.090054][T29438] debugfs: 'hsr0' already exists in 'hsr' [ 2222.153740][T29438] Cannot create hsr debugfs directory [ 2222.654001][T12217] pyra 0003:1E7D:2CF6.005A: couldn't init struct pyra_device [ 2222.667824][T12217] pyra 0003:1E7D:2CF6.005A: couldn't install mouse [ 2222.768069][T22451] Bluetooth: hci6: command tx timeout [ 2222.783582][T12217] pyra 0003:1E7D:2CF6.005A: probe with driver pyra failed with error -71 [ 2222.947277][T12217] usb 6-1: USB disconnect, device number 33 [ 2223.114460][T29489] FAULT_INJECTION: forcing a failure. [ 2223.114460][T29489] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.139009][T29489] CPU: 1 UID: 0 PID: 29489 Comm: syz.3.5884 Not tainted syzkaller #0 PREEMPT(full) [ 2223.139039][T29489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2223.139052][T29489] Call Trace: [ 2223.139060][T29489] [ 2223.139071][T29489] dump_stack_lvl+0x189/0x250 [ 2223.139100][T29489] ? __pfx____ratelimit+0x10/0x10 [ 2223.139122][T29489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2223.139146][T29489] ? __pfx__printk+0x10/0x10 [ 2223.139177][T29489] ? __pfx___might_resched+0x10/0x10 [ 2223.139196][T29489] ? fs_reclaim_acquire+0x7d/0x100 [ 2223.139222][T29489] should_fail_ex+0x414/0x560 [ 2223.139259][T29489] should_failslab+0xa8/0x100 [ 2223.139293][T29489] __kmalloc_noprof+0xcb/0x4f0 [ 2223.139322][T29489] ? security_task_alloc+0x4d/0x360 [ 2223.139350][T29489] ? perf_event_init_task+0x12d/0x4b0 [ 2223.139381][T29489] security_task_alloc+0x4d/0x360 [ 2223.139424][T29489] copy_process+0x1530/0x3c00 [ 2223.139467][T29489] ? copy_process+0x97f/0x3c00 [ 2223.139501][T29489] ? __pfx_copy_process+0x10/0x10 [ 2223.139532][T29489] ? __pfx_io_wq_worker+0x10/0x10 [ 2223.139563][T29489] ? __pfx_io_wq_worker+0x10/0x10 [ 2223.139595][T29489] create_io_thread+0xef/0x150 [ 2223.139620][T29489] ? __pfx_create_io_thread+0x10/0x10 [ 2223.139655][T29489] ? __pfx_io_wq_worker+0x10/0x10 [ 2223.139692][T29489] ? __raw_spin_lock_init+0x45/0x100 [ 2223.139721][T29489] ? __init_swait_queue_head+0xa9/0x150 [ 2223.139748][T29489] ? create_io_worker+0x27/0x5d0 [ 2223.139780][T29489] create_io_worker+0x182/0x5d0 [ 2223.139816][T29489] io_wq_enqueue+0x62c/0x850 [ 2223.139845][T29489] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 2223.139882][T29489] io_submit_sqes+0xe49/0x1d30 [ 2223.139948][T29489] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2223.140002][T29489] ? ksys_write+0x1cb/0x250 [ 2223.140035][T29489] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2223.140065][T29489] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2223.140090][T29489] ? __pfx_vfs_write+0x10/0x10 [ 2223.140121][T29489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2223.140150][T29489] ? __fget_files+0x3a0/0x420 [ 2223.140177][T29489] ? fput+0xa0/0xd0 [ 2223.140200][T29489] ? ksys_write+0x22a/0x250 [ 2223.140231][T29489] ? __pfx_ksys_write+0x10/0x10 [ 2223.140257][T29489] ? rcu_is_watching+0x15/0xb0 [ 2223.140284][T29489] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2223.140320][T29489] do_syscall_64+0xfa/0x3b0 [ 2223.140343][T29489] ? lockdep_hardirqs_on+0x9c/0x150 [ 2223.140365][T29489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.140386][T29489] ? clear_bhb_loop+0x60/0xb0 [ 2223.140420][T29489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.140441][T29489] RIP: 0033:0x7fa244f8ec29 [ 2223.140461][T29489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2223.140479][T29489] RSP: 002b:00007fa245da2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2223.140502][T29489] RAX: ffffffffffffffda RBX: 00007fa2451d5fa0 RCX: 00007fa244f8ec29 [ 2223.140518][T29489] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 2223.140531][T29489] RBP: 00007fa245da2090 R08: 0000000000000000 R09: 0000000000000000 [ 2223.140544][T29489] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 2223.140556][T29489] R13: 00007fa2451d6038 R14: 00007fa2451d5fa0 R15: 00007fa2452ffa28 [ 2223.140591][T29489] [ 2223.369185][T22451] Bluetooth: hci4: command tx timeout [ 2223.735422][T26436] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2223.838008][T29438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.850419][T29438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2223.927335][T26436] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2223.954207][T26436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.963656][T26436] usb 6-1: Product: syz [ 2223.996420][T29438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.007623][T26436] usb 6-1: Manufacturer: syz [ 2224.007650][T26436] usb 6-1: SerialNumber: syz [ 2224.022013][T29438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2224.024554][T26436] usb 6-1: config 0 descriptor?? [ 2224.059368][T29472] chnl_net:caif_netlink_parms(): no params data found [ 2224.061015][T26436] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2224.091985][T26436] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2224.136901][T26436] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2224.192534][T29438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.232622][T29438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2224.327394][T29491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5885'. [ 2224.411397][T29438] team0: Port device netdevsim0 removed [ 2224.424547][T29438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.436999][T29438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2224.462016][T26436] usb 6-1: USB disconnect, device number 34 [ 2224.695851][T29509] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 2224.721466][T29472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.736790][T29472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.744622][T29472] bridge_slave_0: entered allmulticast mode [ 2224.753880][T29472] bridge_slave_0: entered promiscuous mode [ 2224.764065][T29472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.772743][T29472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.782385][T29472] bridge_slave_1: entered allmulticast mode [ 2224.807049][T29472] bridge_slave_1: entered promiscuous mode [ 2224.845728][T22451] Bluetooth: hci6: command tx timeout [ 2224.989043][T29472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.018985][T29472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2225.035587][T29438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2225.145348][T29438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2225.176896][T29472] team0: Port device team_slave_0 added [ 2225.183412][T29438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2225.216522][T29472] team0: Port device team_slave_1 added [ 2225.222916][T29438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2225.428038][T29472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2225.446136][T29472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.513072][T29472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2225.538356][T29472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2225.546545][T29472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.573908][T29472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2225.575834][T22451] Bluetooth: hci4: command tx timeout [ 2225.763226][T29472] hsr_slave_0: entered promiscuous mode [ 2225.779117][T29472] hsr_slave_1: entered promiscuous mode [ 2225.788198][T29472] debugfs: 'hsr0' already exists in 'hsr' [ 2225.794159][T29472] Cannot create hsr debugfs directory [ 2225.945951][T29532] loop8: detected capacity change from 0 to 8 [ 2225.964972][T29532] Dev loop8: unable to read RDB block 8 [ 2225.985322][T29532] loop8: unable to read partition table [ 2225.991851][T29532] loop8: partition table beyond EOD, truncated [ 2226.005254][T29532] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2226.360748][T29438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2226.449777][T29438] 8021q: adding VLAN 0 to HW filter on device team0 [ 2226.481422][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.489085][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2226.535332][ T5958] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2226.631456][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.638736][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2226.725826][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 2226.739327][ T5958] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2226.770318][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.800963][ T5958] usb 6-1: config 0 descriptor?? [ 2226.805984][T29472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2226.819979][T29472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2226.862486][T29472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2226.909027][T29472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2226.927844][T22451] Bluetooth: hci6: command tx timeout [ 2227.047579][ T5958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2227.091218][T29438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.101730][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2227.124845][ T5958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2227.173393][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.180083][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.184130][ T5958] usb 6-1: media controller created [ 2227.247383][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2227.336313][T29438] veth0_vlan: entered promiscuous mode [ 2227.374873][T29438] veth1_vlan: entered promiscuous mode [ 2227.393455][T29472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2227.478424][T29472] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.523165][T23512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.530434][T23512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2227.567023][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.574302][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2227.593182][T29438] veth0_macvtap: entered promiscuous mode [ 2227.640043][T29438] veth1_macvtap: entered promiscuous mode [ 2227.655807][T22451] Bluetooth: hci4: command tx timeout [ 2227.722869][T29438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2227.751186][T29472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2227.774687][T29438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2227.803559][T23512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.824874][T23512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.863716][T23512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.887159][T23512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2228.061498][T29472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2228.175799][ T5958] stb0899_attach: Driver disabled by Kconfig [ 2228.182382][ T5958] az6027: no front-end attached [ 2228.182382][ T5958] [ 2228.206716][ T5958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2228.227636][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 2228.270602][T17478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.312488][ T5958] dvb-usb: schedule remote query interval to 400 msecs. [ 2228.315180][T17478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2228.362603][ T5958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2228.412618][ T5958] usb 6-1: USB disconnect, device number 35 [ 2228.478962][T29472] veth0_vlan: entered promiscuous mode [ 2228.514979][ T5958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2228.524244][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.538620][T29472] veth1_vlan: entered promiscuous mode [ 2228.574739][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2228.661080][T29472] veth0_macvtap: entered promiscuous mode [ 2228.681846][T29472] veth1_macvtap: entered promiscuous mode [ 2228.782358][T29472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2228.841620][T29472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2228.938024][T23512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2228.959684][T23512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.015193][T23512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.048034][T23512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.270214][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.280110][T26436] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2229.291513][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.430743][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.465474][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.483937][T26436] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2229.515285][T26436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.541175][T26436] usb 4-1: Product: syz [ 2229.560252][T26436] usb 4-1: Manufacturer: syz [ 2229.572319][T26436] usb 4-1: SerialNumber: syz [ 2229.725937][T22451] Bluetooth: hci4: command tx timeout [ 2229.974250][T29601] syz_tun: entered allmulticast mode [ 2229.998243][T29600] syz_tun: left allmulticast mode [ 2230.612696][T29612] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2230.653127][T29597] ptrace attach of "./syz-executor exec"[29472] was attempted by "./syz-executor exec"[29597] [ 2230.708285][T29597] dns_resolver: Unsupported server list version (0) [ 2230.978572][T29618] input: syz1 as /devices/virtual/input/input72 [ 2231.026224][ T5958] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2231.081576][T26436] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2231.116357][T26436] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2231.206045][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 2231.230200][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.249782][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2231.266717][ T5958] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2231.280397][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.330672][ T5958] usb 6-1: config 0 descriptor?? [ 2231.389494][T29624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5928'. [ 2231.779294][ T5958] konepure 0003:1E7D:2DB4.005B: unknown main item tag 0x0 [ 2231.791273][ T5958] konepure 0003:1E7D:2DB4.005B: unknown main item tag 0x0 [ 2231.798364][T29588] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2231.800266][ T5958] konepure 0003:1E7D:2DB4.005B: unknown main item tag 0x0 [ 2231.816150][ T5958] konepure 0003:1E7D:2DB4.005B: unknown main item tag 0x0 [ 2231.829126][ T5958] konepure 0003:1E7D:2DB4.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 2231.937139][T26436] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 2231.970681][T26436] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2231.991147][T29588] usb 9-1: Using ep0 maxpacket: 8 [ 2232.011444][T29588] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2232.032873][T26436] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2232.042404][T29588] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.063359][T26436] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 2232.088517][T29588] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2232.108546][T29588] pvrusb2: ********** [ 2232.112828][T29588] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2232.156329][T29588] pvrusb2: Important functionality might not be entirely working. [ 2232.171641][T29588] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2232.186625][T29588] pvrusb2: ********** [ 2232.210507][T26436] usb 6-1: USB disconnect, device number 36 [ 2232.272320][ T2344] pvrusb2: Invalid write control endpoint [ 2232.370796][ T2344] pvrusb2: Invalid write control endpoint [ 2232.392635][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2232.420781][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2232.456605][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2232.469395][T29588] usb 9-1: USB disconnect, device number 2 [ 2232.478020][ T2344] pvrusb2: Device being rendered inoperable [ 2232.501841][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2232.522763][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2232.534861][ T2344] pvrusb2: Attached sub-driver cx25840 [ 2232.540699][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2232.551214][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2232.928561][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5941'. [ 2232.976301][ T5958] usb 4-1: USB disconnect, device number 89 [ 2233.194690][T29659] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.203114][T29659] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.395341][T28457] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2233.453126][T29659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2233.472461][T29659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2233.568855][T28457] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.591333][T28457] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2233.617866][T28457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.641764][T28457] usb 9-1: config 0 descriptor?? [ 2233.663513][T28457] pwc: Askey VC010 type 2 USB webcam detected. [ 2233.907564][T29672] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5947'. [ 2233.958727][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.980464][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.014527][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.025954][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.270022][T28457] pwc: recv_control_msg error -32 req 02 val 2700 [ 2234.294011][T28457] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2234.305573][T28457] pwc: recv_control_msg error -71 req 04 val 1000 [ 2234.356733][T28457] pwc: recv_control_msg error -71 req 04 val 1300 [ 2234.378612][T28457] pwc: recv_control_msg error -71 req 04 val 1400 [ 2234.414928][T28457] pwc: recv_control_msg error -71 req 02 val 2000 [ 2234.431366][T28457] pwc: recv_control_msg error -71 req 02 val 2100 [ 2234.447754][T28457] pwc: recv_control_msg error -71 req 04 val 1500 [ 2234.456107][T28457] pwc: recv_control_msg error -71 req 02 val 2500 [ 2234.468022][T28457] pwc: recv_control_msg error -71 req 02 val 2400 [ 2234.485761][T28457] pwc: recv_control_msg error -71 req 02 val 2600 [ 2234.513282][T28457] pwc: recv_control_msg error -71 req 02 val 2900 [ 2234.525727][T28457] pwc: recv_control_msg error -71 req 02 val 2800 [ 2234.565371][T28457] pwc: recv_control_msg error -71 req 04 val 1100 [ 2234.593466][T28457] pwc: recv_control_msg error -71 req 04 val 1200 [ 2234.615833][T28457] pwc: Registered as video103. [ 2234.626116][T28457] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input73 [ 2234.660963][T28457] usb 9-1: USB disconnect, device number 3 [ 2235.105377][T28457] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 2235.155216][ T5958] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2235.257572][T28457] usb 3-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2235.282040][T28457] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2235.303754][T28457] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.320025][T28457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2235.336900][T28457] usb 3-1: SerialNumber: syz [ 2235.342979][ T5958] usb 9-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40 [ 2235.359230][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.368127][ T5958] usb 9-1: Product: syz [ 2235.373300][ T5958] usb 9-1: Manufacturer: syz [ 2235.381075][T29689] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2235.406138][ T5958] usb 9-1: SerialNumber: syz [ 2235.646631][T28457] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2235.676131][T28457] usb 3-1: USB disconnect, device number 98 [ 2235.881541][T29706] netlink: 'syz.7.5963': attribute type 4 has an invalid length. [ 2236.040570][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5965'. [ 2236.070134][T29710] veth0_vlan: entered allmulticast mode [ 2236.458221][ T5958] cdc_ncm 9-1:1.0: bind() failure [ 2236.505614][ T5958] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2236.515518][T29588] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2236.531647][ T5958] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2236.583112][ T5958] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 2236.638471][ T5958] usb 9-1: USB disconnect, device number 4 [ 2236.676947][T29588] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 2236.691565][T29588] usb 3-1: config 0 has no interface number 0 [ 2236.703249][T29588] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2236.724889][T29588] usb 3-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2236.762862][T29588] usb 3-1: config 0 interface 110 has no altsetting 0 [ 2236.792023][T29588] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 2236.804893][T29588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.829193][T29588] usb 3-1: Product: syz [ 2236.839111][T29588] usb 3-1: Manufacturer: syz [ 2236.853106][T29588] usb 3-1: SerialNumber: syz [ 2236.876344][T29588] usb 3-1: config 0 descriptor?? [ 2237.100651][T29588] cdc_subset 3-1:0.110: probe with driver cdc_subset failed with error -22 [ 2237.291569][T26318] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2237.307125][T26318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2237.318114][T26318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2237.328353][T26318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2237.336368][T29588] usb 3-1: USB disconnect, device number 99 [ 2237.352784][T26318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2238.315216][T12217] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2238.495361][T12217] usb 3-1: Using ep0 maxpacket: 32 [ 2238.509647][T12217] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2238.526585][T12217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.529591][T26318] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2238.545961][T26318] Bluetooth: hci6: Injecting HCI hardware error event [ 2238.546050][T12217] usb 3-1: Product: syz [ 2238.557493][T22451] Bluetooth: hci6: hardware error 0x00 [ 2238.565139][T12217] usb 3-1: Manufacturer: syz [ 2238.576252][T12217] usb 3-1: SerialNumber: syz [ 2238.598523][T12217] usb 3-1: config 0 descriptor?? [ 2238.638170][T12217] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2238.724980][T29726] chnl_net:caif_netlink_parms(): no params data found [ 2239.487497][T26318] Bluetooth: hci7: command tx timeout [ 2240.692912][T22451] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2241.058691][T12217] gspca_stk1135: reg_w 0x300 err -71 [ 2241.066520][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.074019][T12217] gspca_stk1135: Sensor write failed [ 2241.115195][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.122922][T12217] gspca_stk1135: Sensor write failed [ 2241.136565][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.155634][T12217] gspca_stk1135: Sensor read failed [ 2241.167324][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.189228][T12217] gspca_stk1135: Sensor read failed [ 2241.194562][T12217] gspca_stk1135: Detected sensor type unknown (0x0) [ 2241.201732][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.208714][T12217] gspca_stk1135: Sensor read failed [ 2241.214034][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.223087][T12217] gspca_stk1135: Sensor read failed [ 2241.229143][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.235603][T12217] gspca_stk1135: Sensor write failed [ 2241.260632][T12217] gspca_stk1135: serial bus timeout: status=0x00 [ 2241.267389][T12217] gspca_stk1135: Sensor write failed [ 2241.273666][T12217] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 2241.287180][T12217] usb 3-1: USB disconnect, device number 100 [ 2241.565317][T22451] Bluetooth: hci7: command tx timeout [ 2242.076100][T12217] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2242.261862][T12217] usb 3-1: Using ep0 maxpacket: 32 [ 2242.269684][T12217] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2242.278879][T12217] usb 3-1: config 0 has no interface number 0 [ 2242.295849][T12217] usb 3-1: config 0 interface 89 has no altsetting 0 [ 2242.309089][T12217] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2242.324382][T12217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.334180][T12217] usb 3-1: Product: syz [ 2242.339564][T12217] usb 3-1: Manufacturer: syz [ 2242.344470][T12217] usb 3-1: SerialNumber: syz [ 2242.354089][T12217] usb 3-1: config 0 descriptor?? [ 2242.363863][T12217] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2242.383209][T12217] em28xx 3-1:0.89: Video interface 89 found: bulk [ 2242.988756][T12217] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 2243.556727][T29765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2243.564269][T29765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2243.572468][T29765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2243.579784][T29765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2243.612991][T29765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2243.624051][T12217] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 2243.645821][T22451] Bluetooth: hci7: command tx timeout [ 2243.654498][T12217] em28xx 3-1:0.89: board has no eeprom [ 2243.663580][T29765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2244.068714][T29726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2244.078548][T29726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.086599][T29726] bridge_slave_0: entered allmulticast mode [ 2244.095226][T12217] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 2244.102504][T12217] em28xx 3-1:0.89: analog set to bulk mode. [ 2244.110955][T29726] bridge_slave_0: entered promiscuous mode [ 2244.121536][ T5958] em28xx 3-1:0.89: Registering V4L2 extension [ 2244.133978][T29726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2244.160068][T12217] usb 3-1: USB disconnect, device number 101 [ 2244.168433][T29726] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.186408][T12217] em28xx 3-1:0.89: Disconnecting em28xx [ 2244.197333][T29726] bridge_slave_1: entered allmulticast mode [ 2244.241687][T29726] bridge_slave_1: entered promiscuous mode [ 2244.339955][ T5958] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 2244.418553][ T5958] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 2244.418619][T29726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2244.447638][ T5958] em28xx 3-1:0.89: No AC97 audio processor [ 2244.451202][T29726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2244.480739][ T5958] usb 3-1: Decoder not found [ 2244.538749][ T5958] em28xx 3-1:0.89: failed to create media graph [ 2244.555668][ T5958] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 2244.578818][ T5958] em28xx 3-1:0.89: Registering snapshot button... [ 2244.635784][ T5958] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input74 [ 2244.681454][ T5958] em28xx 3-1:0.89: Remote control support is not available for this card. [ 2244.699566][T12217] em28xx 3-1:0.89: Closing input extension [ 2244.715292][T12217] em28xx 3-1:0.89: Deregistering snapshot button [ 2244.796337][T29726] team0: Port device team_slave_0 added [ 2244.836664][T29726] team0: Port device team_slave_1 added [ 2244.850167][T12217] em28xx 3-1:0.89: Freeing device [ 2245.048190][T29726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2245.065729][T29797] loop2: detected capacity change from 0 to 7 [ 2245.075526][T29726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2245.108070][T21335] Dev loop2: unable to read RDB block 7 [ 2245.124155][T21335] loop2: unable to read partition table [ 2245.162923][T29726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2245.166632][T21335] loop2: partition table beyond EOD, truncated [ 2245.218304][T29726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2245.228369][T29797] Dev loop2: unable to read RDB block 7 [ 2245.234432][T29797] loop2: unable to read partition table [ 2245.242846][T29797] loop2: partition table beyond EOD, truncated [ 2245.249672][T29726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2245.278136][T29797] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2245.318892][T29726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2245.728668][T26318] Bluetooth: hci7: command tx timeout [ 2245.799622][T29726] hsr_slave_0: entered promiscuous mode [ 2245.837082][T29726] hsr_slave_1: entered promiscuous mode [ 2245.865834][T29726] debugfs: 'hsr0' already exists in 'hsr' [ 2245.891731][T29726] Cannot create hsr debugfs directory [ 2246.674887][T29726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.923280][T29828] bridge0: port 3(syz_tun) entered blocking state [ 2246.945300][T29828] bridge0: port 3(syz_tun) entered disabled state [ 2246.952174][T29828] syz_tun: entered allmulticast mode [ 2246.969580][T29828] syz_tun: entered promiscuous mode [ 2247.026297][T29828] bridge0: port 3(syz_tun) entered blocking state [ 2247.034707][T29828] bridge0: port 3(syz_tun) entered forwarding state [ 2247.075447][T12217] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2247.169667][T29726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.287977][T12217] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 2247.305271][T12217] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2247.317399][T12217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2247.321929][T29726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.337182][T12217] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2247.565578][T12217] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2247.573851][T12217] usb 3-1: Product: syz [ 2247.578238][T12217] usb 3-1: Manufacturer: syz [ 2247.582959][T12217] usb 3-1: SerialNumber: syz [ 2247.596202][T12217] usb 3-1: config 0 descriptor?? [ 2247.619938][T12217] hub 3-1:0.0: bad descriptor, ignoring hub [ 2247.632234][T12217] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2247.649581][T12217] usb 3-1: selecting invalid altsetting 0 [ 2247.805637][T26318] Bluetooth: hci7: command 0x0405 tx timeout [ 2248.079220][T29588] usb 3-1: USB disconnect, device number 102 [ 2248.185886][T29726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2248.252324][T29726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2248.348654][T29726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2248.403834][T29726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2248.694030][T29726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2248.774557][T29726] 8021q: adding VLAN 0 to HW filter on device team0 [ 2248.838799][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.846072][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2248.869533][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.876826][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2249.142282][T29726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2249.195672][T25630] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 2249.307565][T29726] veth0_vlan: entered promiscuous mode [ 2249.349720][T29726] veth1_vlan: entered promiscuous mode [ 2249.365666][T26436] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2249.396399][T25630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2249.420131][T25630] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2249.434639][T25630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.447720][T29726] veth0_macvtap: entered promiscuous mode [ 2249.463277][T25630] usb 3-1: Product: syz [ 2249.473438][T25630] usb 3-1: Manufacturer: syz [ 2249.478997][T29726] veth1_macvtap: entered promiscuous mode [ 2249.486063][T25630] usb 3-1: SerialNumber: syz [ 2249.509312][T25630] usb 3-1: config 0 descriptor?? [ 2249.539790][T26436] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.553845][T29726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2249.573112][T26436] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 2249.594515][T29726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2249.615248][T26436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 2249.635488][T26436] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2249.651555][ T1134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.657634][T26436] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2249.671844][T26436] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2249.681636][T26436] usb 6-1: Manufacturer: syz [ 2249.692095][ T1134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.701273][T26436] usb 6-1: config 0 descriptor?? [ 2249.721709][ T1134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.787128][ T1134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.941950][T26436] usb 6-1: USB disconnect, device number 37 [ 2250.100760][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.115332][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.238832][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.276603][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.153973][T29877] netlink: 'syz.5.6023': attribute type 1 has an invalid length. [ 2252.277259][T28457] IPVS: starting estimator thread 0... [ 2252.455884][T29900] IPVS: using max 27 ests per chain, 64800 per kthread [ 2253.063584][ T5958] usb 3-1: USB disconnect, device number 103 [ 2253.306369][T13481] IPVS: starting estimator thread 0... [ 2253.465727][T29924] IPVS: using max 28 ests per chain, 67200 per kthread [ 2254.019317][T29946] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6051'. [ 2256.366051][T13481] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 2256.537849][T13481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2256.575314][T13481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2256.610796][T13481] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2256.663616][T13481] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 