last executing test programs: 6m3.48717169s ago: executing program 32 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="14001d801000008006000500f0000000047b8bcc7913675588596ff04f6d6457d31b95b43d924e7eb9309d87d133ab817e2e4aede3e59eca0f"], 0x30}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m8.088386409s ago: executing program 33 (id=413): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005f2ab420720c0d009bee190fb000007fb696569dcc92db270102030109021200010904000000dba2920000000000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x102401, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1a4, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "eeca0283d1dd1746"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e7e9e7238fa7cb99"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "120363690cae6d98"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="790afae0762576b50d5b96dac9b8e992f6c1fc163f772e57"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2559444fc16e4e03a6abaad58874875b"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c79c1edbc8a2276f63d2b7e7497c04d9de84c159bfb21da52a49e9286f0b3291"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6510198c9bcbaf96"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5cfb84b3ced1614aa8588a944af906fd6e1b4271f7786627bf0f51ee53115c78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="09019c73d55b8a5bf4734c407665bd0abe51f51fc3190a92f0c01ce5b776d5ea"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bdfd1e4fab5606d96574317a15baa228"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ff7f00"}, @NL80211_REKEY_DATA_KEK={0x12, 0x1, @kek="394259001b00"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3ac9e120d25546b4c19fb378463d0e05"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c2d7a7a781831d8979bf5f6a89f5b8e8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ec6ea400"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40800}, 0x4048081) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r7 = userfaultfd(0x801) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000040fe0000000000000008000f00fd000000", 0x24) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCGIFHWADDR(r10, 0x89fc, &(0x7f0000000440)={'bond0\x00'}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000000)={0x0, 0x15}, 0x0, 0x0}) r11 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e9321", 0x1d) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) syz_usb_control_io(r0, 0x0, 0x0) 5m2.943310641s ago: executing program 34 (id=437): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x404e0c5, 0x0, 0x0) (async, rerun: 64) sendto$inet(r2, &(0x7f0000000900)='.U/]', 0x4, 0x8012, 0x0, 0x0) (async, rerun: 64) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0xb2, 0x53, 0xa3, 0x10, 0x545, 0x800d, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0xbd, 0x5, 0x0, 0xb9, 0xcf, 0x6a, 0x6}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4m19.939577782s ago: executing program 35 (id=639): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x7) 3m56.296797672s ago: executing program 36 (id=811): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) ioctl(r1, 0x8b22, &(0x7f0000000040)) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000003c0)) 3m36.670252125s ago: executing program 37 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="201320000000195c24dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2a6bf9fd8a835b0f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x93a0}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x134}}, 0x20050800) 3m0.473571049s ago: executing program 9 (id=1115): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) inotify_init1(0x80800) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40100) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000085b8010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m57.321983197s ago: executing program 9 (id=1134): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x6c, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0xa36e}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x81, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x6, 0x3}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0xa8, &(0x7f0000000580)={0x5, 0xf, 0xa8, 0x1, [@generic={0xa3, 0x10, 0x0, "3d257257cd2887a25d2da4e30b120377922491d03a8fd0d61d5eafbac5c3349ffb93a53442b516e8ac51f22af83c13c6d39e0a6466c7f4428e9c60726175e7aece8cda06e447085d6374aa983cf8b3fbf1e152f5f595cb548a4aca322b300210d7e33b159d166acfe9c10b7e21a0725a1c8107e1ff39374b5bb5f056fcb991dd152737e0856298d7961b4d921d0b9a93ede9e61db5edca49d1fed360bc3128e9"}]}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0xa, 0x1, 0x201, {0x90000004, 0x1, 0x2, 0x8800001}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2m55.266694449s ago: executing program 9 (id=1140): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m52.209894252s ago: executing program 9 (id=1144): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="0166b6") 2m52.107715472s ago: executing program 9 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) 2m52.103893463s ago: executing program 9 (id=1146): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x404e0c5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xff, 0x5, {0xffffffffffffffff}, {0xee01}, 0x6, 0xffff}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@private=0xa010102, 0x4e22, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x120, 0x3c, 0x0, r3}, {0x3ff, 0x101, 0x7fffffff, 0x1, 0x5, 0x9, 0x9, 0x4}, {0x9, 0x6, 0x6, 0x4}, 0x2, 0x6e6bbe, 0x2, 0x1, 0x3}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@local, 0x3501, 0x0, 0x3, 0x5, 0x2, 0xfffffffd, 0x7fff}}, 0xe8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m43.604674735s ago: executing program 38 (id=1128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af26, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x0, 0x3, 0xca, {0xca, 0x3, "268e4ebab9c67b8c79fad9c53e6d5c535fa5dbba352e41ede0b41ec6415cfdf10f4e0802521bbd1a1b9b70e2131fb2d31e39b2f12a3904ece6366b33975ba7e9a6d098b0e168b6173c21ab0b845f9a8d5f79b3e92abee694755114b4957d3cf4e0b0b41acb0e91125e84cdb8586e69724bca00d225f958f4da3f4cb43264882d33e860ea08691aadaec64fcfd71f6b580cb6993c2df7bb2113111554914b4367defd37f6d6cc5365317d4020942816e5c2afbef7d1d1e9c1dc3de8e5b97fb71c88cb9953a697bc4c"}}, &(0x7f0000000e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x40, 0x0, 0x47, "00d242ae7081c275226d3c4ec06f941e903e5bf22aa95999777a0fb83bee1e565a22689f2e72ca1a2f9a4f50809e78707cf46c45458886f98276c6af71b1b689a5921d4bd0adcb"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f80)={0x20, 0x81, 0x1, "ce"}, &(0x7f0000000fc0)={0x20, 0x82, 0x3, "856d14"}, &(0x7f0000001000)={0x20, 0x83, 0x2, "f2e2"}, &(0x7f0000001040)={0x20, 0x84, 0x1, "d1"}, &(0x7f0000001080)={0x20, 0x85, 0x3, "2d3f80"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x0, 0x2, 0xf5, {0xf5, 0x31, "e65be583b977a90c594a5308d638f74144c551c77ac088e404d352ae153c2d866ec9585f269b46ad27eb29ed1be540ce00232dbe189055b7b2dc0c85c4e0ca2f2e95a52524861736c5769174c1fcea3bc05b211e5bdc00c012aa2e3eab716febce39c90d4e15c847ddf5fa567f7be8fd0367ed2bfc03546f81773e18ee86d8f8e94afe98ade87d542dc6194119dc063356647d1ede8142ead1a988da040115b2cd67222951e7c5a71e87e08565ef150c6de0d58f1cf3c90804c5b6fca1d93ddb5ce878f4b7ea3bfc2c984486923f6fa2686ba3f7c37e8e2f6572b75ade718806a1457c6bc1200281fe57726dd2e80dfd988e7d"}}, &(0x7f0000000a00)={0x0, 0x3, 0x10, @string={0x10, 0x3, "3a4f4ab40b7c02997a8bf59347e4"}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="00093b00000057042c1ffe643c19d533c64ab39b89cc3456bd65cc8cd76bf27cd7f19cf09f3389e4394213d7e9f60b9c8c4bf10ca57c4858d36606935803a7056f"], &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x0, 0x86, {0x84, "8a797ffa65aa592d44c55b3679c6d3bdae2d17608b4449a2ec64e83dbc4a508a57f71473c2515a8b8edd88039708d23409dc4b9ec21c89467ca33ddcd4b8717765706a96f1557da576d7e0842dc383d3f89460f3ea62003c348ac832657a9bb9f77c357fdda5e7298292d343384f518ec53ed30c286d56a5bb41cb08be30e2ee5133be94"}}, &(0x7f0000000c40)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x97, {0x97, 0x23, "842a84f047b993ede3f38b88992a63611e4ae5e014a3f6c1589b890ed37b7fedafa28a8ab33ac2e1d29cde96ad2874e245eb9ef6bce9bd8711ec79824c2e44e62eaf4689b79b5b31a1b309ae68d4f07179ac7d5c519a060692ca52cb3f7098b6c9a68bff451833cd110a49ade2c7e8972841a6c67064d5c0c58342101cc560d9ac16663d276c8401c9678ca7a5cd2654e586c73dab"}}, &(0x7f00000000c0)={0x0, 0x3, 0x30, @string={0x30, 0x3, "2ef429bca0bdb8b4e19354402c6b07069b50a60663542385fdcfaeb25f8580bc4de2b92d295627bad755d218f0ca"}}, &(0x7f00000001c0)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x1, [@generic={0xcb, 0x10, 0x3, "061f39d9294b951e421fec0e3fc16a76cc135107ef43a2a544d2abcd44f5edff5b7ad183cacb61566737e87991a3e52751112baa94dd3b3cad5cd7ba03eed86af4deced19434596646c571a3911227ed4c74a9c9b25cc3b4891a53b697efc6702c46c3bd1e9b58ddcca51524bd990b5af418b833905cb08244380bb296478b57f31f188f46e2a2d0cb484f2df0097fb4fd0594f2e79246d97119288f65c36e21310e0d694759fae25d7f64c9bafebad916272b44d7906e748339cb00e72f826bb7b650a9e483b37e"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0xcc, 0x2, "e141b28d", "c9c64471"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x19, 0x60, 0xd, 0x10, 0x9, 0x6, 0x4}}}, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x0, 0x14, 0x24, "d0e34c75ee012a9e1e8835702f62216eefc32c3b8961d5a0610df94692e8530783d31c9c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x180, 0x40, [0xe1f]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b440"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x69}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d878"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m41.282091951s ago: executing program 39 (id=1137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000a040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40050) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20080008) 2m36.98056635s ago: executing program 40 (id=1146): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x404e0c5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xff, 0x5, {0xffffffffffffffff}, {0xee01}, 0x6, 0xffff}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@private=0xa010102, 0x4e22, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x120, 0x3c, 0x0, r3}, {0x3ff, 0x101, 0x7fffffff, 0x1, 0x5, 0x9, 0x9, 0x4}, {0x9, 0x6, 0x6, 0x4}, 0x2, 0x6e6bbe, 0x2, 0x1, 0x3}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@local, 0x3501, 0x0, 0x3, 0x5, 0x2, 0xfffffffd, 0x7fff}}, 0xe8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m52.260083514s ago: executing program 8 (id=1413): r0 = fsopen(&(0x7f0000000000)='aufs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 1m52.24976862s ago: executing program 8 (id=1414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="342202000000020f0e0618939fdda466a684f44a70f49c56663da077c4a87eb7192ff852f6ad223f01f7a9046f430f744afb8cea09057a7eed51be386f62a5b60a4e83ab7a4cac5b437c49a3249eceae3fc71680a9d437205436a1aa276f09755938cc0fdf466b57f86f25cb80eb26634cf4094abfa787b0875404001e2e11a4c81dddaf4522231355fc0f31b924a6000000000000000000"], 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x8, 0x81, 0x8, "63529d40", "41c2d836"}}, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x9, 0x5b, "ff80bf7a13885acd02183e09a8eab97391324bb842153f9031585564d53b53a6dc5920a5b99e2e56e318184d6fa47f1c5a6e2141822c12056dd98886a8f97a154c69b273b3b4a759906b7060876820bbb2acbb92ca105390072388"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xb, 0x2, "b624"}, 0x0, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="aa7883d1247e"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xd9}}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000d00)={0x15c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x140, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @initial, {0x6, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xae}, @val={0x2d, 0x1a, {0x1490, 0x1, 0x6, 0x0, {0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x1}}, @void, [{0xdd, 0xca, "594e6e281c4f2e09234d7d09d4c2b881c65a537ef593b0a3330279a3b877faba7ffd289779c0483dbcbed7ae9c2d5f880a6e6470b715081ee77f256cc7da011610eb8dc2918ce7104cdf51359ba5250016f71b91a3f4d50b580b3468e664d3eab8e351f43d494fedeac0662277f5c0d8cfe0e7dec04b2a1323c4b470d365291da34eb14f8ebe6139275184f3eacac4ffddb842830b86f12e44a588b0f54405bf3a0e07e0d69ba61a39c30ba194fe71fe645d43376909d6496af70c46e317d74117c015cd29b092e32d3d"}, {0xdd, 0x29, "d4d75dad3f23b2dc89083e93deefc818577b52849babc2ac44461810742d2410b733aa7c22a7b061fd"}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m49.195747016s ago: executing program 8 (id=1426): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x6, 0x401}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fc, 0x7, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xf103, @loopback}, 0x1c) 1m49.028138715s ago: executing program 8 (id=1427): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') lstat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000003c0)) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') mount$bpf(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000100), 0x100000, &(0x7f0000002680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e2c34c6900b4b6cf49d8a1b163ea541f14ec7988b79c23c5d7cda13695480b4a74cc3cbbd23c18926e6f0d30ac7f7e73fa56e7bcf163f0ed1e6aaaaf16f4ae1ce2b6147b020ee9d06c98b47f5e22c6f8ede5d8eb1ed878fd55b25cd5472d7fe188f065dca631cb82ed852680d22f2ac00000000000000086d9a9be53e726d908255dabdd99c302e6397f017873f7c78726f70dd53907b1d61e1eaba6eb5e793", @ANYRESHEX=r0, @ANYBLOB=',gid=', @ANYRESHEX=r0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB=',gid=', @ANYRESHEX=r1, @ANYBLOB=',uid=', @ANYRESHEX=r2, @ANYBLOB=',mode=00000000000000000000000,smackfstransmute=\',dont_appraise,euid=', @ANYRESDEC=r3, @ANYBLOB=',smackfshat=/dev/autofs\x00,func=PATH_CHECK,appraise,measure,subj_user=autofs\x00,subj_role=&]^$,\x00']) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) 1m49.019172586s ago: executing program 8 (id=1428): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x438, 0x3f3, 0x10, 0x70bd2d, 0x25dfdbfc, {0x3, 0x1, 0x2, [0x1fcc, 0x5, 0x1f9, 0x3, 0x5, 0x62, 0xe381, 0x1, 0x3, 0xc, 0x2, 0x4, 0x10000, 0xfff, 0x9, 0x5, 0x35, 0xb2, 0x8, 0x0, 0x5d, 0xf9c, 0x3, 0xb6, 0x7, 0x100, 0x699, 0x7, 0x6, 0x8, 0xffffff17, 0x6, 0x7, 0x421, 0x10001, 0x10000, 0x1, 0x4, 0x7fff, 0xfffffff5, 0x4, 0xfffffffe, 0x600, 0x5, 0x8001, 0x400, 0xe0b, 0x0, 0x81, 0x6, 0x3, 0x5, 0x7, 0x8000, 0x9, 0x9, 0xcb, 0xb, 0xa, 0xa0000, 0x2, 0x4, 0x7], [0x8, 0x40, 0x4, 0x6, 0xfffff000, 0x9, 0x620000, 0x1, 0x2, 0x2, 0x4, 0x2, 0x2, 0x9, 0x619f, 0xfffffffc, 0x1, 0x9, 0x9, 0x9, 0x1, 0xfff, 0x10001, 0x4, 0x3ff, 0x8, 0x5, 0xd, 0x2, 0xff, 0x4, 0x7ff, 0xb, 0x7, 0x2c51, 0x8001, 0x2, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x6, 0x6fc7294d, 0x7, 0x9, 0x8001, 0x10000, 0x2, 0x4, 0x95a1, 0x8, 0x1, 0x1, 0x4, 0x6, 0xa020, 0x2, 0x6, 0x8b76, 0x9, 0x4], [0x6, 0xff, 0x4, 0xfffffff7, 0x0, 0x5, 0x4, 0x1, 0x4, 0x20000, 0x7fff, 0xf, 0x4, 0x67d, 0x65d, 0x6, 0x7, 0x2, 0x8, 0x401, 0x9, 0x800, 0x0, 0x1, 0x5, 0x0, 0xff, 0xf704983e, 0x3, 0x1, 0x40, 0xfb, 0x4, 0x1, 0xf0, 0xfffff691, 0x4, 0x2, 0x400, 0x3, 0x4daf9892, 0x4, 0x4, 0x10, 0x5, 0xb5e, 0x3, 0x8ce7, 0x97, 0x9c, 0xe, 0x1, 0x3, 0x9, 0xcd2, 0x3, 0x9, 0xffffff96, 0x0, 0xafa3, 0x40000000, 0x9, 0x4, 0x1], [0xe7, 0x1, 0x4, 0x0, 0x88c, 0x5, 0x612cbcd8, 0x1, 0x9, 0x0, 0x4, 0x8001, 0x16ee5916, 0x10, 0x7, 0xfffffffe, 0x5, 0x81, 0x5, 0x9, 0x8000000, 0x1, 0xb, 0x0, 0x4, 0xa4000000, 0x3ff, 0xf, 0x8, 0x2b5, 0x0, 0x4, 0x5, 0x401, 0x3, 0x7, 0x8, 0x8, 0xf371, 0x1000, 0xae6, 0x8, 0x9c7, 0xfffffffb, 0xba98, 0x0, 0xb, 0x3, 0xff, 0x7, 0x6, 0x7fffffff, 0x5, 0x7, 0x5, 0x8, 0x80, 0x0, 0x4, 0x4, 0xc, 0x2, 0x6, 0x10000], 0x16, ['(#\x00', '\x00', '\xbc\x00', '\\,#}.$$B@\xc0/\xd2)\x00', '#\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x854}, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000006c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000540)}}, 0x10) timer_create(0x4, &(0x7f00000017c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000700)="303d07ba2f3e275ef8d9cca642d2b43c9a7ef340141de01931c257a82403ce4c4bfc763e70497201d575049f7db63379d46ccadfccb5ebf57aeff761627c9589e37b8aa16358dcc9896fbed36239e843853a3ab1cbb3a284bb497ca7f982ecaaf493690010bbf857c847b46ae6a7f8ab4202693645f5782ae391fd1389ee68c61f73fa91d215564d697db63f64ffa1cbe6a181fdbb98f0efa85a35828e9941ba07bcf1a15d48e8ff1247c26c6d4dba8bd75027a7e1ec7a83a2100a66169663e3c1b03e3ec957030769b77329cba052b284330412bd094850e208d7e709512f9d415e4dad902f2d03b020182f9bc172d52be7b29a316695a81b511ef54cc56c43ca32ce6f04ece973321a2eb68bc9ac0c58da9578a7d20c98fdbb47bbf0e2cc7a137016bfd138e7065ad21a0cc13aa79e6ce08a7535690817e812ec24c713c5c911a178de6cc39f1c27b7a99309269e027d08dd00685eb509e6985598dd85902c9567cb9782bdf8db4d1d0796510655f5e37755f911e94db0e5cb56f1fac356a463c120f38924fa62c16ffdb0be5189e7c656bdc5b5d1222a3aa58f90bbc18c7d78676930868aa27730899af97a6dcd17e6d20fb9f79b0b0ce42e4f52f5585eb734318e5d109857fca5fbab4f180670604964f5feeba4a7c0ee0c730282626ff89b50556d06365f6a38637223ecc53991fc84f4acb7d9b2edbebc999a4d6d7fd058da9d197cc41676592a952eb552a964c8d8b5a16ff8cfc39d32c8e3e344af35c5a586cf43b39ebced8196b5846ef30e22930a9d9fd3e21bd99e48b36ffdf131f5131175e34e5dbc1c1f3abab5a202da55c19aeb1f4d027fdfdbd4b5fbf57dcf4084c30d3f90bcade2b23f976b91c12bab89a8dfb463d6299ea5c52c9a2053a0f259b5c54283ea2326ea6ad3a72d3c2b102ea1eca9751a7551b9d0602d54db6c6351f7201d929bac9af878f1caa30512b7b31934e4280f5ec1ad30937b6618c2aa4fd22075f0f2d453999935f9ed03a0ba9d67d45288c33b8ea20e353e80cd90d343f5c81342f2113da54cd801242e55991c4d1006f62508c46ee500bd2e80404ded2551f5a0d9c534802906e808f856207f817f06f648b8866490acc519356a1406177ff973ff397b115c938435f63468c9b744d98c0480c4c569a006b30c346c6f409acdccd7933cf1cee374e1d31d19a8ae42dc79f6780d3b14867f22e5cd0d23319ed708c0349a0d915f7fa701d6a9d6fd6adf4c29ba682a6e2f7a370cd59bc14979189c6931fbb9b1876642bebf817ccfeb2e4b9bd335120f32e66df74ecc890c0db04991412cfb4cda86cc5759754051607ed39b8144ef9155765ad09b79834a9cf1dd045d7bc843829ad05cfb390049e309c2a1d89faa8a93f850916662da90f1f84deb84ab8b53cd87c76893e69109ab9a366d2cb6cc36079a8ea2a6bd034dd39ba86d56915e67606d8b4566125ca71dec01acbef384d31f5e46c02c87afdd91175ef3eeb331b3a9b2367a7ecf0a050223a133ee45ee13dff5f32d9284bd37be7a39f73de436e955663f4409b8611cf87480ba964fd58c1b50f4b12bf7b7c12a07f2ef50a3a36acad82986ada5c2c5a096a6cc5e6762f174a32edcc67b2fa5411e7e08163bffdff39e6d462e68a65fe84dfab843d0446c20845874b4d392f2b2398b08b8f270ccc4d4e9474c1066742c5bb2c9701d01b147cf049c97dd384e91f13b807e348387fce738867b242162ffffc806a30240f5dea2ed714f54efc58c67f4e5c7c30a7e31c1357ba29504c73a6612c23d3e7cec81226233cbe4deb1273d35e207252ebd00ab9fa05959d63732fcab062e03c1f2e3c7864df0b6e57d1c0edfd500578cb9cc0c61e77acaef83301ada998191c267f12a7fc64ec2c5d2184515b2709491c615032348c7afd2ce3eb49f41bcacca37a684e68091f6deb211984e45ef1679dc7424494ad2ab7836c8214fab75b4344f2fe40d949ab4bd41bf1496df476fc4f575a99a63459033737fcd22ffccdba59fe6a6aaa2b39da9402cb5258df4349e27e10257758d5c82d5ce2c300416f307f64ce7b9b6547041044b351ce7637eae6030efd0da456ddaa22ddd1af5e9a8a3b30234f30d223c6e9a7b9b69f9025cb4c75c2061acf2cb24daf3d703c71bdad23c649eb884472ca2117783f854ef388a56724d79bba80c363f30fad8b726f7b684345b7b3a1adca473290f010882f747438cb4248187f000c987dfafb775aae11fb21d9ec84a555be17c7d055f440de490eeb99213addfcb706c4fb241683ccb9960a4a5ca06cafca66ae622f5d21b132ba531ca4d93ee9efc9f12450c3873ea983abbe476d282880a4e26143e5fa768dd01665e8c63a5b9bf64604785253683a3eb68d72ce803c8f1eeb8c560e403c4fb0626ebb35b14baa1b5ac70bbddcac1ba78d5b3836c441dacdcc11b81a7b95ed2cf756d675c1736e29bf2017a4fc66f23045fcc975675131cc1ace53031e8879651707a2176c89b57e87554acc947c9d54cb494158085bed6147fdfbcba8ba797104ee60594aea0ce6c2a4c6871f1ead22577ea1199e15ac7306b7a56ebaa7fb36b6de1f75f3b3fa372f216a40bc2ed25e6792673d677b68c307bc5777a7f2813e0e798415d4e1c95488e40439dc0fa66b250ec5df88c91f2ada231ba6797facb440045ff24dd022ea315ed51f8940df7f32b7fbb03786cba0a7fe84564c52cb7a59ca35e40c205b82429bf96cf220e5a07812dad4f2977d2057a13b71ab7fc99a70fb19fdbbbd206a68dfa810cae3b6b7feca67daa3ac7cb3904f25fd257a736dec220862ee57be6cd2c6d9136dc088db6dd09081b1958f6f631d249e913bbe5cd9fc211288ae993e9e3abb20cd7886e3dfc132dbf2009c80c0d0248e1676eabd7a42a2271025a8d034583f5b0c282f37eca043a76d6b3ec048912b0e61f511ac1f651307f748488a54a6164fe8f5d82e75f7a0434ced6bb3fdceb1800bf8a49464726193ffa51a9633443e0514cbc8db1996be06eff5f941940e3307c28166cb42b0c956a2ecbc1ec865958b21e1b2f27c03a5fdcc8502c3ea41e70493fd89aac17ac06ac0441f399b9365df046e4dfd44464edb39ba382362a8804a4b4b2fd139a95da8c1a99e421b7bc7bf4e5505d3d4dd9b86ad8613cedc983cc9c20d9e19c4a3a396c493666de7f102ad3bcefe1f2c238f308b7f0c90ce26bcd399fb90af315696dadd4d9bd573eb7f87f6db7a74ea4cbab15f07cd84cae448fb6d1d28e9428b06e4279c1bf757cc8e013a322e7818b2796678faf374f1ec72baf0e955168eb316051acb84edf06036176564356798d8da7a5929045358a7b934c8625aff26280f1cdd025bf309389b55fc994d7fedb5ca69efed0662943f0fe6cf8e3ccdb979e008f0fceccbf66a8542166fa3ce39e3ca677c5f6fb2d67dd440331d2879c09b79a9a1c6cc31e544829333665be13d28b837d6290726f5e30b1dc1959c5c66d86c23bd031eb10766d26c49e1a644d00f88d671d0d478753722312efb1955e824cfe956d070452da1a7c60a918cd0c1c053eb1d80441e5c6c475ef0073957e952179b50e7015f2cc783aef47fac18c20c2b89625a7de376af6d1af7c065eb60044a766e7f62265462f503ef13c527b3aa65ba90945fbc367dc9a37bad900a9a111557ce3757d64bcb0fd07b79b4c2e72f44c7aaaa3af80b24fed75323c10f53c9fb6328f267a29e03d876ad5f463ab05904012d69832cc33dc6b1dce756c7b28fdcea9f98bd3abac39a0c1eeec6296e0d214d642fcd355d1168f747380bc3235cebc1bfb4e9b458fcbdcd461b3bae6170deb6871d7ac9f0a6c48e8bd80ab0539ecca7dcf0cf4a6b33f82fe98a70a5e324ef4c29b644a2bf4a7e94edb0ace905a9662bc32dff9cee0ac25412e1ed85599e129c7e59945a9704b63bc3843c4e4b922b142f3cc9dfa1c23b5bbd4df47dae382d5145890a6407bd01deea1440e5b22fb4fd3300ac896f4e6eab600da44ab90b8ae80c824e3ebe912cc7118d2d99cb67412a4df6f237ad492af56279ccbc3e295190c6dac825fcf89e99dc0c28f6197dfa2215367fbed38aace5a2cd98ab4c1e8b4a6ae6772296d70f3593c64888c5b74d2bad3950eaf9513f00e3fb6f6f7a2bf655d5831daf272d7e8ae563f544ec84024c18f91dbd959338de6b7c9fa49c0dd744eac408326c1221863f910a61c6709dabc8d30074029bfcc127d947e8662e08ac84e35353897b1ab7be26583a2fd32dd03916824b0d448c84f4918ee6ccd010d27b22d0d61ab25af5613b5bbe10c337c4533a8b799f1997e9a21f75796703ca013d2653bfc2bce00cf149aa5b561a6bea64544a11dada195bb0806920e54af626de077921c0917f9da679538c7f88f4d1b87cd77be0665737589e5dff5a1f426eba82055ea3f4982afcabd1b60e45b4a277d829f4ed809793197824fb0245076c8c8319f66e3095a4a618a908bf9694e9c9dd0cdb859beaee5958ee0c332b61ddbffcf59768b2f4aabe73f5f9808f73c48d3d69597a270dfa04aa36ec74214bace643e128e2846a8bf23c7bf36e9770f047527696463488ded575dbbacaca81bb154c0fc3b1d94dc9b87e90fa784308a845422e1e27138739a6744fc63751108200064bef5c764bd3bd0054b243b891d08754e739c2c88f9100acd9cd2eef89cee1de048c2063a823b1bcdfc91833bb9701fc60cee3caecc99761ff9d80356685a0a907095c497f071c6d797eda5b66c954dda4672c82e5927f940ead1a9215632b5cd76e7096921acb94ec99918523619b7461b720ef505578e1198fee3ba70a3b823c21b1ff5f81a76a5de71ac7323a6d391c7944ccec05a24a6362143a8e917c180bcb6cb2530c7b86f2b9637455afd4b234a2d083a867248b202422d2204a9f5553664218c0d9f63da0506a7e5360e365f2c4a39f6a1d499ae7c811e9d1dbd6be750d7d457a1ca52e0e916207f62ef46636f914f0da21b517ee1b266e98ee3b52f1454ba5ae7cadabc92c4a499d298b2db3d1728544b7405ca4f0c01afd8c949f97434bf45ebf321b1ea03dbc9b4291e25207181d34d00d09a535e710d0407a655ffa3a0e829aefffac2f60ae15afac22f4044dd8de73a89b54465efb2de1ec35a3bf19878846dddb421f70426678adb6d676881870442a310e43ad5b965097ef34347400fc419f134c6f9a4a160b6e8594170bdb4b0012109b432210ee1041e65aed0ab45a828f05c6d2eb091c471e4383fc21b3f9bb9ac9765cc8a5d30021ea10d8a768aea502f6313e79d784a812b95a30e6e9abda522b28a29561dadfe3fd6c60f549441025f2a3975ea6d3aba8e39a0aa95833c375932a41bcd3e5a62bea0d9fac199b88a5bb116eaaaa33261b94ac7b7c599fb316d4883d5d95f6837d7c46a665ed0146e3bc501388310b34df0b35dd87d4c324350dc5d97abf67a09ea1b603d065e6fd4eae041d88ffb925829873770db148291f3fc5d370713015a5e802407a99ac9b83fd4d97fee0cbb546d36f6677992898f3b798710f0a014846a232f6da204c31f10a0a167758f2985d08ae27ff50ca83b39eb0cca500dfb6b4658ee0608ae2677d8b8f659e88da32ede64d877ff056da268da2e165007c4793f5b20492c3dec540776307e1ec177e84939131c807ce17962c761f6a10d1c02a5eeb0c30466b5334a0024379d7ac38090076a12de15ef66a8954c7d1ed485fc3b4bf06cd0c64af5a784c8dc60273ba68509cde135480b013c5ef3430dae4c27", &(0x7f0000001700)="e943d2395f0c724e2aba106d9e97030fa35dffa5ad1cb84620d6a0ce1f35418a312f1f16852439f37e160ee5c16d59adaf4ba879c053cb93a8c21ddf47883edcf1cbc2de5d4e86c001d1daabb3369c984d5cf40fce828fe0da2ec7d6044de16bb6ac6585aa41257d62d9a5ca32a98b95b041ef0594b964fe12757997cfdacf2d82671fbba835fbe217abaa07be9a879dcc93f0e8af2c1c1de60cc7ac6688195670ef84724a568ad2333cb7919fe6a6"}}, &(0x7f0000001800)=0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) write$FUSE_POLL(r3, &(0x7f0000001880)={0x18, 