last executing test programs: 45.098411875s ago: executing program 0 (id=3259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x100d, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x18) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x3, 0x6, 0x5, 0x2}, {0x1, 0xe0, 0xda, 0x4}]}, 0x10) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040884) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002d0075be1883700000000000040000"], 0x14}}, 0x84) 40.138601126s ago: executing program 0 (id=3267): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) io_setup(0x101, &(0x7f0000000340)=0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0xffffff7f, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 39.502340519s ago: executing program 0 (id=3270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_setup(0x2e32, &(0x7f00000004c0)={0x0, 0xeabc, 0x40}) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f00000000c0)=[{0x0, 0xc63e}], 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x108002, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@smackfsroot={'smackfsroot', 0x3d, '\xea)!!{'}}, {@measure}]}}) 35.808441126s ago: executing program 0 (id=3276): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 35.154426014s ago: executing program 0 (id=3277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x9ba, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x24, 0x301, 0x0, 0x80, {0x11}, [@typed={0xc, 0x14b, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_enter(r5, 0x32d7, 0x0, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00"], 0x20) 33.954745117s ago: executing program 0 (id=3280): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x8, 0xfffffffb, {0x0}, {0xee00}, 0x1000, 0x81}) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0xa, 0x81, 0x50565559, 0x7, 0xb, [{0x8f, 0x1}, {0xfffffff7, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x8, 0x9d8}, {0x10, 0x4}, {0x1}, {0xfffff000, 0xffffffff}], 0xcb, 0x9, 0x8, 0x4, 0x4}}) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) write$P9_RXATTRWALK(r3, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1568, 0xd0, 0x13c8, 0x11d0, 0x11d0, 0x12a0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xe, 0x0, 0xb5, 0x8, 0x280d}}, @common=@ipv6header={{0x28}, {0x30, 0x33}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15c8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRESOCT=r8, @ANYRES8=r3], 0xfe1b) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x0, 0xc6, 0xe, r1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="00000000000000000000000000000f75ac8ed025f8d2fa1a04a23f5ea40fca49c3587d", @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000800"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {r11, r12+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xa082) write$UHID_CREATE(r13, &(0x7f0000000180)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x9, 0x7f6b, 0x4, 0x7, 0xc}}, 0x120) r14 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r15, r16, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r14, 0x207a98, 0x0, 0x42, 0x0, 0x0) 22.006884799s ago: executing program 2 (id=3301): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000103010100"], 0x20}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8090, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1c) ioctl$SIOCSIFMTU(r2, 0x8922, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0xb2e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 17.903830038s ago: executing program 2 (id=3306): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) socket$kcm(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) 15.409902341s ago: executing program 2 (id=3311): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@remote, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100}, 0xc) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x2, 0xffffffff, 0xffdfffff}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) r2 = fsmount(0xffffffffffffffff, 0x0, 0xfc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xf4, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="23622ddaf65a493344cc90e282f2d0b0ee7ed49abc0419ae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "640b14b059ce0201"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20ed6b3b1cbcb330"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7daa60c242623f432dcdb29718be7d9d"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ac2ec8984f409b239cdc5a904e35c0cf99064632bd4bb255"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c1059796d0ee28659b5ad68c9a2a3c65c474b0183b7e85ac9edc3f2d881f8b90"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3a8efcf44120fb8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xde8f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5b7b72579230951b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "05761d58aa236360"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b248972a36026b4968ef6c7fa7bb621c"}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x48010) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x200000000000002f) 9.992535787s ago: executing program 2 (id=3316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, 0x0, 0x2000, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000001440), 0x0) connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8001902}, 0xc, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="840000000906000000009e5e40648fd645934efdb42e0d3e48000000000000000000060900020073797a310000000011000100070000000900020073797a32000000005000078008000940000000020c00168008000140ffffffff0b041a002c2d295c5d2700000d00028008000140000000000900120073797a3200000000140017006272696467655f736c6176655f310000adec9b47492f54f3aa173a6a6a02b8e0570e557e11f8"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) close(r4) 9.951899636s ago: executing program 4 (id=3317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) r3 = syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x330, 0x120, 0x450, 0x330, 0x330, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000380), {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0x0, 0x298ae45919f1461, 0xffffff00, 0xffffff], 'dvmrp1\x00', 'virt_wifi0\x00', {0xec1afcbb0608c48c}, {0xff}, 0x67, 0x69, 0x4, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x40, 0x40, 0x4, 0x2, 0x200, 0x600}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3a, 0x57}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xe31, 