2256.685681][T13481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.719812][T13481] usb 6-1: config 0 descriptor?? [ 2256.729233][T29973] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2256.935392][T29588] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2256.958153][T13481] usbhid 6-1:0.0: can't add hid device: -71 [ 2256.968999][T13481] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2256.984485][T13481] usb 6-1: USB disconnect, device number 38 [ 2257.095313][T29588] usb 4-1: Using ep0 maxpacket: 16 [ 2257.111262][T29588] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.135268][T29588] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2257.149981][T29588] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2257.167129][T29588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.178911][T29588] usb 4-1: config 0 descriptor?? [ 2257.632149][T29588] nzxt-smart2 0003:1E71:2009.005C: unknown main item tag 0x0 [ 2257.662131][T29588] nzxt-smart2 0003:1E71:2009.005C: unknown main item tag 0x0 [ 2257.677989][T29588] nzxt-smart2 0003:1E71:2009.005C: unknown main item tag 0x0 [ 2257.705261][T29588] nzxt-smart2 0003:1E71:2009.005C: unknown main item tag 0x0 [ 2257.735394][T29588] nzxt-smart2 0003:1E71:2009.005C: unknown main item tag 0x0 [ 2257.780832][T29588] nzxt-smart2 0003:1E71:2009.005C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2257.840664][T13481] IPVS: starting estimator thread 0... [ 2257.955268][T29992] IPVS: using max 24 ests per chain, 57600 per kthread [ 2258.032583][T29588] usb 4-1: USB disconnect, device number 90 [ 2258.407380][ T30] audit: type=1326 audit(1758303223.294:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.8.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3858ec29 code=0x7ffc0000 [ 2258.484692][ T30] audit: type=1326 audit(1758303223.304:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.8.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3858ec29 code=0x7ffc0000 [ 2258.571824][ T30] audit: type=1326 audit(1758303223.334:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.8.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3d3858ec29 code=0x7ffc0000 [ 2258.696531][ T30] audit: type=1326 audit(1758303223.334:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.8.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3858ec29 code=0x7ffc0000 [ 2258.753371][T30010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6075'. [ 2258.765564][ T30] audit: type=1326 audit(1758303223.334:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.8.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3858ec29 code=0x7ffc0000 [ 2259.275360][ T5958] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2259.447489][ T5958] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2259.475221][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.506093][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.537967][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2259.579996][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2259.599872][ T5958] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2259.643227][ T5958] usb 4-1: Manufacturer: syz [ 2259.706912][ T5958] usb 4-1: config 0 descriptor?? [ 2260.123009][ T5958] appleir 0003:05AC:8243.005D: unknown main item tag 0x0 [ 2260.170910][ T5958] appleir 0003:05AC:8243.005D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2262.278138][ T5929] usb 4-1: USB disconnect, device number 91 [ 2262.984772][T30061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2264.324193][T30075] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6097'. [ 2264.363809][T30072] syz.5.6094: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 2264.383232][T30072] CPU: 0 UID: 0 PID: 30072 Comm: syz.5.6094 Not tainted syzkaller #0 PREEMPT(full) [ 2264.383259][T30072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2264.383273][T30072] Call Trace: [ 2264.383283][T30072] [ 2264.383292][T30072] dump_stack_lvl+0x189/0x250 [ 2264.383328][T30072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2264.383355][T30072] ? __pfx__printk+0x10/0x10 [ 2264.383385][T30072] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2264.383412][T30072] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2264.383441][T30072] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2264.383470][T30072] warn_alloc+0x214/0x310 [ 2264.383511][T30072] ? __pfx_warn_alloc+0x10/0x10 [ 2264.383554][T30072] ? __get_vm_area_node+0x28f/0x300 [ 2264.383586][T30072] ? packet_set_ring+0x6f4/0x2350 [ 2264.383622][T30072] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2264.383682][T30072] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2264.383714][T30072] ? alloc_pages_mpol+0x3c4/0x4a0 [ 2264.383746][T30072] ? packet_set_ring+0x6f4/0x2350 [ 2264.383772][T30072] vzalloc_noprof+0xb2/0xf0 [ 2264.383797][T30072] ? packet_set_ring+0x6f4/0x2350 [ 2264.383825][T30072] packet_set_ring+0x6f4/0x2350 [ 2264.383868][T30072] ? __pfx_packet_set_ring+0x10/0x10 [ 2264.383909][T30072] ? _copy_from_user+0x94/0xb0 [ 2264.383937][T30072] packet_setsockopt+0xc5a/0x12c0 [ 2264.383962][T30072] ? mpol_set_nodemask+0x30e/0x3f0 [ 2264.383988][T30072] ? __pfx_packet_setsockopt+0x10/0x10 [ 2264.384018][T30072] ? __lock_acquire+0xab9/0xd20 [ 2264.384057][T30072] ? aa_sk_perm+0x81e/0x950 [ 2264.384089][T30072] ? __pfx_aa_sk_perm+0x10/0x10 [ 2264.384118][T30072] ? __fget_files+0x2a/0x420 [ 2264.384133][T30072] ? aa_sock_opt_perm+0xff/0x1b0 [ 2264.384153][T30072] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2264.384173][T30072] ? __pfx_packet_setsockopt+0x10/0x10 [ 2264.384199][T30072] do_sock_setsockopt+0x17c/0x1b0 [ 2264.384225][T30072] __x64_sys_setsockopt+0x13f/0x1b0 [ 2264.384251][T30072] do_syscall_64+0xfa/0x3b0 [ 2264.384270][T30072] ? lockdep_hardirqs_on+0x9c/0x150 [ 2264.384289][T30072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.384306][T30072] ? clear_bhb_loop+0x60/0xb0 [ 2264.384327][T30072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.384344][T30072] RIP: 0033:0x7f5e3098ec29 [ 2264.384360][T30072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2264.384376][T30072] RSP: 002b:00007f5e3172e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2264.384395][T30072] RAX: ffffffffffffffda RBX: 00007f5e30bd6180 RCX: 00007f5e3098ec29 [ 2264.384408][T30072] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 2264.384419][T30072] RBP: 00007f5e30a11e41 R08: 000000000000001c R09: 0000000000000000 [ 2264.384431][T30072] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 2264.384442][T30072] R13: 00007f5e30bd6218 R14: 00007f5e30bd6180 R15: 00007f5e30cffa28 [ 2264.384469][T30072] [ 2264.384495][T30072] Mem-Info: [ 2264.999354][T30072] active_anon:12302 inactive_anon:0 isolated_anon:0 [ 2264.999354][T30072] active_file:22661 inactive_file:4646 isolated_file:0 [ 2264.999354][T30072] unevictable:768 dirty:110 writeback:0 [ 2264.999354][T30072] slab_reclaimable:9655 slab_unreclaimable:124735 [ 2264.999354][T30072] mapped:47555 shmem:5138 pagetables:1594 [ 2264.999354][T30072] sec_pagetables:0 bounce:0 [ 2264.999354][T30072] kernel_misc_reclaimable:0 [ 2264.999354][T30072] free:1256976 free_pcp:17579 free_cma:0 [ 2265.183738][T30072] Node 0 active_anon:45960kB inactive_anon:0kB active_file:90592kB inactive_file:18452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192864kB dirty:452kB writeback:0kB shmem:15900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14064kB pagetables:6284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2265.244598][T30072] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2265.386978][T30072] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.430171][T30072] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2265.441424][T30072] Node 0 DMA32 free:1159576kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45560kB inactive_anon:0kB active_file:90376kB inactive_file:17156kB unevictable:1536kB writepending:452kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:48880kB local_pcp:16904kB free_cma:0kB [ 2265.475762][T30090] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 30090 comm: syz.8.6104) [ 2265.505724][T30072] lowmem_reserve[]: 0 0 1 1 1 [ 2265.510712][T30072] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:0kB active_file:216kB inactive_file:1296kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 2265.540215][ C1] vkms_vblank_simulate: vblank timer overrun [ 2265.607494][T30072] lowmem_reserve[]: 0 0 0 0 0 [ 2265.613114][T30072] Node 1 Normal free:3852644kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25864kB local_pcp:16944kB free_cma:0kB [ 2265.644758][ C1] vkms_vblank_simulate: vblank timer overrun [ 2265.654655][T30072] lowmem_reserve[]: 0 0 0 0 0 [ 2265.770108][T30072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2265.804573][ T30] audit: type=1800 audit(1758303230.694:1583): pid=30090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6104" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=168465 res=0 errno=0 [ 2265.837230][ C1] vkms_vblank_simulate: vblank timer overrun [ 2266.275224][T30072] Node 0 DMA32: 64*4kB (UME) 58*8kB (ME) 160*16kB (UME) 276*32kB (UME) 390*64kB (ME) 146*128kB (UME) 107*256kB (UME) 51*512kB (UME) 19*1024kB (UM) 12*2048kB (M) 245*4096kB (UM) = 1156816kB [ 2266.395292][T30072] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2266.424418][T30072] Node 1 Normal: 69*4kB (UE) 7*8kB (ME) 13*16kB (UE) 5*32kB (UE) 3*64kB (ME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 938*4096kB (UM) = 3852924kB [ 2266.476461][T30072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2266.550149][T30072] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 2266.601336][T30072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2266.665405][T30072] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2266.715306][T30072] 31546 total pagecache pages [ 2266.788446][T30072] 0 pages in swap cache [ 2266.792686][T30072] Free swap = 124996kB [ 2266.913509][T30072] Total swap = 124996kB [ 2266.991518][T30072] 2097051 pages RAM [ 2267.047123][T30072] 0 pages HighMem/MovableOnly [ 2267.052161][T30072] 425671 pages reserved [ 2267.108377][T30072] 0 pages cma reserved [ 2269.175178][ T5929] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2269.385289][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 2269.471689][ T5929] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2269.495759][ T5929] usb 6-1: config 0 has no interface number 0 [ 2269.517270][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2269.590909][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2269.619429][ T5929] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2269.675415][ T5929] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2269.710571][ T5929] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2269.748990][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.800941][ T5929] usb 6-1: config 0 descriptor?? [ 2269.845461][ T5929] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2270.025278][ T5929] usb 6-1: USB disconnect, device number 39 [ 2270.037795][ T5929] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2273.166800][ T5929] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2273.355373][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 2273.376805][ T5929] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2273.402907][ T5929] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2273.437848][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2273.485913][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2273.537990][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2273.590921][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2273.634952][ T5929] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2273.705502][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.749045][ T5929] usb 3-1: config 0 descriptor?? [ 2274.010227][ T5929] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2274.202498][ T5929] usb 3-1: USB disconnect, device number 104 [ 2274.229110][ T5929] usblp0: removed [ 2274.256143][T25630] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2274.455266][T25630] usb 4-1: Using ep0 maxpacket: 32 [ 2274.467295][T25630] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2274.478178][T25630] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2274.521888][T25630] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2274.548180][T25630] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2274.585242][T25630] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2274.624880][T25630] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2274.636491][T25630] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2274.659449][T25630] usb 4-1: Product: syz [ 2274.674334][T25630] usb 4-1: Manufacturer: syz [ 2274.684799][T25630] usb 4-1: SerialNumber: syz [ 2274.717017][T25630] usb 4-1: config 0 descriptor?? [ 2274.734854][T25630] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2274.749478][T25630] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2274.943008][T25630] usb 4-1: USB disconnect, device number 92 [ 2274.954970][T25630] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2275.060173][T30211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2277.196214][ T5958] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2277.387651][ T5958] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 2277.417933][ T5958] usb 3-1: config 0 has no interface number 0 [ 2277.453766][ T5958] usb 3-1: config 0 interface 161 has no altsetting 0 [ 2277.515316][ T5958] usb 3-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=33.62 [ 2277.524438][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.588710][ T5958] usb 3-1: config 0 descriptor?? [ 2277.607760][ T5958] cxacru 3-1:0.161: usbatm_usb_probe: bind failed: -19! [ 2277.992757][T30240] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2277.999369][T30240] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2278.060255][T30260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.083832][T30240] vhci_hcd vhci_hcd.0: Device attached [ 2278.110068][T30260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.157988][ T5958] usb 3-1: USB disconnect, device number 105 [ 2278.165563][T30258] vhci_hcd: cannot find a urb of seqnum 13 max seqnum 0 [ 2278.184677][ T56] vhci_hcd: stop threads [ 2278.193416][ T56] vhci_hcd: release socket [ 2278.215362][ T56] vhci_hcd: disconnect device [ 2278.255458][T28457] vhci_hcd: vhci_device speed not set [ 2280.267715][T30299] hub 9-0:1.0: USB hub found [ 2280.274465][T30299] hub 9-0:1.0: 1 port detected [ 2280.295331][T30305] loop6: detected capacity change from 0 to 1 [ 2280.327748][T30305] Dev loop6: unable to read RDB block 1 [ 2280.334016][T30305] loop6: unable to read partition table [ 2280.341462][T30305] loop6: partition table beyond EOD, truncated [ 2280.374273][T30305] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2280.711215][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6187'. [ 2284.327340][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6199'. [ 2285.038282][T30356] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 2285.113427][T30360] fuse: Bad value for 'fd' [ 2285.145323][T30356] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 2285.146041][T30356] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 2288.284915][T30398] bridge0: port 3(syz_tun) entered disabled state [ 2288.291693][T30398] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.299417][T30398] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.610334][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.616897][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.408087][T30424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.415912][T30424] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.115013][ T30] audit: type=1326 audit(1758303255.004:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2290.169207][ T30] audit: type=1326 audit(1758303255.004:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2290.259920][ T30] audit: type=1326 audit(1758303255.004:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2290.333641][ T30] audit: type=1326 audit(1758303255.004:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2290.508636][ T30] audit: type=1326 audit(1758303255.004:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2291.017402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046ca1800: rx timeout, send abort [ 2291.026471][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888046ca1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2291.116053][ T30] audit: type=1326 audit(1758303255.034:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31bbd8d590 code=0x7ffc0000 [ 2291.150982][ T30] audit: type=1326 audit(1758303255.034:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2291.259657][ T30] audit: type=1326 audit(1758303255.034:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2291.500739][ T30] audit: type=1326 audit(1758303255.034:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2291.649692][ T30] audit: type=1326 audit(1758303255.034:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30438 comm="syz.7.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2292.904070][T30465] vlan2: entered promiscuous mode [ 2292.923974][T30465] macvlan1: entered promiscuous mode [ 2293.131145][T30470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6243'. [ 2293.975430][ T5958] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 2294.063739][T30486] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2294.079129][T30486] team0: Port device batadv1 added [ 2294.166419][ T5958] usb 6-1: device descriptor read/64, error -71 [ 2294.425294][ T5958] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 2294.570028][ T5958] usb 6-1: device descriptor read/64, error -71 [ 2294.735269][ T5958] usb usb6-port1: attempt power cycle [ 2295.233260][ T5958] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 2295.336778][ T5958] usb 6-1: device descriptor read/8, error -71 [ 2295.658409][ T5958] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2295.806458][ T5958] usb 6-1: device descriptor read/8, error -71 [ 2295.915678][ T5958] usb usb6-port1: unable to enumerate USB device [ 2296.517829][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055186000: rx timeout, send abort [ 2296.526357][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055186000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2297.046568][T30501] ptrace attach of "./syz-executor exec"[29438] was attempted by "./syz-executor exec"[30501] [ 2298.089210][T30530] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2298.098772][T30530] team0: Port device batadv1 added [ 2298.335283][T30535] hub 9-0:1.0: USB hub found [ 2298.371615][T30535] hub 9-0:1.0: 1 port detected [ 2298.505252][T25630] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2298.906998][T30543] netlink: 'syz.8.6259': attribute type 1 has an invalid length. [ 2298.919909][T30543] netlink: 'syz.8.6259': attribute type 1 has an invalid length. [ 2298.944864][T30543] netlink: 'syz.8.6259': attribute type 1 has an invalid length. [ 2299.212708][T25630] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2299.245135][T25630] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2299.277669][T25630] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2299.303818][T25630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.353650][T30536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2299.365334][T25630] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2300.450163][T30548] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.459379][T30548] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.558302][T29588] usb 6-1: USB disconnect, device number 44 [ 2303.048272][T30590] netlink: 'syz.2.6281': attribute type 1 has an invalid length. [ 2303.056847][T30590] netlink: 'syz.2.6281': attribute type 1 has an invalid length. [ 2303.066309][T30590] netlink: 'syz.2.6281': attribute type 1 has an invalid length. [ 2304.192516][T30592] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.200552][T30592] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.612091][T30609] openvswitch: netlink: Geneve opt len 223 is not a multiple of 4. [ 2305.377985][T30618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6293'. [ 2306.829076][ T5929] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2307.103585][T30641] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 2307.113544][T30641] team0: Port device batadv9 added [ 2307.185270][ T5929] usb 9-1: Using ep0 maxpacket: 8 [ 2307.192561][ T5929] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2307.202024][ T5929] usb 9-1: config 179 has no interface number 0 [ 2307.208803][ T5929] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2307.484898][ T5929] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2307.526851][ T5929] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2307.575379][ T5929] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2307.620394][ T5929] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2307.693533][ T5929] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2307.726232][ T5929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.772631][T30630] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2308.159672][T26436] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input75 [ 2308.185394][ T3519] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 2308.382785][T30657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2308.432256][T30657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2308.953773][T30662] openvswitch: netlink: Flow key attribute not present in set flow. [ 2310.147233][T30675] : renamed from veth1_to_bridge (while UP) [ 2310.318902][ T5958] usb 9-1: USB disconnect, device number 5 [ 2310.318927][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2310.333514][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2311.121751][T30688] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2311.399530][T30688] team0: Port device batadv2 added [ 2311.798575][ T5958] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2312.107291][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2312.147573][ T5958] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2312.238757][ T5958] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2312.271557][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.339377][ T5958] usb 9-1: config 0 descriptor?? [ 2312.352707][ T5958] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2314.045977][T30692] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2314.052359][T22451] Bluetooth: hci0: command 0x0406 tx timeout [ 2314.105346][T30692] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2314.299571][T30692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2314.552666][T30692] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2314.564106][T30692] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2314.673394][T30692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2314.681975][T30692] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2314.703988][T30692] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2314.763105][T30692] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2314.781249][T30692] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2314.834938][T30692] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2315.235184][ T5929] usb 9-1: USB disconnect, device number 6 [ 2315.434279][T30728] Failed to get privilege flags for destination (handle=0x2:0xd) [ 2315.683651][T30736] netlink: 'syz.7.6323': attribute type 1 has an invalid length. [ 2315.691676][T30736] netlink: 'syz.7.6323': attribute type 1 has an invalid length. [ 2315.701097][T30736] netlink: 'syz.7.6323': attribute type 1 has an invalid length. [ 2316.031384][ T5929] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2316.215805][T22451] Bluetooth: hci0: command 0x0406 tx timeout [ 2316.309074][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 2316.377452][T22451] Bluetooth: hci3: command 0x0c1a tx timeout [ 2316.465382][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2316.465507][T28457] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2316.473241][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2316.548374][T30740] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2316.625241][ T5929] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2316.655199][T28457] usb 4-1: Using ep0 maxpacket: 16 [ 2316.668732][T28457] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.690536][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2316.691497][T30740] team0: Port device batadv1 added [ 2316.707544][T22451] Bluetooth: hci4: command 0x0c1a tx timeout [ 2316.724659][T28457] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2316.752705][T28457] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2316.770198][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2316.775698][T22451] Bluetooth: hci7: command 0x0405 tx timeout [ 2316.795276][T28457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.814703][T28457] usb 4-1: config 0 descriptor?? [ 2316.876386][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2316.965839][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2317.008429][ T5929] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2317.035197][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2317.075157][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2317.113471][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2317.131581][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2317.162780][ T5929] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2317.233885][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2317.284860][ T5929] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2317.306357][T28457] nzxt-smart2 0003:1E71:2009.005E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2317.369299][ T5929] usb 3-1: string descriptor 0 read error: -22 [ 2317.376989][ T5929] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2317.415606][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.446809][T30742] fuse: Unknown parameter 'user_id00000000000000000000' [ 2317.535985][ T5929] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2317.712995][T30734] veth3: entered promiscuous mode [ 2317.721507][T25630] usb 3-1: USB disconnect, device number 106 [ 2317.756587][ T5929] usb 4-1: USB disconnect, device number 93 [ 2318.450683][T22451] Bluetooth: hci3: command 0x0c1a tx timeout [ 2318.771306][T22451] Bluetooth: hci4: command 0x0c1a tx timeout [ 2318.845319][T22451] Bluetooth: hci7: command 0x0405 tx timeout [ 2319.064484][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2319.064506][ T30] audit: type=1326 audit(1758303283.934:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2319.228820][T25630] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2319.297962][ T30] audit: type=1326 audit(1758303283.944:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2319.464156][T25630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2319.475317][ T30] audit: type=1326 audit(1758303283.944:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2319.497998][T25630] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2319.498066][T25630] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2319.498091][T25630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.538997][T25630] usb 3-1: config 0 descriptor?? [ 2319.560024][T25630] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2319.683500][ T30] audit: type=1326 audit(1758303283.944:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2319.760724][ T30] audit: type=1326 audit(1758303283.954:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31bbd8d590 code=0x7ffc0000 [ 2319.847575][ T30] audit: type=1326 audit(1758303283.954:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2319.976005][T30779] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 2319.987152][T30779] team0: Port device batadv10 added [ 2320.058196][T30779] hub 9-0:1.0: USB hub found [ 2320.065320][T30779] hub 9-0:1.0: 1 port detected [ 2320.180686][ T30] audit: type=1326 audit(1758303283.954:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2320.270252][ T30] audit: type=1326 audit(1758303283.954:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2320.339549][ T30] audit: type=1326 audit(1758303283.954:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2320.529901][T22451] Bluetooth: hci3: command 0x0c1a tx timeout [ 2320.630914][ T30] audit: type=1326 audit(1758303283.954:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.7.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bbd8ec29 code=0x7ffc0000 [ 2320.849859][T22451] Bluetooth: hci4: command 0x0c1a tx timeout [ 2320.925447][T22451] Bluetooth: hci7: command 0x0405 tx timeout [ 2322.038197][ T5958] usb 3-1: USB disconnect, device number 107 [ 2323.437907][T30809] input: syz0 as /devices/virtual/input/input76 [ 2323.785534][T30812] bridge_slave_1: left allmulticast mode [ 2323.808325][T30812] bridge_slave_1: left promiscuous mode [ 2323.828225][T30812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.861039][T30812] bridge_slave_0: left allmulticast mode [ 2323.867313][T30812] bridge_slave_0: left promiscuous mode [ 2323.905463][T30812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.595255][T25630] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2324.763657][T25630] usb 4-1: Using ep0 maxpacket: 16 [ 2324.786143][T25630] usb 4-1: config 255 has an invalid interface number: 47 but max is 0 [ 2324.812677][T30827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [ 2324.815133][T25630] usb 4-1: config 255 has no interface number 0 [ 2324.834721][T25630] usb 4-1: config 255 interface 47 has no altsetting 0 [ 2324.855675][T25630] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 2324.865887][T25630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.896510][T25630] usb 4-1: Product: syz [ 2324.904718][T25630] usb 4-1: Manufacturer: syz [ 2324.912234][T25630] usb 4-1: SerialNumber: syz [ 2325.135488][T25630] legousbtower 4-1:255.47: interrupt endpoints not found [ 2325.147224][T25630] usb 4-1: USB disconnect, device number 94 [ 2325.742847][ T5929] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2325.956923][ T5929] usb 9-1: Using ep0 maxpacket: 8 [ 2325.972632][ T5929] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2326.040526][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2326.097410][ T5929] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2326.168201][ T5929] usb 9-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 2326.177635][ T5929] usb 9-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 2326.222457][ T5929] usb 9-1: Product: syz [ 2326.236221][ T5929] usb 9-1: Manufacturer: syz [ 2326.261709][ T5929] usb 9-1: SerialNumber: syz [ 2326.330456][ T5929] usb 9-1: config 0 descriptor?? [ 2326.396784][ T5929] smsusb:smsusb_probe: board id=2, interface number 0 [ 2326.436628][ T5929] smsusb:smsusb_probe: Device initialized with return code -19 [ 2328.089812][T25630] usb 9-1: USB disconnect, device number 7 [ 2329.315173][T26436] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2329.485694][T26436] usb 9-1: Using ep0 maxpacket: 16 [ 2329.492958][T26436] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2329.523825][T26436] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2329.569077][T26436] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2329.601768][T26436] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.641629][T26436] usb 9-1: config 0 descriptor?? [ 2330.131082][T26436] nzxt-smart2 0003:1E71:2009.005F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 2330.255586][T25630] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2330.276963][T30897] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.6373'. [ 2330.291870][T30873] fuse: Unknown parameter 'user_id00000000000000000000' [ 2330.429450][T25630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.472207][T25630] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2330.515305][T25630] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2330.527840][T25630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.539631][ T5958] usb 9-1: USB disconnect, device number 8 [ 2330.569935][T25630] usb 4-1: config 0 descriptor?? [ 2330.612905][T25630] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2331.669787][T26436] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2331.925212][T26436] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2331.950693][T26436] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2331.963705][T26436] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2332.097487][T26436] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.064435][T25630] usb 4-1: USB disconnect, device number 95 [ 2334.315385][T26436] usb 9-1: USB disconnect, device number 9 [ 2334.719475][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6385'. [ 2337.525260][T28457] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 2337.690595][T28457] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.935257][T28457] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2338.029387][T28457] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2338.128794][T28457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2338.204364][T28457] usb 9-1: config 0 descriptor?? [ 