0x0, 0x0, {0x9d}}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f00000018c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001b80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xff62880ea3e4222d}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x1a8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1ff}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x11}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5a8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}, {0x60, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xc51b}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) timer_getoverrun(r2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001bc0)={0x0, 0x41, "4074679e83e58758c65555ac290bf42e18ca9e2d32e46aae4073961c7cb6caa1d29fbb1b530792fa168157044e585dad1964e27e5036769c2ea55b8e1080308c24"}, &(0x7f0000001c40)=0x49) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001c80)={0x2, 0x8000, 0x1, 0x5, r5}, &(0x7f0000001cc0)=0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d40), r4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0x84, r7, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fcb}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040880}, 0x8004) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000001f00)={{}, {r8, r9+60000000}}, &(0x7f0000001f40)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001f80)={0xaa, 0x208}) gettid() timer_gettime(r2, &(0x7f0000001fc0)) rt_sigprocmask(0x1, &(0x7f0000002000)={[0x81]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000002040)={[0x12c]}, 0x0, &(0x7f0000002080), 0x8) mount$9p_tcp(&(0x7f00000020c0), &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x80003, &(0x7f0000002180)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@noxattr}, {@msize={'msize', 0x3d, 0x7}}, {@noxattr}, {@noxattr}, {@nodevmap}], [{@hash}]}}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c080}, 0x84) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000002340), r4) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x24}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000002440)={r6, 0x5}, &(0x7f0000002480)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000024c0)={r11, 0x2}, &(0x7f0000002500)=0x8) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmmsg(r4, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="3dd0ca90e0cef8699d355c520efc4e0bf8ee7b3e6c72e83e11a340b9041a0c5ba72dd548f3837e8515e87ac53ecaeef96feb16adef26e5e26ae1e2227a07979fc04c479f82cf37b8f9b752aa45ff1f950612f25d4f24cddebe236ad2bfcc6f44690509b91c891cd53493aacd0a2a315cea83e6772b7fe11dafe1ddabb96b6ddc849578a3badfc9307726a7cfeff6e55cdd42cd5185bb9b1e", 0x98}, {&(0x7f0000003640)="dd5054b21253b306bdc2e6d93e0244a8c117c1bf21081bb96fa6c97a85d710da276785c9547fc8daa13ecb2e4e82269e22c8e1d54a5144c6ac003707eacba3f6", 0x40}, {&(0x7f0000003680)="448dc59ab585af156d89d099ed60eda94d535ef6af2cc08198", 0x19}, {&(0x7f00000036c0)="1b391d084ea410cd115cf4abcad5a6916180540089f0bd6a4f47d82ebd8c787ae193aab1c6f2f8be3aad503623c37be5f5e8af61d0a1d3b8c8c765d599dd1997352e42d8087c1fbd240550b931c66ce7c290c5db444fbeabf5c40083a7b7a2f42f5eff39b152e0416d7f8602cec59011d20f24e23e1efefe58195688332791a91fc021e9efc45bf0b7d868b2a394f1222bb8c71ef938a2", 0x97}, {&(0x7f0000003780)="b53d7ebe3712303ef470f5eb560c4c93375f90f678f1a5c9e980309053763bc5", 0x20}], 0x6, &(0x7f0000003840)=[{0x1010, 0x116, 0x6, "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"}, {0xa0, 0x10e, 0x2, "bd5a4c50f42015de03485c9e5e3a4805c90240e07d41056df54a7a89fc1a8ecac51a69571afc51ebaa25f7ac6a9a16471bfbb163b442079737bdb8df2a80db364577156a5d534d80ac9d602bd3d592f662ee4efbc6dd03cdd22e9613137cf052d5846c433e00d6239176ee8f4f11ee116a77e8a1685c407236912e3fada1d39e0c120238bb3463c545e6e9"}], 0x10b0}}, {{&(0x7f0000004900)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004980)="610951fcfb67960756b8d06beb5eb572e2ebe36467ce2873565124e3781ab74683b1cf8917df1d40d952be88f3e5207b87", 0x31}, {&(0x7f00000049c0)="6af3e8db42775a117fde6d9963c5872e2be4ce329addfd328fbcf4776eb4dc0c164baba9bbabd8654a9ae78f", 0x2c}, {&(0x7f0000004a00)="fa6c570b3b93ac293a2099c836f3d1d46602ea15f59ba43260a419edb9b88ed046b48d9b38bbf0e7c37a38e9b76cf2ee438c4c88fc65d8da5ca551dbb7b8b5d7095781896b153096419f37fe9d16acedbc22a4ea182d6a6ebfdab0bcd5c6b437c5612fbbeca10744a1024c9d275982dbdaaf173ae1c0e0493bf74db32274cc5a46d0322f33d4b61e9f2bc8ed3551a661ae708b9ebb0231bd2379fadc79ea9af6cb831e2c187436d621a8d9", 0xab}, {&(0x7f0000004ac0)="1135a360d4a05e36a79f866f2e8665eb64bbdfab0d89ece02e402200485371df5d42079809101e73cc2b48dbb5d7ea3d84cddba6fb9f54f041e064bbd217fe23302f20d6dd0fbf688c253ae067b95f9315000d35a288551f801fd7ec2e469c8714d49ebb86b61095a7f28cee42fb6b", 0x6f}, {&(0x7f0000004b40)="597e65df8036193a98e14fc523c84e67536c4551c73942d9ded00a0772ae5683003eb82f69a1f9ce4d53ed011170f3bd1ce376e8a895fb3f", 0x38}, {&(0x7f0000004b80)="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", 0xfa}], 0x6, &(0x7f0000004d00)=[{0x88, 0x6, 0x4, "eeb27b54be365fbbc7307721669dc5b6d55f9b2da9c9578c7696a82b244f6e3156e56535d07f104750d422e7309960130dd174bf26b79be232aab8ccaec02b7306f9003ff496318ce340f3048062158646261934fd969e64423d0f8c778dfff3599d56477092297593539fa5d14a987070b882"}, {0x40, 0x10a, 0x3, "8d75604570117fb8202da71d479c318dc23193eb3af4c667034dbe8dfb7901f0a63e3250314698991d"}, {0xe0, 0x6, 0x5, "1c0d16bf673f1ffbc400065525766649f60de76764e045155528905e35f48df63a5c8d9c0b9b4af9fb07957aa99eedbb3163d8f4e68c8e4d0d591871537046fae177cb7154d15424148b2898983cd43f816b33514b472ed80454dcbaa9b029fe4723474b24a2b632974d59c01c2a965595b56841aaa7529a5ef79377bbb3831e1ea80eaf501a4ec382786b30d8194276726d8d740b89e4431bab8acaa3a15bae8efb7e16952c1032d22ac74c228086cf9d81e8701f7a54df9018461b48ac9d9e8612dd7ff9452b8895f5"}, {0xf0, 0x3a, 0xfffffff9, "80fdbae141c81b0b044b54cf66110d06d08575d942246f1e3f7fb5c9cc8a1c89b407653b419fb444efe7905c37c0c2138d817a68e374974e63c2597763a3c7b04f5547c90ca5336c62b22fe3770fc696762ad04169e998aab4e723a11a2f514d8c2ab1f3d6c2a99ec2714f7e2d1c3b6ea2900856828544f9bf56ac711a6fdc09eaabf06f8b069074f552b3e7c5cfcb44efbcf9255af1c7388177b9609c532dbe335f39fa3751fc0d836cb84d26e023b8f9917b83ae7426aef62c6ec3551d784b149cc4eb0ddb047cc27a2d8aeccca65c4706234b3799b53e9153"}, {0x68, 0x113, 0x2, "38c78c03f7e022fd474a40fd9510fd0ab467b44d9f9103d35792edc64a194e6fc58fdaacdd3ef3172b95a2690c2bb6878f01f48e11fe4b94c3fd439ae910797a5aa43af5646698eac6632980ccf117f1b2cf9f"}, {0x30, 0x108, 0x1, "45696ee731c65359e03cf29a1b94b1d3c4ae9c983d6eb3bec701cf2c"}, {0x20, 0x10b, 0x2, "da87a3b3e47d00dceff3b7e8174b7d78"}, {0xa0, 0x116, 0x4, "72ba88dad61c29e66ff175e02b06da3f48c0ce2c33ab89041221b5b927bcc678b116ed385fc9092c5b418fb2fb9afa3f9d1c261bc7af47479ed49c20c897f5f00de68fc671499f39b05013a573405102fb98be3e17ed8a1f0b7727f24365688f9bfb4a9956808790f4d5acf9e4b7994d75d76589f5e74f306ff49e2b2368d0bdafabe207e208150e9cc6"}, {0x40, 0x107, 0x0, "4d5046621159a595eac08d4713d9936faa1be2a341a6c6ba7c34041ad23782a4d5ab812f37ce184b443c1351"}], 0x430}}, {{&(0x7f0000005140)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4}, 0x80, &(0x7f0000006640)=[{&(0x7f00000051c0)="a620e006a22abfa99e0df3289809", 0xe}, {&(0x7f0000005200)="5bab4bb8a87525a8311740c2e55398c1efc48050efa8da5f0afa417de6072ce976067c02d65d508a257271b07c97a94c8eb90923bfd095c2aad65a457b0b4e64dca3e919cb463f86ebf3bb2031043951bd0b4abdcb39628a69404f9d205ae01988eda16227566cd05cf490a83b56a31a689204e9c168898307aa83456669ef2ac4dc21f0384e785889e0c18a2b26a9076723529b9cb88941ee78cbb31e69c4d919943f8104c85a52f7a4daf9a9a1df732a6d1dde9d2d4bfbe933719c7efcc69837e9c1c3db79f1aaf0cb326f1b6bcda9be9a9e314b65133518b4d2b63697ec1bb8dc470f6be3a2120d48b29f3ca6737fdbb77b2c4db8135ecedd7a95c923f99cb71e2c9b66280344871d6ca2f2ad6135afc144367f0b9ea574232e3175b4f23f5f7c02581db9911206eb1b60b8141434a7924be570bd8f16dd7f52ada317b33efe627db8bf570d0376689d5c15a7267afacb80d422e9c34f6073966e04ae041641b0c332d417b6da507e43e331bb6c243c12605cea012c88f94364811e1c82aaf5a8dbc4b7ee9b350d0bbca5fa1f91abf03d8e37de71ad4162b63b0219de224301a6c16ec1b87f398936179f4f3e315ccf0aa12510cb3aa4f230552a0c4f1520c42c69b69cdc453886083ee9c3703f2c00c785bc0e75cf713280bf081c144f84430b107697d45bfa844824c75461ba54ec758cf3f173c6ab271ce5787a320d666e2f68ddd1ec5a3fac1f23dca623c98f8677ac73ae3fbb72eea3ff10e498741cb1e3c55f09b68e427b1fa55e6943cd3d839b90530e697cc076366232fa8b138dbcbdb46e56657f41daebba74b3b1bdd31e0505a87869f51af69e00a78254f28226468428494892f467a0367cc19c70f4dac101b2dbae76c0d591fc2aeb5da5e32bb81436ba3a8b52fa6af3e118c7691163fecb9a954db1460b675138b049836e4fda56597e1df799351dd66c06532fdf4f4c638ca82442e879d9d337fa3058ba49716cc97b7c9b979982d99181b0697eb2c8152b1e26604ce30a4da553b29a040922b7bd0b86cd5951f30aeb2fc51bb7a895a7ad2e20164a7350fc4230183bd3e92bf790bb4cc5be4f01158e1a5aa538d48b0d060a1de843721dbba1d86dbc0079483b87ec9fe9ab3e21121a7bb14232b6501410c51ceba6f74dd5dbf5555f851acbabfc36b17c8a0928d69ed86d0aee4538ea012769c44e1e54818498ac4d75f24aa06bd07bad7d376341f355e389a1436b7c0334e8ee061895d2ab30b4dbd071dc1a1e6b6dc17dacf0f2b43fff924d76769e85f4495169d14d1896f8cb056873e0b68bf2a25027aea9c366dfd7c47e3acfae7943416c570ccc8cda1b0b697090137f38a45eff9267bcbc04f3665595cca9cd57cba80595dafe04f7ae035a5e268e8dcd19ba5b6d579faf48c4e45e8b41975a952eb9c82f0f8df624c951091d5d69046865ad599f808bf04b8162750bde8b51075cf6f0b8efa52c22de307a6a643d41aae34f566f4bb0077f121799bcc7fe0449fcbc111c2cfe292e2fcb36853ec7c6ace5201770ef1b152a3dafaa4bfba6be9c6ffd5ca4a6eea051d1e6d3791dae15bcee81a8716e423027a7613cd4ed9ebe4eab8ced9c203773258bcaff3a8509ca86b9c22b6926bdf43ceffef15f6b022f2888e82d37b40e22ec3f528d4e0a2ae5f4ea738a2b558bc1cb48b69f246d79882ff4e8bc47c5af5145bad259eac4bef8f8c2d535d3f842484d778b00433291c65ae71a1fd42463e7a862994a804de1e0879257fb00ffcedf1cbf1715bd5df228221acb0067d4a9d860914853ae6598f1d8b32552fd4de5f9fd77f9305969c1f6ac8da896d27853c3ea7cd91cbe7c4a54cd84f78e8a3bc836aed248ae2d33796860d1439c397999565a31ac1ba2df7ebc10d0ca15630f36e958f34a82de1be575f5ccfb6a8bc0eb5e464378839377f2377ae935bbaca6bb7dbbab771ea7042bb520d9d6c51a8f29e309956361b51d2826abee95372cbd3352efd7cdfcb68a9a1a90a2a56922b7fc98e9914f830c2a17fe66d90572375f8aadfb594940d387f52c0d5eafc2a97fd6105978962b916f0ee459aaa265f4aa07a2a62943749d5641c12ce0b0dc4d69cbee7902535b721f4cb032c7a898ccc5161826a8f4e6c0f7ec66d4d0e3c1cd4d1865d8e8c580889e147d1ac56bf2af10980fb73756c68d7d141235191f7d5ec9d9c01509e069c06ce8fa9a0b8c3bfd8f3557b651d16ee96849a220758a8c68883fc0e5b22ca7d5bbc046821a2db0f4d929e11a3e90385c3a3914ebc998fa24f0065bb3aafd68e048204edba3269aea16b037dfa8b883611ec8f99471daedaa51d2dd5ceb25e282e546d698702f4610cb96a8f6202e2028b421722367ffb1632ae76281ba0d533b7e5146ffb0ba15583ecc26d5983c9b7eb3e9b46d6436a9182600db7fe12dc35e819cb11a8e062030ebb0feb7bbb46a18302d5c8fe5983e862b1e2c2e70297ef9a621c77bef0b19020b5e07de77f3b2c7744f75391af5df4cdae70357793642f0ebdce151485b0e16590fe3ad8e87e9ed022743720281b2b85e61deca8a91418a4c760dd40b4ff376a1122737a009249b523243e1b52a615f6177ddba4f9b51bccb49d03477718a8c37675c80fcc7ea04c7e3e3614d1a94859db18a7363923e9ef52b11c7111b96470aea03d2acda56d1a13eccdc8339f8133dd99bb3b9c57600ac73957e8bff6428728880afa49a5215fc4ea6a7dc0c68bfaa21f0daa23cd1ffa7703242ed7c62c19a143f56cc3dec6e20f34612fb1a45d6439c12694e1ccf1270eb639da21fe24fd4a4bc86f7ffd5c78a36bd8af15321b05acfb9931b1c69874156d84b241dc4fcb97e0d03fc6ddf0893c1b16a20582ed0fea347992dfb00ddde72b64e3e8d2c3fd788e35ca1ba09c9e617e93f010b048eec69695b43b91958fce680ed1468765dbf0108070efe2e97cc0da2ed84e79d5d418f8b298afb7b44e803650a8a4df62676799d86ae365c49a8321da117383ed8a49c4044457d50881945fea8cc40c9a41dad69c1c92920bcb307602be78e7a6021caff0cb3169bc2ba9cd8d868bf3788489590ec8527aedf494e930b081868ed68336d32dc4b6f0dd642d0c1d48d0042e98c3c2f6adb990c38bc5cfbdbe8a153c7f5c7e953351d348e6fcfe93996045c877b7cbb21d27eedda6a7fd57790c93322b100a7abd982ba0e60cf2dba3764ed4603c5dac23c451ea9b47a404ad681eee31c00c8114fa85e5adac1612436b16c9d2479e0d5c879b4c792e01a84e8a5533fb208c48a64188a6697317846223bef3eeb212410aed24a865876668653eea27beb2f78308cf8d5b8948991f99eeaa8bb496d031d3dc2f0945d3c7fff6999d10e79d117bcf0274725898466fc254f97e7884acecc2e6b52af5cb8012a7ef82806fb77f3530bb46c32c0db6c7adb051b7248029f16d8b2eef5fd7d8d02c91e99ff264fe087d7e479291a820b7c93a49f55c4b36afac65036f1b9a41edb68129df373009fc1a9798e374a836d177130ab3dcbc874c4a907bf735b4b522232a94236222f368098d22a6170e90bd4dcb93cbca361a441feee7e08b507ab3923f70f0f36dd6817943bed8edcf667bdad971c022372cd05fdbec952a0edbc7b6a0cf409b08ec7fca5dbea9f2a30833a673879f7fc39ffc45f2ca2c1232222cc68d296bef87e3c41793614a15ea39b834a50a82089ee2be610958c966afea9ea276fe84b03e39bfe1d1aa1634bac7b0c2ca9705af1d672d1c5ba0d5e0fc9857101b33c0051e38d88e6876739304acc69a0dcb8290e0385f281a2807ad4ad6053183947abfd718d9b911c9af15b0807dbf9f095129dacfd16e3208dac46bc9944ba6b493c9509f8e74a4e697cef62705ea50d304b5d35c9c9e1652c9598766bfb91d151763dd87c8b606cc25b4b33b4125abaf1d7c60eb45d2f781c79f47bf2233cc9217029d63df0b10cc4c1d976dc383965e09b4c654843b0a074a9ead7d2505e005f12ca0dc50223324d382189265280c79370866baf9a7b93b5551effa813039b5a2bf8a3e5d846193a039050dc5a3155189984d341798798e0c81b9eee72053933c42151ff7b8e6fef6658cb23e09b940c0dc5e3b96478d1e13443653163b27fe92362b660d6ea4f21a490880fa8adf0f2272175f43c5a300dc0b096d120584258a358873412ea575b150366a7fe3dc0f49019008eca5e81b1f72ddb087174cafe0fe4b468ee3d2b451730adb9bf945253d18663d627529cfec634f18cef57cd132bc25088d57e4d97ec7104f14601ad439979dcee553d4e62bfd9d9367e31f3ba1727a6968b42a9a136fc00f885c8db1ee52393d00440e8fd7e65f752444bd759549bec27f1bc3fd8bf2d57ee43800a3e2ada3fd16f0ae3a5a98473ac58fcc3fdb59fbceb476ca5f4253e29d485cc4057fe8d9ce5e3c6c422f00a3c8aff5140654f76ecebd5b57426bcbe835b9b09213b5736ee57fd3957c18f5314478eec909ebc9b8ce05e3f62710c65c7a0989b2c77e55d617abf038d1045c6b354777a43afeba65eb76e726ed26c644b1a1b710063e192846d44a776eec513ad51cf6d260cf873b4ffabe5ffe4fca4a9e7351be525efe556862da94a8955e0b61eba73d053a4b513ebbdafbad52e11015a2dcb0ff6222e48420a77ffc86c9ad158097f4858410a06788072d83fbdc8e1b42f6ec60657c325bd7aabcf55e7f29645b3f11117b4ef1c7b1a53a964ede0d656f8527b23b68965b60956e9d5713598538014d1817b0357ca31dccc3ff1dc38850712ee9ac3c4541a1abf881fe9a1314d104eeeb080d5cb8d96f08b86fb67e674c46531dcb2b5be2f9c762a1e119490d3ba9c68330664fcf17b308790e2197967c8557f0024284b275bf1f4b88f0c0ddba433f6586f89423ac0d93e90a195a20d85cd93dc34bee7d83e065337ed0b52be2054a4c5843392fffbb397dc4691378dec637a33d1db2c19777dc7342861d50c9ab4040988a5462d717ccaef1addf05ecbab65f8741aa95046eebd7a86c5e222b26f24b34fa9625b2d61d314cbd341d096ca74d8724298d1d60223d06d99d15329fa6cd5ea0c2c13fba5f1e68594ac55d90545e29d17c544ceb7516f99de6dc5adc566a7e507123a3457eed6477627df542d586bfa58f2ac08803e8c19cb13b6b6facc06c26a5bdf5cc361bf1be99ab615eb6dd3d414a5cfcd7eed09ebf3b92bc09cbe85779edcb0ecdb4ee94c6982d454c4db930e45366bfb5ed6301456c6d1638b5235a0e114929301e61af6b9e092a8e48af4e50c6e260185fb2e9bdd20a25ec633e25220a9bd8db32c0ff57066eec74190fcfc728b9039537427305bd8c57a7d0237cf5ebb8b58d9eed499f0026da8c62ce966e9200530fe8d0fb6cd3267d90e5b519ed3d217c2b5c029ded2e0fd93b3d30546d316a702a35098277924103dbcd66c4c274144b7d6e71f741781066e0f205cbb419359bc462f47c63bb366c8a959e998b10382f3888d80819a389a91bdbc88d52e4a1cb2331f5a7019ce305f9d86997601d0721ee0c0fc54fa8043247d0124cae728d58b2b1849b2b12f4da8270321c3f18fc02277e3dbeac14ab17d3bbf750fdd54e607d6b1c01fe5bd03e92546569766106848c79dc80d4ddbcde4512616faf4fb2e521c20cfbc2706f1e196950acab09905168c0bf7958152e40790a3e59811504534b7d23ea38644218a30749660f86306c1c0e45740a9c2a01bfa7d265f1a85167c4d927ee1a6cba6a19e1f9b72a824e0de6e8f2f", 0x1000}, {&(0x7f0000006200)="b7356cea8f0f86ab111d16ecae343090005238785739d9d3125b9a8096295f071074b7f0a8487940b8c27f0a108149231bbb7318a802016e04d687354924b69a7e122ea1ce0441014a71b102134663bceb0ab5700c313889777e8547eb2db2e964fad475f8dc0ed3a67542b02d95254eaa3e9153ec31f6fa237a7d129ede5e070853ed09a03989355d7873e77cb95887f877e3e2a57c2118893df5acf83646c51230419140ae891318e88753b693200392c8b158e88155d458f2b4dc3bb956de1cdc4f6a6a1f6f7f66840496f7eb4fad1280c6161b8374c23c2182", 0xdb}, {&(0x7f0000006300)="265b98e665c483dc96645e6597f0f9ad067b262c6e301e0873ad191762688838c239738b2b9304a7e1cf2566da9d2a0cc5fb397e684f3db0b94439c44a25e21e9b1f5742e23475cac4690c66d0c1b0f10225818e76eebf0703049992b153a30083b7cce2e75d7e9222069f036397eb17561e738c6d7f40a1d759c40031dae0e52660509fddbbb6e048df8c1ace1e6f6451c32621d141c21f1d538a7c5d612544162bbdb95eed0e2d", 0xa8}, {&(0x7f00000063c0)="69aac4d9da91c5d0b2acd7a2523d0c29e505f46817f2f318b5346cb8d3c63ecabc5c501c11047724afb6db07427efc32f9a883a7b114642710c9d522cfa92b5f830bfd8fede8a48643e0712d5bae30a1de68df80b835012b4e3f3b25f8d85ac912d242c103652944be2cbc5be9ecfeac26025ffe4689d35f7852842a1203a20036383225b03eb31b0a20365db441e7e5b172d133ac5ea903ca214ee74e00ff78f09689c96963bcaa88b779946d2dcb2bcd4a27015ab4a3", 0xb7}, {&(0x7f0000006480)="9d4ed98c1a81e6242f344acb", 0xc}, {&(0x7f00000064c0)="0182d027b603e50e92923c44f20e54df77fd8fc74de877daecdf0f117527b3881735f590b35b3b269b6547cf6b6238de117a893b5fd61609866de26f6832e630d106ef0f9cc8253f9ef4e990740fd7ff537adce354877ddae8193acbd4defece25409ef05d3dbc5004477e", 0x6b}, {&(0x7f0000006540)="72f825aeb71615257174a9d619cd00bea2b863b60618cacca6dc95aadbeef5f1f7744d80aab7910ba815c5e599d83f2d790e30e4b847106198bebfcb7908c8775a854f6d6be5fc05e63379b9f31e491c9b10d03a0580e65b94b41274eb7b8f5b906a748b55cd33a86c", 0x69}, {&(0x7f00000065c0)="bc8259702ac9e03cd15c103d21fb92b531f0c4fba3104c3a552bd28c30c2be43d408d6dacfaeab2aa5c186a632e44fad67f7843fb484fe052ab2f6db69bfabbc9f023f2c8dbc2fb4ad490b86acc100cffeaa30cd6995bc8dffbafac0c10be84c574af4ecf0aecdd081", 0x69}], 0x9, &(0x7f0000006700)=[{0xe0, 0x11, 0x1, "8d509811163ccb89d68a0b3faee79c457f941cb33d1987aeb5c9fe612c247ddc8adc20e6d0ea588b6e73accf92218a433ae7cdd56aa0a1cfd5cf1b30f9bd7700a671e4cb67823550a16f846cb3c5a3a44befd3e7c3baf1ae092dfc8bcb58e2ad7be9b87f85db1ef40fdbdd7e7fed27116056afe9e12efe8fb7216a0882712c65e6f20aafab46dfa0b1a162d420169e70dba2e604fdd586d4c8c821f28484be6a050535aab7da50f43e53b9971a08b9cfcca824422a7fb23322bc895ddc35522133d63da96487dc6b16745ea6aa9f"}], 0xe0}}], 0x3, 0x4) 1m48.795268372s ago: executing program 8 (id=1430): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x11, {0x11, 0xe, "ee011d7c74742c255a7ac1cf8e9cc8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000000580)=ANY=[@ANYBLOB="00221200000090b1c6b74dab634367206802009bbd500500000006a45be972b79c4ed23a0796a8ac632efcce80da51b7dbc1509c883abe801c20213fc414fcdadf151d7b2fd90838cbd72480c41e8e12422020991b00000000000000000000000071cd1929df9a349bdb0000"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0xe12}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000600)={0x0, 0x18, 0x49, "9bbb282f70ddccb5c4359a611d1d98253e49a076471430c7c7619e324472f4616a130c61f6802cf338dd34006f909ccbcd45bda6a2b087965646a36c1654713e3881a2144d2415bf46"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xac, "522966c316a5be5ec275aad737ea2fe88f537dad801b001d7422e5af8f63963c52095ab813d729a801eab8e6d6382df62a6cb8ebd1aff949edb17caf3730b4ca3100858687427534f48c4b33a4b33566060aa60b20bf9387201d2e2998d9d65b46c631054171cd132c332add890e578aa39d41de18218a805280797966a2ef331c8a66a4cda6542a7b45bfd4c1ef4b516a66e56d36b4677fa5007deb93f13c891646d65d7e22221fb5a654ab"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x57}}) 1m48.641415994s ago: executing program 41 (id=1430): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x20, 0x2, 0x11, {0x11, 0xe, "ee011d7c74742c255a7ac1cf8e9cc8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000000580)=ANY=[@ANYBLOB="00221200000090b1c6b74dab634367206802009bbd500500000006a45be972b79c4ed23a0796a8ac632efcce80da51b7dbc1509c883abe801c20213fc414fcdadf151d7b2fd90838cbd72480c41e8e12422020991b00000000000000000000000071cd1929df9a349bdb0000"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0xe12}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000600)={0x0, 0x18, 0x49, "9bbb282f70ddccb5c4359a611d1d98253e49a076471430c7c7619e324472f4616a130c61f6802cf338dd34006f909ccbcd45bda6a2b087965646a36c1654713e3881a2144d2415bf46"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xac, "522966c316a5be5ec275aad737ea2fe88f537dad801b001d7422e5af8f63963c52095ab813d729a801eab8e6d6382df62a6cb8ebd1aff949edb17caf3730b4ca3100858687427534f48c4b33a4b33566060aa60b20bf9387201d2e2998d9d65b46c631054171cd132c332add890e578aa39d41de18218a805280797966a2ef331c8a66a4cda6542a7b45bfd4c1ef4b516a66e56d36b4677fa5007deb93f13c891646d65d7e22221fb5a654ab"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x57}}) 1m13.067653844s ago: executing program 0 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x41000000, {0x4}, [@typed={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m12.9481786s ago: executing program 0 (id=1673): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xc97, 0xdd43, 0x4, 0x3c, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a412000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m12.074608599s ago: executing program 0 (id=1678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000a001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40050) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20080008) 1m11.996253192s ago: executing program 0 (id=1679): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c80047002b00010011020200000004f8000001000b000600f701080800000000fe0700000503000000000400000001b70f7f0400ff070700", @ANYBLOB="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"], 0x4c) 1m10.688271172s ago: executing program 4 (id=1688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mlockall(0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380), 0x34000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.625997949s ago: executing program 4 (id=1689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x10000000000, 0x0, 0x20044000}, 0x20040000) 1m10.556108598s ago: executing program 4 (id=1690): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r1, 0x80047437, &(0x7f0000000340)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180), 0x1000) unlink(&(0x7f0000001640)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, &(0x7f0000000340)) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180), 0x1000) (async) unlink(&(0x7f0000001640)='./file0\x00') (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) (async) 1m9.673164196s ago: executing program 4 (id=1692): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200001, &(0x7f0000002140)=ANY=[]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m9.596183376s ago: executing program 4 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xfff6, 0x2c) 1m9.440438686s ago: executing program 4 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="61202a3a2a2077000a56f4432f002052975da2e35b8ac25ff85ac174fd5d88e31cb68789704d39bd2df94bda0f28fe24e9fc1faf5d51a9d67b23ac47c9aa3a4f308049e975ca5f6787785a9548072e7897b204b1e2c2c1d7b92f1b92d8d3e7ee9ed168ae9f2fb70004ae1e14f28acde9c2b70e131c23c09b4659f13df4f8b6e875fddecce5fe3ecac4badcb7101fad52053a7d31cdcef1755ac087689b1530fc7c"], 0x8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x0, 0xa, 0x0, 0x75, 0xb3, 0x51, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 62) 1m8.999592582s ago: executing program 0 (id=1699): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c) (fail_nth: 6) 1m8.592316951s ago: executing program 0 (id=1700): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r2, 0x400455cb, 0x32) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000200)={0x20, 0xf, 0x74, {0x74, 0x6, "8c362cf76a1117862f9e80ed616df1e6f06da0c5630184fdde72bcebf723c8bd730f6afa15b29b76a28ca8b50640e56988ffdde6f1ca174c23bccf9245fba1d7713333b2dd06482d1b4ade7b4a03c0565753c17f24c286ba5a6068218de198cf6a336f58a09371eeaee891cc64ebe3e01694"}}, &(0x7f0000000a40)={0x0, 0x3, 0x13, @string={0x13, 0x3, "9b6e752b2d7e92bfde21a33671d6b48940"}}, 0x0, 0x0}, 0x0) bind$inet(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)={0x40, 0x0, 0x8, "5b840f86aae2c5cd"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "a66d"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x32ea}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "378a"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) 54.356751672s ago: executing program 42 