last executing test programs: 14.671655088s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 14.296931296s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x20, 0x0, 0x4, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}}, 0x0) bind$rxrpc(r4, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x0, 0x8, @empty}}, 0x24) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x40}}, 0x4048000) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 11.020796002s ago: executing program 1 (id=112): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000c80)=[{r2}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x100003}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x1f9, "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"}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f0000000000)="11868a0fceae284c000000010000", 0xe) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80284511, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) 8.684874094s ago: executing program 2 (id=120): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x38}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) mmap(&(0x7f0000817000/0x1000)=nil, 0x1000, 0x1000005, 0x3ffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) unshare(0x600) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8.550800315s ago: executing program 2 (id=122): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0x80fd, 0x1}) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040), &(0x7f0000000080)) (async) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = io_uring_setup(0x36dc, &(0x7f00000001c0)) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x8, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x1000000) (async) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x1000000) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x3}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0xe8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r3, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) 8.256977468s ago: executing program 3 (id=123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x3, 0x4) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004000000000000000560000000000000000000000000038000100000002000000030000000500"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pause() execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) 8.188237536s ago: executing program 2 (id=124): socket(0xa, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x404540) read(r0, &(0x7f0000000840)=""/40, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000010}) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmod\a=00000000000040000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',allow_'], 0xfb, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) write$vga_arbiter(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="746172676574205043493a5b89d9f46ac070df4e31642e3100"], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7.128128412s ago: executing program 3 (id=125): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @empty, 0x20002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 6.977012526s ago: executing program 3 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0xdc, 0xdb, 0x8, 0x7ca, 0xb800, 0x311f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x7, 0x0, 0x80, 0x1000000000009, 0x8, 0x5, 0x0, 0x7, 0x0, 0x5, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.620830952s ago: executing program 1 (id=129): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf75241323428a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x0, 0x6000, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000340)) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 5.652151532s ago: executing program 0 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x4, 0x3, 0xed, 0x10001, 0x66, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x20, 0x7, 0x1}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket(0xa, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x13, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x3f000000, 0x0, 0xc100}, 0x4040) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="250304000000fcffffff080000009db544599733e9f72cfd1bf7e6d1657d2924f1f44871b1170199a13f7f7d0d2c04fae25fe55d2d63a2"], 0x14}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x8800, 0x4e24, 0x800, 0x2, 0x180, 0x80, 0x2c, r4, r5}, {0x0, 0x9, 0x9, 0x7fff, 0x100000001, 0x8, 0x3, 0x9}, {0x5, 0xffffffffffffffff, 0x1, 0x2}, 0x9, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3502, 0x0, 0x3, 0x4, 0x7f5b, 0x8b55, 0x10001}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 5.489185433s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="200000003e000701000008000a80ef0771c300"/32], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x7, 0x0, 0x0, 0x7ffc0002}, {0x7, 0x9, 0xc}]}) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000041}) (async) dup3(r4, r5, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) 5.443268448s ago: executing program 0 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xba6ac000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) fstat(0xffffffffffffffff, &(0x7f0000002440)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) 5.261123263s ago: executing program 4 (id=134): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa000000000000000008001200000000000300000000000000300000ffffffffffffff8000000000000a000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 5.186332467s ago: executing program 4 (id=135): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xce, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1}}, 0xe8) close(r3) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001100050003000000ffdbdf2507000000", @ANYRESDEC=r2, @ANYBLOB="00020000022037eb02be1a80100004800c0002809e210e97ebd9"], 0x34}, 0x1, 0x0, 0x0, 0x8f3a8710440e0e3b}, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000200)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000000000204b80d60000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.949031831s ago: executing program 2 (id=136): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_usb_connect$hid(0x0, 0x90, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00004dd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000200)={0xa40e}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 3.899906874s ago: executing program 3 (id=137): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r7, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x40000) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 3.365408577s ago: executing program 1 (id=138): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x32, 0x0, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.194566028s ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1cb157ae}, [@generic={0x81, 0x1, 0x1, 0x6e}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.072751243s ago: executing program 4 (id=140): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x40000) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 2.547633878s ago: executing program 0 (id=141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x15703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d099}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x629d, 0x10, 0x1, 0xa0}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r9, 0x47f6, 0xeffd, 0x5, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r14, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009802"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.945683481s ago: executing program 3 (id=142): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgroups(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x0, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef980009050602ff751403000000"], 0x0) fcntl$notify(r8, 0x402, 0x20) getdents64(r7, 0xffffffffffffffff, 0x43) 1.844811852s ago: executing program 2 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xff7ffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x80800}) listen(r6, 0x5) io_uring_enter(r7, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0xfffffffffffffde5, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r11, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x0, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r12, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaa43de2bf9ffa53f5ab1a8fdaaaaaa0008004500001c0000000000019078fffffffeac"], 0x0) sendto$inet(r12, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1.171916257s ago: executing program 0 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x4, 0x3, 0xed, 0x10001, 0x66, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x20, 0x7, 0x1}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket(0xa, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x13, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x40000000, 0x0, 0xc100}, 0x4040) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="250304000000fcffffff080000009db544599733e9f72cfd1bf7e6d1657d2924f1f44871b1170199a13f7f7d0d2c04fae25fe55d2d63a2"], 0x14}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x8800, 0x4e24, 0x800, 0x2, 0x180, 0x80, 0x2c, r4, r5}, {0x0, 0x9, 0x9, 0x7fff, 0x100000001, 0x8, 0x3, 0x9}, {0x5, 0xffffffffffffffff, 0x1, 0x2}, 0x9, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3502, 0x0, 0x3, 0x4, 0x7f5b, 0x8b55, 0x10001}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 643.189296ms ago: executing program 4 (id=145): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc19802bbf3fc23", 0xd3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000001300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 581.087624ms ago: executing program 0 (id=146): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa00000000000000000800120000000000030000000000000030000080ffffffffffffff00000000000a000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 313.354829ms ago: executing program 4 (id=147): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x65, {0x65, 0xa, "36667945cb0ca6a276cd29403f65a2bed1514442d52672bacc0222467ed29f7e0ae352dc1f35bdab7427aa5da512baad3bd0d1f265754e38daac69c36d1f802e0c417d5122b6e685288cc71d234ac1a76bce065964316ef5c15af9f6b7f679c81d714b"}}, &(0x7f0000000080)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "19b33354680f066f8868e1262bd2bcd0348b65e70c8c667e8b300427348fbba7c4e640ae525b337a13b8aab6ff6da751fffbcc1f33dcce4b9246de9fe64617c3cca1555682483a5a9e90fd8366f1f852c8b49f893e550fe5a19b3db5d56d2cd0b7b54d6fe752f9f46f8ee58679c9ba0e140ea2f07e91458f7f9d7db5e08720d5679347b6ddb2c0112ecf6e99dbcc4d9fce33a4a1cb5272d1d97076e57db98e22ee76835c2436d32b53ce44692ff640587bace97b7021cd9c197614e1beb3b65c"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x40, 0xb, 