2338.225014][T28457] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2338.246015][T28457] dvb-usb: bulk message failed: -22 (3/0) [ 2338.278587][T28457] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2338.356247][T28457] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2338.364866][T28457] usb 9-1: media controller created [ 2338.416472][T28457] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2338.491410][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2338.491430][ T30] audit: type=1326 audit(1758303303.384:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30963 comm="syz.8.6389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d3858ec29 code=0x0 [ 2338.526427][ T31] INFO: task kworker/0:0:22525 blocked for more than 143 seconds. [ 2338.534955][ T31] Not tainted syzkaller #0 [ 2338.601441][T28457] dvb-usb: bulk message failed: -22 (6/0) [ 2338.617581][T28457] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2338.635732][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2338.655548][ T31] task:kworker/0:0 state:D stack:22280 pid:22525 tgid:22525 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2338.671843][T28457] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input77 [ 2338.706442][T28457] dvb-usb: schedule remote query interval to 150 msecs. [ 2338.713690][ T31] Workqueue: usb_hub_wq hub_event [ 2338.845302][ T31] Call Trace: [ 2338.853464][T28457] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2338.861673][ T31] [ 2338.866976][ T31] __schedule+0x1798/0x4cc0 [ 2338.883580][ T31] ? worker_thread+0x8a0/0xda0 [ 2338.894528][ T31] ? __lock_acquire+0xab9/0xd20 [ 2338.913546][ T31] ? __pfx___schedule+0x10/0x10 [ 2338.927920][ T31] ? schedule+0x91/0x360 [ 2338.942587][ T31] schedule+0x165/0x360 [ 2338.962640][ T31] schedule_timeout+0x9a/0x270 [ 2338.977863][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2338.997280][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2339.005606][T28457] dvb-usb: bulk message failed: -22 (1/0) [ 2339.011825][T28457] dvb-usb: error while querying for an remote control event. [ 2339.026408][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2339.040232][ T31] ? wait_for_completion+0x267/0x5d0 [ 2339.061951][ T31] wait_for_completion+0x2bf/0x5d0 [ 2339.092170][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2339.121441][ T31] i2c_del_adapter+0x581/0x6e0 [ 2339.146691][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2339.170034][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2339.185822][T28457] dvb-usb: bulk message failed: -22 (1/0) [ 2339.193340][T28457] dvb-usb: error while querying for an remote control event. [ 2339.203236][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 2339.213047][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 2339.228338][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 2339.248110][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 2339.267725][ T31] usb_probe_interface+0x665/0xc30 [ 2339.291182][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 2339.315936][ T31] really_probe+0x26a/0x9e0 [ 2339.332258][ T31] __driver_probe_device+0x18c/0x2f0 [ 2339.343785][T30978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2339.352587][ T31] driver_probe_device+0x4f/0x430 [ 2339.360554][ T31] __device_attach_driver+0x2ce/0x530 [ 2339.366251][T25630] dvb-usb: bulk message failed: -22 (1/0) [ 2339.372234][T25630] dvb-usb: error while querying for an remote control event. [ 2339.388917][ T31] bus_for_each_drv+0x251/0x2e0 [ 2339.395595][T30978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2339.404331][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2339.413108][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2339.418859][ T31] __device_attach+0x2b8/0x400 [ 2339.423857][ T31] ? __pfx___device_attach+0x10/0x10 [ 2339.429620][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2339.435604][ T31] bus_probe_device+0x185/0x260 [ 2339.454949][ T31] device_add+0x7b6/0xb50 [ 2339.466397][ T31] usb_set_configuration+0x1a87/0x20e0 [ 2339.472706][ T31] usb_generic_driver_probe+0x8d/0x150 [ 2339.480354][ T31] usb_probe_device+0x1c4/0x390 [ 2339.486567][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 2339.493843][ T31] really_probe+0x26a/0x9e0 [ 2339.500058][ T31] __driver_probe_device+0x18c/0x2f0 [ 2339.507169][ T31] driver_probe_device+0x4f/0x430 [ 2339.512510][ T31] __device_attach_driver+0x2ce/0x530 [ 2339.519362][ T31] bus_for_each_drv+0x251/0x2e0 [ 2339.524469][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2339.531205][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2339.538652][ T31] __device_attach+0x2b8/0x400 [ 2339.545248][T25630] dvb-usb: bulk message failed: -22 (1/0) [ 2339.551593][T25630] dvb-usb: error while querying for an remote control event. [ 2339.559510][ T31] ? __pfx___device_attach+0x10/0x10 [ 2339.567339][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2339.572746][ T31] bus_probe_device+0x185/0x260 [ 2339.585656][ T31] device_add+0x7b6/0xb50 [ 2339.590784][ T31] usb_new_device+0xa39/0x16f0 [ 2339.599801][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 2339.606018][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2339.611660][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2339.618582][ T31] hub_event+0x2958/0x4a20 [ 2339.629041][ T31] ? __pfx_hub_event+0x10/0x10 [ 2339.635504][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2339.641458][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2339.648126][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2339.654778][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2339.661591][ T31] process_scheduled_works+0xae1/0x17b0 [ 2339.669580][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2339.679706][ T31] worker_thread+0x8a0/0xda0 [ 2339.684756][ T31] ? __kthread_parkme+0x7b/0x200 [ 2339.690755][ T31] kthread+0x70e/0x8a0 [ 2339.698247][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2339.703824][ T31] ? __pfx_kthread+0x10/0x10 [ 2339.709351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2339.716570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2339.721971][ T31] ? __pfx_kthread+0x10/0x10 [ 2339.727182][T25630] dvb-usb: bulk message failed: -22 (1/0) [ 2339.733989][T25630] dvb-usb: error while querying for an remote control event. [ 2339.745963][ T31] ret_from_fork+0x439/0x7d0 [ 2339.752034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2339.757730][ T31] ? __switch_to_asm+0x39/0x70 [ 2339.762631][ T31] ? __switch_to_asm+0x33/0x70 [ 2339.768101][ T31] ? __pfx_kthread+0x10/0x10 [ 2339.772836][ T31] ret_from_fork_asm+0x1a/0x30 [ 2339.778279][ T31] [ 2339.781487][ T31] INFO: task syz.6.5785:29123 blocked for more than 144 seconds. [ 2339.790926][ T31] Not tainted syzkaller #0 [ 2339.796334][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2339.813772][ T31] task:syz.6.5785 state:D stack:26312 pid:29123 tgid:29097 ppid:27902 task_flags:0x400040 flags:0x00004004 [ 2339.828534][ T31] Call Trace: [ 2339.832138][ T31] [ 2339.839131][ T31] __schedule+0x1798/0x4cc0 [ 2339.843947][ T31] ? __pfx___schedule+0x10/0x10 [ 2339.862749][ T31] ? schedule+0x91/0x360 [ 2339.880720][ T31] schedule+0x165/0x360 [ 2339.901192][ T31] schedule_preempt_disabled+0x13/0x30 [ 2339.910473][T25630] dvb-usb: bulk message failed: -22 (1/0) [ 2339.916642][T25630] dvb-usb: error while querying for an remote control event. [ 2339.934018][ T31] __mutex_lock+0x7e6/0x1350 [ 2339.947458][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2339.952473][ T31] ? usbdev_open+0x16e/0x760 [ 2339.957598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2339.962883][ T31] ? bus_find_device+0x273/0x2b0 [ 2339.969208][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 2339.975008][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 2339.981533][ T31] ? usbdev_open+0xa7/0x760 [ 2339.994067][ T31] usbdev_open+0x16e/0x760 [ 2340.000365][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 2340.009036][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2340.014757][ T31] chrdev_open+0x4c9/0x5e0 [ 2340.021372][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2340.026916][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2340.036319][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2340.042369][ T31] do_dentry_open+0x950/0x13f0 [ 2340.050316][ T31] vfs_open+0x3b/0x340 [ 2340.054626][ T31] ? path_openat+0x2ecd/0x3830 [ 2340.063642][ T31] path_openat+0x2ee5/0x3830 [ 2340.070394][ T31] ? arch_stack_walk+0xfc/0x150 [ 2340.079561][ T31] ? stack_depot_save_flags+0x40/0x860 [ 2340.090572][ T31] ? __pfx_path_openat+0x10/0x10 [ 2340.095886][T25630] dvb-usb: bulk message failed: -22 (1/0) [ 2340.101881][T25630] dvb-usb: error while querying for an remote control event. [ 2340.120953][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2340.135193][ T31] do_filp_open+0x1fa/0x410 [ 2340.150210][ T31] ? __lock_acquire+0xab9/0xd20 [ 2340.156766][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2340.162102][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2340.167320][ T31] ? alloc_fd+0x64c/0x6c0 [ 2340.172759][ T31] do_sys_openat2+0x121/0x1c0 [ 2340.177858][ T31] ? __se_sys_futex+0x36f/0x400 [ 2340.182988][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2340.188606][ T31] ? rcu_is_watching+0x15/0xb0 [ 2340.193706][ T31] __x64_sys_openat+0x138/0x170 [ 2340.200223][ T31] do_syscall_64+0xfa/0x3b0 [ 2340.205614][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2340.212894][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2340.219397][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2340.224765][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2340.230947][ T31] RIP: 0033:0x7fcfae58d590 [ 2340.235960][ T31] RSP: 002b:00007fcfaf40cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2340.244537][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfae58d590 [ 2340.275191][T28457] dvb-usb: bulk message failed: -22 (1/0) [ 2340.281314][T28457] dvb-usb: error while querying for an remote control event. [ 2340.294553][ T31] RDX: 0000000000000000 RSI: 00007fcfaf40cc10 RDI: 00000000ffffff9c [ 2340.322662][ T31] RBP: 00007fcfaf40cc10 R08: 0000000000000000 R09: 0000000000000000 [ 2340.335458][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 2340.343863][ T31] R13: 00007fcfae7d6308 R14: 00007fcfae7d6270 R15: 00007fcfae8ffa28 [ 2340.352290][ T31] [ 2340.355861][ T31] [ 2340.355861][ T31] Showing all locks held in the system: [ 2340.363903][ T31] 1 lock held by khungtaskd/31: [ 2340.391695][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2340.418344][ T31] 3 locks held by kworker/u8:4/56: [ 2340.433115][ T31] 2 locks held by getty/5623: [ 2340.443885][ T31] #0: ffff88814e2860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2340.454907][T28457] dvb-usb: bulk message failed: -22 (1/0) [ 2340.465348][T28457] dvb-usb: error while querying for an remote control event. [ 2340.480740][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2340.523118][ T31] 4 locks held by udevd/21324: [ 2340.557929][ T31] #0: ffff888065a01790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 2340.576946][T26436] usb 9-1: USB disconnect, device number 10 [ 