0x10001], 0x9, 0x10, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@mcast1, 0x29, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x10, 0x2633}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0x807fff80, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffffff, 0xff, 0xff], 'pimreg\x00', 'veth0\x00', {0xff}, {0xff}, 0x2, 0x5, 0x2, 0x4d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@mh={{0x28}, {"ae0a", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@private2, @private0, [0xff, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'hsr0\x00', 'lo\x00', {0xff}, {0xff}, 0x88, 0x9d, 0x5, 0x3d}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4=@private=0xa010102, 0x40, 0x1e, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) ioprio_set$pid(0x1, r3, 0x4000) syz_open_dev$vim2m(&(0x7f0000000040), 0xf2, 0x2) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x4, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x3, 0x58, 0x3, 0x7f, 0x5, 0xb49d, 0x9, 0x2e14}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) listen(r2, 0x4d6) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r4, @ANYRES64], 0x58}, 0x1, 0x40afc, 0x0, 0x40010}, 0x2c004051) 8.254407729s ago: executing program 3 (id=3320): io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f00000000c0)=""/120) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x0, 0x3}, 0x1) 6.710383374s ago: executing program 1 (id=3321): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x5, 0x2}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 6.266484589s ago: executing program 1 (id=3322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x4, 0x2, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de000000ffffff7fa600000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 5.689590132s ago: executing program 4 (id=3323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519e", 0x10}], 0x1}}], 0x1, 0x4000001) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x1, 0x9, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000, 0xa000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.401294864s ago: executing program 1 (id=3324): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000540)=""/107, 0x6b}], 0x6, &(0x7f0000000640)=""/124, 0x7c}, 0x2}, {{&(0x7f00000006c0)=@hci, 0x80, 0x0}, 0x3}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x4, &(0x7f0000003a00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000000c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/239, 0xef}, {&(0x7f0000000d80)=""/74, 0x4a}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x3}, 0x8}, {{&(0x7f0000000f00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f80)=""/216, 0xd8}, {&(0x7f0000001080)=""/183, 0xb7}, {&(0x7f0000001140)=""/253, 0xfd}, {&(0x7f0000001240)=""/97, 0x61}, {0x0}, {&(0x7f00000013c0)=""/12, 0xc}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000001400)=""/105, 0x69}], 0x8}, 0x2}, {{&(0x7f0000001540)=@nl=@unspec, 0x80, &(0x7f0000001900)=[{&(0x7f00000015c0)=""/138, 0x8a}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/15, 0xf}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f0000001880)=""/98, 0x62}], 0x5, &(0x7f0000001980)=""/105, 0x69}, 0x1}], 0x6, 0x1, &(0x7f0000001c40)) (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001400000008000a00", @ANYRES32=r4, @ANYBLOB="c736be837ef4627a19c0bf974b9bf56a5b3ab8d4f5bad71de07db8de15a561f2dac32e7c367979ac54e34b84abd53af797842b913dfd60158e17808ba5e7d1686d113f4e9b1486812097c555b0722273359230099e1eddcba558623c2d2007d21befa9ab71f43df7ae51af58b41f0e7117c28f795c35c8c6254d031cdc5046bd13645bfc0c9991295d45fe4791"], 0x24}}, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 5.30223504s ago: executing program 2 (id=3325): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d9000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) write$cgroup_int(r2, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@dev, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4c, 0x3a, 0x0, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x3, @mcast2, 0x1, 0x1, 0x1, 0x1, 0x3, [@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0xf}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3}) socket(0x2a, 0x2, 0xfffffffc) 5.29654393s ago: executing program 1 (id=3326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x100d, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x18) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x3, 0x6, 0x5, 0x2}, {0x1, 0xe0, 0xda, 0x4}]}, 0x10) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040884) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002d0075be1883700000000000040000"], 0x14}}, 0x84) 5.293631706s ago: executing program 4 (id=3327): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) 4.901564384s ago: executing program 3 (id=3328): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$kcm(0xf, 0x1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)={0x2b}, 0x8) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="02999a0044653500000000", 0xb}, {&(0x7f0000000780)="a112fde440", 0x5}], 0x2}, 0x400c010) 4.778655038s ago: executing program 4 (id=3329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000020301040000000000000000020000090900020000004f33020000000800010001000727"], 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 4.40713371s ago: executing program 3 (id=3330): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0xfdef) 4.102115404s ago: executing program 4 (id=3331): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0c0, 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x4, 0x1, 0x0, 0xa5d8}, 0x14) 2.90624495s ago: executing program 3 (id=3332): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = getegid() mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5dcc}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}], [{@subj_type={'subj_type', 0x3d, '/dev/nbd#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '}'}}]}}) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000), 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r5 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r4}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f00000004c0)={0xaf, 0x3, 0xffffffff, {0x1, 0x7ff}, 0x8, 0x7ff}) io_uring_enter(r5, 0x2217, 0xcf74, 0x16, 0x0, 0x0) 1.951614689s ago: executing program 1 (id=3333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0x474, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x328, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x2fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x254, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0xb5, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf7, 0x2}, {0x0, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xd7}, {0x0, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5b4293921e5bd8", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="320bab098f80"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\"I', @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xfb, 0x1}, {0x4, 0xfc}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x5b4}, {0x2, 0x1, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xe, 0x1, 0xfff}, {0xb6, 0x1, 0x8, 0x2, 0x1, 0x2}}}, @TCF_EM_META={0x10c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="07753f4957d13932", @TCF_META_TYPE_VAR="7a742fd408", @TCF_META_TYPE_VAR="8f6523", @TCF_META_TYPE_VAR="72c62cbe04"]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="223aae32845e83", @TCF_META_TYPE_VAR="12a9816dc8", @TCF_META_TYPE_VAR="cf", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="92a8213b588cf6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1e247798", @TCF_META_TYPE_VAR='^', @TCF_META_TYPE_VAR="4ba29b5c", @TCF_META_TYPE_VAR="91e2ed63b5", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x2}, {0x2, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xbe25, 0x4, 0x1}, {0xfff8, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="c448", @TCF_META_TYPE_VAR="ffba1ad651", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="42ec44cd626ff4", @TCF_META_TYPE_VAR="1a0a6b6933", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='HD']}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='%']}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="e13c06b6be9ef7", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1ca473966ff2", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="a1af29ee14fe8e48d4", @TCF_META_TYPE_VAR="e7c1fa", @TCF_META_TYPE_VAR='b']}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x53}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3e, 0x1, 0x5}, {0x10000, 0x8, 0x3, 0x4, 0x9, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xb66}, {0x1ff, 0x53b, 0xd405, 0x4, 0x7, 0x1, 0x1}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="b4"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x8}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="3cde2991dde3d3693d", @TCF_META_TYPE_VAR="86a24bea", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x1}, {0x2, 0x3, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x80}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x7c, 0x1, 0x0, 0x0, {{0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x59, 0x5, "717fd78d94f2ed852fef37652539cb21ceefe56bda5c9d0b2f18c424e93d93a028d331862622f23fe3e661fdee25cffc3e74149b8ebe8968a34d40966569d4d3b9bd1063aa6fb89ffeabbc9a629b4ca087aaba154e"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x10c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf4, 0x1, [@m_simple={0x94, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x5c, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.89818933s ago: executing program 1 (id=3334): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr={0x2a, 0x4, 0x4001}, @ethernet={0x6, @broadcast}, @ax25={0x3, @bcast, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x7be, 0x0, 0x3000000000000, 0x6, 0xd4}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r4, 0x0, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x4) 1.615290883s ago: executing program 2 (id=3335): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x48, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa8, 0xc8, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0xd, 0xd, 0x8}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "7490db9201dd27c9106aca95ecd66ed0"}]}, 0x1, [{0x9f, &(0x7f0000000200)=@string={0x9f, 0x3, "49871678a555439c8ca32dfe590091ebf46444aa8228d954caeb973bcf0a74dd756969ccc87d0e9f4b1da7a4f028395e9dbd04443ecb403f9bed7529cabb6ce9b4f059c579b8f40218e112c4ecc0f8ff0cf3a95ee4d00141394ab518950325935eee0b273c0c0b3ddf2f851b83d0bb5eda67b6a8573e0f1f8e9a1f667fe90eecd59cdf3aca56c975e9a42dab6c8cb83d129639a58dd59db1f7ad863eee"}}]}) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000340)={0x0, 0x7, 0x7f, {0x7f, 0x3, "16d24ebf2074d7ee6d81b0ad20a8ceceb66de8b8675a4167be7fe1b0f7d4beb627b44a1c874fc3779d38518cc58a9f5d41647cfc6dc29bf6c0c828c0ef3d8b85f4c626a7c020c5a850268f37f7b34bd2ddf5e0da89f99a134e0f07ac77787305c7e6235e578ca8872e15c3d0991d17d385381de7b5bdbb05473d9f7b59"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000740)={0x34, &(0x7f0000000400)={0x0, 0xb, 0x44, "1c4f07e217eef3172ae85a90775485e27af0a8845118076b0937890c2cd8d9a1c8c8db402ddb621f238f0f75e77ef36c104b8de1dd26e2f15bfcf8a05c11d0f951bde5c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0xd4, {0xd2, "153673c9144a65ebddeb2b1e67f9cf3c9443390b8574799b8876c23c9890dae4e7508dd2d2bd66f20929f7f9abb6ddd42d86f7d0513e1ad9b206cf662ca4f71751aa576b606d59032e1d6244cb553266ff7347ce7acc3d63b0c32b3a804a8136bba9723cdc9dfd6dc492c41ac35c152937326c346c8e81f8f4d97699dca8fd773d0b90df2125b42b8595da3fcc6878b78bd86722621c536fceb3d3592cd7cc9eb62e22990547487988bbe16841fdb060599b2c26e93980b2b98894ba4418184ce283e0ee99b819d30d9e802b0107212aa75c"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0xa4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) 1.114438595s ago: executing program 3 (id=3336): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getuid() r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004180)={&(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x9010000, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="36994572688a723f55f6c892da71e1046da5f35492448396b244a1720cd747a63b9b6924fe115dd2a0c9df181338d20cf106f3b7844fa55721d59a86923e1b922cf3275acf7e4404431617f18c2db0b1324613a3d6a8f9dc3f069636c2f8acb91fbf7e0bb850cb888c359b4c1eb01c19e27c175fa026a73bd64883ef3b60bc8c64268bf6c2fd14cbe4288d4ff447f80b0609b3d044f2204f2972f8c29914ebf19ee44884eef45c71af75cf56696b78e2acff5a419c487aaa8733410a1ba7d412a62ad2bce2a582fd85f6242beeb6f84ed8d028e17bc32b9737216b9687be4dabefb293b1990fd9ed088f3fb05f5c661d18768e83d9a8fdcfc94f4eebdd6f06426b81838facc8c133d8d63c4c8998edd62ef6edf3d7a661797c825fb8531061ffd491e4bb11b70d9f26cdcb90e298195a7e5be745b2db3680e82da828251b9182cd560743aea8eb8830ee1e2c9b74662c7eb4ab5f7deb22df0ac3c2ea0c1802bbde31cd2bc7eb70743f232520f095583c4678783860226f3a73a70b0ed9a7c1b0082534161617adab5325845ca342aea4abde069a06f233da43dd33a60909c6bd2c66bf6a4ea4ac7cb17d00ddbf6f00b3788fe423e1c78e8822374c7c68f783171543c501e6a1d76eeecaa1c3289e8c4cba39302ca133ac90b4b0b0a8a37cb4f017e34a9314abe08094be48c5ef34fea2ead8f468a025f0df36555ff4f0bdf8ec4e1239e9f113a413b81e87c92e1561c5e7c321ed8f9f02db26273c12030ff7803ac6d31bcc2b78563931a37846d99bca8fab7cb4a64dd4e9b72d96f1dcb6aea0df25d51de311582df6894351eac495af73505ff587f4df21bd5110bbf924899cc6c32714e9f02b77d6d3559d5bee1d6f61d1865f6f4a8122b9e19532f8373c93d7af9d7649bef50f0453bf1f47abb4b3b6fcdcb965bc6ecf81edab179bbfd4da97d239d6184af776f05acfbfd4b9baf9033f0995134880ec8247b4c3d56b282072f79a9c73ad501bbdbe836b2c841166942da365288dddaeb771badd24e42bf0734530f229b5ff91b941ffa5ef9c87bafacab48e8634fb0af28d80e1d9db269c87325ce35dfc97a05405acc85f689fa4eba853d6326cbd2b47fa29a370032807efba7f0492129c87d14a522ac8fb5ecf5163a84fdef7c2af78a5c72a3794858a7d225d16c47f3adc79f7ddf54d42d3c6166da9aec5e0e1227d447521c1f0070031f7e00bbe4827b7f7f99e9953e6fab792b4b7feba4a6aa8fa358ca8aebdedf100458d97177deaa8ef857177ca1192baeebff54f527f3fde3dad7be43ad82d810abe3f8b6251459fbd9f1a478c01ec538f4331b7c23a290239b345dbd8d675982bd16ad18183bdbf0fa868a4592ea76f98ea30fbbfe3e7c3c2c8cd5d12ee35198bc943b97cd53930d33cce5d1fd288d6cf7ae037e55c90436fece808aeb659b321ba35033333b1ac88f36b3f51da8e9e2c6b553dabeb84b9d8a18115c0e380b5e8b0aa39780adaacf6e8bd5141fc50e2411fe620383fa2513782f3f6a77cec75b39cf6bcfbbf78566dc06ab65f35376f62728bfd3bb55e7132d8ecceb2462f22d94f579ac16af49941050ea33622b5efc353e46faac0234edf340ca1a94b67347e66cf842932a1a4d99dadd28249877c9d7dfa33e4eb66a2d586764e2e79b171e0c3dcd961aaad356880fe66a9cf88a0d269b3c67f417202f1cd5b136b159db316b6571aa8edb2ffd68f51a0c9f645d66ab131da1b02a676a1a4da60db95c17f1f356179bab4f2ec1682e71408c6a1ec166882a975eba4ba1e7f536a1df4ad20a90850f881ddd3819e3eacbcc169b05df32b4f484bb41f33f43cb741ab7afa0096c708c9eafb0742785c0cae99d14914e38b16d2c755b8911eb0c5e2366cedc32872110fd638d15c933627e3922f37e740672b7cf1f6c96be4eea2449185d2bea1bf55e8f9d256b377dea14c3652eb1acb2c268a067f963b936ba87ea75e29a5a9435777824747f499315fd59d071ab99726b5ae7bebe11949a0c8e56707d4059ffa93beb31fc8df9ab37bc4910140c8df8972a2b942cd2b7adda2bf56b1d0ba98b275710ea7f96afc8f67affa65cd3068ceb412651295ac356238ff5db7e7461bf749485706aa96fc121ca5726e50af3f1584b3f9f9933099926722ed3648abaa55f3e5fabb8b615a38c6e06c0a473c63dabf1233abdf0d34e31a85933602dc2e5dfcd1cc08742edc5ce0106f52ea93eac6c2c7acd2bfca0b45b91e9ccfebd5de274492a800868ccdec0ee5b5bf43bd3d08a9f66c677b40487b3fd699ece359a1766b5eafa2a2515e4f2ef41e1f24ff29f7fc00d47e8c2e54f8f4612fb708d3cb76669e94e12b8c2451bdea7bf7416bc48f6490b725997f768c2806528a7dcd558ee3b06df4424fdab457271b9e7737772af7cf731291fab886812e0ac02419183723330daedb0e308881d8e10ca0930e7d22203132f6d89e083110fa619a4b963852de4507b66f4ae335bb48e53384c4152b2e34bea9801c72614a1f24df30731ceee65ea72efbb197f910f176d71b155d1c73266dbd7c2fb54b32f60abd5ef3bbf56700e6abb59c8583e47bd80d6c8d5f3818d3727f15d3b7bdbca630d20ac84c407d7c9ebed64cf359c2e53ebb023d60d0ba7e4cbba40b21572bda62dfecc58d012ad33fe8197ff538003f4a49d684f1bfb613cfd6968e1590d96e1920bac632c0e7fcdbc0048a61a78e3379ccec5ee1492df34d72493cea33f35768ba69ddd69f3ac889812cb69e6fba358971bd35810ad5a6375f263e7cf8e9aced5c18f6cc12f1a2c9c508d959d2b881f5daf0463ec12ab3a3ea6f79d80728370bb14ad765f5a46779278f0afddece17141a32724be6ceca2720000f12c89cc31cead37f57d4de4dfd9e43339737f24c5fecbfbae5bea8282cd3a9d853564fc2c1306fce8acf2b1b20d7ba0c96654698c33a252ca8ce5b7a9592e018d584e19b621f2864d6a88f1f7e087b28f05c2f2af7e0111f4d003a7610cf5769b31547f82eea65573146cb750aae16dcd201c336219f43c7859f34d6b34c1dfc997acb374126773481c28bbe87fdb3f36e26ff2c58ac0a8089f96cbabba5cc4a447f445d1f4faa13a374f12e79d940364ad0e8b39a26f77287cd0ba143cacaa7f57409a618e31233a0e0ba784989bd766d711709d1ed860ff3cde6702ff81a01cdbb027089c9a666acdc560cde300ec036c3821f797776d93bf6acca00f89d1b3204305895e270c056fc53c20c76fbb56739e33b3a5462fd762647f1def756c9b5c642b2707904f7de19cc57043a0331592c385c62553fecf1aa015d11f876c33da75fa7320fd05d7f8613623105dcc44d90cdc6cfe7e33e8f04dd4dc8fe24ed893a7b530a28542d0d335ee2a50b80ef62c406bdcf4affc373a56c383386ddcb2804f8cdf38093ffbdeda01b8169e9a2807df5a345aeb4d76c9996fd3d9dd16ab02acd30fe627457c006760b7891f2bfa406658218218d0be35ef23eea1ee5618d76aa4b9287eb8473b2a14a8a5d49bfdff6b453f0ef6804f257f3894fe017d30646df30298bb3b8d0dbcac23133837ba85bee7c3c762887afd9d0a37f286df8f42a1aebd9e2554d7875be364b2dae3c8bed39b9ca5218f1ca2ba38b2133b578ae50e6d197534a2f1068c911b6e7d1af9c6e47388d60bf43b809cd6f4173b4dc388263430eac2ca4e196127b84a00373a10cbf73c265811c444d503a833214ef8dea53eab1a2663b126e52daeb0b32bc257b86db3fc9e23aecb65b8ab54fe3d345b286c8ee3e188a939ec08d10ee9374316e9cbb0719ac3bcd196836ae6182bf27611858c36e138b80fbb81406b9c5c1c7df54c4101082c257fa7d86dad0fba6d4ebfe946d7e79be51aed4fcec00fab76351accbebd64f7124a8885597a759e239aa2ef67a6723e9c67e157b8702d386fa067338dd340b3cb23c958668fd7ec7fbecb90ecbe789cbfba1084a7dbf5eb7c8dcddb511d154dc1b8317010015d4a4b09494529ddd86b9d185a3ec15dfaa22e9c559b7be1d633dfcf7d9f80ad0e89e6b9eded10133c76b200e15aca04f33eb9fbba1dcbb8486679a8e60137322bc3577d16554563325d719980f5db17ee77c2871258e3e139fdd625a5f31d142d4e782672ef75444c1c053b80d5fc5b8803dff7e0ee91e2d2b093594fcd28586b1d01b9016cfcad8772bc2e17b993b8a26cf4ff527e740a7aca3905d4980122ba74efc43325eec643e90f6b6dc23915abf5d6bdba9cede6d42ed63bee70883cacc22bc5b1ea04c7ed60d5fc4c309be814ad95f2f4e73a42e3f90835d7c5318586c83b0c736719b528bcc4328470d185abc22ce606fd13058f26c2aeedff2686221ec2e7328703cfd55c78ebccea25f49d4b49a65e8844105e17910c40ef3cd2cb2b069c8f6824272d63318c7b90a2c8d4b91fa5a1a1b4729bb7645f0b294d40d482816b9a67bbf10d2ffdd59c4ab40225f4723b18b2fa66e24f003bc23309166f696cc0f42bde18842b0462b6c1618a3f27056ca9fbc58138779c921284ed37a95b9bf63c11c964bd20c9f480f817389fa53ddda04d8354cf5bb79121bffcc4f7ab3baa3dfd989a7e3bf11e237358c44e7ccca831e7228ce9e2a4652409172752d050ff1a4970cf6f7d58b244bf7f6163efd91591726b9f8b9a326c7fa716b4040723b788812e1b7b9bf8c3c71820ddd1a3463058b46821d14e2c6c0af22de1300900dccf5dc50a916441bffebccf2631a853dda3e13468c6f7a7016126549b82c0e5fc85b63ec65efa8f7263f95f5a0b2adb7dc01d3b64eaf886fad4d2107aa54477eb368e602d0f5b6184d3a305333c51105f36eb84c14eced82f55bc5c015c60fdcb804280c2d27f575a7a9380f3b89df5b25c701db44c63fa71f2376e701415d0f349ba1f0207ea788decdc89e07663474613f7da11cb26d9bff5b83a32fbf7124422e5a0b5a240e538870cc