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="61202a3a2a2077000a56f4432f002052975da2e35b8ac25ff85ac174fd5d88e31cb68789704d39bd2df94bda0f28fe24e9fc1faf5d51a9d67b23ac47c9aa3a4f308049e975ca5f6787785a9548072e7897b204b1e2c2c1d7b92f1b92d8d3e7ee9ed168ae9f2fb70004ae1e14f28acde9c2b70e131c23c09b4659f13df4f8b6e875fddecce5fe3ecac4badcb7101fad52053a7d31cdcef1755ac087689b1530fc7c"], 0x8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x0, 0xa, 0x0, 0x75, 0xb3, 0x51, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 62) 52.8344877s ago: executing program 43 (id=1700): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r2, 0x400455cb, 0x32) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000200)={0x20, 0xf, 0x74, {0x74, 0x6, "8c362cf76a1117862f9e80ed616df1e6f06da0c5630184fdde72bcebf723c8bd730f6afa15b29b76a28ca8b50640e56988ffdde6f1ca174c23bccf9245fba1d7713333b2dd06482d1b4ade7b4a03c0565753c17f24c286ba5a6068218de198cf6a336f58a09371eeaee891cc64ebe3e01694"}}, &(0x7f0000000a40)={0x0, 0x3, 0x13, @string={0x13, 0x3, "9b6e752b2d7e92bfde21a33671d6b48940"}}, 0x0, 0x0}, 0x0) bind$inet(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)={0x40, 0x0, 0x8, "5b840f86aae2c5cd"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "a66d"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x32ea}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "378a"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) 28.362445062s ago: executing program 2 (id=1852): syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f0000000280)="1a00000002000000", 0x8) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081"]) 27.363218698s ago: executing program 7 (id=1860): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0xf5, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x1e, 0x1, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x3], 0x1}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x7, "3485"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x3, 0x2, 0x7}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xe3, 0x81, 0xaf, {0x7, 0x25, 0x1, 0x81, 0x7, 0xab0e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3c, 0xb, 0x1, {0x7, 0x25, 0x1, 0x80, 0xe, 0x3}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x3, 0x40, 0x5b, 0x10, 0xe7}, 0x106, &(0x7f0000000140)={0x5, 0xf, 0x106, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x35, "021bcef9445506974f6a8680b77e4d9d"}, @ssp_cap={0x18, 0x10, 0xa, 0xb4, 0x3, 0x1, 0xf, 0x9, [0xffc0ff, 0x1800f, 0x3f00]}, @generic={0xbd, 0x10, 0x4, "9402e81354e180eda74563626ed5d6207ed2c1ea30b7f189e33c770284309499c43ea725dc8bf54f9ea7276b5c1c3d3bb48bb321173d1d966b41f80653a817697e6f9e637d9423d2e443e651fbc77b0d5a163809432baa6a44ce12a6f9cc49e098f01835247fcf5a43ae8efab0812630a49ca190d217bae415751515d4c379e06ddf1fda5eb41627ed9bc41f79e0b1738db241289069074e3ce899c41e91c0a3729a0766c9350e4932412c8c0d352b4bab9f23b38c7131f9ee0b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x34, 0x99, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0xff, 0x6, 0x7}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x99, &(0x7f0000000340)=@string={0x99, 0x3, "a2122230dfcd9a04aed38e732bef5236095fdea96d4fa59b07b48c61c7a53d4dcdb9667274c787cfc1eaecbf134fc483d573e8355392db329d65a6fd113c21911c9b012a001b91d5aa37ee5fc3a9c52f5c6f998b6e44879de2b8861a61d5364401c840af07fd3a7e56229b27348afb00f2bcb607b7b172bcb123db8c6b7307e73063610c01b6d9cca3ed08a1b20d8083aa4f6423728d47"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x3, {0x3, 0x21, "cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 27.046673772s ago: executing program 2 (id=1863): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x700}, 0x0) 26.216137246s ago: executing program 5 (id=1866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x46) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x17c0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "576111418f286c12e13d2614fb8854799c3d1706e503e010", "3a477b3fe1585058c7e2db786356c1fbdd14941c8e33d925f48bcef999012e14"}}}}}}}, 0x6e) 26.076538675s ago: executing program 2 (id=1868): mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000300)=0x3, 0x8000000007, 0x0) syz_usb_connect(0x6, 0x53, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa0, 0x59, 0xe5, 0x40, 0x83a, 0xf503, 0x8773, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0xf7, 0xcf, 0x88, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x400006, 0x1, 0xff, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0xff00, 0x6ed6}, @dmm={0x7, 0x24, 0x14, 0x5, 0x101}]}]}}]}}]}}, 0x0) 26.027949575s ago: executing program 5 (id=1870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 25.934221171s ago: executing program 5 (id=1871): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000252f494805e63c0000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b004000020000000c0000008c00000006000000497ac4e0d93e0260cf287ce4124c6894b425b566260d0988f2c7b0548b5b3bc908a17cae"], 0x143) (async, rerun: 32) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x40, 0x7, 0x4f}, {0x5000, 0x60000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc3}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x10, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x200000, 0x9, 0x1, 0x3, 0x6, 0xd, 0x6, 0x5, 0x0, 0x2e, 0x4b}, {0x6000, 0x0, 0x10, 0x0, 0x3, 0x1, 0x1, 0x2, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0x4}, {0x25000, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xfec00000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x26000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x54000, 0x6, 0x252, 0x80, 0x0, [{0x0, 0x0, 0xf, '\x00', 0xb}, {0xa, 0x1, 0xf, '\x00', 0x7}, {0xf, 0x7, 0x7, '\x00', 0x73}, {0xd, 0x0, 0x12, '\x00', 0x71}, {0x0, 0xf9, 0x7f, '\x00', 0xff}, {0xf, 0x6, 0x3, '\x00', 0x10}, {0x2, 0x8, 0xce, '\x00', 0x9}, {0x3, 0x4, 0x0, '\x00', 0x9}, {0x80, 0x5, 0x5, '\x00', 0x59}, {0xc8, 0x8, 0x6e, '\x00', 0x2}, {0x8, 0x2, 0xb1, '\x00', 0x10}, {0x4a, 0x4, 0x0, '\x00', 0x5}, {0x8, 0x3, 0x38, '\x00', 0x4d}, {0x7, 0x19, 0x6, '\x00', 0x8}, {0x33, 0x2, 0x4, '\x00', 0x9}, {0x7, 0x0, 0x4, '\x00', 0x9}, {0xd, 0x7, 0x41, '\x00', 0x1a}, {0xfd, 0xe, 0x7, '\x00', 0x5}, {0x4, 0x45, 0x7, '\x00', 0x1}, {0xdb, 0x2, 0x0, '\x00', 0x3}, {0x4, 0x8, 0xe, '\x00', 0x7}, {0x5, 0x5, 0x3, '\x00', 0x48}, {0xe2, 0x2, 0x5, '\x00', 0x9}, {0x40, 0x94, 0xc, '\x00', 0x1}]}}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mlockall(0x7) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 32) readahead(r6, 0x72be, 0x4) (async, rerun: 32) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (rerun: 32) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) brk(0x200004ffc000) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x10) sendto(r0, &(0x7f0000001780)="e5528d7043f2dc890f6b015796d5e24ab075552733f2fc335de66c63a840fad9c1d1a29ec23025f7f418efac60a1e7ce37b264a1c88b3e99c57bdbf91edf31b9e8f89da00d39db142c371aa00cabc597f149ec83b566fbacdedf2018372bbb61632ff4cfbbd1addd575305e52c87b538620eb4104b74a39835921222ec346e171b5f7299aa16d253ad3140a79072c0a3131cdef0fd2fdda44b56ee2ce8be5936c811ad33051ea076699f4f1c8c744788a849539982b69dc4600a2ae567328f3051ca659f1e300b0ab87f900edae58b74fb9b29debacc23996ade010b64d5d9ac346045cd6f927e4bd74469360ebf1656b0a2291c4605180fad551118503ed79edd0c143d5b57080ea738df4158262d1a8c2113159eb7bd457aca08b5897d67effee7d89d9c344cc8ca887af00017c14fc3a22eb6feecf1e9403a8f26dde6967a80e754ea15eaaa6874630a10c8f7b3e4cdb011322a5cc4643f3d271038e1cb818c179dc194a4ba29823f1b6cebf6f59b899283d11d1ecee018ec403892577d0b18ef7cbe126b3c985ccd791131e30fae5593659387237de2d395268e694db68c3891cd0a344566ec45560afe0ae176ad90fe4aa3d3c9c3752651163dfcc09704972372a95d94b448c226f8650da878890a34483219bdd6fc245aadc4008f8d91e9480275dd34b82ad527ca4ed1a933e44190295b3d61bd2aaba0ac0100ea8c5f6ee4a840ff8c4652ceb4427fca2dd639bfc1dbb38177fb26809f7a86e30f3556057f1aed87c8e307c03fabe2f38cde37177acceaea05c901ee7feea1fd0aa0b41674f7b9113ab5f98bbce9fe320bb76bf99330f3c53737f6e921bd3cf4fd1499365b21542506e6d3d04194bde61a2b7bf7e23ed0b390d71710efa2c3ace6d0b76d2b3046024315c2f80798a0d97926b5be7c9144495005011437c797f1629df8a6f33372cc6338aa19ee3533392fe5a8d5241582712ff245cb666f4129c643d9dc85ce067581a71ac92b3642c5b2f9fa124b34bd1e002ceadad549e49a7cc094e97ccdf349ec11832d65013d37c132a1adc838ffa5bbd90380c354b30c2bdffbf6efc42e79ddd826c9fbbc3976487234a8c17d2bf69d50a65cf999aab15a5e28032460fae48d81b3a510ad556c6f8431f22e5dd5b9ab624de5c14a10b7cd3812975d483c7c6850a04558b6fc611361515740903dbf2a49634f9cd5393d09aa94770dd18b4acd45de2fc96216632218a1bb4a71bf0ce24b619ed8f61e3b4d092a62cf80db050059a29f8bdfa3db6e3594599be12f32f32d56fc882e768770f3a69c1367a62ff4b879641e48908ea4476ba8b8255ecf91c877e740ff6e1405b172bf73e6a9272b597484e7d25a381f62cc6c6056ec254361bf070964c89a42be11e98f0946285a9988b754e77ac8a92a15274e105517c7cee51854f36b8bed4d6b337ad26d450ba71f5a8bc25f9583d870fa409398f83d53fe78df38b9f90d4c0a581b6bdabfabe513cd545fa7522ae3685c4c577ab7ba8aa60e52d5ade4f9006e79f4a43a0972d53775b00f1bb9ebb17aa3c0b9859d3a93fc41f259b6e7ed73cf35008090ca057c1817921b9f671343695653c1530246f4c67daa4f452698781d20d537f888f0ea0ca049bae9aa1a8521a42eb96ae0ce0247218d2cddae7b224b085055f369e7edb812e68761813fdcec39cc062cde67eba29a225b3d8ea33d7dc6ca0c4b64b56498b97cfde5884080a854fe449a3afe43696327ab7f4009d7cff79ca658303a055ac7a0aa3e41c0f77c8d7ad453972d5cadc07febd8dc65a2d1085bc0dcb84f71e7d44e872d9b7196239048fd439d37517385c9cdeb25d85cb5f5c94708199f571c2aaf22fe6bf2085f568cd88adbeb95c0e91639f92312becce42a3fa166c93eb70b10900c6e179bae36b2f449f5e37556faca641c4798e6a76967ef336376605cf7fe2bcfff5a211c90b32b772d1aacd811b03ccdf9c53c468eb74da6e084f99ad62bffbbb5aaca6a4c7eaaf1a4ea3ecfcdeb5972b7e22c1d7fec6a36d3316f489fd88a8df10fcd798c998e141db34b3d55e71fc46b2bd454fa0a5751f924451b6cfc38bf5fa644f8c7388a192eb0170271af9b3933916ae377d4d9499a94a0e2f443cb86ed769e306ad9ccd84b5e9102e3f51632ae35669390f42104484fa6c0cc08107a7d23d14b892eb9906e80c75927d4bc9b324ce3559776f2246ff6acd55b5724060b87a5c8154bb56c4b7b5f5f268e78bc402a03f1ef60d301e575744d14d09002a34e28e51bf47f576834ae570bff7b1bf9bc82ce28081f39559d02d0e1bc29f99f2009e1e8fc00e770b774d83b30b725dd4c647937fc8dea23132e792d71578ef7dd2d9892e53105616a2a08edabd8e3b5b618435ff1b9b4637921b380dd07135d685dd0de38720870662db03af98e717a64de02790d2a581a9acb62cf708786d8ae942aa7bb5e5a97eeeac3c5bb425f58d8c365ceff30120918bcb74c2b994553b8b30f12313fba189ddcc2702120790210c2a781c0cd36c03916a3e86a5797728b21a0609720006b33f240e327459e1dbba19815967a1d46d21881d525b945dcb3f43853db102d23b2600ffd06d7650fe2579c65bca4e5a751d627ffd1ccb97c38a7906cc3b46a2e412234cd00a86d68451f3141dcd138a7d91b83a6932c178c8fdf1217264cbc71a7118899aea84fd2fcd5feaa2f041a87c8d39e885d2e2317e5abbb060f8669d6b9d4178f676a7ba1b5aa12c3d28798cfa02235187db747fa51644ff5533aaf97d9cf1c7de4f94eab4410c637cd6bd67ed1c225ae66c88ecc9c806fb5a5855873c673dd130b3d814b14f423e2f5623ede9188c0eec477f70a224310e478f0d5fc47e88aa2a69e502880d632fc7d6712eb87e57b9afaae1188cf894e4010d5ebe90b766c8b082ec2c346df1babb8e81a24b14e5e3d1ce7a54562b469d09fafa8ce5dd58930705eedd746966b0d2d25abc1c4945553c88cc4dbad12c2763295f0433853b91d15037befe3cc37858ec8fcbad502ee3ddd7a25913990a960fa6c3fb86e324257632e5f6370e576890a4bbbb31d7c6ce0beb4b3d777c5eb4a609c5096e627f92c001a6e4d1bd79b1bd9106cde4a06e8e720690ec9ca9bc5074229efcc7df72e349498b1037d1f8d57148c904d9aa9b1d9a7de996eb426f9c238b4db8df3a9fe55668ba5da3116b76b4390a86ca13fa04e6b9a345e79ad870913fbc3a90999756cc7a82dad2365a2019d2d534e1efb6868a9b9fcb98550b46b6f85d77918372075296c297666d2035c6b69ef85b56e45dc128e0670587187d7091380080e74141a7f7b3f7e09c8826801b1b8c18a1422b5cab6b2a68a56a89c4de73d489d87057673418fd49e549482446855295adc3c2374ad750710842ccea58e3430ac16e616827c98e033d1a640da18b212d1f0086711a80b1357a9395299376e6e132d7a72b723c4952e142aa7ee4643a16c0e26cbf9ba97a7f4ab435fcf433fad017fd4e9908ed253e9fbdca1d97bd0c9e8009ec161ab2541e39037b3a4d1fe375e23435f81f6b09544b3d129c7523ca46191325c8389a38b86ec1cc7f2ac666140b9cf08b9e63cea088c705990acca63cc3eb2f2240ea37e12725af63c4cc42d1e3a784c62f86541c94c8881d74504a83b3ee6863db839c5f6d688a8e1c4dcb5f89381511993da1b647b537d3948f21291cf63d992778561c119acfb59d6aeffa915b7c8541bdf327cbd5225045fd2c52d1922ff2585c95f5eec95a4582f5261a0c66744523670bce62c2fe4b7c0b2e57f0b5302fd28c1fa959ca146ef83e60fe75b2079c6fe7f52a9c3b6667745f93203698042ff7bff72a8f08b5d3cdf897bf4262b3cce74a97b732c31d127ccfd15b0efbcb164b61f0be4935bd70e19343ffb2b5801f0c10e96275a1941fe60841bb4cb03021434cd285a2ffe31c517e823cb5bbe3277f2d7be622107f6d85e8bb16829a1f072c7b00686ce94b3837f78485bfa73468bd612209e9fca6f83cc995fd7cf13202bfb671a67c30fc036b3d3f7523a934c12e3926adcae42cb388a307ef599e2edeb4ef254c8ec846779fcf2fbac063c2a81bf25a8c7641a4928ad24ccfa117d618151d465823029c1abdcd8ebfd4d8e4b6c4efb30316148010d47b508cfe6a379d259a6c82d6e0439f737c9c15a9325d37e3da6cbc21705a2f8a84471240a11eb3079a50aa85260034db58d96ba08dff4838f509dc63c73cfc69209e457314a9fea447bbaff9ffad7605bfcaa2b96063f2efc9653dc8bd335f0c02c052f049269aafbd4663f60acb3786dce98492e3eba25d9cafc3c85d7ec7709b85531f226b8ec0e99cc6aa580d739170c8c303c12317e441b9a0163706e2e54486049f9bcd4f1b118f5b1d5536e418104f8821a2f9516db90abcd38ecd61372573489859617d6b66e1856f97534789feb7138c5a19bd42738fbe1384514134360be3a5ef96039253d371b225a5695ecda4306735edf5ae6929eb10bb20007b0851429e3d4cc03a514f206ba0a2ac5eafdae9c5137bc0dad740b4481ec3d81e94a5a91bd6cb74a039f68e46e125e78a6a8ed86dcd2650610ab21c8fa786463207abbb0dc08047a4deeae895ce1cbff19f3a9abbf759cd65a0062e62e84b19713407bb57f990467f0f72cef7ed1c2b9d6d01461507e5967294d7e29f6c624f872a0d201c9713e36244b72edc8e213cc0184ad7b5c2ef42d95890df89b77a7a3372dbd7cedee77e79e4f002d5c3a7e876293448ba1fbad9600473f4fcb1652cfc69db9c3851c44cae404eadbcb6ab1eefb95228f48b70d0aad74d0395eef4e930350549ad9b61462842dbfc975ecc9948c8cbcb9ada585374c46dbd6e592dd232f4cb1121a9489dac101fa61c0cbe9b3daa7d84ebd30e7af960ff1a1488642b4f669f2477e3e220bff013df7c8e9653a73e5f661cde8ee766fac66ccfeb83a0b9d73a3ff033e54b6da752e52f1bc24413c0b77083e287453767d2010d25dee12b421c3904e3848f67c232ed1ea677ce960d49a0fda5317410ebbb943f520c96bfd47f51e723bafd20d34f6d08afa14d986095adae1bef4cd87c112af6097a8a6d5e6dcdec6fc1939a84f88acf372d803a0e15953822c1c737ef12c8b00922a3fb368c3491e0aa6a86a66869ffc7e8fbf9e5fe6e70240421d94e14170b2b8e1baa751c714b500a31ca47ade76ba362965a08f8190ad0a34587e1e2f223ae31a1ddcedd5b6758296374f41f7b12a54d35e2728cfcc42afab656b6cce324d97de5b0a0e315de5d4069d1eae66ea177dfee19f67a1b8e919124a43fae2763dddfda99b321f555b2e2213b4a7c78927554e27e6e07a175de2983a4978263a05f1c3d4c651355add0b2c1a686983da1afc23d91062bd14c70b45f56b8868b0be28e96534bb66587b929e1ae1779f285554996f13eacdd1f0d842bf7e2efcf149ef5d345341b936e3e63941bb354b6e902c96c1997f919c5462d373390b36b731a50aeb431c97d9ed87940c6aaae1aa5cc34b0110c8c914c77872d0f6e8907c662077025f7061af584077666807ce0952c685e23f55cd2343aa2d38a6b1727aee61da61935d0b6e7e24f1d3a87e4c8c5db96b7cb1217976b12318977e8e91c2c87c2399fbe1eb55e98679906955479a9cff85daf12d9d7914f3dfb411efe8c5da65100232f4027a6efd7c977803c358620671893557ebccfae0656e59907ead1b04787d7498f394abe7bd5a3b43dae705eea59d7c9ea0f28bc4bac22a590acc615c", 0x1000, 0x40400a1, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) 25.712257674s ago: executing program 5 (id=1872): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r2, 0x12) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) move_mount(r1, 0x0, r3, 0x0, 0x46) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0xe0b6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}]}, &(0x7f00000002c0)=0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x200000, 0x2, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x6, 0x36d89b, 0x20ccf3}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x2, 0x2c06cf, 0x1000000}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)={0x7, 0x8000000000000000, 0x3, 0x0, 0x0, [{{r0}, 0x5}, {{r0}, 0x8}, {{r0}, 0x101}]}) 25.570193573s ago: executing program 5 (id=1873): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x72, 0x20800, 0x0, 0x1a4, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810dc, 0xb4}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x408c0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f00000001c0)=""/108, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x11}) 25.530397352s ago: executing program 2 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 25.352183814s ago: executing program 2 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(0x0, 0xf6, 0x2c) 25.338710566s ago: executing program 2 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000014800000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x4040000}, 0x2404c800) 25.321666945s ago: executing program 5 (id=1877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000002fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa000006000100feffff7f08000200020000000800010000000400050002"], 0x64}}, 0x0) 25.112616021s ago: executing program 44 (id=1877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000002fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa000006000100feffff7f08000200020000000800010000000400050002"], 0x64}}, 0x0) 24.287995867s ago: executing program 7 (id=1879): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000300)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0xb00000000000000) 24.206180019s ago: executing program 7 (id=1880): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844) 23.944276982s ago: executing program 7 (id=1882): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)='h', 0x1}], 0x1) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000800)={0x39, &(0x7f0000000780)=[{0x34, '\x00', @buffer={"d5bc6c73b4141570dc2e72cf9c0b98061d6b1ecf19ec5373c822ee8168a986fd", 0x20}, 0xb6c}]}) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 23.831270097s ago: executing program 7 (id=1884): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(0x0, 0xf6, 0x2c) 23.696779676s ago: executing program 7 (id=1886): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800009f", @ANYRES16=r6, @ANYBLOB="0100fefffffffbdbdf256700000008000100010000000c009900080000004f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$I2C_PEC(r2, 0x708, 0xe00) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000003060103000000000000000000000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f29, 0x2, 0x10004, 0x4, 0x5, 0x6, 0x8, 0x4, 0xa, 0x4, 0x42, 0x1, 0x4, 0x1, 0x6, 0x101, 0x100, 0x4, 0x3, 0x93, 0x85, 0xcaa4, 0x3, 0x20009e55, 0x9, 0xe69, 0x7f, 0x6, 0x8003, 0xfffffffd]}) 21.677022118s ago: executing program 1 (id=1889): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0x3ff, &(0x7f0000000500)=0x0) pipe(&(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) 20.722152167s ago: executing program 1 (id=1890): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x22c02) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x5452, &(0x7f0000000240)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8a, &(0x7f0000000680)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r3, 0x0, 0x3000}]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x8}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"3765fd6306f15be70e287da7f5410d62", 0x0, 0x0, {0x7f, 0x9}, {0x9, 0x8}, 0x9, [0x6e, 0xb, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x431, 0x5, 0x200, 0x8000000000000001, 0x7fffffff, 0x7, 0x4, 0x58, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 20.350168627s ago: executing program 1 (id=1891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8dff}, 0x1c) 20.297370877s ago: executing program 1 (id=1892): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0xc6080) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='xfs\x00', 0x3010000, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0xa, 0x4, &(0x7f0000000080)={0x15, "50ead502d9486e395428489a1722fa1c7894b91a8f11061792e63c00a7a53975fd"}}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x80004, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000018000902000000000000000002000000040000001400f200fc00000099602934a7328779fa0cd2d23f8c6d1b8497bc4b6bab4ff9535ee245569690e5bf3e48"], 0x2c}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000240)) read(r0, &(0x7f00000003c0)=""/245, 0xf5) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) 18.85481536s ago: executing program 1 (id=1893): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(0x0, 0xf6, 0x2c) 18.675907739s ago: executing program 1 (id=1894): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x1f, 0x3}}}}}}]}, 0x48}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x100000000110000, 0x0, 0x4002004c2, 0x7ff, 0x2000000009, 0x6, 0x7fff, 0x7e, 0x89, 0x6, 0x0, 0x8d], 0x100000, 0x240046}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000100)) 9.946308285s ago: executing program 45 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000014800000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x4040000}, 0x2404c800) 7.846211267s ago: executing program 46 (id=1886): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800009f", @ANYRES16=r6, @ANYBLOB="0100fefffffffbdbdf256700000008000100010000000c009900080000004f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$I2C_PEC(r2, 0x708, 0xe00) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000003060103000000000000000000000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f29, 0x2, 0x10004, 0x4, 0x5, 0x6, 0x8, 0x4, 0xa, 0x4, 0x42, 0x1, 0x4, 0x1, 0x6, 0x101, 0x100, 0x4, 0x3, 0x93, 0x85, 0xcaa4, 0x3, 0x20009e55, 0x9, 0xe69, 0x7f, 0x6, 0x8003, 0xfffffffd]}) 7.29546137s ago: executing program 6 (id=1913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xfc, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 7.100632067s ago: executing program 6 (id=1914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x9, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x1, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xb, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x56, 0x4, 0x1}, {0x3, 0x6, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c481fde2c8c744240000000000c74424020e00000064410f01c40f101c2436430fc76f00c744240001cac93fc744240602000000939393240600000000c441fc2fa20b0000483e440f01c9c46119f3660066450fc7b30000000065410f0636660f3881450c", 0x65}], 0xaaaaaaaaaaaaa8a, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 6.814524475s ago: executing program 6 (id=1915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 5.598680686s ago: executing program 6 (id=1922): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="050ff939d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81a4c0b34aaf25b3) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000412fa0200904b402c0130102030109021200010000100009045e00002ed94e00"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x2, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b1090400000103000100092101010001220500097f42b88b030c0000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 5.359943783s ago: executing program 3 (id=1916): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000400)='cache=none\x92\x03[()bv\xd8\xaar\n\xdc\xd9\x9f\t\xbb\x169\x8a;\r\xd1^\x8a\xacd\xc8!