2340.624864][ T31] #1: ffff888053675888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 2340.695502][ T31] #2: ffff8880562d9d28 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 2340.706078][ T31] #3: ffff8880575c9198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2340.715991][ T31] 5 locks held by kworker/0:0/22525: [ 2340.722622][ T31] #0: ffff888143efdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2340.734443][ T31] #1: ffffc9000b5d7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2340.746782][ T31] #2: ffff88814573b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2340.776335][ T31] #3: ffff8880575c9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2340.805395][ T31] #4: ffff88805c359160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2340.833055][ T31] 7 locks held by kworker/0:2/26436: [ 2340.845180][ T31] #0: ffff888143efdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2340.868708][ T31] #1: ffffc9000b377bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2340.895198][ T31] #2: ffff888027e30198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2340.915574][ T31] #3: ffff88806cc02198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 2340.934299][ T31] #4: ffff88806cc06160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2340.946110][ T31] #5: ffffffff8efa8468 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 2340.957105][ T31] #6: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2340.968721][ T31] 1 lock held by syz.6.5785/29123: [ 2340.974005][ T31] #0: ffff88814573b198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2340.983813][ T31] 1 lock held by syz.0.5840/29295: [ 2340.989909][ T31] #0: ffff88814573b198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2340.999925][ T31] 1 lock held by syz-executor/29726: [ 2341.015207][ T31] 1 lock held by syz.5.6347/30816: [ 2341.023813][ T31] #0: ffff88814573b198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2341.036630][ T31] [ 2341.039605][ T31] ============================================= [ 2341.039605][ T31] [ 2341.051733][ T31] NMI backtrace for cpu 1 [ 2341.051753][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2341.051775][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2341.051788][ T31] Call Trace: [ 2341.051797][ T31] [ 2341.051807][ T31] dump_stack_lvl+0x189/0x250 [ 2341.051841][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2341.051866][ T31] ? __pfx__printk+0x10/0x10 [ 2341.051914][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2341.051947][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2341.051981][ T31] ? __pfx__printk+0x10/0x10 [ 2341.052015][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2341.052049][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2341.052083][ T31] watchdog+0xf93/0xfe0 [ 2341.052118][ T31] ? watchdog+0x1de/0xfe0 [ 2341.052152][ T31] kthread+0x70e/0x8a0 [ 2341.052182][ T31] ? __pfx_watchdog+0x10/0x10 [ 2341.052210][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.052237][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2341.052270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2341.052288][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.052316][ T31] ret_from_fork+0x439/0x7d0 [ 2341.052341][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2341.052369][ T31] ? __switch_to_asm+0x39/0x70 [ 2341.052401][ T31] ? __switch_to_asm+0x33/0x70 [ 2341.052426][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.052453][ T31] ret_from_fork_asm+0x1a/0x30 [ 2341.052498][ T31] [ 2341.052536][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2341.121991][T26436] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2341.124402][ C0] NMI backtrace for cpu 0 [ 2341.124421][ C0] CPU: 0 UID: 0 PID: 26436 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 2341.124442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2341.124456][ C0] Workqueue: usb_hub_wq hub_event [ 2341.124485][ C0] RIP: 0010:__rb_insert_augmented+0x6de/0x720 [ 2341.124507][ C0] Code: 58 53 ad f6 4d 89 7d 00 4c 89 f7 4c 89 fe 4c 8b 5c 24 10 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d 41 ff e3 cc 66 90 4d 89 ee <4c> 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 [ 2341.124523][ C0] RSP: 0018:ffffc90000007a78 EFLAGS: 00000046 [ 2341.124537][ C0] RAX: 1ffff1100fa04012 RBX: ffff888030220090 RCX: dffffc0000000000 [ 2341.124551][ C0] RDX: ffffffff81952950 RSI: ffff8880b863a088 RDI: ffff888030c19e90 [ 2341.124565][ C0] RBP: 1ffff1100fa04013 R08: ffff888030c19ea7 R09: 0000000000000000 [ 2341.124578][ C0] R10: ffff888030c19e98 R11: ffffed10061833d5 R12: 1ffff11004d7bb52 [ 2341.124591][ C0] R13: ffff88807d020090 R14: ffff88807d020090 R15: 0000000000000000 [ 2341.124604][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 2341.124619][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2341.124632][ C0] CR2: 0000564f74b3eb48 CR3: 0000000028482000 CR4: 00000000003526f0 [ 2341.124648][ C0] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 2341.124659][ C0] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2341.124671][ C0] Call Trace: [ 2341.124679][ C0] [ 2341.124687][ C0] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 2341.124716][ C0] enqueue_entity+0x3fe/0x1120 [ 2341.124737][ C0] enqueue_task_fair+0x25a/0x1470 [ 2341.124760][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2341.124786][ C0] enqueue_task+0x75/0x420 [ 2341.124805][ C0] ttwu_do_activate+0x1f3/0x870 [ 2341.124829][ C0] try_to_wake_up+0x721/0x12b0 [ 2341.124855][ C0] hrtimer_wakeup+0x4e/0x60 [ 2341.124873][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2341.124890][ C0] __hrtimer_run_queues+0x529/0xc60 [ 2341.124917][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2341.124933][ C0] ? read_tsc+0x9/0x20 [ 2341.124963][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 2341.124994][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 2341.125017][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2341.125035][ C0] [ 2341.125041][ C0] [ 2341.125048][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2341.125067][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 2341.125084][ C0] Code: 85 32 01 00 00 e8 51 86 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 40 86 1f 00 eb 06 e8 39 86 1f 00 fb 48 c7 c7 80 e3 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 2341.125096][ C0] RSP: 0018:ffffc9000b377120 EFLAGS: 00000287 [ 2341.125108][ C0] RAX: ffffffff81a02757 RBX: ffffffff81a02614 RCX: 0000000000100000 [ 2341.125120][ C0] RDX: ffffc90019fc8000 RSI: 00000000000134fe RDI: ffffffff8e12e380 [ 2341.125130][ C0] RBP: ffffc9000b377230 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 2341.125141][ C0] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: dffffc0000000000 [ 2341.125161][ C0] R13: 1ffff9200166ee28 R14: 0000000000000200 R15: 0000000000000045 [ 2341.125173][ C0] ? vprintk_emit+0x444/0x7a0 [ 2341.125189][ C0] ? vprintk_emit+0x587/0x7a0 [ 2341.125207][ C0] ? vprintk_emit+0x444/0x7a0 [ 2341.125223][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2341.125241][ C0] ? __free_frozen_pages+0x65e/0xd30 [ 2341.125269][ C0] _printk+0xcf/0x120 [ 2341.125292][ C0] ? __pfx__printk+0x10/0x10 [ 2341.125315][ C0] ? free_large_kmalloc+0x13a/0x1f0 [ 2341.125337][ C0] dvb_usb_device_exit+0x29b/0x350 [ 2341.125359][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2341.125375][ C0] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 2341.125395][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2341.125424][ C0] ? usb_disable_interface+0x31d/0x350 [ 2341.125449][ C0] usb_unbind_interface+0x26e/0x910 [ 2341.125475][ C0] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2341.125498][ C0] device_release_driver_internal+0x4d9/0x800 [ 2341.125522][ C0] bus_remove_device+0x34d/0x410 [ 2341.125539][ C0] device_del+0x511/0x8e0 [ 2341.125558][ C0] ? __pm_runtime_barrier+0x212/0x460 [ 2341.125579][ C0] ? __pfx_device_del+0x10/0x10 [ 2341.125595][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 2341.125615][ C0] usb_disable_device+0x3e9/0x8a0 [ 2341.125639][ C0] usb_disconnect+0x330/0x950 [ 2341.125661][ C0] hub_event+0x1cf5/0x4a20 [ 2341.125692][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2341.125711][ C0] ? register_lock_class+0x51/0x320 [ 2341.125739][ C0] ? __pfx_hub_event+0x10/0x10 [ 2341.125759][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2341.125776][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2341.125798][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2341.125811][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2341.125826][ C0] process_scheduled_works+0xae1/0x17b0 [ 2341.125852][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2341.125874][ C0] worker_thread+0x8a0/0xda0 [ 2341.125890][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2341.125919][ C0] ? __kthread_parkme+0x7b/0x200 [ 2341.125939][ C0] kthread+0x70e/0x8a0 [ 2341.125958][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2341.125975][ C0] ? __pfx_kthread+0x10/0x10 [ 2341.125994][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2341.126016][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2341.126030][ C0] ? __pfx_kthread+0x10/0x10 [ 2341.126048][ C0] ret_from_fork+0x439/0x7d0 [ 2341.126064][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2341.126082][ C0] ? __switch_to_asm+0x39/0x70 [ 2341.126101][ C0] ? __switch_to_asm+0x33/0x70 [ 2341.126120][ C0] ? __pfx_kthread+0x10/0x10 [ 2341.126138][ C0] ret_from_fork_asm+0x1a/0x30 [ 2341.126286][ C0] [ 2341.235390][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2341.235420][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2341.235459][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2341.235478][ T31] Call Trace: [ 2341.235489][ T31] [ 2341.235503][ T31] dump_stack_lvl+0x99/0x250 [ 2341.235542][ T31] ? __asan_memcpy+0x40/0x70 [ 2341.235571][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2341.235599][ T31] ? __pfx__printk+0x10/0x10 [ 2341.235652][ T31] vpanic+0x281/0x750 [ 2341.235683][ T31] ? __pfx_vpanic+0x10/0x10 [ 2341.235711][ T31] ? preempt_schedule+0xae/0xc0 [ 2341.235737][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2341.235770][ T31] panic+0xb9/0xc0 [ 2341.235797][ T31] ? __pfx_panic+0x10/0x10 [ 2341.235827][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2341.235871][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2341.235910][ T31] watchdog+0xfd2/0xfe0 [ 2341.235950][ T31] ? watchdog+0x1de/0xfe0 [ 2341.235991][ T31] kthread+0x70e/0x8a0 [ 2341.236024][ T31] ? __pfx_watchdog+0x10/0x10 [ 2341.236058][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.236089][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2341.236131][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2341.236153][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.236185][ T31] ret_from_fork+0x439/0x7d0 [ 2341.236213][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2341.236242][ T31] ? __switch_to_asm+0x39/0x70 [ 2341.236277][ T31] ? __switch_to_asm+0x33/0x70 [ 2341.236306][ T31] ? __pfx_kthread+0x10/0x10 [ 2341.236337][ T31] ret_from_fork_asm+0x1a/0x30 [ 2341.236387][ T31] [ 2341.239528][ T31] Kernel Offset: disabled