7db4cba324e0311eec2985451a71140977602c6a34f97a72b6e98ff2e354b2064af3b32d831ddbc2c537002d6988f6d17ea8e7598da729e2fe31247b84a26135fc91108f676360c8ba8d5a4a1dd5bd83adb42b1677966478abc0ae0a98a3e4417c9d706c6bb69ad34a92967a0203076e96bf86d6e05c7b8b911c99ce3f331fd0e793928c3eae3bff912bf57205737a57ee62246374ed4e9c25421af2b0b7bb657cc4cc23a8ee85993ef53d20a4f740a3937420f3842d63abb5a2dc7aaa5197ba0f95ca6075c53c462eeea637ba839a7665c2ecf2a852a80a74b178df06612a500333923cb72a50e3caab97c4983b72a2d6e72f7cee1bdcff8d731b90c65faa9ca50277e223b072d5c8304a27cb77b90133744a98b2679d13a62ed9cb7186872dac6ad18234d3b5d3853e6358130ba38581dfac73904539710d98449f757909695a78fbc433917f5e2ef3ec9e8ea0a22e857645cb33473ce96f9d4d6c2c550b49c89480f69995088d4749ebf55cd93556b7aaa3805d0f4ea7ca4167229e4efbfd85d4bc1730f88234844bc0c0963aa48b112706ce04c6c01cb74beb81af76f68735089687680034d0ba3a24e1b360da99787d55daef9dcbd543553a591f90c33306adf95ecec341aa38251c4c91bcb7e1733ba42929d02828ab1d969e5dfa198f171870a3cfaa265f582339e88d548232fa587a11ef201052b3c062af12d26bc6d59bf8346f5dd4281379619e8522256bb26c12549a27d97e02f026c0ce74b0c83dbc54a6be796978586d6d81eb95fd6f2eeec7e0b7cf74a6f304e5ec37e1d4418ce71421d4d0c2db8dc006df9fd0fdad9819ea200762eb8bb852024026fe6d1fe251196aab64652813f4e367de415e83aaf5feb4ef1408bf77d63bce490ee080496ad7279d39d214dfca6ed1ab942079a56c2e49be59da8066a8c64563f870a01c22b76d31648e7aaa129508576cfaa33b601e0e1dcc79df916845bc8597a15637e9e9c1908a711567dad03d5d26fe59f28c84daba494ed2c7d2f35c7fb18d9e7505c7e2d764d0ba54a1909b12d75207f23c7be4911d474ba17315eaa049b9fff6c67b22ff74b94e48f1e007a65276ff3bf68f7d62d30989caf0f40bef1ddc34017ccd8719d76d076da927e04468eb158b29affdf86683dd29d04d74e215e501a2c12a7f0b07b23f528bc97d27aa83ab29bb63033db1cf4f4ea950cc3f4a6da2af10fc0ed07937b4bb0379cdb8df00a0942ceaccd149780c57edc054ee656e0bed7b783388a5e88efdda2f4fdaec946160f6de676dd7aadfad246ae34bb4fe7af2a13162db3eb70974534755e60526f61762eeeab56d4efe18f87fc25d63b6c338bc56b8a32659c0287c5ea196bbee5901db6947d1df323c56cffd6e8b5824842eaea4b4d33c7ed21d88928a97243c9fc67bd4cca89881870640233f12085f870f89c3e4e5c5ee0186c554c94a7ae3327c4ba06bbfca4afca4824bff976a857dac35545e41a37e41afe73c85c8a7fe4f6fa5a6f65841001925034785db5df8032dfbcc7ea71ec6dc0062b8dac86547df5a1cd31a9f1b5a6600b43adb509371594622f0d36011d9e3c9af48d6ef64b51f0fc2649635aaf83aa4e2c3484268a83d5ce9d3a8463bc1d079c56eabeaecd59dfab55c2f02fd4bdb93e3c76730ae2e20497518b2382fb2389fb30409b448619794ddc138c4c7ca6f5b77946d545325094831cc994f1a9661f3fb605d04bce660b8377146ccace5d097644aa7b0763b38c3d9020680a3f41207c5a1a803abd2caf15df8620dadbde57be4cef68307c559c27de9053137132b9a9c487bac0cab9ae82e97e1b05ea47f6acb82da60ecd01b1b660c31f631dfb2d774bfa82696c4770a31100ea890754613a244bc365545735537877e5a28fc54bab59f595d2e64eb3fa9e05d9bee6a674f164c582482643da6d63ed28f596aa258e0bbe12dc792ac4fd69f52a6699ba4d3bdbb38f3cb98b79bdc4a7e6da3b165e3ccc307b12e7e34670ce6cb0fca18eba0c63950c0d0ed775f25346837b53c9d665c61ef12b35957dcac785564077f01e2f07f435321eb11a790eb92b2fc7c8673d5444c4d54f3ba3632fd9ee3c826ee4fb3504fc372c8d4dc316af9ebb43ae2abc7b4259444d89b2ea2406fde2b83a13671a9ec5c0226c56b23bfd4a1c5b73238c339b4fbaafddcbbb0689e7380352b24195ea6de62d0e3573fe63b070a1fcdfcc86d19954f45d2f685addd11286d3681d4e34b004a1af326aee6e34b276393cfa52ddbe073f40bef29043016dbb00295def4b162bcb67474038dc6238af0f12da4e097d207b5e1894741fe9dd9560e25a3e0524bb2443fe2a335e1f625ab4a8c104383dff21b085d42d2a2c06ebcd6692b529e65aa32ac30338a8eead5a6194d59a102b608af4893323fd483921c3d52a137b282830ca079cd7fd9673deb48b02ac66fa80940fad30c26213cab362068371e87b4f69250a309da43d9a498a0b3bd5e3a3b9810c28939616cf73690cdc5722ee4d4c26521104754789f916423543a7b5d34be99baa22d5b849b6b3413a9cc308d0721b3450e884ab8b80ae2282684776362c4c3881ac885b3e7ecdbb63247701d90d08709abf98c2e81063a74fb237ce7f6d3140c501f11f491090cdf779d9cb0e2a6ccb789d82f366729074a9ede59a1be0d579ea20be43e25c8095bbcb07e4183a322d0489679382f7d8b2d83e44b07e90f2a4e71f2b2dd726b6bbeedd0cd79d925667040e4c02ccabcc3778c0884b0cdc99571551091267c553df6309ab2c5851a45561ed205ce2ded35741d0d826479152f5c771920264303e2bf066c62ba3a41c0dcd61e8a94c4ee101aed2b3fcfb6332bf95c89d5ea0ef28f3866ed0e1f0b290f6fe8bea1982233d4f729266140982d1a42cd899cb9801f924613d47ece7f20cf404a8ec00e8117f1a8e8ee187ee2fbdbe9780b262d80def831dc76d33ad52b98a0b984c2706821cf877de66c0462686cb6abec696a5a04a771e5a50fd8e91d987f2f0ff3b2b9483b44a2b152975ae0838767f276a2b69c542c64fd8437038ef1afde8946ec484496062429c91490c8751956f5748a619db30d01662f4c51030251fd57d5fe04d5ff3a641babadecce30559a4415d6087bbe585580b9e76d833d0974e3d6b5b06d466b9a103184cc3afccf9d60d0a2a884fc5a17fe60cd17be5511ffacfb164bee4d6ecf49f041ac56491d1ea9c14a0281c5794540caa479e8df5b2de717bfc0b40bdd9208f0c427bb71a3a22792252b3e70269860d8e4c3a5ce930f4d6304f66c684371da4326d8c01aa34d71affcb9b73859df0676cd75744b7ef3534fffd2187eacee3ab10fd2e6ee22d91bf1b9a7f8ef94f9accb40c7c8897dfd006509fbbe27fcab6002449682d73bad8b948f1dee5be511d33e5ab90e26910fb2aa2ead99c57bb0db60e7fcc7170c77643d2ed924fbc84d944759e517d12112e224f5919b11af307d4e2620660f52700e4b670810b477d800cb8e54b985ba2dca7a7c0010c55c36af2277f4c522e0155921fc7dbac9031b1951b428ef0b44651798001f33b1803f630549dd420dc604b2896d82b6ac3b3f9cc3c96613c78a02dfd58c06c5f85181caf1976d0e59356cbf0d9415fdab3b7744cd75df6d119075a7f6c01360b28e341ac452f9f30146ad2f73a607d92b6fafd3957e68989df1c1d70673ebcad226851ed62c01a06da808c83d5df26151e599fd5abc38e255d6e07bb314ed7cf018bb5bed636ee10a57069ab9e5288e053bd0292f826466c321c96d9915a60f9644d42951205595f89e9d36df2b0da5caa1f1841635129467d1913ad5a54fa8ab79aeb999aac251ce7c0d7c4d7ef9380cf7543f563743b9e63e6264c105b0445556282a98266fd740ecaca36d3119543c2a5abbe62506e67400695b456a4013c0ed2de52ee17c9e08613ad9a2f99dd341b3e66fb0574de0930a1ddab18e4281f11056eb4ab097976861ce17b5de07c51e4ed23bb15e1aab18ce184274bd025c68464ba9c99aafdb3caff046499f440fbbca8d95e8dc104e0501f2a845be955547fab89f1542d4b2b6bc9a822208f4b04417674fc25014e0fb9b8f2087fd12fd3fe4ed8ac18177aa85f7fe73a0df525ea28878943fb0083d7519a46a9eaf5291d17615145007427e091093786a53ccdf69754b4af7c694a113ebf1ec36b1448c52b9dca393e81c01b740ec83f37c9e3e3da52679fa61724ccfcb7c7285493d2134b8585784edba1af493caf6f3dff30c296629668451349569509f57d21acaded0ed05baa2e2ec1df3ec65a78a1e8f3cdc0d82743f13f94ebf1a435ece3395af8271313595d0bd5d3304196941b99ef7f8c911227a9f691c52952b4993b6efcc2254fdf4b3a6233d8b2d283a3ff277cc5f845f9d5df189ba20a2c6894769d3f68ffa2d93dec61e1d1409b47c15c775429187977c687c559b3cb99b700e28ceed01c6e258e6305f6e16675a9cb59dfbbd39b728bbffa0ef893afb9ef533b33f