\xe5/\x99\xea\xad7u\\\x93\x97\x02\xc0\xdd\xb4\xdf\x17M\x04\xd9D\xff\x1a\xd2\x8f\xa5eY\xffo\xee \x98\x96\x93\xadP\xd950\x9ce\xc2B>K\xdcX\x92/\xa4\xe6\x0e\xc6TJ*\x9f)\x12\x97J\x01\xa8\xfd(\xd4\xc5)\xd5\x80\xb6\x98\x91K\x9c\x92\x18\xbc\xf7\x99\xf3\xb5\xccf\x7f\xcb\x1e5&\x8b\x98\x80Lq\xbe\x7f\xbcq\xa32\x06\xdeW\xb5hWd\xb8\xe7\xc20\x00g\xb6X5\xb7O\xaf\x91') ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf, 0xf, 0x47, 0x40, 0x4e6, 0xa, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x0, 0x51, 0xcc, 0xb4}}]}}]}}, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x5, 0x2, 0x0, 0x0, 0x100000}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) r5 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f00000009c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.778694438s ago: executing program 3 (id=1917): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c80047002b00010011020200000004f8000001000b000600"], 0x4c) 3.618262426s ago: executing program 47 (id=1894): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x1f, 0x3}}}}}}]}, 0x48}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x100000000110000, 0x0, 0x4002004c2, 0x7ff, 0x2000000009, 0x6, 0x7fff, 0x7e, 0x89, 0x6, 0x0, 0x8d], 0x100000, 0x240046}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000100)) 2.502121369s ago: executing program 6 (id=1919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x208000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000080}]}) r3 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x1, 0x0}) syz_usb_disconnect(r3) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f00000004c0)="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"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) 2.341992875s ago: executing program 3 (id=1920): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 2.035707121s ago: executing program 3 (id=1921): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000900)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x2}, @generic={0x3, "710e4f599d2a62db5fee1c8fdba5"}, @sco={0x1f, @none}, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x5e, 0x6}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000002f80)={0x4, 0x6, 0x3, 0xc4, 0xee53, 0x9, 0x3, 0xeb}, &(0x7f0000002fc0)={0x6, 0xfffffffffffffffa, 0x5, 0xffffffffffff8001, 0x1, 0x1, 0x3, 0x2}, &(0x7f0000003000)={0x5, 0x4, 0x9, 0xdeaf, 0x6, 0x8, 0x6, 0xe30b}, &(0x7f0000003040), &(0x7f00000030c0)={&(0x7f0000003080), 0x8}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002d40)=ANY=[@ANYBLOB="2484a1313d8e571ef93e1a7900", @ANYRES16=r2, @ANYBLOB="030125bd7000ffdbdf2502000000080002000000000008000100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x84880}, 0x4000024) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="030300000000fcffff210d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002cc0)={'syztnl2\x00', r5, 0x80, 0x20, 0x1, 0xd, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010101, {[@ssrr={0x89, 0x27, 0x3a, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty, @rand_addr=0x64010100, @loopback, @multicast1, @local]}, @noop, @lsrr={0x83, 0x7, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000002f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x2c, r11, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8091) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_cred(r13, 0x1, 0x2f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000}) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/85, 0x55}], 0x7, &(0x7f00000003c0)=""/197, 0xc5}, 0x6}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f00000027c0)=""/98, 0x62}, {&(0x7f0000002840)=""/117, 0x75}, {&(0x7f00000028c0)=""/167, 0xa7}, {&(0x7f0000002980)=""/92, 0x5c}, {&(0x7f0000002a00)=""/97, 0x61}, {&(0x7f0000002a80)=""/169, 0xa9}], 0x7, &(0x7f0000002bc0)=""/194, 0xc2}, 0xc490}], 0x2, 0x10000, &(0x7f0000000700)={r6, r7+60000000}) 1.433030887s ago: executing program 3 (id=1923): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fsopen(&(0x7f00000001c0)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) fsopen(&(0x7f00000001c0)='adfs\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) 1.299147073s ago: executing program 3 (id=1924): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000940)={0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="210400000000d04f15d84ca2cd7f408f7bd2c9c2f6b4a7ed821f130960de6d077bc55b935eeac4512f17fc0c4540ee65c02369b956d5f12cba5a2eae448c59c7b688ea33"]}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) shutdown(r2, 0x1) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x48, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0x3, 0x0, 0xff, 0x9, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'tunl0\x00', 0x0}) preadv(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x110, r7, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, 0x0, &(0x7f0000000180)) sendto$inet(r4, &(0x7f0000001340)="3ac6b0799646ce707e28db90ccdd26e87a0e41789430a93156bf7326191dc5bc0436237c9d4fc59768c6267735bdd2ecf36e444b3a5477352affac79b67f63b01f0f89de2369b962788829c07683814ec72a70238e21073281ee50b1239d42d9b5d1abd0209fd7630a032742981ff2259444c9b1a6df733682626abc3fb90679813d562639b76000e907ea07576556ec0e1a", 0x92, 0x48081, &(0x7f00000012c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 0s ago: executing program 6 (id=1925): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) socket(0x1d, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0x400cd}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x700}, 0x0) kernel console output (not intermixed with test programs): 85] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 397.635840][ T5885] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 397.644071][ T5885] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 397.721737][ T5885] usb 3-1: USB disconnect, device number 71 [ 398.253494][ T5864] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 398.315385][T11704] autofs: Unknown parameter '00000000000000000000' [ 398.403895][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 398.411256][ T5864] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 398.419870][ T5864] usb 5-1: config 0 has no interface number 0 [ 398.426082][ T5864] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 398.438122][ T5864] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 398.448482][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.456700][ T5864] usb 5-1: Product: syz [ 398.460905][ T5864] usb 5-1: Manufacturer: syz [ 398.466825][ T5864] usb 5-1: SerialNumber: syz [ 398.478442][ T5864] usb 5-1: config 0 descriptor?? [ 398.486925][ T5885] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 398.624457][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.656192][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 398.667130][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 398.677287][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 398.687135][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 398.700617][ T5885] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 398.711669][T11693] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1644'. [ 398.712219][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.728893][ T5885] usb 2-1: Product: syz [ 398.733108][ T5885] usb 2-1: Manufacturer: syz [ 398.733963][T11709] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1644'. [ 398.737811][ T5885] usb 2-1: SerialNumber: syz [ 398.745364][ T5885] usb 2-1: config 0 descriptor?? [ 398.758438][ T5864] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 398.761090][ T5885] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 398.765951][ T5864] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 399.246182][ T5885] scsi host1: usb-storage 2-1:0.0 [ 399.285827][ T5885] usb 2-1: USB disconnect, device number 70 [ 399.587092][ T5823] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 399.667223][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 399.737965][ T5885] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 399.769472][ T5823] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 399.779779][ T5823] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.789099][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.797092][ T5823] usb 3-1: Product: syz [ 399.801525][ T5823] usb 3-1: Manufacturer: syz [ 399.806127][ T5823] usb 3-1: SerialNumber: syz [ 399.815660][ T5823] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.841003][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.888315][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 399.894811][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 399.904747][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 399.917004][ T5885] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 399.926371][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.934473][ T5885] usb 2-1: Product: syz [ 399.940221][ T5885] usb 2-1: Manufacturer: syz [ 399.944885][ T5885] usb 2-1: SerialNumber: syz [ 399.951888][ T5885] usb 2-1: config 0 descriptor?? [ 400.047110][T11723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.058047][T11723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.067282][T11723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.076277][T11723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.086477][T11723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.095309][T11723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.105529][ T5864] usb 3-1: USB disconnect, device number 72 [ 400.166873][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 400.186422][ T5885] usb 2-1: USB disconnect, device number 71 [ 400.492843][T11729] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 400.503356][T11729] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 400.567522][T11731] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.616482][T11733] autofs: Unknown parameter '00000000000000000000' [ 400.678165][T11736] FAULT_INJECTION: forcing a failure. [ 400.678165][T11736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.693558][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.0.1658 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.693588][T11736] Tainted: [L]=SOFTLOCKUP [ 400.693595][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 400.693606][T11736] Call Trace: [ 400.693614][T11736] [ 400.693623][T11736] dump_stack_lvl+0xe8/0x150 [ 400.693652][T11736] should_fail_ex+0x412/0x560 [ 400.693680][T11736] __kvm_read_guest_page+0x18d/0x240 [ 400.693703][T11736] kvm_fetch_guest_virt+0x12b/0x170 [ 400.693730][T11736] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 400.693753][T11736] __do_insn_fetch_bytes+0x31c/0x700 [ 400.693778][T11736] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 400.693812][T11736] x86_decode_insn+0x38e/0x5df0 [ 400.693863][T11736] ? __pfx_x86_decode_insn+0x10/0x10 [ 400.693887][T11736] ? emulator_write_gpr+0x176/0x1f0 [ 400.693912][T11736] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 400.693932][T11736] ? __asan_memset+0x22/0x50 [ 400.693957][T11736] ? init_decode_cache+0xea/0x160 [ 400.693977][T11736] ? init_emulate_ctxt+0x4e7/0x680 [ 400.694005][T11736] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 400.694040][T11736] x86_emulate_instruction+0x64a/0x2100 [ 400.694070][T11736] ? rcu_qs+0x5e/0xe0 [ 400.694091][T11736] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 400.694123][T11736] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 400.694140][T11736] ? __lock_acquire+0x6b5/0x2cf0 [ 400.694171][T11736] ? vmx_vcpu_run+0x1bb1/0x2de0 [ 400.694193][T11736] ? handle_io+0x1e3/0x270 [ 400.694218][T11736] ? __pfx_handle_io+0x10/0x10 [ 400.694241][T11736] vmx_handle_exit+0xfd1/0x16c0 [ 400.694281][T11736] vcpu_run+0x5fa2/0x7b90 [ 400.694325][T11736] ? vcpu_run+0x4ca8/0x7b90 [ 400.694390][T11736] ? __pfx_vcpu_run+0x10/0x10 [ 400.694407][T11736] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 400.694437][T11736] ? rcu_is_watching+0x15/0xb0 [ 400.694464][T11736] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 400.694498][T11736] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 400.694519][T11736] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 400.694539][T11736] ? rcu_is_watching+0x15/0xb0 [ 400.694559][T11736] ? trace_contention_end+0x3d/0x150 [ 400.694585][T11736] ? __mutex_lock+0x319/0x1300 [ 400.694616][T11736] ? kasan_quarantine_put+0xbb/0x1f0 [ 400.694643][T11736] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 400.694666][T11736] ? __pfx___mutex_lock+0x10/0x10 [ 400.694690][T11736] ? tomoyo_path_number_perm+0x219/0x630 [ 400.694716][T11736] ? do_vfs_ioctl+0x1166/0x1530 [ 400.694738][T11736] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.694761][T11736] kvm_vcpu_ioctl+0xa62/0xfd0 [ 400.694784][T11736] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.694800][T11736] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 400.694844][T11736] ? __fget_files+0x2a/0x420 [ 400.694870][T11736] ? __fget_files+0x2a/0x420 [ 400.694892][T11736] ? __fget_files+0x3a0/0x420 [ 400.694912][T11736] ? __fget_files+0x2a/0x420 [ 400.694938][T11736] ? bpf_lsm_file_ioctl+0x9/0x20 [ 400.694959][T11736] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.694977][T11736] __se_sys_ioctl+0xfc/0x170 [ 400.694999][T11736] do_syscall_64+0x14d/0xf80 [ 400.695021][T11736] ? trace_irq_disable+0x3b/0x150 [ 400.695044][T11736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.695068][T11736] ? clear_bhb_loop+0x40/0x90 [ 400.695090][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.695108][T11736] RIP: 0033:0x7fa42a79aeb9 [ 400.695126][T11736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.695141][T11736] RSP: 002b:00007fa42b617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.695161][T11736] RAX: ffffffffffffffda RBX: 00007fa42aa15fa0 RCX: 00007fa42a79aeb9 [ 400.695175][T11736] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 400.695186][T11736] RBP: 00007fa42b617090 R08: 0000000000000000 R09: 0000000000000000 [ 400.695198][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.695210][T11736] R13: 00007fa42aa16038 R14: 00007fa42aa15fa0 R15: 00007fffdb833728 [ 400.695240][T11736] [ 400.709965][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.880395][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 401.125582][ T29] ath9k_htc: Failed to initialize the device [ 401.133669][ T5864] usb 3-1: ath9k_htc: USB layer deinitialized [ 401.270040][ T5885] usb 5-1: USB disconnect, device number 54 [ 401.295560][T11747] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 401.311052][T11747] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 401.320849][T11747] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 401.463607][ T5864] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 401.542426][ T5871] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 401.622446][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 401.631176][ T5864] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 401.640533][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 401.653306][ T5864] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 401.663831][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.675513][ T5864] usb 3-1: config 0 descriptor?? [ 401.686038][T11754] netlink: 'syz.4.1665': attribute type 9 has an invalid length. [ 401.696649][ T5864] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 401.705560][T11754] netlink: 'syz.4.1665': attribute type 11 has an invalid length. [ 401.714239][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.722825][T11754] netlink: 'syz.4.1665': attribute type 12 has an invalid length. [ 401.725139][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 401.736303][T11754] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1665'. [ 401.751522][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.753235][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.767243][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 401.793474][ T5871] usb 2-1: config 0 descriptor?? [ 401.807494][ T5871] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 402.038373][T11759] autofs: Unknown parameter '00000000000000000000' [ 402.217084][T11765] cgroup: name respecified [ 402.501847][T11723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 402.515658][ T5864] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 402.529548][ T5864] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 402.552899][ T5864] usb 3-1: USB disconnect, device number 73 [ 402.566375][ T5864] mos7840 3-1:0.0: device disconnected [ 402.795342][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.998693][T11782] netlink: 'syz.4.1674': attribute type 10 has an invalid length. [ 403.006865][T11782] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 403.096398][T11784] autofs: Unknown parameter '00000000000000000000' [ 403.327461][ T29] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 403.386982][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 403.477101][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 403.484314][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 403.492249][ T29] usb 3-1: can't read configurations, error -61 [ 403.637848][ T29] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 403.808058][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 403.815016][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 403.822659][ T29] usb 3-1: can't read configurations, error -61 [ 403.829352][ T29] usb usb3-port1: attempt power cycle [ 403.848011][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.141992][T11800] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1682'. [ 404.169126][ T29] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 404.189725][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 404.196847][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 404.207507][ T29] usb 3-1: can't read configurations, error -61 [ 404.286241][ T5823] usb 2-1: USB disconnect, device number 72 [ 404.349425][ T29] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 404.370020][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 404.377153][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 404.388894][ T29] usb 3-1: can't read configurations, error -61 [ 404.395979][ T29] usb usb3-port1: unable to enumerate USB device [ 404.587233][T11807] autofs: Unknown parameter '00000000000000000000' [ 404.638987][T11810] overlayfs: missing 'lowerdir' [ 404.691076][ T5823] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 404.850604][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 404.858312][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 404.873673][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.880643][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.888890][ T5823] usb 2-1: config 0 has no interfaces? [ 404.899635][ T5823] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 404.909270][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.918335][ T5823] usb 2-1: Product: syz [ 404.922772][ T5823] usb 2-1: Manufacturer: syz [ 404.928478][ T5823] usb 2-1: SerialNumber: syz [ 404.935976][ T5823] usb 2-1: config 0 descriptor?? [ 405.147424][ T119] usb 2-1: USB disconnect, device number 73 [ 405.153485][ T5871] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 405.313323][ T5871] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 405.322641][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.333566][ T5871] usb 5-1: config 0 descriptor?? [ 405.540907][ T5871] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 405.768784][ T5871] [drm:udl_init] *ERROR* Selecting channel failed [ 405.817829][T11827] overlayfs: overlapping lowerdir path [ 405.817995][ T5871] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 405.842542][ T5871] [drm] Initialized udl on minor 2 [ 405.852316][ T5871] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 405.877268][ T5871] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 405.899590][ T5864] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 405.920673][ T5871] usb 5-1: USB disconnect, device number 55 [ 405.926681][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.944604][ T5864] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 405.970325][T11830] autofs: Unknown parameter 'fd00000000000000000000' [ 406.053229][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1696'. [ 406.063301][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1696'. [ 406.144938][T11838] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 406.168715][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'. [ 406.213519][T11841] F2FS-fs: Conflicting test_dummy_encryption options [ 406.470846][T11843] FAULT_INJECTION: forcing a failure. [ 406.470846][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 406.484417][T11843] CPU: 1 UID: 0 PID: 11843 Comm: syz.0.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.484446][T11843] Tainted: [L]=SOFTLOCKUP [ 406.484452][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 406.484463][T11843] Call Trace: [ 406.484472][T11843] [ 406.484479][T11843] dump_stack_lvl+0xe8/0x150 [ 406.484508][T11843] should_fail_ex+0x412/0x560 [ 406.484534][T11843] should_failslab+0xa8/0x100 [ 406.484559][T11843] __kmalloc_noprof+0xe8/0x760 [ 406.484575][T11843] ? trace_kmalloc+0x2a/0x110 [ 406.484590][T11843] ? tomoyo_encode+0x28b/0x550 [ 406.484616][T11843] tomoyo_encode+0x28b/0x550 [ 406.484644][T11843] tomoyo_realpath_from_path+0x58d/0x5d0 [ 406.484680][T11843] tomoyo_check_open_permission+0x229/0x470 [ 406.484703][T11843] ? tomoyo_check_open_permission+0x1d3/0x470 [ 406.484724][T11843] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 406.484793][T11843] security_file_open+0xa9/0x240 [ 406.484816][T11843] do_dentry_open+0x384/0x14e0 [ 406.484844][T11843] ? vfs_open+0x31/0x340 [ 406.484869][T11843] vfs_open+0x3b/0x340 [ 406.484888][T11843] ? path_openat+0x2df0/0x3860 [ 406.484909][T11843] path_openat+0x2e08/0x3860 [ 406.484941][T11843] ? __pfx_stack_trace_save+0x10/0x10 [ 406.484962][T11843] ? stack_depot_save_flags+0x33/0x810 [ 406.484994][T11843] ? __pfx_path_openat+0x10/0x10 [ 406.485010][T11843] ? __x64_sys_open+0x11e/0x150 [ 406.485030][T11843] ? do_syscall_64+0x14d/0xf80 [ 406.485051][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.485077][T11843] ? __lock_acquire+0x6b5/0x2cf0 [ 406.485105][T11843] do_file_open+0x23e/0x4a0 [ 406.485129][T11843] ? __pfx_do_file_open+0x10/0x10 [ 406.485167][T11843] ? _raw_spin_unlock+0x28/0x50 [ 406.485185][T11843] ? alloc_fd+0x64b/0x6c0 [ 406.485218][T11843] do_sys_openat2+0x113/0x200 [ 406.485243][T11843] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.485267][T11843] ? ksys_write+0x242/0x270 [ 406.485287][T11843] ? __pfx_ksys_write+0x10/0x10 [ 406.485309][T11843] __x64_sys_open+0x11e/0x150 [ 406.485335][T11843] do_syscall_64+0x14d/0xf80 [ 406.485356][T11843] ? trace_irq_disable+0x3b/0x150 [ 406.485377][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.485394][T11843] ? clear_bhb_loop+0x40/0x90 [ 406.485416][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.485433][T11843] RIP: 0033:0x7fa42a79aeb9 [ 406.485451][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.485465][T11843] RSP: 002b:00007fa42b617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 406.485484][T11843] RAX: ffffffffffffffda RBX: 00007fa42aa15fa0 RCX: 00007fa42a79aeb9 [ 406.485497][T11843] RDX: 000000000000002c RSI: 0000000000000000 RDI: 00002000000000c0 [ 406.485509][T11843] RBP: 00007fa42b617090 R08: 0000000000000000 R09: 0000000000000000 [ 406.485520][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.485530][T11843] R13: 00007fa42aa16038 R14: 00007fa42aa15fa0 R15: 00007fffdb833728 [ 406.485560][T11843] [ 406.790648][T11843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.965817][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.081312][T11848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.472342][T11855] autofs: Unknown parameter 'fd00000000000000000000' [ 407.769463][ T5871] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 407.930784][ T5871] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.947065][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 407.957215][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 407.965729][ T5871] usb 2-1: Product: syz [ 407.970121][ T5871] usb 2-1: Manufacturer: syz [ 407.974715][ T5871] usb 2-1: SerialNumber: syz [ 408.008397][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.028440][ T29] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 408.179762][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 408.186502][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.192099][ T5871] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 408.197137][ T29] usb 3-1: config 0 has no interfaces? [ 408.215455][ T29] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 408.225997][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.237612][ T29] usb 3-1: config 0 descriptor?? [ 408.452368][ T5820] Bluetooth: Frame is too long (len 71, expected len 47) [ 408.462222][ T5820] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 408.468783][ T5820] Bluetooth: Wrong link type (-22) [ 408.474427][ T5820] Bluetooth: Wrong link type (-71) [ 408.480169][ T5864] usb 3-1: USB disconnect, device number 78 [ 409.017017][T11865] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'. [ 409.060938][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.074092][T11867] hpfs: Bad magic ... probably not HPFS [ 409.331626][ T5871] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 409.494583][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 171, changing to 11 [ 409.505915][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33919, setting to 1024 [ 409.517204][ T5871] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.526698][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.537972][ T5871] usb 3-1: config 0 descriptor?? [ 409.543907][T11867] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 409.958335][ T5871] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 409.965920][ T5871] cm6533_jd 0003:0D8C:0022.002D: item fetching failed at offset 3/5 [ 409.974867][ T5871] cm6533_jd 0003:0D8C:0022.002D: parse failed [ 409.981005][ T5871] cm6533_jd 0003:0D8C:0022.002D: probe with driver cm6533_jd failed with error -22 [ 410.093468][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.162869][ T24] usb 3-1: USB disconnect, device number 79 [ 410.851219][T11876] autofs: Unknown parameter 'fd00000000000000000000' [ 410.966778][T11884] FAULT_INJECTION: forcing a failure. [ 410.966778][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 410.980765][T11884] CPU: 0 UID: 0 PID: 11884 Comm: syz.2.