0xca, "2ccd55d5a51db5be15ca6b54c1a9e3a726be7fc02a7f0665ab99c9fb0b165d79e76e2c29b881636e4839c0424c1da43aa2c0acbc174d491f2af2c5edad1fcdd170b8cf34665e68458f4f793dcbc6c19df1f6de3854cc09afd4fea9b4725df39d10101e215873233fd9c81813c4e2ead7fdf12e7e8db3180573b1928b5dfa5403dca22429246de062b9d58a929e42871bf99a2c858b8b2a01c603e55ec40a61c6e4483fc11224a128ab0ba2a1a194c928b941fe598daeaf3d31c8266c7cac447d666736aa749453599c3e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x293}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "d5cccde0781385e67728fd5e846806871da14e02e6fbb7f9c3b86529180a1cb1329b0c00343369bac5c5a62ae8bc79"}}) 267.136688ms ago: executing program 0 (id=148): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf75241323428a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x0, 0x6000, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000340)) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 124.860991ms ago: executing program 1 (id=149): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x0, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x1, 0x20040010) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e0100000001090212000100000000090400"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="0100c82700"}) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$printer(r2, &(0x7f0000000580)={0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="2006b1000000b1f27161518157778e391c31ae256f2103a15ad5e046503e9087b63c4c726a919a7da5f9b47b0bf1902e0559322b62b833ad402b9825fb2da44fd69462f7aa7862a7ee885cde63221ef97e8f3b326970665328edd3866c3a1e434a211a383ee0c78a9b7d7aa2fdf88c3e61cd029326881a9e45c166426b84051f92b663f869bbf29f9189e61e2104290ed0215eda59bdafc1c38a3d6f2c2a2a07059c65b02e58f15ed058665f71cc976c3cffa8e975685fe13c"], &(0x7f00000004c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "9d34a7982ef5ef43a5fc2c63f298cad378b557bc80a2f979f4b512cc57d798b8f9ec55e9adb0a04ca1d25e0561b852e7841b7a44876bd44cde4b038ee83587c13d5ce64f6726573762d72a5a8e7b194120eaf81930797dc79158e86e7c673e3f1fd7cc023fa8896b40ac7dfc1c9e2519bb2e89f45b9174ef681061504323b9859f6b6b"}}}, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="401514000000c5f2267082bb2e3698d9c6031ba1f769fce291f9"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000008c0)=ANY=[@ANYBLOB="20009d000000009b92aa347625e9d6ce3561610f3804be25fcd41f1de83c4a8c5c53b54d0482ea49e214ef90a1b3ea26b215cc09795109f3a55b4278dcb40aab3fcf367caf29ab4029e2f4a39c9d043782cb7fed63a8fe20bafc4269d93343b47957e935a340cfb6bed8f35973a3646f1ae348c418f7d3be0114ab13abcd7e9564018eef74b462c46c101742edee37b0837f0400f4d79a0d7f64c0df256cb4e68ea15a6d4ddbc83765fba0b03e1f7d710cf7a6f13f53a330925b46d88a"], &(0x7f0000000740)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x6}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRESDEC=r3], 0x18}, 0x40c0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r6, 0xae80, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x120) 0s ago: executing program 2 (id=150): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0xfb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4d, 0xf0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x29, 0xb}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x5, 0xd, 0x10, 0x4}, 0x13c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2809}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "60154a5fa088fe88192ca53c4ef303a28b2adad79396d4b3b194336ba78c6aadc100a6e0c416a89cb94b93ecf90db6418dcb2bb53a507f349f21c806ad800423eedc69cae60f36f962863357bd6cde190814aeff1fd6ba775c125ff9b430675ee3950cdd60e586dbb130af68f8ad1a57b1892eaedf2136b76d0c69123c0fbe20070511743e77da04801a748500d58df06cbecbdb14ee8edd21c4731b91803c7001a8110658f95a284f24bba8478e765552315c5f9f257e3da58013e14a2d0ee29bd4af9a14bf29a9afebb9db6f47ae462b96a59e925878096f71db47f93bf6fa6206f7a8bc98b497b7ba52ed2980d940a07831a594a69c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x209}}, {0x80, &(0x7f0000000240)=@string={0x80, 0x3, "4dcbf797c4d1e47c45d44182322cbb21093e8f31382e8316db5214c9a0d7e8dba1c8c9a73f6442da9b5e3e72098c1224698d77aa7e33fbef38287534ff27529a38f666eac91fe4d3dc3db602e1b81d3cc5882ae6f47e493c058df78dc96d174aff6defcbc586e5901af95018cb07ea1d500295d2cbabd7b9c4d15d1acff8"}}, {0xa2, &(0x7f0000000540)=ANY=[@ANYBLOB="a203c8282133a71baf0c4b2853ff136739e7e541467e6431000cf326dcbd9b21b8c597c79222748b1ac1f334883830f7c484380b92bab1f727478e346e88ff0fdb57c6ab60bd9a61a778e5fff7e4891c906035f64d7d653a9504b1dd1c77bae40891dc7a2ac587b5b0240220e4fff8cb7f887a9d3f4f8a3a3625c71f3f4c37d3f5751e1e8987ea98a3b523fcdface3bb5c99d8047d952dee203bc9ec8f1f7ff18948"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x61, &(0x7f0000000640)=@string={0x61, 0x3, "51083feffa0c4959d91317472c7a7bbfce8cd2d2f22af085e0e2df0f7059aa803a36b741e23ea5ffc899773d53016282401bc5deb5cf2343724ddf90b8d2655c03ecfeb00223366c124f3edcfaf7f98f1d93ba094d28bfc5b98efa519d88d0"}}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0xb}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 70.539238][ T5849] cgroup: Unknown subsys name 'net' [ 70.646131][ T5849] cgroup: Unknown subsys name 'cpuset' [ 70.654476][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.357501][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364002][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.041525][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.280038][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.287999][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.295669][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.297022][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.303720][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.310619][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.317550][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.325688][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.333715][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.338530][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.351655][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.359647][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.368427][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.375876][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.383538][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.393308][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.400940][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.401787][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.409005][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.417719][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.423514][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.429233][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.445416][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.454368][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.486607][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.049682][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 77.203864][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 77.327934][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 77.365877][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 77.474557][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.482161][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.489864][ T5881] bridge_slave_0: entered allmulticast mode [ 77.496983][ T5881] bridge_slave_0: entered promiscuous mode [ 77.512993][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 77.528356][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.535646][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.543506][ T5884] bridge_slave_0: entered allmulticast mode [ 77.550347][ T5884] bridge_slave_0: entered promiscuous mode [ 77.575639][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.582711][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.590280][ T5881] bridge_slave_1: entered allmulticast mode [ 77.597296][ T5881] bridge_slave_1: entered promiscuous mode [ 77.625379][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.632489][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.639670][ T5884] bridge_slave_1: entered allmulticast mode [ 77.646719][ T5884] bridge_slave_1: entered promiscuous mode [ 77.735064][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.742186][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.749644][ T5882] bridge_slave_0: entered allmulticast mode [ 77.756790][ T5882] bridge_slave_0: entered promiscuous mode [ 77.765111][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.772227][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.779447][ T5882] bridge_slave_1: entered allmulticast mode [ 77.787072][ T5882] bridge_slave_1: entered promiscuous mode [ 77.797855][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.858474][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.890399][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.915041][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.927642][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.956121][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.002430][ T5881] team0: Port device team_slave_0 added [ 78.027151][ T5884] team0: Port device team_slave_0 added [ 78.034361][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.041465][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.048704][ T5885] bridge_slave_0: entered allmulticast mode [ 78.056670][ T5885] bridge_slave_0: entered promiscuous mode [ 78.064204][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.071260][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.078718][ T5885] bridge_slave_1: entered allmulticast mode [ 78.085838][ T5885] bridge_slave_1: entered promiscuous mode [ 78.108694][ T5881] team0: Port device team_slave_1 added [ 78.128257][ T5884] team0: Port device team_slave_1 added [ 78.172274][ T5882] team0: Port device team_slave_0 added [ 78.201714][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.209186][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.239651][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.264271][ T5882] team0: Port device team_slave_1 added [ 78.272977][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.294248][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.301377][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.308676][ T5883] bridge_slave_0: entered allmulticast mode [ 78.315958][ T5883] bridge_slave_0: entered promiscuous mode [ 78.324526][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.331464][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.357511][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.391657][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.401533][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.408560][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.434496][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.447320][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.454310][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.480971][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.492106][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.501505][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.508887][ T5883] bridge_slave_1: entered allmulticast mode [ 78.516889][ T5883] bridge_slave_1: entered promiscuous mode [ 78.553831][ T51] Bluetooth: hci3: command tx timeout [ 78.559449][ T51] Bluetooth: hci2: command tx timeout [ 78.565141][ T5871] Bluetooth: hci4: command tx timeout [ 78.569444][ T51] Bluetooth: hci0: command tx timeout [ 78.570946][ T5868] Bluetooth: hci1: command tx timeout [ 78.617414][ T5885] team0: Port device team_slave_0 added [ 78.625978][ T5885] team0: Port device team_slave_1 added [ 78.635561][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.648278][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.659045][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.666000][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.691890][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.704136][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.711079][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.737105][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.816375][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.823371][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.849364][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.884839][ T5883] team0: Port device team_slave_0 added [ 78.900702][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.907677][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.934586][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.957557][ T5884] hsr_slave_0: entered promiscuous mode [ 78.964597][ T5884] hsr_slave_1: entered promiscuous mode [ 78.982592][ T5883] team0: Port device team_slave_1 added [ 79.008308][ T5881] hsr_slave_0: entered promiscuous mode [ 79.014518][ T5881] hsr_slave_1: entered promiscuous mode [ 79.020465][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 79.026682][ T5881] Cannot create hsr debugfs directory [ 79.054934][ T5882] hsr_slave_0: entered promiscuous mode [ 79.061352][ T5882] hsr_slave_1: entered promiscuous mode [ 79.067483][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 79.073565][ T5882] Cannot create hsr debugfs directory [ 79.091407][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.098378][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.124384][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.179961][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.186967][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.213720][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.312168][ T5885] hsr_slave_0: entered promiscuous mode [ 79.318468][ T5885] hsr_slave_1: entered promiscuous mode [ 79.324891][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 79.330632][ T5885] Cannot create hsr debugfs directory [ 79.440426][ T5883] hsr_slave_0: entered promiscuous mode [ 79.448077][ T5883] hsr_slave_1: entered promiscuous mode [ 79.454848][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 79.460580][ T5883] Cannot create hsr debugfs directory [ 79.890859][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.921064][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.930734][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.947627][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.991211][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.001432][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.034345][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.045314][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.103034][ T5885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.116577][ T5885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.128471][ T5885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.141874][ T5885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.249668][ T5883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.279354][ T5883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.288902][ T5883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.299677][ T5883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.402650][ T5884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.426295][ T5884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.439910][ T5884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.450138][ T5884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.473006][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.518611][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.547980][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.591257][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.605653][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.612868][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.624805][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.631875][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.641034][ T5868] Bluetooth: hci1: command tx timeout [ 80.643421][ T5879] Bluetooth: hci2: command tx timeout [ 80.646559][ T5868] Bluetooth: hci3: command tx timeout [ 80.651875][ T51] Bluetooth: hci0: command tx timeout [ 80.663284][ T5871] Bluetooth: hci4: command tx timeout [ 80.705877][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.735185][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.751212][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.758370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.797516][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.804707][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.839329][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.846414][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.856195][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.863350][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.893947][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.939464][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.995386][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.007290][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.041045][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.048206][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.069861][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.080367][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.087494][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.098832][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.105958][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.142269][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.149366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.172235][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.195455][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.302857][ T5882] veth0_vlan: entered promiscuous mode [ 81.319679][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.365885][ T5882] veth1_vlan: entered promiscuous mode [ 81.408562][ T5885] veth0_vlan: entered promiscuous mode [ 81.419486][ T5881] veth0_vlan: entered promiscuous mode [ 81.447494][ T5881] veth1_vlan: entered promiscuous mode [ 81.468174][ T5885] veth1_vlan: entered promiscuous mode [ 81.497090][ T5882] veth0_macvtap: entered promiscuous mode [ 81.519218][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.536735][ T5882] veth1_macvtap: entered promiscuous mode [ 81.554713][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.592837][ T5881] veth0_macvtap: entered promiscuous mode [ 81.617087][ T5885] veth0_macvtap: entered promiscuous mode [ 81.648148][ T5881] veth1_macvtap: entered promiscuous mode [ 81.669415][ T5885] veth1_macvtap: entered promiscuous mode [ 81.705527][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.716746][ T5883] veth0_vlan: entered promiscuous mode [ 81.735583][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.768517][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.791943][ T5884] veth0_vlan: entered promiscuous mode [ 81.805641][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.829602][ T5883] veth1_vlan: entered promiscuous mode [ 81.850563][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.876444][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.907729][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.918061][ T5884] veth1_vlan: entered promiscuous mode [ 81.927810][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.938307][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.948099][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.002829][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013004][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058831][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.098453][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.110202][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.141690][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.172453][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210257][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.244853][ T5883] veth0_macvtap: entered promiscuous mode [ 82.257136][ T5883] veth1_macvtap: entered promiscuous mode [ 82.267433][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.280643][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.288730][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.309219][ T5884] veth0_macvtap: entered promiscuous mode [ 82.326772][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.327587][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.341886][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.363738][ T5884] veth1_macvtap: entered promiscuous mode [ 82.402084][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.411107][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.421376][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.422822][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.437485][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.452171][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.462536][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.517795][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.538924][ T5882] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.540990][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.568058][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.577959][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.596215][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.653801][ T2981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.672500][ T2981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702288][ T2981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.719300][ T51] Bluetooth: hci3: command tx timeout [ 82.725294][ T5871] Bluetooth: hci0: command tx timeout [ 82.730700][ T5871] Bluetooth: hci4: command tx timeout [ 82.736300][ T51] Bluetooth: hci2: command tx timeout [ 82.736403][ T5868] Bluetooth: hci1: command tx timeout [ 