05edd7a33de639a40a8323481811a6897d00804aaa92b8a0e06fcbe899ec551d9f05ee942276f867024a1cb32f4a28139572ecb63660cccb71d797bba097e1f88e57f80013dd69437ca3d6653558aed7435c05e287d9e8537e3cbd00630b99ee8950fd907b86dae62c3406867e82e0c0947fc1711bf0b57753ee85263a4cd9c73ab68bc71c1f0165c7cacc9791ddc86ba2a6d6b1876cd989a39c9569da6ff2fdf34d20f4a948e976aa09fe39987bad0a2cf67c0fe419b98c983df5896ea47f0537b98c698e7eda90911c5a7b6883e53c14a97669deea2ca6b22832e3650a58496753e772e22c0014bdfd0ad1514f15eeec3cd30193b601dc773d2faace5ab8f963038560f155ae7b2b392b42e89478c3facf7a6c8c19f788a90c75cb8dd6a6fcd178b92060ec676a579c0a4d0aa1e00661b76c3d57728bd9639dd93d3b2d5c25537a607677b8d8775169d50a5c7fe93f9b17d08d40c3e6a6b995484004e5aa40a8b97119328f1c675d8fcf366bb6d87857ff9c4787421b7bfa1726f2bd30c66d124e5b6505040cb62e94da081ab7ea1804dfdc05c27d914d3493473f1cda1be9a05bfe2e357527f37e37668c5cb962fe265a778778fa7d7fdffba8560bb3458bda19fc36b2c706d68084a39c138d33bce2453c01a8a178284fac60b94a9c1994bf86daabfeafa889d9b7429c251ea94f4131640aed81961c6652295465073ee210413ac8b439da3e67a46569e9c1d18459e76322bee3df699bceffb58952676e53f5fd0e4b5238149db3c0f2e1554ce98d580f3589dc4102a610377a5c3370ce072799c42488d1f9f0caf876f3d8281a5f0aa21b7518a761b14d07ca3e0fbeee2d72ba0d737968f129dcde6151ab6e274029041caceb30fcd728776822c0d4777e4594bebe80a91ec517cb563ce5445cdffe0492c6d2cf7d8dc6507aa0fcb07970fde0efe22bc10df10af87c97cbb15e45a53d86081ec9a5303b37c997f6a8ec4f24eaf30d52e1aab4e68227d8ec73da0a9c8b1827673e5ac405abdde9ed546e726d0d5920aa063ff31c43f1971207bc3a95386218d8384b256f201c0c171c9d9d62250d53d6f84125658cc2cf12126ad98d501ee16ec6727c5d2dd30e69c6093ee551f1a199737085f64968396e8e7c18ca5edbf977f8ea3dd09725fc399eb43c75cbf26289f1feffb1e288c972215d0adb292c7b256448361f75c7d0abd18b1de46a94712493d39bdd8ff05fb6d2b9bea8df46276a0111fd9fa86c38f8a73f9ff949640813558799e176820a03c6352eeb83eb30495a0dbc9f540683990b97d63f747c4a9e4921e763d0acf9893b4c90408a20b3c9d17aa33a4afd62420b5a18b7bf7016248526350072a380706fffeceb6c713529cedbc2dad83f589f5986286602911c331e6cee9e0dc695d406584e4e72cfd7b1f83ad23a5b60cbb2fca81739c46dd73fccb7828cfb7cd66e1543f714e99e08d055d83ccebc9775159ded84d5c303e5e84447f71ffa40604226a94f7be7fa9319c2c31de6af940452024d02f3765d8aa101d2a17f6cbc44a588dfe5a17fb873f9a558512806478f0854329e45a3dd665564cbed9c885f88a22f2a7381072978508e2fa19b931942c62526aebbb62a995f7f9fc5bd9189c184e13598af2fd3404a16fc98d05bd2b57bd1ce5dc8afa77402434ad7b41547deabb36aa2795aea94f200fb6eee2e0fbbb87869be4a4efd9a1bbafb56829b9ba8d06a4c831cd36b5b47215c4eac69946355e8ed4580a92bf2df4893f28d3015249dfc38842df9c863ecb1ac333e19adc2454d76552e3d54fb98bfea45cbb7f32b7d10414e54c0cc8ca0e5fcf2ba5693727e5b6567e108f7f1e97a0abebef59484e8efa88a10edeb6b2442084ca2fde32eb5b098165cd407a49a59b5df60d746a60c0e3de33a558e35c3ed2741c19c78d4604226420baed38f6b3acbbdddebd559a1722ebfef64854b2dc8e0291b7097c94fab6e10c573a8c2ecc11425eb03cc87d1433df00d97afa2914abd6f5ce38dc360381dab63a1925c324916ae7a592545d7d8dcaa86f42bcdd8", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0xa, 0x100, 0x10000, 0x9, {0x0, 0x1ff, 0x4, 0x7c, 0xf305, 0x92, 0x1, 0x1, 0x90e, 0x2000, 0x3, r1, r2, 0x2, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x5) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x100, {0x6, 0x0, 0x3, 0x5, 0x100000001, 0x10000000000001, 0x3, 0x9e, 0xfffffff6, 0x2000, 0xfffffff7, r1, r2, 0x5, 0x1000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x10fe, 0x1c8) (fail_nth: 1) 1.109283851s ago: executing program 4 (id=3337): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r3, 0x0, 0x8, 'syz1\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth0\x00', 'team0\x00', {}, {}, 0x0, 0x3, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8, '\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x100, 0xb, [0x3c, 0x3f, 0x19, 0x12, 0x33, 0x14, 0x40, 0x2e, 0x2a, 0x3c, 0x2e, 0x32, 0x9, 0xc, 0x21, 0x1b], 0x0, 0xe, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x8}}, 0x18) r7 = semget$private(0x0, 0x4000000009, 0x42a) semop(r7, &(0x7f00000002c0)=[{0x0, 0xff, 0x1000}, {0x3, 0x1f}, {0x0, 0x207}, {0x0, 0x8, 0x1000}, {0x0, 0xfbf}], 0x5) semctl$GETNCNT(r7, 0x0, 0xe, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r9, &(0x7f0000002340)={0x54, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x40c0) 0s ago: executing program 3 (id=3338): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): x10 [ 1068.810689][T17523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.810716][T17523] ? __pfx__printk+0x10/0x10 [ 1068.810746][T17523] ? __might_fault+0xb0/0x130 [ 1068.810790][T17523] should_fail_ex+0x414/0x560 [ 1068.810818][T17523] _copy_from_iter+0x1db/0x16f0 [ 1068.810851][T17523] ? rcu_is_watching+0x15/0xb0 [ 1068.810878][T17523] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1068.810912][T17523] ? __pfx__copy_from_iter+0x10/0x10 [ 1068.810941][T17523] ? __build_skb_around+0x257/0x3e0 [ 1068.810976][T17523] ? netlink_sendmsg+0x642/0xb30 [ 1068.811006][T17523] ? skb_put+0x11b/0x210 [ 1068.811042][T17523] netlink_sendmsg+0x6b2/0xb30 [ 1068.811084][T17523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.811118][T17523] ? aa_sock_msg_perm+0x94/0x160 [ 1068.811145][T17523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1068.811169][T17523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.811202][T17523] __sock_sendmsg+0x219/0x270 [ 1068.811232][T17523] ____sys_sendmsg+0x505/0x830 [ 1068.811279][T17523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1068.811323][T17523] ? import_iovec+0x74/0xa0 [ 1068.811358][T17523] ___sys_sendmsg+0x21f/0x2a0 [ 1068.811395][T17523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.811468][T17523] ? __fget_files+0x2a/0x420 [ 1068.811486][T17523] ? __fget_files+0x3a0/0x420 [ 1068.811518][T17523] __x64_sys_sendmsg+0x19b/0x260 [ 1068.811554][T17523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1068.811599][T17523] ? __pfx_ksys_write+0x10/0x10 [ 1068.811635][T17523] ? do_syscall_64+0xbe/0x3b0 [ 1068.811664][T17523] do_syscall_64+0xfa/0x3b0 [ 1068.811687][T17523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.811709][T17523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.811731][T17523] ? clear_bhb_loop+0x60/0xb0 [ 1068.811758][T17523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.811779][T17523] RIP: 0033:0x7fb79b38e9a9 [ 1068.811799][T17523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.811818][T17523] RSP: 002b:00007fb79c1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.811841][T17523] RAX: ffffffffffffffda RBX: 00007fb79b5b5fa0 RCX: 00007fb79b38e9a9 [ 1068.811857][T17523] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 1068.811871][T17523] RBP: 00007fb79c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.811885][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.811899][T17523] R13: 0000000000000000 R14: 00007fb79b5b5fa0 R15: 00007fb79b6dfa28 [ 1068.811932][T17523] [ 1069.145760][T17499] netlink: 'syz.4.3033': attribute type 10 has an invalid length. [ 1069.176630][T17499] team_slave_1: left promiscuous mode [ 1069.188577][T17499] team_slave_1: entered promiscuous mode [ 1069.237341][T17499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.432258][T17499] bond0: (slave team0): Enslaving as an active interface with an up link [ 1069.499406][T17530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.554828][T17535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.825590][ T5937] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1070.000459][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 1070.016269][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1070.043984][ T5937] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1070.090660][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.142493][ T5937] usb 3-1: Product: syz [ 1070.170348][ T5937] usb 3-1: Manufacturer: syz [ 1070.233402][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 1070.308108][ T5937] usb 3-1: SerialNumber: syz [ 1070.445210][ T5937] usb 3-1: config 0 descriptor?? [ 1070.569423][ T5937] gs_usb 3-1:0.0: Required endpoints not found [ 1070.613474][T17549] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1071.031791][T17530] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1071.166109][ T24] usb 3-1: USB disconnect, device number 112 [ 1071.235583][ T5944] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1071.517677][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1071.593220][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1071.633781][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1071.695814][ T5944] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1071.745594][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.800252][ T5944] usb 1-1: config 0 descriptor?? [ 1071.821997][ T5944] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1071.835539][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1072.026016][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1072.254499][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1072.275413][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.322267][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1072.351015][ T24] pvrusb2: ********** [ 1072.355087][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1072.368398][T17560] batadv_slave_1: entered promiscuous mode [ 1072.375019][T17559] batadv_slave_1: left promiscuous mode [ 1072.386123][ T24] pvrusb2: Important functionality might not be entirely working. [ 1072.407223][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1072.434795][ T24] pvrusb2: ********** [ 1072.523429][ T2343] pvrusb2: Invalid write control endpoint [ 1072.654853][ T5944] usb 1-1: USB disconnect, device number 97 [ 1072.667362][ T2343] pvrusb2: Invalid write control endpoint [ 1072.698702][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1072.736226][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1072.744007][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1072.754387][ T2343] pvrusb2: Device being rendered inoperable [ 1072.760540][T17555] pvrusb2: Attempted to execute control transfer when device not ok [ 1072.770407][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1072.780202][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1072.794919][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1072.806002][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1072.829419][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1073.181283][T17576] FAULT_INJECTION: forcing a failure. [ 1073.181283][T17576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.336502][T17576] CPU: 1 UID: 0 PID: 17576 Comm: syz.3.3055 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1073.336537][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1073.336552][T17576] Call Trace: [ 1073.336561][T17576] [ 1073.336571][T17576] dump_stack_lvl+0x189/0x250 [ 1073.336605][T17576] ? __pfx____ratelimit+0x10/0x10 [ 1073.336630][T17576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1073.336657][T17576] ? __pfx__printk+0x10/0x10 [ 1073.336688][T17576] ? __might_fault+0xb0/0x130 [ 1073.336731][T17576] should_fail_ex+0x414/0x560 [ 1073.336770][T17576] _copy_from_user+0x2d/0xb0 [ 1073.336802][T17576] ___sys_recvmsg+0x12e/0x510 [ 1073.336831][T17576] ? __pfx____sys_recvmsg+0x10/0x10 [ 1073.336880][T17576] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 1073.336929][T17576] do_recvmmsg+0x307/0x770 [ 1073.336960][T17576] ? __pfx_do_recvmmsg+0x10/0x10 [ 1073.336996][T17576] ? _copy_from_user+0x94/0xb0 [ 1073.337044][T17576] __x64_sys_recvmmsg+0x1af/0x240 [ 1073.337070][T17576] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1073.337090][T17576] ? rcu_is_watching+0x15/0xb0 [ 1073.337122][T17576] ? do_syscall_64+0xbe/0x3b0 [ 1073.337151][T17576] do_syscall_64+0xfa/0x3b0 [ 1073.337175][T17576] ? lockdep_hardirqs_on+0x9c/0x150 [ 1073.337198][T17576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.337220][T17576] ? clear_bhb_loop+0x60/0xb0 [ 1073.337247][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.337269][T17576] RIP: 0033:0x7f7bdb78e9a9 [ 1073.337289][T17576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.337308][T17576] RSP: 002b:00007f7bdc5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1073.337332][T17576] RAX: ffffffffffffffda RBX: 00007f7bdb9b5fa0 RCX: 00007f7bdb78e9a9 [ 1073.337349][T17576] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000005 [ 1073.337363][T17576] RBP: 00007f7bdc5c3090 R08: 0000200000000480 R09: 0000000000000000 [ 1073.337378][T17576] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1073.337393][T17576] R13: 0000000000000000 R14: 00007f7bdb9b5fa0 R15: 00007f7bdbadfa28 [ 1073.337426][T17576] [ 1074.264025][T17588] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1074.631813][ T5937] usb 2-1: USB disconnect, device number 22 [ 