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.980796][T11884] Tainted: [L]=SOFTLOCKUP [ 410.980803][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.980814][T11884] Call Trace: [ 410.980822][T11884] [ 410.980830][T11884] dump_stack_lvl+0xe8/0x150 [ 410.980859][T11884] should_fail_ex+0x412/0x560 [ 410.980887][T11884] should_failslab+0xa8/0x100 [ 410.980908][T11884] ? __kernfs_new_node+0xe9/0x8e0 [ 410.980929][T11884] kmem_cache_alloc_noprof+0x87/0x650 [ 410.980964][T11884] __kernfs_new_node+0xe9/0x8e0 [ 410.980991][T11884] ? __pfx___kernfs_new_node+0x10/0x10 [ 410.981012][T11884] ? kernfs_root+0x1c/0x230 [ 410.981036][T11884] ? kernfs_root+0x1c/0x230 [ 410.981052][T11884] ? kernfs_root+0x1c/0x230 [ 410.981068][T11884] ? kernfs_root+0x1c/0x230 [ 410.981090][T11884] kernfs_new_node+0x102/0x210 [ 410.981115][T11884] __kernfs_create_file+0x4b/0x2e0 [ 410.981141][T11884] sysfs_add_file_mode_ns+0x238/0x300 [ 410.981173][T11884] internal_create_group+0x673/0x1180 [ 410.981208][T11884] ? __pfx_internal_create_group+0x10/0x10 [ 410.981226][T11884] ? kernfs_add_one+0x477/0x5c0 [ 410.981250][T11884] ? up_write+0x1ab/0x410 [ 410.981270][T11884] sysfs_create_groups+0x59/0x120 [ 410.981302][T11884] device_add_attrs+0x1bf/0x5b0 [ 410.981319][T11884] ? kernfs_put+0x40e/0x470 [ 410.981340][T11884] ? __pfx_device_add_attrs+0x10/0x10 [ 410.981357][T11884] ? kobject_put+0x516/0x560 [ 410.981388][T11884] ? device_add_class_symlinks+0x21f/0x240 [ 410.981410][T11884] device_add+0x496/0xb70 [ 410.981428][T11884] ? device_initialize+0x24b/0x440 [ 410.981449][T11884] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 410.981474][T11884] wakeup_source_register+0x18a/0x380 [ 410.981497][T11884] ep_insert+0xf34/0x1a40 [ 410.981535][T11884] ? __pfx_ep_insert+0x10/0x10 [ 410.981570][T11884] ? bpf_lsm_capable+0x9/0x20 [ 410.981600][T11884] do_epoll_ctl+0x7f4/0xe80 [ 410.981632][T11884] __x64_sys_epoll_ctl+0x165/0x1b0 [ 410.981658][T11884] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 410.981694][T11884] do_syscall_64+0x14d/0xf80 [ 410.981716][T11884] ? trace_irq_disable+0x3b/0x150 [ 410.981739][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.981758][T11884] ? clear_bhb_loop+0x40/0x90 [ 410.981778][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.981795][T11884] RIP: 0033:0x7f904fb9aeb9 [ 410.981812][T11884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.981827][T11884] RSP: 002b:00007f9050a05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 410.981846][T11884] RAX: ffffffffffffffda RBX: 00007f904fe15fa0 RCX: 00007f904fb9aeb9 [ 410.981859][T11884] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 410.981869][T11884] RBP: 00007f9050a05090 R08: 0000000000000000 R09: 0000000000000000 [ 410.981880][T11884] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000002 [ 410.981891][T11884] R13: 00007f904fe16038 R14: 00007f904fe15fa0 R15: 00007ffe4998fd68 [ 410.981921][T11884] [ 411.285342][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.347785][T11886] comedi comedi3: comedi_config --init_data is deprecated [ 412.338796][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.381179][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.792213][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 413.952881][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 413.966415][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 413.975552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.983627][ T24] usb 3-1: Product: syz [ 413.987798][ T24] usb 3-1: Manufacturer: syz [ 413.992390][ T24] usb 3-1: SerialNumber: syz [ 413.999399][ T24] usb 3-1: config 0 descriptor?? [ 414.211863][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 414.215244][T11902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.229078][T11902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.244332][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 414.260171][ T24] usb 3-1: USB disconnect, device number 80 [ 414.423582][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.868815][T11910] FAULT_INJECTION: forcing a failure. [ 414.868815][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 414.883297][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.2.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.883315][T11910] Tainted: [L]=SOFTLOCKUP [ 414.883321][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 414.883331][T11910] Call Trace: [ 414.883339][T11910] [ 414.883347][T11910] dump_stack_lvl+0xe8/0x150 [ 414.883375][T11910] should_fail_ex+0x412/0x560 [ 414.883403][T11910] should_failslab+0xa8/0x100 [ 414.883418][T11910] ? skb_clone+0x212/0x3a0 [ 414.883431][T11910] kmem_cache_alloc_noprof+0x87/0x650 [ 414.883451][T11910] skb_clone+0x212/0x3a0 [ 414.883465][T11910] __netlink_deliver_tap+0x424/0x8b0 [ 414.883492][T11910] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.883513][T11910] netlink_deliver_tap+0x19c/0x1b0 [ 414.883532][T11910] netlink_unicast+0x7e3/0x9b0 [ 414.883562][T11910] ? __pfx_netlink_unicast+0x10/0x10 [ 414.883577][T11910] ? netlink_sendmsg+0x650/0xb40 [ 414.883586][T11910] ? skb_put+0x11b/0x210 [ 414.883599][T11910] netlink_sendmsg+0x813/0xb40 [ 414.883614][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.883631][T11910] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 414.883665][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.883683][T11910] sock_sendmsg_nosec+0x18f/0x1d0 [ 414.883713][T11910] ____sys_sendmsg+0x589/0x8c0 [ 414.883730][T11910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.883746][T11910] ? import_iovec+0x73/0xa0 [ 414.883758][T11910] ___sys_sendmsg+0x2a5/0x360 [ 414.883779][T11910] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.883834][T11910] ? __fget_files+0x2a/0x420 [ 414.883855][T11910] ? __fget_files+0x3a0/0x420 [ 414.883874][T11910] __x64_sys_sendmsg+0x1bd/0x2a0 [ 414.883887][T11910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.883904][T11910] ? __pfx_ksys_write+0x10/0x10 [ 414.883923][T11910] do_syscall_64+0x14d/0xf80 [ 414.883945][T11910] ? trace_irq_disable+0x3b/0x150 [ 414.883969][T11910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.883987][T11910] ? clear_bhb_loop+0x40/0x90 [ 414.884008][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.884019][T11910] RIP: 0033:0x7f904fb9aeb9 [ 414.884030][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.884038][T11910] RSP: 002b:00007f9050a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.884050][T11910] RAX: ffffffffffffffda RBX: 00007f904fe15fa0 RCX: 00007f904fb9aeb9 [ 414.884057][T11910] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004 [ 414.884065][T11910] RBP: 00007f9050a05090 R08: 0000000000000000 R09: 0000000000000000 [ 414.884076][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.884087][T11910] R13: 00007f904fe16038 R14: 00007f904fe15fa0 R15: 00007ffe4998fd68 [ 414.884117][T11910] [ 415.155162][ C1] hrtimer: interrupt took 270002474 ns [ 415.185258][ T9096] usb 2-1: USB disconnect, device number 74 [ 415.193965][ T9096] usblp0: removed [ 415.264683][ T25] block nbd8: Possible stuck request ffff888026dc0000: control (read@0,1024B). Runtime 60 seconds [ 415.275410][ T25] block nbd8: Possible stuck request ffff888026dc0200: control (read@1024,1024B). Runtime 60 seconds [ 415.286585][ T25] block nbd8: Possible stuck request ffff888026dc0400: control (read@2048,1024B). Runtime 60 seconds [ 415.297544][ T25] block nbd8: Possible stuck request ffff888026dc0600: control (read@3072,1024B). Runtime 60 seconds [ 415.308845][T11914] netlink: 'syz.1.1726': attribute type 5 has an invalid length. [ 415.465954][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.575713][T11920] openvswitch: netlink: Message has 12 unknown bytes. [ 415.666466][ T5864] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 415.818427][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.828756][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.838316][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 415.850924][ T5864] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 415.860008][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.870945][T11919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.880450][ T5864] hub 2-1:1.0: bad descriptor, ignoring hub [ 415.886380][ T5864] hub 2-1:1.0: probe with driver hub failed with error -5 [ 415.894046][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 415.899370][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 415.905757][ T5864] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 415.911794][ T5864] cdc_wdm 2-1:1.0: Unknown control protocol [ 416.193191][ T5864] usb 2-1: USB disconnect, device number 75 [ 416.508477][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.919360][ T5864] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 417.069727][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 417.077063][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.088608][ T5864] usb 2-1: config 0 has no interfaces? [ 417.094169][ T5864] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 417.103247][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.114279][ T5864] usb 2-1: config 0 descriptor?? [ 417.324619][ T5885] usb 2-1: USB disconnect, device number 76 [ 417.550656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.275327][ T5820] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 418.282390][ T5885] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 418.284880][ T5820] Bluetooth: hci2: Injecting HCI hardware error event [ 418.305933][ T5140] Bluetooth: hci2: hardware error 0x00 [ 418.442697][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 418.449720][ T5885] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 418.460779][ T5885] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 418.473025][ T5885] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.487000][ T5885] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 418.503606][ T5885] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 418.512633][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.527164][ T5885] usb 2-1: Product: syz [ 418.531358][ T5885] usb 2-1: Manufacturer: syz [ 418.536037][ T5885] usb 2-1: SerialNumber: syz [ 418.553788][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 418.562120][ T5885] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input71 [ 418.592946][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.785571][T11934] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 418.823580][ T5885] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 418.833390][ T5885] (id 0x00) [ 418.884733][ T5885] rc_core: IR keymap rc-imon-pad not found [ 418.890577][ T5885] Registered IR keymap rc-empty [ 418.897882][ T5885] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 418.908214][ T5885] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 419.034794][ T5885] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 419.047429][ T5885] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input72 [ 419.061281][ T5885] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:77> initialized [ 419.425993][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.439334][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.531375][T11948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.635268][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.664546][T11951] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 419.672873][T11951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1738'. [ 420.306817][ T5871] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 420.357041][ T5140] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 420.457032][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 420.463968][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.475517][ T5871] usb 3-1: config 0 has no interfaces? [ 420.481083][ T5871] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 420.490241][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.500124][ T5871] usb 3-1: config 0 descriptor?? [ 420.677511][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.709999][ T5871] usb 3-1: USB disconnect, device number 81 [ 421.055843][ T5871] usb 2-1: USB disconnect, device number 77 [ 421.340250][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.351504][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.361109][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.375562][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.383397][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.464725][T11962] hsr0 speed is unknown, defaulting to 1000 [ 421.690321][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 421.696919][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 421.719747][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.794481][T11962] chnl_net:caif_netlink_parms(): no params data found [ 421.895519][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.926966][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.936242][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.943806][T11962] bridge_slave_0: entered allmulticast mode [ 421.952152][T11962] bridge_slave_0: entered promiscuous mode [ 421.974101][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.989024][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.996641][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.004446][T11962] bridge_slave_1: entered allmulticast mode [ 422.013400][T11962] bridge_slave_1: entered promiscuous mode [ 422.047638][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.079051][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.091850][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.138560][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.158186][T11962] team0: Port device team_slave_0 added [ 422.166720][T11962] team0: Port device team_slave_1 added [ 422.195803][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.203008][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.230508][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.247562][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.254595][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.280661][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.365946][T11962] hsr_slave_0: entered promiscuous mode [ 422.372881][T11962] hsr_slave_1: entered promiscuous mode [ 422.379425][T11962] debugfs: 'hsr0' already exists in 'hsr' [ 422.385589][T11962] Cannot create hsr debugfs directory [ 422.475899][ T12] bridge_slave_1: left allmulticast mode [ 422.482160][ T12] bridge_slave_1: left promiscuous mode [ 422.487908][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.500731][ T12] bridge_slave_0: left allmulticast mode [ 422.506697][ T12] bridge_slave_0: left promiscuous mode [ 422.512819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.757210][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.761979][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.768031][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.784158][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.793929][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.801596][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.028200][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.041879][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.053324][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 423.069117][ T12] bond0 (unregistering): Released all slaves [ 423.165529][ T12] tipc: Left network mode [ 423.240954][T11986] hsr0 speed is unknown, defaulting to 1000 [ 423.299830][T11962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.488503][ T51] Bluetooth: hci4: command tx timeout [ 423.519667][T11962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.656094][T11962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.724413][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 423.727739][ T5140] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 423.804166][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.847763][T11962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.951159][ T12] hsr_slave_0: left promiscuous mode [ 423.969053][ T12] hsr_slave_1: left promiscuous mode [ 423.975469][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.982862][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.993577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.001479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.030246][ T12] veth1_macvtap: left promiscuous mode [ 424.036078][ T12] veth0_macvtap: left promiscuous mode [ 424.041683][ T12] veth1_vlan: left promiscuous mode [ 424.050433][ T12] veth0_vlan: left promiscuous mode [ 424.598650][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.601975][T12008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1750'. [ 424.652373][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.772437][T12010] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 424.848141][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.858519][ T5140] Bluetooth: hci5: command tx timeout [ 425.118405][ T119] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 425.119084][T12007] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1750'. [ 425.284957][T12016] netlink: 'syz.2.1753': attribute type 21 has an invalid length. [ 425.308384][ T119] usb 2-1: Using ep0 maxpacket: 16 [ 425.320208][ T119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.340713][T12016] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1753'. [ 425.368984][ T119] usb 2-1: config 0 has no interfaces? [ 425.374507][ T119] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 425.383667][T11986] chnl_net:caif_netlink_parms(): no params data found [ 425.398535][ T119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.434790][ T119] usb 2-1: config 0 descriptor?? [ 425.453468][T12016] netlink: 'syz.2.1753': attribute type 5 has an invalid length. [ 425.475246][T12016] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1753'. [ 425.579481][ T5140] Bluetooth: hci4: command tx timeout [ 425.631747][ T12] IPVS: stop unused estimator thread 0... [ 425.661091][T11962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.686243][ T10] usb 2-1: USB disconnect, device number 78 [ 425.742096][T11962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 425.801649][T11962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.888499][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.920747][T11962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 425.946977][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.960335][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.967248][T12042] netlink: 'syz.2.1755': attribute type 10 has an invalid length. [ 425.967768][T11986] bridge_slave_0: entered allmulticast mode [ 425.978194][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1755'. [ 425.984738][T11986] bridge_slave_0: entered promiscuous mode [ 426.022680][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.044382][T12042] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 426.051951][T12042] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 426.060859][T12042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 426.079556][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.095011][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.103524][T11986] bridge_slave_1: entered allmulticast mode [ 426.115359][T11986] bridge_slave_1: entered promiscuous mode [ 426.160229][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.194409][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.207978][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.315702][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.367924][T11986] team0: Port device team_slave_0 added [ 426.398698][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.477487][T11986] team0: Port device team_slave_1 added [ 426.563943][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.580505][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.648062][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.674403][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.684628][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.711090][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.742805][T12065] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1762'. [ 426.752197][T12065] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 426.759936][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 426.930630][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.943806][ T5140] Bluetooth: hci5: command tx timeout [ 426.981801][T12078] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1765'. [ 427.017309][T11986] hsr_slave_0: entered promiscuous mode [ 427.025609][T11986] hsr_slave_1: entered promiscuous mode [ 427.033819][T11986] debugfs: 'hsr0' already exists in 'hsr' [ 427.043144][T11986] Cannot create hsr debugfs directory [ 427.109934][ T12] bridge_slave_1: left allmulticast mode [ 427.116131][ T12] bridge_slave_1: left promiscuous mode [ 427.122319][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.135808][ T12] bridge_slave_0: left allmulticast mode [ 427.151328][ T12] bridge_slave_0: left promiscuous mode [ 427.157033][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.226740][ T9096] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 427.231309][ T119] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 427.390858][ T9096] usb 2-1: Using ep0 maxpacket: 16 [ 427.398320][ T9096] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.401607][ T119] usb 3-1: Using ep0 maxpacket: 32 [ 427.409410][ T9096] usb 2-1: config 0 has no interfaces? [ 427.414167][ T11] block nbd6: Possible stuck request ffff888026cd8000: control (read@0,1024B). Runtime 210 seconds [ 427.420041][ T9096] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 427.430568][ T11] block nbd6: Possible stuck request ffff888026cd8200: control (read@1024,1024B). Runtime 210 seconds [ 427.439524][ T9096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.453390][ T11] block nbd6: Possible stuck request ffff888026cd8400: control (read@2048,1024B). Runtime 210 seconds [ 427.470388][ T11] block nbd6: Possible stuck request ffff888026cd8600: control (read@3072,1024B). Runtime 210 seconds [ 427.479010][ T9096] usb 2-1: config 0 descriptor?? [ 427.501204][ T119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.512513][ T119] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.521570][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.532955][ T119] usb 3-1: config 0 descriptor?? [ 427.543217][ T119] hub 3-1:0.0: USB hub found [ 427.653957][ T5140] Bluetooth: hci4: command tx timeout [ 427.669260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.680564][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.690746][ T12] bond0 (unregistering): Released all slaves [ 427.728798][ T5140] Bluetooth: Frame is too long (len 71, expected len 47) [ 427.733007][ T5823] usb 2-1: USB disconnect, device number 79 [ 427.736285][ T5140] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 427.750134][ T5140] Bluetooth: Wrong link type (-22) [ 427.756957][ T5140] Bluetooth: Wrong link type (-71) [ 427.762714][ T5140] Bluetooth: hci1: link tx timeout [ 427.768514][ T5140] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 427.778530][ T5140] Bluetooth: hci1: link tx timeout [ 427.784442][ T5140] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 427.810338][ T119] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 427.834872][ T119] usbhid 3-1:0.0: can't add hid device: -71 [ 427.840893][ T119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 