82.751912][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.771487][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.785217][ T2981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.954070][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.983588][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.016018][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 83.065453][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 83.161433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.190488][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.200205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224072][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.332757][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.343716][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.543590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.766100][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.828786][ T5990] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 84.093407][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.253279][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 84.290597][ T5967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.342416][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 84.356212][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.383541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.391909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.391983][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.431040][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.443947][ T24] usb 4-1: Product: syz [ 84.448099][ T24] usb 4-1: Manufacturer: syz [ 84.452765][ T24] usb 4-1: SerialNumber: syz [ 84.462087][ T5967] usb 5-1: config index 0 descriptor too short (expected 24929, got 441) [ 84.471561][ T5967] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 84.494552][ T5967] usb 5-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 84.512673][ T5967] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 84.532981][ T24] usb 4-1: config 0 descriptor?? [ 84.595563][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.607036][ T5967] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.620181][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 84.629615][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.801739][ T5868] Bluetooth: hci4: command tx timeout [ 84.801790][ T5876] Bluetooth: hci3: command tx timeout [ 84.807343][ T5868] Bluetooth: hci0: command tx timeout [ 84.812659][ T51] Bluetooth: hci1: command tx timeout [ 84.823593][ T5871] Bluetooth: hci2: command tx timeout [ 84.887271][ T5967] usb 5-1: string descriptor 0 read error: -71 [ 84.907466][ T5967] usb 5-1: USB disconnect, device number 2 [ 85.173204][ T5940] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.181801][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 85.188972][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 85.198922][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 85.209332][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 85.253171][ T5967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.366231][ T5940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.378907][ T5940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 85.519032][ T5967] usb 5-1: device descriptor read/64, error -71 [ 85.537380][ T5940] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.692287][ T5940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.708816][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.760495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.769901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.866830][ T5940] usb 3-1: SerialNumber: syz [ 85.893264][ T5967] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.965292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.018636][ T6001] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.042978][ T5940] hub 3-1:1.0: bad descriptor, ignoring hub [ 86.054110][ T5967] usb 5-1: device descriptor read/64, error -71 [ 86.070566][ T5940] hub 3-1:1.0: probe with driver hub failed with error -5 [ 86.143154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.153553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.177712][ T9] usb 4-1: USB disconnect, device number 2 [ 86.182942][ T5967] usb usb5-port1: attempt power cycle [ 86.190737][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 86.234116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.243903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 86.286682][ T6001] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.287273][ T9] em28xx 4-1:0.0: Freeing device [ 86.687046][ T5967] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.928958][ T5967] usb 5-1: device descriptor read/8, error -71 [ 86.978790][ T5940] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 86.996649][ T1208] cfg80211: failed to load regulatory.db [ 87.151081][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.177825][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.224418][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.599707][ T6037] FAULT_INJECTION: forcing a failure. [ 87.599707][ T6037] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.689125][ T5967] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.806974][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 87.806989][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.807000][ T6037] Call Trace: [ 87.807005][ T6037] [ 87.807009][ T6037] dump_stack_lvl+0x189/0x250 [ 87.807027][ T6037] ? __pfx____ratelimit+0x10/0x10 [ 87.807042][ T6037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.807053][ T6037] ? __pfx__printk+0x10/0x10 [ 87.807073][ T6037] should_fail_ex+0x414/0x560 [ 87.807089][ T6037] _copy_to_user+0x31/0xb0 [ 87.807101][ T6037] simple_read_from_buffer+0xe1/0x170 [ 87.807118][ T6037] proc_fail_nth_read+0x1b3/0x220 [ 87.807131][ T6037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.807143][ T6037] ? rw_verify_area+0x2a6/0x4d0 [ 87.807154][ T6037] ? __lock_acquire+0xab9/0xd20 [ 87.807167][ T6037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.807179][ T6037] vfs_read+0x1fd/0xa30 [ 87.807190][ T6037] ? fdget_pos+0x247/0x320 [ 87.807203][ T6037] ? __pfx___mutex_lock+0x10/0x10 [ 87.807218][ T6037] ? __pfx_vfs_read+0x10/0x10 [ 87.807231][ T6037] ? __fget_files+0x2a/0x420 [ 87.807246][ T6037] ? __fget_files+0x3a0/0x420 [ 87.807260][ T6037] ? __fget_files+0x2a/0x420 [ 87.807278][ T6037] ksys_read+0x145/0x250 [ 87.807292][ T6037] ? __pfx_ksys_read+0x10/0x10 [ 87.807302][ T6037] ? rcu_is_watching+0x15/0xb0 [ 87.807314][ T6037] ? do_syscall_64+0xbe/0x3b0 [ 87.807331][ T6037] do_syscall_64+0xfa/0x3b0 [ 87.807344][ T6037] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.807356][ T6037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.807365][ T6037] ? clear_bhb_loop+0x60/0xb0 [ 87.807377][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.807388][ T6037] RIP: 0033:0x7f621ed8d5fc [ 87.807400][ T6037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.807408][ T6037] RSP: 002b:00007f621fb66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.807421][ T6037] RAX: ffffffffffffffda RBX: 00007f621efb5fa0 RCX: 00007f621ed8d5fc [ 87.807428][ T6037] RDX: 000000000000000f RSI: 00007f621fb660a0 RDI: 0000000000000005 [ 87.807433][ T6037] RBP: 00007f621fb66090 R08: 0000000000000000 R09: 0000000000000000 [ 87.807439][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.807444][ T6037] R13: 00007f621efb6038 R14: 00007f621efb5fa0 R15: 00007f621f0dfa28 [ 87.807459][ T6037] [ 88.363160][ T5967] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.379123][ T5967] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.400857][ T9] usb 3-1: USB disconnect, device number 2 [ 88.421573][ T5967] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.440622][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 88.452731][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.767605][ T6053] netlink: 'syz.2.19': attribute type 5 has an invalid length. [ 89.154208][ T6053] ip6erspan0: entered promiscuous mode [ 89.170136][ T6030] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.222922][ T6057] bridge0: port 3(macsec0) entered blocking state [ 89.230509][ T6057] bridge0: port 3(macsec0) entered disabled state [ 89.239062][ T6057] macsec0: entered allmulticast mode [ 89.246732][ T6057] veth1_macvtap: entered allmulticast mode [ 89.272911][ T5967] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.611002][ T6057] macsec0: entered promiscuous mode [ 89.661368][ T6057] bridge0: port 3(macsec0) entered blocking state [ 89.668099][ T6057] bridge0: port 3(macsec0) entered forwarding state [ 89.896243][ T5967] usb 5-1: USB disconnect, device number 6 [ 91.673231][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.867238][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 91.869852][ T6095] IPv6: syztnl1: Disabled Multicast RS [ 91.918654][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.950253][ T10] usb 5-1: Product: syz [ 92.164910][ T10] usb 5-1: Manufacturer: syz [ 92.203267][ T10] usb 5-1: SerialNumber: syz [ 92.232162][ T10] usb 5-1: config 0 descriptor?? [ 92.330908][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 92.340610][ T6106] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 92.372351][ T6106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.492090][ T10] usb 5-1: USB disconnect, device number 7 [ 92.514746][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.715722][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.749855][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.781387][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.820808][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.895435][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 92.962569][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 93.010260][ T30] audit: type=1326 audit(1756445602.583:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.070297][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 93.101681][ T30] audit: type=1326 audit(1756445602.583:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.163173][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 93.170582][ T9] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 93.218571][ T30] audit: type=1326 audit(1756445602.583:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.407472][ T9] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 93.418005][ T30] audit: type=1326 audit(1756445602.583:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.569168][ T30] audit: type=1326 audit(1756445602.583:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.733311][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.767277][ T30] audit: type=1326 audit(1756445602.583:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba98ebe9 code=0x7ffc0000 [ 93.882146][ T6124] fido_id[6124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.910327][ T6128] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 93.929599][ T10] usb 5-1: device descriptor read/64, error -71 [ 94.223223][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.244316][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.395190][ T10] usb 5-1: device descriptor read/64, error -71 [ 94.433196][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 94.554669][ T10] usb usb5-port1: attempt power cycle [ 94.561491][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.572980][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 94.670542][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.736652][ T9] usb 3-1: config 0 descriptor?? [ 94.748891][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 95.013220][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 95.040635][ T10] usb 5-1: device descriptor read/8, error -71 [ 95.103249][ T5940] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.263244][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 95.281011][ T5940] usb 1-1: config 0 has an invalid interface number: 184 but max is 11 [ 95.291230][ T5940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 95.320843][ T5940] usb 1-1: config 0 has no interface number 0 [ 95.337153][ T5940] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.359235][ T5940] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.370808][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.403301][ T5940] usb 1-1: Product: syz [ 95.411915][ T5940] usb 1-1: Manufacturer: syz [ 95.429030][ T5940] usb 1-1: SerialNumber: syz [ 95.452214][ T5940] usb 1-1: config 0 descriptor?? [ 95.505825][ T5940] smsc75xx v1.0.0 [ 95.523211][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 95.546679][ T10] usb 5-1: device descriptor read/8, error -71 [ 95.667542][ T10] usb usb5-port1: unable to enumerate USB device [ 95.997068][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 96.009382][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.41'. [ 96.089099][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 96.110281][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 96.120689][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 96.133786][ T5940] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 96.255232][ T6128] kvm: pic: non byte read [ 96.260007][ T6128] kvm: pic: single mode not supported [ 96.260087][ T6128] kvm: pic: non byte read [ 96.288059][ T6160] FAULT_INJECTION: forcing a failure. [ 96.288059][ T6160] name failslab, interval 1, probability 0, space 0, times 1 [ 96.301304][ T6128] kvm: pic: non byte read [ 96.305316][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.4.43 Not tainted syzkaller #0 PREEMPT(full) [ 96.305337][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.305346][ T6160] Call Trace: [ 96.305353][ T6160] [ 96.305360][ T6160] dump_stack_lvl+0x189/0x250 [ 96.305383][ T6160] ? __pfx____ratelimit+0x10/0x10 [ 96.305404][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.305423][ T6160] ? __pfx__printk+0x10/0x10 [ 96.305446][ T6160] ? __pfx___might_resched+0x10/0x10 [ 96.305461][ T6160] ? fs_reclaim_acquire+0x7d/0x100 [ 96.305489][ T6160] should_fail_ex+0x414/0x560 [ 96.305514][ T6160] should_failslab+0xa8/0x100 [ 96.305537][ T6160] __kmalloc_noprof+0xcb/0x4f0 [ 96.305562][ T6160] ? tomoyo_encode+0x28b/0x550 [ 96.305582][ T6160] tomoyo_encode+0x28b/0x550 [ 96.305604][ T6160] tomoyo_realpath_from_path+0x58d/0x5d0 [ 96.305630][ T6160] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 96.305650][ T6160] tomoyo_path_number_perm+0x1e8/0x5a0 [ 96.305673][ T6160] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.305709][ T6160] ? __lock_acquire+0xab9/0xd20 [ 96.305749][ T6160] ? __fget_files+0x2a/0x420 [ 96.305773][ T6160] ? __fget_files+0x2a/0x420 [ 96.305791][ T6160] ? __fget_files+0x3a0/0x420 [ 96.305810][ T6160] ? __fget_files+0x2a/0x420 [ 96.305835][ T6160] security_file_ioctl+0xcb/0x2d0 [ 96.305857][ T6160] __se_sys_ioctl+0x47/0x170 [ 96.305878][ T6160] do_syscall_64+0xfa/0x3b0 [ 96.305898][ T6160] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.305918][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.305934][ T6160] ? clear_bhb_loop+0x60/0xb0 [ 96.305953][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.305968][ T6160] RIP: 0033:0x7f82d818ebe9 [ 96.305983][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.305996][ T6160] RSP: 002b:00007f82d8feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.306013][ T6160] RAX: ffffffffffffffda RBX: 00007f82d83b5fa0 RCX: 00007f82d818ebe9 [ 96.306025][ T6160] RDX: 00002000000003c0 RSI: 0000000080045519 RDI: 0000000000000003 [ 96.306035][ T6160] RBP: 00007f82d8feb090 R08: 0000000000000000 R09: 0000000000000000 [ 96.306045][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.306054][ T6160] R13: 00007f82d83b6038 R14: 00007f82d83b5fa0 R15: 00007f82d84dfa28 [ 96.306081][ T6160] [ 96.334980][ T6160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.339962][ T6128] kvm: pic: single mode not supported [ 96.497960][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.571230][ T9] gspca_vc032x: reg_w err -110 [ 96.576602][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 96.586830][ T6128] kvm: pic: non byte read [ 96.591464][ T6128] kvm: pic: non byte read [ 96.596479][ T6128] kvm: pic: non byte read [ 96.601056][ T6128] kvm: pic: single mode not supported [ 96.601110][ T6128] kvm: pic: non byte read [ 96.611642][ T6128] kvm: pic: non byte read [ 96.622055][ T6128] kvm: pic: single mode not supported [ 96.622110][ T6128] kvm: pic: non byte read [ 96.728206][ T9] usb 3-1: USB disconnect, device number 3 [ 96.813348][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 96.878640][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.886693][ T43] usb 2-1: config 0 has no interface number 0 [ 96.896245][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 97.069021][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.082183][ T43] usb 2-1: Product: syz [ 97.091313][ T43] usb 2-1: Manufacturer: syz [ 97.176542][ T43] usb 2-1: SerialNumber: syz [ 97.302314][ T43] usb 2-1: config 0 descriptor?? [ 97.324977][ T43] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 97.341582][ T43] usb 2-1: selecting invalid altsetting 1 [ 97.348482][ T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 97.373657][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.589112][ T6157] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 97.601339][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.611712][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.647796][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 97.700921][ T43] usb 2-1: media controller created [ 98.304461][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 98.343985][ T6180] vlan2: entered promiscuous mode [ 98.350077][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.356445][ T6180] team0: entered promiscuous mode [ 98.412860][ T6180] team_slave_0: entered promiscuous mode [ 98.503348][ T6180] team_slave_1: entered promiscuous mode [ 98.509647][ T6180] vlan2: entered allmulticast mode [ 98.525917][ T6180] team0: entered allmulticast mode [ 98.577910][ T6180] team_slave_0: entered allmulticast mode [ 98.596547][ T6180] team_slave_1: entered allmulticast mode [ 98.966516][ T6185] sctp: [Deprecated]: syz.4.47 (pid 6185) Use of int in maxseg socket option. [ 98.966516][ T6185] Use struct sctp_assoc_value instead [ 99.149198][ T30] audit: type=1326 audit(1756445608.673:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 99.314926][ T30] audit: type=1326 audit(1756445608.673:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 99.327101][ T10] usb 1-1: USB disconnect, device number 2 [ 99.344269][ T30] audit: type=1326 audit(1756445608.673:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 99.371730][ T30] audit: type=1326 audit(1756445608.673:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 99.409328][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 99.440914][ T43] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 99.461098][ T43] zl10353_read_register: readreg error (reg=127, ret==-110) [ 99.499808][ T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 99.507793][ T30] audit: type=1326 audit(1756445608.683:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 99.801396][ T30] audit: type=1326 audit(1756445608.683:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 100.104137][ T43] usb 2-1: USB disconnect, device number 2 [ 100.131542][ T30] audit: type=1326 audit(1756445608.683:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 100.248191][ T30] audit: type=1326 audit(1756445608.683:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 100.271466][ T30] audit: type=1326 audit(1756445608.683:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 100.302336][ T30] audit: type=1326 audit(1756445608.683:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 100.453253][ T5940] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.679422][ T5940] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 100.702027][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.743809][ T5940] usb 4-1: Product: syz [ 100.763780][ T5940] usb 4-1: Manufacturer: syz [ 100.794323][ T5940] usb 4-1: SerialNumber: syz [ 100.821907][ T5940] usb 4-1: config 0 descriptor?? [ 101.020901][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.042380][ T5940] usb 4-1: USB disconnect, device number 3 [ 101.237398][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.251085][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.269989][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.281445][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.298804][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.308212][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.322977][ T10] usb 1-1: config 0 descriptor?? [ 101.366103][ T6235] gtp0: entered promiscuous mode [ 101.378033][ T6235] gtp0: entered allmulticast mode [ 101.703273][ T5933] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.833636][ T10] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 101.900041][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 101.924778][ T5933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.934426][ T5933] usb 3-1: config 0 has no interface number 0 [ 101.964835][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 102.004090][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 102.027281][ T5933] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 102.049957][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.069672][ T5933] usb 3-1: Product: syz [ 102.077103][ T5933] usb 3-1: Manufacturer: syz [ 102.095115][ T5933] usb 3-1: SerialNumber: syz [ 102.117362][ T5933] usb 3-1: config 0 descriptor?? [ 102.135626][ T5933] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 102.181761][ T5933] usb 3-1: selecting invalid altsetting 1 [ 102.193032][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.221792][ T5933] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 102.252501][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.277128][ T5933] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.430267][ T5933] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 102.441064][ T6236] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 102.453876][ T5933] usb 3-1: media controller created [ 102.460834][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.487211][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.636106][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.122879][ T43] usb 1-1: USB disconnect, device number 3 [ 103.833723][ T5933] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 103.888213][ T5933] zl10353_read_register: readreg error (reg=127, ret==-110) [ 104.233502][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.330345][ T5933] usb 3-1: USB disconnect, device number 4 [ 104.408181][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 104.428155][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 104.460365][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.500933][ T6262] netlink: 'syz.2.70': attribute type 5 has an invalid length. [ 104.503233][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.538889][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.561384][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 104.570806][ T43] usb 4-1: Product: syz [ 104.580650][ T43] usb 4-1: Manufacturer: syz [ 104.611031][ T43] usb 4-1: SerialNumber: syz [ 104.628493][ T6266] loop3: detected capacity change from 0 to 1 [ 104.648635][ T6210] Dev loop3: unable to read RDB block 1 [ 104.655642][ T43] usb 4-1: config 0 descriptor?? [ 104.663251][ T6210] loop3: unable to read partition table [ 104.671169][ T6210] loop3: partition table beyond EOD, truncated [ 104.674248][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.713251][ T43] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 104.724409][ T6266] Dev loop3: unable to read RDB block 1 [ 104.736146][ T6266] loop3: unable to read partition table [ 104.762856][ T6266] loop3: partition table beyond EOD, truncated [ 104.800921][ T6266] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.898804][ T1208] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.080185][ T1208] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 105.093356][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.105282][ T1208] usb 3-1: config 0 descriptor?? [ 105.123284][ T1208] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 105.313823][ T6262] ======================================================= [ 105.313823][ T6262] WARNING: The mand mount option has been deprecated and [ 105.313823][ T6262] and is ignored by this kernel. Remove the mand [ 105.313823][ T6262] option from the mount to silence this warning. [ 105.313823][ T6262] ======================================================= [ 105.359164][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 105.371268][ T43] em28xx 4-1:0.0: Config register raw data: 0x41 [ 105.402380][ T6262] fuse: Unknown parameter '' [ 105.417772][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.440794][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.483284][ T5940] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.528625][ T1208] gspca_zc3xx: reg_w_i err -71 [ 105.542464][ T1208] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 105.603338][ T1208] usb 3-1: USB disconnect, device number 5 [ 105.638779][ T43] usb 4-1: USB disconnect, device number 4 [ 105.650381][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 105.656239][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 105.664457][ T5940] usb 1-1: config 162 has an invalid interface number: 46 but max is 1 [ 105.673407][ T5940] usb 1-1: config 162 has no interface number 0 [ 105.679770][ T5940] usb 1-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.694739][ T43] em28xx 4-1:0.0: Freeing device [ 105.708180][ T5940] usb 1-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 105.733420][ T5940] usb 1-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 105.745418][ T5940] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 105.757443][ T5940] usb 1-1: config 162 interface 46 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 105.769396][ T5940] usb 1-1: config 162 interface 46 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.786228][ T5940] usb 1-1: config 162 interface 1 has no altsetting 0 [ 105.795561][ T5940] usb 1-1: config 162 interface 46 has no altsetting 0 [ 105.812097][ T5940] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 105.826897][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.837272][ T5940] usb 1-1: Product: syz [ 105.841495][ T5940] usb 1-1: Manufacturer: syz [ 105.848817][ T5940] usb 1-1: SerialNumber: syz [ 105.960015][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.063251][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.77'. [ 106.138469][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 106.151847][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 106.170304][ T5940] ipaq 1-1:162.46: PocketPC PDA converter detected [ 106.171423][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.193588][ T5940] usb 1-1: active config #162 != 1 ?? [ 106.213521][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.231128][ T5940] usb 1-1: USB disconnect, device number 4 [ 106.236678][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.270529][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.303446][ T9] usb 2-1: Product: syz [ 106.310598][ T6295] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 106.332446][ T9] usb 2-1: Manufacturer: syz [ 106.338449][ T9] usb 2-1: SerialNumber: syz [ 106.348417][ T6295] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 106.390963][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 106.411633][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.411745][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 106.420720][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.447737][ T5959] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.456750][ T5959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.466384][ T6295] Zero length message leads to an empty skb [ 106.509596][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 106.509608][ T30] audit: type=1326 audit(1756445616.083:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.540474][ T30] audit: type=1326 audit(1756445616.083:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.571246][ T30] audit: type=1326 audit(1756445616.083:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.598009][ T30] audit: type=1326 audit(1756445616.083:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.620432][ T30] audit: type=1326 audit(1756445616.083:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.642868][ T30] audit: type=1326 audit(1756445616.083:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.666606][ T30] audit: type=1326 audit(1756445616.083:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f852b58d550 code=0x7ffc0000 [ 106.714339][ T30] audit: type=1326 audit(1756445616.083:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.733185][ T5940] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.737359][ T30] audit: type=1326 audit(1756445616.083:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.767134][ T30] audit: type=1326 audit(1756445616.083:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b58ebe9 code=0x7ffc0000 [ 106.798448][ T9] usb 2-1: 0:2 : does not exist [ 106.913227][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 106.926986][ T5940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.936780][ T5940] usb 3-1: config 0 has no interface number 0 [ 106.948705][ T5940] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 106.961062][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.969158][ T5940] usb 3-1: Product: syz [ 106.976146][ T5940] usb 3-1: Manufacturer: syz [ 106.980746][ T5940] usb 3-1: SerialNumber: syz [ 106.996972][ T5940] usb 3-1: config 0 descriptor?? [ 107.008157][ T5940] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.020417][ T5940] usb 3-1: selecting invalid altsetting 1 [ 107.042821][ T5940] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.066780][ T5940] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.081325][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.090468][ T5940] usb 3-1: media controller created [ 107.131516][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.262261][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.279320][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.361212][ T6320] loop3: detected capacity change from 0 to 1 [ 107.376929][ T6320] Dev loop3: unable to read RDB block 1 [ 107.382756][ T6320] loop3: unable to read partition table [ 107.394319][ T6320] loop3: partition table beyond EOD, truncated [ 107.416214][ T9] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 107.423353][ T6320] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.490133][ T9] usb 2-1: USB disconnect, device number 3 [ 107.583162][ T957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.767594][ T957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.790695][ T957] usb 4-1: config 182 has an invalid interface number: 132 but max is 0 [ 107.800076][ T957] usb 4-1: config 182 has no interface number 0 [ 107.806654][ T957] usb 4-1: config 182 interface 132 has no altsetting 0 [ 107.815782][ T957] usb 4-1: string descriptor 0 read error: -22 [ 107.822067][ T957] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 107.831583][ T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.445807][ T5940] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 108.453857][ T5940] zl10353_read_register: readreg error (reg=127, ret==-110) [ 108.573157][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.885066][ T6304] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 109.064331][ T6336] hub 9-0:1.0: USB hub found [ 109.069786][ T6336] hub 9-0:1.0: 1 port detected [ 109.242765][ T9] usb 4-1: USB disconnect, device number 5 [ 109.243453][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 109.329886][ T43] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.359941][ T43] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.441248][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.488363][ T43] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 109.508465][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.539997][ T43] usb 2-1: config 0 descriptor?? [ 109.949864][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 109.957924][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.976434][ T43] usb 2-1: USB disconnect, device number 4 [ 110.165797][ T1208] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.178749][ T5940] usb 3-1: USB disconnect, device number 6 [ 110.356564][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 110.365667][ T1208] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.375453][ T1208] usb 4-1: config 0 has no interface number 0 [ 110.383913][ T1208] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 110.572478][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.677275][ T1208] usb 4-1: Product: syz [ 110.706426][ T1208] usb 4-1: Manufacturer: syz [ 110.750392][ T1208] usb 4-1: SerialNumber: syz [ 110.847134][ T1208] usb 4-1: config 0 descriptor?? [ 110.865495][ T1208] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 110.918995][ T1208] usb 4-1: selecting invalid altsetting 1 [ 110.942779][ T1208] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 110.970211][ T1208] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.993488][ T1208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 111.001790][ T1208] usb 4-1: media controller created [ 111.072619][ T6363] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 111.089611][ T6376] mmap: syz.2.102 (6376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.125846][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.154653][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.163924][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.236653][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.305160][ T9] usb 2-1: device descriptor read/64, error -71 [ 111.463755][ T5940] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.553486][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.639632][ T5940] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 111.649529][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.666038][ T5940] usb 1-1: config 0 descriptor?? [ 111.683184][ T9] usb 2-1: device descriptor read/64, error -71 [ 111.793525][ T9] usb usb2-port1: attempt power cycle [ 111.892773][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.902223][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.914129][ T5940] ath6kl: Failed to submit usb control message: -71 [ 111.922412][ T5940] ath6kl: unable to send the bmi data to the device: -71 [ 111.929558][ T5940] ath6kl: Unable to send get target info: -71 [ 111.937855][ T5940] ath6kl: Failed to init ath6kl core: -71 [ 111.944656][ T5940] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 111.969049][ T5940] usb 1-1: USB disconnect, device number 5 [ 112.133185][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.158425][ T9] usb 2-1: device descriptor read/8, error -71 [ 112.395806][ T1208] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 112.403160][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.415897][ T1208] zl10353_read_register: readreg error (reg=127, ret==-110) [ 112.428835][ T9] usb 2-1: device descriptor read/8, error -71 [ 112.543612][ T9] usb usb2-port1: unable to enumerate USB device [ 112.834899][ T1208] usb 4-1: USB disconnect, device number 6 [ 113.293171][ T5940] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.571215][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 113.592087][ T5940] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.605769][ T5940] usb 5-1: config 0 has no interface number 0 [ 113.677043][ T5940] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 113.686416][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.694833][ T5940] usb 5-1: Product: syz [ 113.700792][ T5940] usb 5-1: Manufacturer: syz [ 113.732054][ T5940] usb 5-1: SerialNumber: syz [ 113.802103][ T5940] usb 5-1: config 0 descriptor?? [ 113.810626][ T5940] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 113.824786][ T5940] usb 5-1: selecting invalid altsetting 1 [ 113.830558][ T5940] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 113.866362][ T5940] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.881408][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 113.935440][ T5940] usb 5-1: media controller created [ 114.009966][ T6405] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 114.019022][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.054786][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.119938][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.276716][ T5940] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 115.284434][ T5940] zl10353_read_register: readreg error (reg=127, ret==-110) [ 115.409770][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 115.551837][ T6429] vlan2: entered promiscuous mode [ 115.557292][ T6429] team0: entered promiscuous mode [ 115.562831][ T6429] team_slave_0: entered promiscuous mode [ 115.587934][ T6429] team_slave_1: entered promiscuous mode [ 115.629067][ T6429] vlan2: entered allmulticast mode [ 115.636930][ T6429] team0: entered allmulticast mode [ 115.693577][ T6429] team_slave_0: entered allmulticast mode [ 115.712601][ T6429] team_slave_1: entered allmulticast mode [ 115.825798][ T6431] sit0: entered promiscuous mode [ 115.834339][ T6431] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 115.852140][ T6431] netlink: 1 bytes leftover after parsing attributes in process `syz.0.115'. [ 115.974488][ T5940] usb 5-1: USB disconnect, device number 12 [ 116.165174][ T6433] tipc: Started in network mode [ 116.214311][ T6433] tipc: Node identity 76151fafab03, cluster identity 4711 [ 116.252892][ T6433] tipc: Enabled bearer , priority 0 [ 116.340209][ T6442] syzkaller0: entered promiscuous mode [ 116.361738][ T6442] syzkaller0: entered allmulticast mode [ 116.396439][ T6432] tipc: Resetting bearer [ 116.442400][ T6448] IPVS: length: 4096 != 8 [ 116.596132][ T6432] tipc: Disabling bearer [ 116.815752][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.953375][ T43] usb 5-1: device descriptor read/64, error -71 [ 117.037060][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 117.214105][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.221981][ T6472] process 'syz.3.123' launched './file1' with NULL argv: empty string added [ 117.373290][ T43] usb 5-1: device descriptor read/64, error -71 [ 117.544007][ T43] usb usb5-port1: attempt power cycle [ 117.563160][ T5974] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.735169][ T5974] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.813378][ T5974] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.823315][ T5974] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.834548][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.845909][ T6469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.865494][ T5974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.913337][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 117.965674][ T43] usb 5-1: device descriptor read/8, error -71 [ 118.068529][ T6469] fuse: Unknown parameter 'rootmod' [ 118.263437][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 118.374339][ T43] usb 5-1: device descriptor read/8, error -71 [ 118.483223][ T5974] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.498256][ T43] usb usb5-port1: unable to enumerate USB device [ 118.663333][ T5974] usb 4-1: Using ep0 maxpacket: 8 [ 118.672132][ T5974] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 118.681704][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.690214][ T5974] usb 4-1: Product: syz [ 118.694687][ T5974] usb 4-1: Manufacturer: syz [ 118.699357][ T5974] usb 4-1: SerialNumber: syz [ 118.706665][ T5974] usb 4-1: config 0 descriptor?? [ 118.724467][ T5974] (null): radio-mr800 - initialization failed [ 118.731035][ T5974] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 118.751713][ T5974] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 118.769026][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'. [ 118.945013][ T6479] kvm: pic: single mode not supported [ 118.945120][ T6479] kvm: pic: level sensitive irq not supported [ 118.952600][ T6479] kvm: pic: non byte read [ 118.963353][ T957] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.975433][ T6479] kvm: pic: non byte read [ 118.980007][ T6479] kvm: pic: non byte read [ 118.984819][ T6479] kvm: pic: non byte read [ 118.989789][ T6479] kvm: pic: non byte read [ 118.994462][ T6479] kvm: pic: single mode not supported [ 118.994516][ T6479] kvm: pic: non byte read [ 119.004670][ T6479] kvm: pic: non byte read [ 119.009294][ T6479] kvm: pic: non byte read [ 119.034173][ T6479] kvm: pic: non byte read [ 119.053494][ T5974] usb 4-1: USB disconnect, device number 7 [ 119.125712][ T957] usb 2-1: Using ep0 maxpacket: 32 [ 119.132332][ T957] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.145067][ T957] usb 2-1: config 0 has no interface number 0 [ 119.154159][ T957] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 119.166171][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.174359][ T957] usb 2-1: Product: syz [ 119.178724][ T957] usb 2-1: Manufacturer: syz [ 119.183446][ T957] usb 2-1: SerialNumber: syz [ 119.198054][ T957] usb 2-1: config 0 descriptor?? [ 119.208283][ T957] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 119.217561][ T957] usb 2-1: selecting invalid altsetting 1 [ 119.223879][ T957] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 119.254354][ T957] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.267569][ T957] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 119.276843][ T957] usb 2-1: media controller created [ 119.339864][ T957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.466764][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.502830][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.619192][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 119.665159][ T6501] loop3: detected capacity change from 0 to 1 [ 119.672909][ T5882] Dev loop3: unable to read RDB block 1 [ 119.682055][ T5882] loop3: unable to read partition table [ 119.688590][ T5882] loop3: partition table beyond EOD, truncated [ 119.712635][ T6501] Dev loop3: unable to read RDB block 1 [ 119.736860][ T6501] loop3: unable to read partition table [ 119.747568][ T6501] loop3: partition table beyond EOD, truncated [ 119.754024][ T6501] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.087928][ T6513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.154065][ T43] usb 3-1: USB disconnect, device number 7 [ 120.364957][ T5940] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 120.406098][ T957] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 120.427530][ T957] zl10353_read_register: readreg error (reg=127, ret==-110) [ 120.427567][ T6493] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 120.554493][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 120.565997][ T5940] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 120.594958][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.641525][ T5940] usb 5-1: config 0 descriptor?? [ 