427.864057][ T119] usb 3-1: USB disconnect, device number 82 [ 427.908281][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.972743][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.080634][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.261041][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.268277][T12013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.403888][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 428.419974][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.427197][T12013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.451542][ T12] hsr_slave_0: left promiscuous mode [ 428.458284][ T12] hsr_slave_1: left promiscuous mode [ 428.464932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.478090][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.486847][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.496323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.521732][ T12] veth1_macvtap: left promiscuous mode [ 428.527428][ T12] veth0_macvtap: left promiscuous mode [ 428.533157][ T12] veth1_vlan: left promiscuous mode [ 428.540234][ T12] veth0_vlan: left promiscuous mode [ 428.568440][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 428.590236][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 428.601494][ T119] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 428.620648][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.667340][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 428.677845][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 428.697921][ T9] usb 3-1: Product: syz [ 428.712322][ T9] usb 3-1: Manufacturer: syz [ 428.717742][ T9] usb 3-1: SerialNumber: syz [ 428.814257][ T119] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 428.823722][ T119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 428.847151][ T119] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 428.857018][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.865677][ T119] usb 2-1: Product: syz [ 428.869899][ T119] usb 2-1: Manufacturer: syz [ 428.874858][ T119] usb 2-1: SerialNumber: syz [ 428.891727][ T119] usb 2-1: config 0 descriptor?? [ 428.908397][ T119] hub 2-1:0.0: bad descriptor, ignoring hub [ 428.914449][ T119] hub 2-1:0.0: probe with driver hub failed with error -5 [ 428.929870][ T119] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input73 [ 428.949370][ T119] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 428.979494][ T119] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 429.015648][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.023256][ T5140] Bluetooth: hci5: command tx timeout [ 429.029611][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 429.226806][ T5823] usb 2-1: USB disconnect, device number 80 [ 429.673693][ T9] usb 3-1: USB disconnect, device number 83 [ 429.710626][ T9] usblp0: removed [ 429.717737][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 429.738633][ T5140] Bluetooth: hci4: command tx timeout [ 429.796208][T12116] 9pnet_virtio: no channels available for device syz [ 429.816727][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 430.006257][T11962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.020222][T11962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.056928][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.130107][ T12] IPVS: stop unused estimator thread 0... [ 430.272156][T11986] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.297722][T11986] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.329866][T11986] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.351928][T11986] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.498937][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.518573][ T5864] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 430.665261][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.710467][ T5864] usb 3-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config [ 430.734779][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.747394][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.796825][ T5864] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 430.808270][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.809497][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.815510][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.824439][ T5864] usb 3-1: Product: syz [ 430.856245][ T5864] usb 3-1: Manufacturer: syz [ 430.869846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.877013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.879209][ T5864] usb 3-1: SerialNumber: syz [ 430.926807][ T5864] usb 3-1: config 0 descriptor?? [ 431.047833][T11986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.098983][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.107429][ T5140] Bluetooth: hci5: command tx timeout [ 431.176178][ T5864] usb 3-1: USB disconnect, device number 84 [ 431.363670][T11962] veth0_vlan: entered promiscuous mode [ 431.416152][T11962] veth1_vlan: entered promiscuous mode [ 431.544503][T11962] veth0_macvtap: entered promiscuous mode [ 431.606262][T11962] veth1_macvtap: entered promiscuous mode [ 431.679372][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.758239][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.772061][T12172] could not allocate digest TFM handle hmac(sha256-ce) [ 431.817766][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.820741][ T5864] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 431.907432][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 431.948693][ T1113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.967246][ T1113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.980135][ T1113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.991170][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 432.002916][ T5864] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 432.012120][ T1113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.022294][ T5864] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 432.031263][ T5864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 432.040354][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.050655][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.061591][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.076195][ T5864] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 432.110403][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.141067][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 432.168640][ T5864] usb 2-1: config 0 descriptor?? [ 432.323500][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.352068][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.392432][ T5864] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 432.412944][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.420826][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.464752][ T5864] usb 2-1: USB disconnect, device number 81 [ 432.504859][T11986] veth0_vlan: entered promiscuous mode [ 432.505016][ T5864] usblp0: removed [ 432.558611][T11986] veth1_vlan: entered promiscuous mode [ 432.685530][T11986] veth0_macvtap: entered promiscuous mode [ 432.699495][T11986] veth1_macvtap: entered promiscuous mode [ 432.746874][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.770383][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.808306][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.829137][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.840971][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.854865][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.872466][ T5823] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 432.885529][ T5864] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 432.902684][ T5885] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 432.989711][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.008211][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.043883][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 433.052706][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 433.061431][ T5823] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 433.071949][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.083453][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.084280][ T5823] usb 6-1: Product: syz [ 433.100467][ T5823] usb 6-1: Manufacturer: syz [ 433.106234][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.108610][ T5885] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 433.125839][ T5885] usb 3-1: config 0 has no interface number 0 [ 433.142516][ T5885] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.154951][ T5823] usb 6-1: SerialNumber: syz [ 433.162556][ T5885] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 433.175910][ T5823] usb 6-1: config 0 descriptor?? [ 433.183138][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.194299][ T5885] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 433.202788][ T5864] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 433.204107][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 433.220305][ T5885] usb 3-1: Product: syz [ 433.225224][ T5885] usb 3-1: SerialNumber: syz [ 433.241182][ T5885] usb 3-1: config 0 descriptor?? [ 433.276205][ T5885] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input74 [ 433.383703][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 433.392226][ T5823] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.399881][ T5864] usb usb2-port1: attempt power cycle [ 433.483201][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.490566][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.498477][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.506559][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.514279][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.521410][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.528573][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.536311][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.543751][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.550918][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.564995][ T5885] usb 3-1: USB disconnect, device number 85 [ 433.565056][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 433.589397][ T5885] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 433.754433][ T5864] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 433.798995][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 433.939295][ T5864] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 433.965095][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 433.970972][ T5864] usb usb2-port1: unable to enumerate USB device [ 434.108859][T12253] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 434.190808][T12256] netlink: 'syz.2.1779': attribute type 3 has an invalid length. [ 434.225000][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 434.876647][ T29] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 434.939074][ T5823] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 434.972725][ T5823] usb 6-1: USB disconnect, device number 24 [ 435.039624][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.064204][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.087760][ T29] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.099145][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.112316][ T29] usb 2-1: SerialNumber: syz [ 435.267031][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.317083][ T5864] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 435.341217][T12273] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1782'. [ 435.378177][ T29] usb 2-1: invalid UAC_HEADER (v1) [ 435.432520][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 435.446685][ T29] usb 2-1: USB disconnect, device number 86 [ 435.476233][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.481493][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 435.525462][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.538708][ T5864] usb 3-1: config 0 has no interfaces? [ 435.544219][ T5864] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 435.566445][T12298] Invalid logical block size (2097152) [ 435.574452][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.596354][ T5864] usb 3-1: config 0 descriptor?? [ 435.651237][T12303] fuse: Unknown parameter 'gGuptid' [ 435.821617][ T5864] usb 3-1: USB disconnect, device number 86 [ 435.970422][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 436.192358][ T29] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 436.228870][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 436.308898][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.360347][ T24] usb 2-1: device descriptor read/64, error -71 [ 436.379666][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 436.400186][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 436.429386][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.444996][ T29] usb 6-1: Product: syz [ 436.455067][ T29] usb 6-1: Manufacturer: syz [ 436.465239][ T29] usb 6-1: SerialNumber: syz [ 436.507381][ T29] usb 6-1: config 0 descriptor?? [ 436.530877][T12340] FAULT_INJECTION: forcing a failure. [ 436.530877][T12340] name failslab, interval 1, probability 0, space 0, times 0 [ 436.563978][T12340] CPU: 1 UID: 0 PID: 12340 Comm: syz.7.1789 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.564008][T12340] Tainted: [L]=SOFTLOCKUP [ 436.564016][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 436.564026][T12340] Call Trace: [ 436.564034][T12340] [ 436.564042][T12340] dump_stack_lvl+0xe8/0x150 [ 436.564074][T12340] should_fail_ex+0x412/0x560 [ 436.564102][T12340] should_failslab+0xa8/0x100 [ 436.564123][T12340] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 436.564147][T12340] kmem_cache_alloc_noprof+0x87/0x650 [ 436.564166][T12340] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 436.564184][T12340] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 436.564207][T12340] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 436.564233][T12340] mmu_topup_memory_caches+0x21/0x170 [ 436.564254][T12340] kvm_mmu_load+0x9d/0x22d0 [ 436.564272][T12340] ? kvm_msr_allowed+0x3f4/0x490 [ 436.564285][T12340] ? kvm_msr_allowed+0x9a/0x490 [ 436.564302][T12340] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 436.564316][T12340] ? kvm_apic_has_interrupt+0x73c/0x770 [ 436.564338][T12340] vcpu_run+0x5faf/0x7b90 [ 436.564353][T12340] ? trace_ipi_send_cpu+0x7e/0x220 [ 436.564420][T12340] ? __pfx_vcpu_run+0x10/0x10 [ 436.564433][T12340] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 436.564456][T12340] ? __srcu_check_read_flavor+0x10b/0x250 [ 436.564476][T12340] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 436.564502][T12340] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 436.564517][T12340] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 436.564531][T12340] ? register_lock_class+0x31/0x2e0 [ 436.564551][T12340] ? __lock_acquire+0x6b5/0x2cf0 [ 436.564573][T12340] ? kasan_quarantine_put+0xbb/0x1f0 [ 436.564595][T12340] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 436.564614][T12340] ? do_raw_write_lock+0x11d/0x260 [ 436.564639][T12340] kvm_vcpu_ioctl+0xa62/0xfd0 [ 436.564656][T12340] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 436.564668][T12340] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 436.564702][T12340] ? __fget_files+0x2a/0x420 [ 436.564721][T12340] ? __fget_files+0x2a/0x420 [ 436.564737][T12340] ? __fget_files+0x3a0/0x420 [ 436.564754][T12340] ? __fget_files+0x2a/0x420 [ 436.564773][T12340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.564789][T12340] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 436.564802][T12340] __se_sys_ioctl+0xfc/0x170 [ 436.564819][T12340] do_syscall_64+0x14d/0xf80 [ 436.564842][T12340] ? trace_irq_disable+0x3b/0x150 [ 436.564859][T12340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.564873][T12340] ? clear_bhb_loop+0x40/0x90 [ 436.564889][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.564903][T12340] RIP: 0033:0x7f37a859aeb9 [ 436.564917][T12340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.564928][T12340] RSP: 002b:00007f37a9460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.564944][T12340] RAX: ffffffffffffffda RBX: 00007f37a8816090 RCX: 00007f37a859aeb9 [ 436.564954][T12340] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 436.564962][T12340] RBP: 00007f37a9460090 R08: 0000000000000000 R09: 0000000000000000 [ 436.564971][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.564979][T12340] R13: 00007f37a8816128 R14: 00007f37a8816090 R15: 00007ffe248e76d8 [ 436.565001][T12340] [ 436.904218][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 436.915513][ T29] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.960088][ T5864] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 437.040353][ T24] usb 2-1: device descriptor read/64, error -71 [ 437.119453][ T5864] usb 3-1: config 33 has too many interfaces: 255, using maximum allowed: 32 [ 437.139313][ T5864] usb 3-1: config 33 has an invalid descriptor of length 136, skipping remainder of the config [ 437.150825][ T24] usb usb2-port1: attempt power cycle [ 437.170734][ T5864] usb 3-1: config 33 has 0 interfaces, different from the descriptor's value: 255 [ 437.187545][ T5864] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 437.247173][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.282236][ T5864] usb 3-1: Product: syz [ 437.297470][ T5864] usb 3-1: Manufacturer: syz [ 437.308483][ T5864] usb 3-1: SerialNumber: syz [ 437.350829][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.491154][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 437.522617][ T24] usb 2-1: device descriptor read/8, error -71 [ 437.532892][ T5864] usb 3-1: USB disconnect, device number 87 [ 437.565491][ T29] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.586864][ T29] usb 6-1: USB disconnect, device number 25 [ 437.771608][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 437.795544][ T24] usb 2-1: device descriptor read/8, error -71 [ 437.912205][ T24] usb usb2-port1: unable to enumerate USB device [ 438.278717][T12388] trusted_key: encrypted_key: master key parameter '' is invalid [ 438.392748][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 438.700884][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1801'. [ 439.001110][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 439.434620][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.597849][ T5909] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 439.755477][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 439.780180][ T5909] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 439.799605][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 439.818148][ T5909] usb 3-1: Product: syz [ 439.822347][ T5909] usb 3-1: Manufacturer: syz [ 439.836473][ T5909] usb 3-1: SerialNumber: syz [ 439.861802][ T5909] usb 3-1: config 0 descriptor?? [ 439.885190][ T5909] gspca_main: sq905-2.14.0 probing 2770:9120 [ 439.949131][ T30] audit: type=1326 audit(1207.599:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.5.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb95079aeb9 code=0x0 [ 440.245285][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.251718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.282487][T12470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 440.396435][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.476505][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 440.909221][ T29] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 440.910500][ T5909] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 440.943174][ T5909] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 440.966560][ T5909] usb 3-1: USB disconnect, device number 88 [ 441.087595][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 441.113968][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.145837][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.175835][ T29] usb 2-1: Product: syz [ 441.182044][ T29] usb 2-1: Manufacturer: syz [ 441.186675][ T29] usb 2-1: SerialNumber: syz [ 441.243060][ T29] usb 2-1: config 0 descriptor?? [ 441.475752][ T29] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 441.518932][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.553230][T12515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 441.979205][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 442.131355][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.142500][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 442.157603][ T24] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 442.174077][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.184306][ T24] usb 3-1: config 0 descriptor?? [ 442.560176][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.597020][ T24] waterforce 0003:1044:7A4D.002E: item fetching failed at offset 0/1 [ 442.607403][ T24] waterforce 0003:1044:7A4D.002E: hid parse failed with -22 [ 442.619351][ T24] waterforce 0003:1044:7A4D.002E: probe with driver waterforce failed with error -22 [ 442.798621][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.824303][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.834946][ T5909] usb 3-1: USB disconnect, device number 89 [ 443.399499][T12538] binder_alloc: 12537: pid 12537 spamming oneway? 