121.406896][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 121.419819][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.469736][ T5940] usb 5-1: USB disconnect, device number 17 [ 121.710889][ T957] usb 2-1: USB disconnect, device number 9 [ 121.840899][ T6525] trusted_key: syz.1.138 sent an empty control message without MSG_MORE. [ 122.183544][ T957] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.347388][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 122.397872][ T957] usb 2-1: Using ep0 maxpacket: 8 [ 122.412530][ T957] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 122.428038][ T957] usb 2-1: config 0 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.469035][ T957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.513204][ T957] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 122.542144][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.609909][ T957] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 122.632538][ T957] usb 2-1: no configuration chosen from 1 choice [ 122.890368][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 123.604196][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 124.038815][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 124.473236][ T957] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 124.663173][ T957] usb 4-1: config 0 has an invalid interface number: 129 but max is 0 [ 124.674501][ T6556] loop3: detected capacity change from 0 to 1 [ 124.723273][ T6556] Dev loop3: unable to read RDB block 1 [ 124.730751][ T6556] loop3: unable to read partition table [ 124.739074][ T6556] loop3: partition table beyond EOD, truncated [ 124.760684][ T6556] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.863200][ T957] usb 4-1: config 0 has no interface number 0 [ 124.928411][ T957] usb 4-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 30207, setting to 64 [ 124.974004][ T9] usb 2-1: USB disconnect, device number 10 [ 125.057359][ T957] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 125.097746][ T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.122346][ T957] usb 4-1: Product: syz [ 125.129968][ T957] usb 4-1: Manufacturer: syz [ 125.137904][ T957] usb 4-1: SerialNumber: syz [ 125.178428][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 125.241794][ T957] r8152-cfgselector 4-1: Unknown version 0x0000 [ 125.248986][ T957] r8152-cfgselector 4-1: config 0 descriptor?? [ 125.257097][ T6552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.279098][ T957] r8152 4-1:0.129: Expected endpoints are not found [ 125.353388][ T5940] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.362965][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.374893][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 125.396191][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.407260][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.421662][ T43] usb 5-1: config 0 descriptor?? [ 125.433391][ T6559] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 125.445689][ T43] hub 5-1:0.0: USB hub found [ 125.453196][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.533449][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 125.553663][ T5940] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.562999][ T5940] usb 1-1: config 0 has no interface number 0 [ 125.579113][ T5940] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 125.590355][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.612845][ T5940] usb 1-1: Product: syz [ 125.629472][ T5940] usb 1-1: Manufacturer: syz [ 125.643204][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 125.650311][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 125.665537][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.673605][ T5940] usb 1-1: SerialNumber: syz [ 125.679288][ T43] hub 5-1:0.0: 2 ports detected [ 125.684859][ T5940] usb 1-1: config 0 descriptor?? [ 125.698971][ T5940] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.717355][ T9] usb 2-1: config 0 descriptor?? [ 125.729128][ T5940] usb 1-1: selecting invalid altsetting 1 [ 125.742656][ T9] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 125.759931][ T5940] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.789991][ T5940] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.807727][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.821108][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.910006][ T6567] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 125.921893][ T6567] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 125.930296][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 125.939464][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.949497][ T6567] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 125.954859][ T6567] Code: 20 a3 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2b 10 00 00 83 3d 23 8f 30 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 99 05 a8 f6 4d 39 64 24 60 0f 85 51 0f 00 [ 125.974458][ T6567] RSP: 0018:ffffc9001af87340 EFLAGS: 00010202 [ 125.980508][ T6567] RAX: 0000000000000019 RBX: ffffc9001af87420 RCX: ffffffff99aba303 [ 125.988479][ T6567] RDX: ffff888067458000 RSI: ffffffff8dba7259 RDI: 00000000000000c8 [ 125.996449][ T6567] RBP: ffffc9001af874f8 R08: ffffc9001af87467 R09: 0000000000000000 [ 126.004421][ T6567] R10: ffffc9001af87440 R11: fffff520035f0e8d R12: 0000000000000068 [ 126.012395][ T6567] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.020365][ T6567] FS: 00007f621fb456c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 126.024874][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.029289][ T6567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.029306][ T6567] CR2: 000020000029a030 CR3: 0000000030d18000 CR4: 00000000003526f0 [ 126.029324][ T6567] Call Trace: [ 126.029332][ T6567] [ 126.029342][ T6567] ? __mutex_lock+0x335/0x1350 [ 126.063074][ T6567] ? __mutex_trylock_common+0x153/0x260 [ 126.068620][ T6567] ? dvb_usbv2_generic_write+0x26/0x60 [ 126.074084][ T6567] ? mxl111sf_ctrl_msg+0xad/0x2e0 [ 126.079108][ T6567] ? __pfx___mutex_lock+0x10/0x10 [ 126.084141][ T6567] ? __pfx___mutex_lock+0x10/0x10 [ 126.089168][ T6567] ? rcu_is_watching+0x15/0xb0 [ 126.093934][ T6567] dvb_usbv2_generic_write+0x26/0x60 [ 126.099226][ T6567] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 126.104162][ T6567] mxl111sf_write_reg+0xa0/0x180 [ 126.109098][ T6567] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 126.114644][ T6567] mxl111sf_i2c_xfer+0x461/0x4f00 [ 126.119677][ T6567] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 126.125137][ T6567] ? __lock_acquire+0xab9/0xd20 [ 126.130000][ T6567] ? is_bpf_text_address+0x26/0x2b0 [ 126.135202][ T6567] ? is_bpf_text_address+0x292/0x2b0 [ 126.140489][ T6567] ? is_bpf_text_address+0x26/0x2b0 [ 126.145691][ T6567] ? kernel_text_address+0xa5/0xe0 [ 126.150801][ T6567] ? __kernel_text_address+0xd/0x40 [ 126.155998][ T6567] ? unwind_get_return_address+0x4d/0x90 [ 126.161625][ T6567] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.167776][ T6567] ? arch_stack_walk+0xfc/0x150 [ 126.172629][ T6567] ? stack_trace_save+0x9c/0xe0 [ 126.177475][ T6567] ? look_up_lock_class+0x74/0x170 [ 126.182588][ T6567] ? register_lock_class+0x51/0x320 [ 126.187790][ T6567] ? __lock_acquire+0xab9/0xd20 [ 126.192644][ T6567] ? do_raw_spin_lock+0x121/0x290 [ 126.197671][ T6567] __i2c_transfer+0x871/0x2170 [ 126.202435][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.207635][ T6567] ? __pfx___i2c_transfer+0x10/0x10 [ 126.212835][ T6567] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 126.218203][ T6567] ? i2c_transfer+0x120/0x3a0 [ 126.222878][ T6567] i2c_transfer+0x25b/0x3a0 [ 126.227380][ T6567] ? __pfx_i2c_transfer+0x10/0x10 [ 126.232399][ T6567] ? _copy_from_user+0x94/0xb0 [ 126.237165][ T6567] i2cdev_ioctl_rdwr+0x460/0x740 [ 126.242101][ T6567] i2cdev_ioctl+0x64b/0x7f0 [ 126.246600][ T6567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 126.251631][ T6567] ? __fget_files+0x3a0/0x420 [ 126.256311][ T6567] ? __fget_files+0x2a/0x420 [ 126.260912][ T6567] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.265851][ T6567] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 126.270879][ T6567] __se_sys_ioctl+0xf9/0x170 [ 126.275480][ T6567] do_syscall_64+0xfa/0x3b0 [ 126.279990][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.285194][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.290782][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.291260][ T6567] ? clear_bhb_loop+0x60/0xb0 [ 126.303604][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.309495][ T6567] RIP: 0033:0x7f621ed8ebe9 [ 126.313909][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.333511][ T6567] RSP: 002b:00007f621fb45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.341914][ T6567] RAX: ffffffffffffffda RBX: 00007f621efb6090 RCX: 00007f621ed8ebe9 [ 126.349869][ T6567] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 000000000000000a [ 126.357827][ T6567] RBP: 00007f621ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.365776][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.373728][ T6567] R13: 00007f621efb6128 R14: 00007f621efb6090 R15: 00007f621f0dfa28 [ 126.381691][ T6567] [ 126.384692][ T6567] Modules linked in: [ 126.389927][ T6567] ---[ end trace 0000000000000000 ]--- [ 126.396591][ T5940] usb 1-1: media controller created [ 126.397415][ T9] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 126.410277][ T9] usb 2-1: media controller created [ 126.419027][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.433818][ T6567] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 126.440278][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.452144][ T6567] Code: 20 a3 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2b 10 00 00 83 3d 23 8f 30 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 99 05 a8 f6 4d 39 64 24 60 0f 85 51 0f 00 [ 126.504702][ T6567] RSP: 0018:ffffc9001af87340 EFLAGS: 00010202 [ 126.504798][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.538955][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.547631][ T6567] RAX: 0000000000000019 RBX: ffffc9001af87420 RCX: ffffffff99aba303 [ 126.555701][ T6567] RDX: ffff888067458000 RSI: ffffffff8dba7259 RDI: 00000000000000c8 [ 126.606637][ T6567] RBP: ffffc9001af874f8 R08: ffffc9001af87467 R09: 0000000000000000 [ 126.625749][ T6567] R10: ffffc9001af87440 R11: fffff520035f0e8d R12: 0000000000000068 [ 126.642714][ T6567] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.653774][ T6567] FS: 00007f621fb456c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 126.672008][ T6567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.678974][ T6567] CR2: 0000200000250000 CR3: 0000000030d18000 CR4: 00000000003526f0 [ 126.687885][ T6567] Kernel panic - not syncing: Fatal exception [ 126.694172][ T6567] Kernel Offset: disabled [ 126.698480][ T6567] Rebooting in 86400 seconds..