1 buffers allocated for a total size of 4096 [ 443.410869][T12538] binder_alloc: 12537: binder_alloc_buf size -888 failed, no address space [ 443.419614][T12538] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 443.592279][ T5885] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 443.601972][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 443.752207][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 443.760465][ T5885] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 443.768860][ T5885] usb 6-1: config 179 has no interface number 0 [ 443.776514][ T5885] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 443.788004][ T5885] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 443.799682][ T5885] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.812984][ T5885] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 443.824147][ T5885] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 443.837771][ T5885] usb 6-1: config 179 interface 65 has no altsetting 0 [ 443.845403][ T29] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 443.855382][ T5885] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 443.870097][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.882516][ T5909] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 443.900900][ T5885] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input75 [ 443.975610][ T5885] usb 2-1: USB disconnect, device number 91 [ 444.076535][ T5909] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 444.089995][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.104248][ T9096] usb 6-1: USB disconnect, device number 26 [ 444.115322][ T5909] usb 3-1: config 0 descriptor?? [ 444.142311][ T5909] pwc: Philips SPC 900NC USB webcam detected. [ 444.337830][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.355667][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.369447][ T5909] pwc: Failed to set LED on/off time (-71) [ 444.380864][ T5909] pwc: send_video_command error -71 [ 444.388763][ T5909] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 444.400891][ T5909] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 444.423383][ T5909] usb 3-1: USB disconnect, device number 90 [ 444.643752][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 444.660274][T12563] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1835'. [ 444.968719][T12574] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.152657][T12584] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 445.380798][ T25] block nbd8: Possible stuck request ffff888026dc0000: control (read@0,1024B). Runtime 90 seconds [ 445.391720][ T25] block nbd8: Possible stuck request ffff888026dc0200: control (read@1024,1024B). Runtime 90 seconds [ 445.403953][ T25] block nbd8: Possible stuck request ffff888026dc0400: control (read@2048,1024B). Runtime 90 seconds [ 445.415071][ T25] block nbd8: Possible stuck request ffff888026dc0600: control (read@3072,1024B). Runtime 90 seconds [ 445.456873][ T5909] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 445.515250][ T5864] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 445.621416][ T5909] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.650886][ T5909] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.675485][ T5909] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.688393][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 445.697292][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 445.720864][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.731439][ T5909] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 445.741622][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.752622][ T5909] usb 3-1: config 0 descriptor?? [ 445.846130][ T5864] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 446.017994][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 446.024125][ T5864] usb usb2-port1: attempt power cycle [ 446.188256][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 446.204942][ T5909] a4tech 0003:09DA:001A.002F: unknown main item tag 0x0 [ 446.218372][ T5909] a4tech 0003:09DA:001A.002F: unknown main item tag 0x0 [ 446.237305][ T5909] a4tech 0003:09DA:001A.002F: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.2-1/input0 [ 446.366755][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 446.373529][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.383803][ T5864] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 446.391472][ T9] usb 6-1: config 0 has no interfaces? [ 446.397102][ T9] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 446.414979][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.425847][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.427216][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.438106][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 446.462989][ T9] usb 6-1: config 0 descriptor?? [ 446.480943][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.491365][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.514612][ T119] usb 3-1: USB disconnect, device number 91 [ 446.607381][ T5864] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 446.632936][ T5864] usb 2-1: Invalid ep0 maxpacket: 32 [ 446.639127][ T5864] usb usb2-port1: unable to enumerate USB device [ 446.676566][ T51] Bluetooth: Frame is too long (len 71, expected len 47) [ 446.677483][ T9096] usb 6-1: USB disconnect, device number 27 [ 446.685497][ T51] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 446.696603][ T51] Bluetooth: Wrong link type (-22) [ 446.703696][ T51] Bluetooth: Wrong link type (-71) [ 446.727293][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.348609][ T5885] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 447.498597][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 447.498644][ T119] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 447.506490][ T5885] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 447.522844][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.533678][ T5885] usb 3-1: config 0 has no interface number 0 [ 447.540398][ T5885] usb 3-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 447.555433][ T5885] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 447.564545][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.570928][T12636] netlink: 763 bytes leftover after parsing attributes in process `syz.7.1855'. [ 447.575813][ T5885] usb 3-1: config 0 descriptor?? [ 447.593042][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.661767][ T119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.676975][ T119] usb 6-1: not running at top speed; connect to a high speed hub [ 447.690483][ T119] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.709670][ T119] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.728392][ T119] usb 6-1: string descriptor 0 read error: -22 [ 447.730948][ T5885] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 447.736061][ T119] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.775286][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.783432][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.805890][ T119] usb 6-1: 0:2 : does not exist [ 447.826300][T12622] usb usb8: usbfs: process 12622 (syz.2.1852) did not claim interface 0 before use [ 447.838206][ T5885] usb 3-1: USB disconnect, device number 92 [ 447.844429][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1856'. [ 448.048836][T12646] syz_tun: entered allmulticast mode [ 448.067892][T12646] syz_tun: left allmulticast mode [ 448.504590][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1863'. [ 448.513896][T12660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1863'. [ 448.523195][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1863'. [ 448.533386][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1863'. [ 448.628720][ T119] usb 6-1: 5:0: bogus dB values (-9883/-9610), disabling dB reporting [ 448.643523][ T119] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 448.657711][ T119] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 448.670333][ T119] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 448.707076][ T119] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 448.736432][ T119] usb 6-1: USB disconnect, device number 28 [ 448.810695][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 449.160621][T12662] binder_alloc: 12661: binder_alloc_buf, no vma [ 449.323166][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'. [ 449.546938][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.558770][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.568247][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.577198][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.586194][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.595311][T12679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.622043][ T5885] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 449.798995][ T5885] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 449.808393][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 449.818848][ T5885] usb 2-1: Product: syz [ 449.823952][ T5885] usb 2-1: Manufacturer: syz [ 449.828566][ T5885] usb 2-1: SerialNumber: syz [ 449.837897][ T5885] usb 2-1: config 0 descriptor?? [ 449.847126][ T5885] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 449.852532][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 449.856388][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 449.879103][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.889921][ T5885] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 449.899986][ T5885] usb 2-1: media controller created [ 449.966031][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.046926][T12672] cxusb: i2c wr: len=79 is too big! [ 450.046926][T12672] [ 450.168317][ T3578] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.295178][ T3578] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.435068][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.445395][ T3578] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.457089][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.468339][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.477883][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.486009][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.605053][ T3578] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.678275][T12692] hsr0 speed is unknown, defaulting to 1000 [ 450.708138][ T5885] cxusb: set interface failed [ 450.724582][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 450.800190][ T5885] DVB: Unable to find symbol mt352_attach() [ 450.807101][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 450.827060][ T5885] zl10353_read_register: readreg error (reg=127, ret==-121) [ 450.874605][ T5885] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 450.894053][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 450.985742][ T5885] rc_core: IR keymap rc-dvico-mce not found [ 451.001288][ T5885] Registered IR keymap rc-empty [ 451.017432][ T5885] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 451.030881][ T3578] bridge_slave_1: left allmulticast mode [ 451.038461][ T3578] bridge_slave_1: left promiscuous mode [ 451.045646][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.054836][ T5885] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input76 [ 451.067025][ T3578] bridge_slave_0: left allmulticast mode [ 451.069459][ T5885] dvb-usb: schedule remote query interval to 100 msecs. [ 451.072690][ T3578] bridge_slave_0: left promiscuous mode [ 451.085832][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 451.088802][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.154372][ T5885] usb 2-1: USB disconnect, device number 96 [ 451.343369][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1880'. [ 451.362620][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 451.935780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 451.977149][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.989049][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.999117][ T3578] bond0 (unregistering): Released all slaves [ 452.286683][T12692] chnl_net:caif_netlink_parms(): no params data found [ 452.482763][T12743] usb usb7: usbfs: process 12743 (syz.1.1888) did not claim interface 0 before use [ 452.493519][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 452.573103][ T3578] hsr_slave_0: left promiscuous mode [ 452.582752][ T51] Bluetooth: hci0: command tx timeout [ 452.593349][ T3578] hsr_slave_1: left promiscuous mode [ 452.602699][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.611053][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.619797][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.629504][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.654988][ T3578] veth1_macvtap: left promiscuous mode [ 452.661202][ T3578] veth0_macvtap: left promiscuous mode [ 452.668343][ T3578] veth1_vlan: left promiscuous mode [ 452.673664][ T3578] veth0_vlan: left promiscuous mode [ 452.977990][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 453.174869][ T3578] team0 (unregistering): Port device team_slave_1 removed [ 453.216678][ T3578] team0 (unregistering): Port device team_slave_0 removed [ 453.622298][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.641858][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.658954][T12692] bridge_slave_0: entered allmulticast mode [ 453.667082][T12692] bridge_slave_0: entered promiscuous mode [ 453.684608][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.695253][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.714865][T12692] bridge_slave_1: entered allmulticast mode [ 453.724150][T12692] bridge_slave_1: entered promiscuous mode [ 453.841652][T12692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.868291][T12692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.935198][T12692] team0: Port device team_slave_0 added [ 453.964418][T12692] team0: Port device team_slave_1 added [ 454.011418][T12692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.019412][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 454.028269][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.056893][T12692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.084239][T12692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.092231][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.120333][T12692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.204137][T12692] hsr_slave_0: entered promiscuous mode [ 454.212584][T12692] hsr_slave_1: entered promiscuous mode [ 454.222145][T12692] debugfs: 'hsr0' already exists in 'hsr' [ 454.227977][T12692] Cannot create hsr debugfs directory [ 454.455021][T12692] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.586132][T12692] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.660609][ T51] Bluetooth: hci0: command tx timeout [ 454.726137][T12692] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.867289][T12692] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.060584][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 455.065990][T12692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.100185][T12692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 455.125063][T12692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 455.150474][T12692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 455.216408][T12805] XFS (nullb0): Invalid superblock magic number [ 455.262436][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1892'. [ 455.378460][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.418057][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.436129][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.443313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.465804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.473040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.542213][ T5864] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 455.717633][ T5864] usb 2-1: config 0 has no interfaces? [ 455.736766][ T5864] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 455.768524][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 455.791461][ T5864] usb 2-1: SerialNumber: syz [ 455.799748][T12692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.810286][ T5864] usb 2-1: config 0 descriptor?? [ 456.028982][ T5864] usb 2-1: USB disconnect, device number 97 [ 456.102296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.199390][T12692] veth0_vlan: entered promiscuous mode [ 456.220598][T12692] veth1_vlan: entered promiscuous mode [ 456.284566][T12692] veth0_macvtap: entered promiscuous mode [ 456.298646][T12692] veth1_macvtap: entered promiscuous mode [ 456.340502][T12692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.363484][T12692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.388150][ T63] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.410985][ T63] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.439622][ T63] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.458823][ T63] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.533977][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.545657][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.621769][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.634854][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.743925][ T51] Bluetooth: hci0: command tx timeout [ 456.836791][T12870] netlink: 'syz.6.1895': attribute type 2 has an invalid length. [ 456.846247][T12870] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1895'. [ 457.143824][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 457.556035][ T11] block nbd6: Possible stuck request ffff888026cd8000: control (read@0,1024B). Runtime 240 seconds [ 457.566867][ T11] block nbd6: Possible stuck request ffff888026cd8200: control (read@1024,1024B). Runtime 240 seconds [ 457.580824][ T11] block nbd6: Possible stuck request ffff888026cd8400: control (read@2048,1024B). Runtime 240 seconds [ 457.592668][ T11] block nbd6: Possible stuck request ffff888026cd8600: control (read@3072,1024B). Runtime 240 seconds [ 458.185562][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 458.245535][ T5864] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 458.397198][ T5864] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.409554][ T5864] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.419886][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.428928][ T5864] usb 7-1: SerialNumber: syz [ 458.445940][ T5864] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 458.674552][ T5864] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 458.685815][ T5864] usb 7-1: USB disconnect, device number 52 [ 458.827651][ T51] Bluetooth: hci0: command tx timeout [ 459.226887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 459.437264][ T29] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 459.589540][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 459.599763][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 459.608641][ T29] usb 7-1: config 2 has an invalid interface number: 212 but max is 1 [ 459.616920][ T29] usb 7-1: config 2 has an invalid interface number: 226 but max is 1 [ 459.625241][ T29] usb 7-1: config 2 has no interface number 0 [ 459.631862][ T29] usb 7-1: config 2 has no interface number 1 [ 459.638254][ T29] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 459.649764][ T29] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 459.661959][ T29] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 459.673309][ T29] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 459.683203][ T29] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.696456][ T29] usb 7-1: config 2 interface 212 has no altsetting 0 [ 459.705170][ T29] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 459.714303][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.722327][ T29] usb 7-1: Product: syz [ 459.726471][ T29] usb 7-1: Manufacturer: syz [ 459.731105][ T29] usb 7-1: SerialNumber: syz [ 459.954175][ T29] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input77 [ 459.973568][ T29] usb 7-1: USB disconnect, device number 53 [ 460.268383][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 460.472310][T12939] openvswitch: netlink: IP tunnel dst address not specified [ 460.719261][ T5878] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 460.870927][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 460.882871][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 460.895067][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 460.909027][ T5878] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 460.918791][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.926952][ T5878] usb 7-1: Product: syz [ 460.931227][ T5878] usb 7-1: Manufacturer: syz [ 460.935801][ T5878] usb 7-1: SerialNumber: syz [ 460.942489][ T5878] usb 7-1: config 0 descriptor?? [ 461.309946][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.351421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.256276][T12966] FAULT_INJECTION: forcing a failure. [ 463.256276][T12966] name failslab, interval 1, probability 0, space 0, times 0 [ 463.272049][T12966] CPU: 1 UID: 0 PID: 12966 Comm: syz.6.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.272068][T12966] Tainted: [L]=SOFTLOCKUP [ 463.272072][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 463.272079][T12966] Call Trace: [ 463.272084][T12966] [ 463.272089][T12966] dump_stack_lvl+0xe8/0x150 [ 463.272108][T12966] should_fail_ex+0x412/0x560 [ 463.272123][T12966] ? __d_alloc+0x37/0x6f0 [ 463.272139][T12966] should_failslab+0xa8/0x100 [ 463.272155][T12966] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 463.272176][T12966] __d_alloc+0x37/0x6f0 [ 463.272196][T12966] d_alloc+0x4b/0x190 [ 463.272209][T12966] ? lookup_one_qstr_excl+0xc8/0x360 [ 463.272225][T12966] lookup_one_qstr_excl+0xdc/0x360 [ 463.272241][T12966] __start_renaming+0x1db/0x410 [ 463.272256][T12966] ovl_rename+0xb64/0x1610 [ 463.272277][T12966] ? __pfx_ovl_rename+0x10/0x10 [ 463.272299][T12966] ? down_write_nested+0x174/0x210 [ 463.272309][T12966] ? __pfx_down_write_nested+0x10/0x10 [ 463.272322][T12966] ? try_break_deleg+0x5b/0x180 [ 463.272331][T12966] ? __pfx_ovl_rename+0x10/0x10 [ 463.272343][T12966] vfs_rename+0xa96/0xeb0 [ 463.272363][T12966] ? __pfx_vfs_rename+0x10/0x10 [ 463.272373][T12966] ? do_raw_spin_unlock+0xf5/0x210 [ 463.272388][T12966] ? bpf_lsm_path_rename+0x9/0x20 [ 463.272397][T12966] ? security_path_rename+0x17d/0x460 [ 463.272416][T12966] filename_renameat2+0x539/0x9c0 [ 463.272436][T12966] ? __pfx_filename_renameat2+0x10/0x10 [ 463.272458][T12966] ? do_getname+0x151/0x250 [ 463.272472][T12966] __se_sys_rename+0x55/0x2c0 [ 463.272486][T12966] do_syscall_64+0x14d/0xf80 [ 463.272500][T12966] ? trace_irq_disable+0x3b/0x150 [ 463.272513][T12966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.272524][T12966] ? clear_bhb_loop+0x40/0x90 [ 463.272537][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.272547][T12966] RIP: 0033:0x7ff89039aeb9 [ 463.272558][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.272567][T12966] RSP: 002b:00007ff89122c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 463.272580][T12966] RAX: ffffffffffffffda RBX: 00007ff890615fa0 RCX: 00007ff89039aeb9 [ 463.272592][T12966] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 463.272603][T12966] RBP: 00007ff89122c090 R08: 0000000000000000 R09: 0000000000000000 [ 463.272612][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.272621][T12966] R13: 00007ff890616038 R14: 00007ff890615fa0 R15: 00007fff881390f8 [ 463.272650][T12966] [ 463.392877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.572469][T12969] bad cache= option: none[()bvتr [ 463.572469][T12969] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 463.572469][T12969] [ 463.594043][T12969] CIFS: VFS: bad cache= option: none[()bvتr [ 463.594043][T12969] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 463.614670][T12969] CIFS mount error: No usable UNC path provided in device string! [ 463.614670][T12969] [ 463.625608][T12969] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 464.434299][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 465.475777][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 465.674585][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.685246][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.694741][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.707537][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.715500][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.781213][T12975] hsr0 speed is unknown, defaulting to 1000 [ 465.992719][T12975] chnl_net:caif_netlink_parms(): no params data found [ 466.095619][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.103713][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.111418][T12975] bridge_slave_0: entered allmulticast mode [ 466.121673][T12975] bridge_slave_0: entered promiscuous mode [ 466.131617][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.139246][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.146544][T12975] bridge_slave_1: entered allmulticast mode [ 466.154534][T12975] bridge_slave_1: entered promiscuous mode [ 466.194188][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.210432][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.259695][T12975] team0: Port device team_slave_0 added [ 466.269649][T12975] team0: Port device team_slave_1 added [ 466.306382][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.314428][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.341843][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.355889][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.363326][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.389714][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.450834][T12975] hsr_slave_0: entered promiscuous mode [ 466.458154][T12975] hsr_slave_1: entered promiscuous mode [ 466.468680][T12975] debugfs: 'hsr0' already exists in 'hsr' [ 466.474426][T12975] Cannot create hsr debugfs directory [ 466.517343][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 466.711144][T12975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.799347][T12975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.914858][T12975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.985850][T12975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.162891][T12975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.174773][T12975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.187091][T12975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.199500][T12975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.314915][T12975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.344489][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.362310][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.369484][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.388708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.395852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.558576][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 467.801718][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.810061][ T5140] Bluetooth: hci3: command tx timeout [ 467.818420][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.829543][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.842195][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.861864][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.866437][T12975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.042799][T13000] hsr0 speed is unknown, defaulting to 1000 [ 468.077091][T12975] veth0_vlan: entered promiscuous mode [ 468.193303][T12975] veth1_vlan: entered promiscuous mode [ 468.256709][T13005] binder: 13004:13005 ioctl c0306201 2000000003c0 returned -14 [ 468.378816][T12975] veth0_macvtap: entered promiscuous mode [ 468.466745][T12975] veth1_macvtap: entered promiscuous mode [ 468.566782][T12975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.599986][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 468.670745][T12975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.682050][T13000] chnl_net:caif_netlink_parms(): no params data found [ 468.808607][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.850698][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.895853][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.907654][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.997026][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.005709][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.014929][T13000] bridge_slave_0: entered allmulticast mode [ 469.026499][T13000] bridge_slave_0: entered promiscuous mode [ 469.038166][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.046842][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.054828][T13000] bridge_slave_1: entered allmulticast mode [ 469.065662][T13000] bridge_slave_1: entered promiscuous mode [ 469.198434][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.229931][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.346992][T13000] team0: Port device team_slave_0 added [ 469.358934][T13000] team0: Port device team_slave_1 added [ 469.366065][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.387910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.447582][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.454662][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.481550][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.498356][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.508941][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.541321][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.641385][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 469.686511][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.702417][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.707231][T13000] hsr_slave_0: entered promiscuous mode [ 469.718781][T13000] hsr_slave_1: entered promiscuous mode [ 469.731223][T13000] debugfs: 'hsr0' already exists in 'hsr' [ 469.738699][T13000] Cannot create hsr debugfs directory [ 469.885415][ T5140] Bluetooth: hci3: command tx timeout [ 469.959478][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 469.972332][ T5140] Bluetooth: hci2: command tx timeout [ 470.174014][T13049] bad cache= option: none[()bvتr [ 470.174014][T13049] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 470.174014][T13049] [ 470.239551][T13049] CIFS: VFS: bad cache= option: none[()bvتr [ 470.239551][T13049] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 470.277997][T13049] CIFS mount error: No usable UNC path provided in device string! [ 470.277997][T13049] [ 470.296734][T13049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 470.553182][ T5864] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 470.683867][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 470.733792][ T5864] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 470.741997][ T5864] usb 4-1: config 0 has no interface number 0 [ 470.764633][ T5864] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 470.783355][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.806712][ T5864] usb 4-1: config 0 descriptor?? [ 470.829801][ T5864] usb-storage 4-1:0.166: USB Mass Storage device detected [ 470.867976][T13000] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.887165][T13000] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 470.910904][T13000] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.928161][T13000] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.069698][ T5871] usb 4-1: USB disconnect, device number 97 [ 471.147085][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.189647][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.210966][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.218171][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.249956][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.257133][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.659241][ T5878] iguanair 7-1:0.0: failed to get version [ 471.684437][ T5878] iguanair 7-1:0.0: probe with driver iguanair failed with error -110 [ 471.724347][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 471.736842][ T5878] usb 7-1: USB disconnect, device number 54 [ 471.768742][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.964501][ T5140] Bluetooth: hci3: command tx timeout [ 471.974877][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 472.045210][ T5140] Bluetooth: hci2: command tx timeout [ 472.098599][ T5878] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 472.111301][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.125439][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.143782][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.155525][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 472.161294][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.171091][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.200860][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.222053][ T9] usb 4-1: config 0 has no interfaces? [ 472.227645][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 472.237255][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.254927][ T5878] usb 7-1: device descriptor read/64, error -71 [ 472.278474][ T9] usb 4-1: config 0 descriptor?? [ 472.313777][T13103] hsr0 speed is unknown, defaulting to 1000 [ 472.493020][ T51] Bluetooth: Frame is too long (len 71, expected len 47) [ 472.508857][ T51] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 472.515125][ T5878] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 472.517116][ T51] Bluetooth: Wrong link type (-22) [ 472.530102][ T51] Bluetooth: Wrong link type (-71) [ 472.537162][ T5885] usb 4-1: USB disconnect, device number 98 [ 472.665874][ T5878] usb 7-1: device descriptor read/64, error -71 [ 472.742661][T13000] veth0_vlan: entered promiscuous mode [ 472.765456][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 472.785784][ T5878] usb usb7-port1: attempt power cycle [ 472.844014][T13000] veth1_vlan: entered promiscuous mode [ 473.012620][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.064798][T13103] chnl_net:caif_netlink_parms(): no params data found [ 473.084321][ T5878] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 473.185083][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.237901][ T5878] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 473.271727][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 473.296769][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short [ 473.315541][ T5878] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.324546][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.339439][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.354515][ T5878] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.376187][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.386193][ T5878] usb 7-1: Product: syz [ 473.390382][ T5878] usb 7-1: Manufacturer: syz [ 473.429133][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.452856][ T5878] usb 7-1: SerialNumber: syz [ 473.560341][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.589901][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.603938][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.611645][T13103] bridge_slave_0: entered allmulticast mode [ 473.621723][T13103] bridge_slave_0: entered promiscuous mode [ 473.634484][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.642365][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.652353][T13103] bridge_slave_1: entered allmulticast mode [ 473.661763][T13103] bridge_slave_1: entered promiscuous mode [ 473.710533][ T5878] usb 7-1: 0:2 : does not exist [ 473.716850][T13000] veth0_macvtap: entered promiscuous mode [ 473.781567][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.786778][ T5878] usb 7-1: USB disconnect, device number 58 [ 473.806779][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 473.821668][T13000] veth1_macvtap: entered promiscuous mode [ 473.834230][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.859169][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.048730][ T51] Bluetooth: hci3: command tx timeout [ 474.095408][T13103] team0: Port device team_slave_0 added [ 474.105370][ T12] bridge_slave_1: left allmulticast mode [ 474.116255][ T12] bridge_slave_1: left promiscuous mode [ 474.122382][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.131217][ T51] Bluetooth: hci2: command tx timeout [ 474.140030][ T12] bridge_slave_0: left allmulticast mode [ 474.145697][ T12] bridge_slave_0: left promiscuous mode [ 474.152261][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.217631][ T51] Bluetooth: hci4: command tx timeout [ 474.227304][ T5878] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 474.396543][ T5878] usb 7-1: config index 0 descriptor too short (expected 149, got 27) [ 474.404977][ T5878] usb 7-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 474.416271][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.433176][ T5878] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 474.445353][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.455406][ T5885] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 474.463224][ T5878] usb 7-1: Product: syz [ 474.469205][ T5878] usb 7-1: Manufacturer: syz [ 474.473864][ T5878] usb 7-1: SerialNumber: syz [ 474.561090][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.572717][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.583888][ T12] bond0 (unregistering): Released all slaves [ 474.599791][T13103] team0: Port device team_slave_1 added [ 474.629816][ T5885] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 474.633303][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.674796][ T5885] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 474.695042][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.703716][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.749756][ T5885] usb 4-1: Product: syz [ 474.753952][ T5885] usb 4-1: Manufacturer: syz [ 474.780801][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.787778][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.798135][ T5885] usb 4-1: SerialNumber: syz [ 474.825207][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.858177][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 474.885218][ T1088] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.888145][ T5878] usb 7-1: USB disconnect, device number 59 [ 474.900190][ T1088] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.909614][ T5885] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 474.973739][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.984238][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.016745][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.030684][ T1088] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.043962][ T1088] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.289764][ T5885] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 475.327224][T13103] hsr_slave_0: entered promiscuous mode [ 475.342602][T13103] hsr_slave_1: entered promiscuous mode [ 475.351296][T13103] debugfs: 'hsr0' already exists in 'hsr' [ 475.357058][T13103] Cannot create hsr debugfs directory [ 475.403842][ T12] hsr_slave_0: left promiscuous mode [ 475.423482][ T12] hsr_slave_1: left promiscuous mode [ 475.439159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.450342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.459222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.466920][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.490386][ T5864] IPVS: starting estimator thread 0... [ 475.499899][ T25] block nbd8: Possible stuck request ffff888026dc0000: control (read@0,1024B). Runtime 120 seconds [ 475.510927][ T25] block nbd8: Possible stuck request ffff888026dc0200: control (read@1024,1024B). Runtime 120 seconds [ 475.523761][ T25] block nbd8: Possible stuck request ffff888026dc0400: control (read@2048,1024B). Runtime 120 seconds [ 475.535344][ T25] block nbd8: Possible stuck request ffff888026dc0600: control (read@3072,1024B). Runtime 120 seconds [ 475.553750][ T12] veth1_macvtap: left promiscuous mode [ 475.559432][ T12] veth0_macvtap: left promiscuous mode [ 475.565037][ T12] veth1_vlan: left promiscuous mode [ 475.579375][T13178] IPVS: using max 34 ests per chain, 81600 per kthread [ 475.890014][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 476.133327][ T31] INFO: task poweroff:8967 blocked for more than 204 seconds. [ 476.141577][ T31] Tainted: G L syzkaller #0 [ 476.148410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.159685][ T31] task:poweroff state:D stack:23328 pid:8967 tgid:8967 ppid:5175 task_flags:0x400000 flags:0x00080800 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.187991][ T31] Call Trace: [ 476.193077][ T31] [ 476.196037][ T31] __schedule+0x1585/0x5310 [ 476.201167][ T31] ? do_writepages+0x4b9/0x550 [ 476.206076][ T31] ? __pfx___schedule+0x10/0x10 [ 476.211596][ T31] ? schedule+0x90/0x360 [ 476.215868][ T31] schedule+0x164/0x360 [ 476.219947][ T51] Bluetooth: hci2: command tx timeout [ 476.230383][ T31] schedule_preempt_disabled+0x13/0x30 [ 476.246068][ T31] __mutex_lock+0x7fe/0x1300 [ 476.269040][ T31] ? __mutex_lock+0x5ac/0x1300 [ 476.290828][ T51] Bluetooth: hci4: command tx timeout [ 476.318087][ T31] ? sync_bdevs+0x27e/0x470 [ 476.323054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 476.328120][ T31] ? iput+0x47f/0xe80 [ 476.332722][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 476.337865][ T31] sync_bdevs+0x27e/0x470 [ 476.343048][ T31] __ia32_sys_sync+0xc5/0x120 [ 476.347752][ T31] ? __pfx___ia32_sys_sync+0x10/0x10 [ 476.353732][ T31] ? do_syscall_64+0xa3/0xf80 [ 476.359693][ T31] do_syscall_64+0x14d/0xf80 [ 476.364675][ T31] ? trace_irq_disable+0x3b/0x150 [ 476.371040][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.377135][ T31] ? clear_bhb_loop+0x40/0x90 [ 476.382102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.388009][ T31] RIP: 0033:0x7f51f5de6f37 [ 476.392787][ T31] RSP: 002b:00007ffd6f7f81d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 476.401668][ T31] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f51f5de6f37 [ 476.409660][ T31] RDX: ffffffffffffff88 RSI: 00007f51f5f7fe51 RDI: 00000000ffffff9c [ 476.418970][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.427977][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.436224][ T31] R13: 00007ffd6f7f8338 R14: 00007f51f5fc9000 R15: 000055b8962c3d98 [ 476.444496][ T31] [ 476.447668][ T31] [ 476.447668][ T31] Showing all locks held in the system: [ 476.456836][ T31] 8 locks held by kworker/u8:0/12: [ 476.464727][ T31] 1 lock held by khungtaskd/31: [ 476.469601][ T31] #0: ffffffff8e960320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 476.510512][ T31] 3 locks held by kworker/u8:2/36: [ 476.515661][ T31] #0: ffff888031503148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 476.527056][ T31] #1: ffffc90000ac7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 476.540446][ T31] #2: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 476.550200][ T31] 3 locks held by kworker/u8:6/1113: [ 476.555493][ T31] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 476.568169][ T31] #1: ffffc90003cbfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 476.579760][ T31] #2: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 476.589037][ T31] 2 locks held by getty/5576: [ 476.593903][ T31] #0: ffff88803232d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 476.603968][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 476.615222][ T31] 1 lock held by udevd/5831: [ 476.619947][ T31] #0: ffff888026bdb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 476.633074][ T31] 3 locks held by kworker/0:3/5864: [ 476.638298][ T31] #0: ffff88813ff47548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 476.649350][ T31] #1: ffffc90004cffc40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 476.659864][ T31] #2: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 476.671021][ T31] 1 lock held by udevd/5996: [ 476.676566][ T31] #0: ffff888026c9b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 476.685961][ T31] 1 lock held by poweroff/8967: [ 476.691923][ T31] #0: ffff888026bdb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 476.701469][ T31] 3 locks held by kworker/u8:7/12013: [ 476.706841][ T31] #0: ffff8880b853ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 476.716907][ T31] #1: ffff8880b8524588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 476.725866][ T31] #2: ffff8880b8526118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 476.734971][ T31] 1 lock held by syz-executor/13000: [ 476.740525][ T31] #0: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 476.749950][ T31] 1 lock held by syz-executor/13103: [ 476.755370][ T31] #0: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 476.764477][ T31] 1 lock held by syz.3.1924/13193: [ 476.770835][ T31] #0: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 476.780331][ T31] 1 lock held by syz.3.1924/13196: [ 476.785447][ T31] #0: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 476.794322][ T31] 2 locks held by syz.6.1925/13176: [ 476.799536][ T31] #0: ffff88805f9fc708 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 476.810095][ T31] #1: ffffffff8fde84c8 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0xa20 [ 476.819166][ T31] [ 476.821530][ T31] ============================================= [ 476.821530][ T31] [ 476.830001][ T31] NMI backtrace for cpu 0 [ 476.830021][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 476.830046][ T31] Tainted: [L]=SOFTLOCKUP [ 476.830053][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.830063][ T31] Call Trace: [ 476.830071][ T31] [ 476.830080][ T31] dump_stack_lvl+0xe8/0x150 [ 476.830108][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 476.830129][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.830153][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.830175][ T31] sys_info+0x135/0x170 [ 476.830198][ T31] watchdog+0x103d/0x1090 [ 476.830228][ T31] ? watchdog+0x21a/0x1090 [ 476.830257][ T31] kthread+0x388/0x470 [ 476.830275][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.830297][ T31] ? __pfx_kthread+0x10/0x10 [ 476.830314][ T31] ret_from_fork+0x51e/0xb90 [ 476.830340][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.830357][ T31] ? __switch_to+0xc7d/0x1450 [ 476.830378][ T31] ? __pfx_kthread+0x10/0x10 [ 476.830395][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.830433][ T31] [ 476.940844][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 476.949751][ T31] Sending NMI from CPU 0 to CPUs 1: [ 476.956085][ C1] NMI backtrace for cpu 1 [ 476.956103][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.956125][ C1] Tainted: [L]=SOFTLOCKUP [ 476.956131][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.956142][ C1] Workqueue: netns cleanup_net [ 476.956163][ C1] RIP: 0010:__lock_acquire+0x50b/0x2cf0 [ 476.956183][ C1] Code: 49 8d 1c c6 48 81 c3 38 0b 00 00 eb 1d 44 89 e0 49 ff c7 49 63 8e 10 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 <49> 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 bc [ 476.956196][ C1] RSP: 0018:ffffc90000117248 EFLAGS: 00000093 [ 476.956209][ C1] RAX: 0000000000000004 RBX: ffff88801dab8bb0 RCX: 0000000000000005 [ 476.956220][ C1] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000000000000000 [ 476.956229][ C1] RBP: ffff88801dab8be0 R08: ffffffff826eb0cc R09: ffffffff8e960320 [ 476.956241][ C1] R10: dffffc0000000000 R11: ffffed100c9f1079 R12: 0000000000000004 [ 476.956252][ C1] R13: ffff88801dab8be0 R14: ffff88801dab8000 R15: 0000000000000003 [ 476.956263][ C1] FS: 0000000000000000(0000) GS:ffff888125115000(0000) knlGS:0000000000000000 [ 476.956275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.956286][ C1] CR2: 00007fffacc5a008 CR3: 000000000e74c000 CR4: 00000000003526f0 [ 476.956300][ C1] Call Trace: [ 476.956307][ C1] [ 476.956317][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 476.956340][ C1] lock_acquire+0xf0/0x2e0 [ 476.956356][ C1] ? kernfs_root+0x1c/0x230 [ 476.956375][ C1] ? kernfs_root+0x1c/0x230 [ 476.956390][ C1] kernfs_root+0x38/0x230 [ 476.956405][ C1] ? kernfs_root+0x1c/0x230 [ 476.956421][ C1] kernfs_parent+0x51/0x190 [ 476.956437][ C1] __kernfs_remove+0x9b/0x660 [ 476.956455][ C1] ? kernfs_remove_self+0x531/0x540 [ 476.956490][ C1] kernfs_remove_by_name_ns+0xaf/0x130 [ 476.956509][ C1] sysfs_remove_group+0xfc/0x2e0 [ 476.956526][ C1] sysfs_remove_groups+0x54/0xb0 [ 476.956544][ C1] device_remove_attrs+0x229/0x280 [ 476.956560][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 476.956580][ C1] device_del+0x51f/0x8f0 [ 476.956598][ C1] ? __pfx_device_del+0x10/0x10 [ 476.956612][ C1] ? netdev_unregister_kobject+0x344/0x450 [ 476.956635][ C1] unregister_netdevice_many_notify+0x1e0e/0x2380 [ 476.956660][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 476.956682][ C1] ? unregister_netdevice_queue+0x19b/0x360 [ 476.956701][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 476.956722][ C1] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 476.956745][ C1] default_device_exit_batch+0x981/0xa00 [ 476.956766][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 476.956786][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 476.956801][ C1] ops_undo_list+0x52b/0x940 [ 476.956818][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 476.956834][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 476.956850][ C1] cleanup_net+0x4df/0x7b0 [ 476.956866][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 476.956884][ C1] ? process_one_work+0x87c/0x1650 [ 476.956901][ C1] process_one_work+0x949/0x1650 [ 476.956926][ C1] ? irqentry_exit+0x59e/0x620 [ 476.956947][ C1] ? __pfx_process_one_work+0x10/0x10 [ 476.956963][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.956983][ C1] worker_thread+0xb46/0x1140 [ 476.957010][ C1] kthread+0x388/0x470 [ 476.957023][ C1] ? __pfx_worker_thread+0x10/0x10 [ 476.957039][ C1] ? __pfx_kthread+0x10/0x10 [ 476.957053][ C1] ret_from_fork+0x51e/0xb90 [ 476.957071][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 476.957087][ C1] ? __switch_to+0xc7d/0x1450 [ 476.957104][ C1] ? __pfx_kthread+0x10/0x10 [ 476.957118][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.957144][ C1] [ 477.337212][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 477.344099][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 477.354766][ T31] Tainted: [L]=SOFTLOCKUP [ 477.359080][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 477.369123][ T31] Call Trace: [ 477.372393][ T31] [ 477.375320][ T31] vpanic+0x56c/0xa60 [ 477.379305][ T31] ? __pfx___schedule+0x10/0x10 [ 477.384152][ T31] ? __pfx_vpanic+0x10/0x10 [ 477.388661][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 477.394808][ T31] panic+0xc5/0xd0 [ 477.398522][ T31] ? __pfx_panic+0x10/0x10 [ 477.402930][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 477.408293][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 477.414432][ T31] watchdog+0x1087/0x1090 [ 477.418759][ T31] ? watchdog+0x21a/0x1090 [ 477.423170][ T31] kthread+0x388/0x470 [ 477.427228][ T31] ? __pfx_watchdog+0x10/0x10 [ 477.431900][ T31] ? __pfx_kthread+0x10/0x10 [ 477.436474][ T31] ret_from_fork+0x51e/0xb90 [ 477.441057][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 477.446160][ T31] ? __switch_to+0xc7d/0x1450 [ 477.450826][ T31] ? __pfx_kthread+0x10/0x10 [ 477.455403][ T31] ret_from_fork_asm+0x1a/0x30 [ 477.460169][ T31] [ 477.463552][ T31] Kernel Offset: disabled [ 477.467862][ T31] Rebooting in 86400 seconds..