1074.746336][T17593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1075.031522][T17597] batadv_slave_1: entered promiscuous mode [ 1075.041227][T17595] batadv_slave_1: left promiscuous mode [ 1075.234127][ T5915] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1075.283399][ T5915] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.309556][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'. [ 1075.353719][T17604] bridge: RTM_NEWNEIGH with invalid ether address [ 1076.745876][T17624] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1077.494322][T17637] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1078.143411][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1078.158206][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1078.161297][T17657] bond0: option resend_igmp: invalid value (18446744073709551482) [ 1078.256474][T17657] bond0: option resend_igmp: allowed values 0 - 255 [ 1078.346431][T17661] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1078.430441][T17661] bond5: entered allmulticast mode [ 1078.436628][T17661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1078.655658][ T5937] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1078.906630][ T5937] usb 3-1: config 0 has no interfaces? [ 1078.986630][ T5937] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1079.035920][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.120161][ T5937] usb 3-1: Product: syz [ 1079.144763][ T5937] usb 3-1: Manufacturer: syz [ 1079.163039][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1079.188992][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1079.215767][ T5937] usb 3-1: SerialNumber: syz [ 1079.322833][ T5937] usb 3-1: config 0 descriptor?? [ 1079.418468][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'. [ 1079.515014][T17686] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1081.095346][T17694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1081.513545][ T24] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1081.794386][ T24] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1082.277464][T17706] xt_l2tp: invalid flags combination: 8 [ 1082.322964][ T5915] usb 3-1: USB disconnect, device number 113 [ 1082.520145][T17710] fuse: Unknown parameter 'rootcontext' [ 1082.535828][ T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1082.563757][T17710] bridge0: port 4(ipvlan2) entered blocking state [ 1082.580851][T17710] bridge0: port 4(ipvlan2) entered disabled state [ 1082.607348][T17710] ipvlan2: entered allmulticast mode [ 1082.626179][T17710] bridge0: entered allmulticast mode [ 1082.712478][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1082.722511][T17710] ipvlan2: left allmulticast mode [ 1082.737275][T17710] bridge0: left allmulticast mode [ 1082.808983][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1082.866480][ T24] usb 2-1: config 9 has an invalid interface number: 98 but max is 0 [ 1082.874653][ T24] usb 2-1: config 9 has no interface number 0 [ 1082.881637][ T24] usb 2-1: config 9 interface 98 has no altsetting 0 [ 1082.900456][ T24] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=72.b1 [ 1082.909848][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.918817][ T24] usb 2-1: Product: syz [ 1082.924460][ T24] usb 2-1: Manufacturer: syz [ 1082.942540][ T24] usb 2-1: SerialNumber: syz [ 1082.996190][ T5944] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1083.172916][ T24] cypress_cy7c63 2-1:9.98: Cypress CY7C63xxx device now attached [ 1083.206281][ T24] usb 2-1: USB disconnect, device number 23 [ 1083.230697][ T5944] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1083.247397][ T24] cypress_cy7c63 2-1:9.98: Cypress CY7C63xxx device now disconnected [ 1083.284664][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.342023][ T5944] usb 3-1: config 0 descriptor?? [ 1083.449359][ T5944] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1083.495675][ T5915] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 1083.645804][ T5915] usb 1-1: Invalid ep0 maxpacket: 32 [ 1083.695588][ T5914] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1083.775666][ T5915] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1083.846487][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 1083.888363][T17715] gretap1: entered allmulticast mode [ 1083.936660][ T5915] usb 1-1: Invalid ep0 maxpacket: 32 [ 1083.942304][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.963834][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.982344][ T5915] usb usb1-port1: attempt power cycle [ 1083.993930][ T5914] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1084.006552][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.031276][ T5914] usb 5-1: config 0 descriptor?? [ 1084.168270][ T5944] gspca_spca508: reg_read err -110 [ 1084.174567][ T5944] gspca_spca508: reg_read err -32 [ 1084.191919][ T5944] gspca_spca508: reg_read err -32 [ 1084.215840][ T5944] gspca_spca508: reg_read err -32 [ 1084.233114][ T5944] gspca_spca508: reg write: error -32 [ 1084.266755][ T5944] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 1084.325597][ T5915] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 1084.355719][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1084.374851][ T5915] usb 1-1: Invalid ep0 maxpacket: 32 [ 1084.479981][T17723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.503533][T17723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.535651][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1084.541016][ T5915] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1084.554169][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1084.567813][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1084.577875][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.586536][ T5915] usb 1-1: Invalid ep0 maxpacket: 32 [ 1084.592461][ T5915] usb usb1-port1: unable to enumerate USB device [ 1084.599670][ T24] usb 2-1: Product: syz [ 1084.604475][ T5914] redragon 0003:0C45:760B.001B: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 1084.627672][ T24] usb 2-1: Manufacturer: syz [ 1084.638116][ T24] usb 2-1: SerialNumber: syz [ 1084.663688][ T24] usb 2-1: config 0 descriptor?? [ 1084.753316][T17723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.778778][T17723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.947389][ T5914] usb 5-1: USB disconnect, device number 93 [ 1085.080887][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1085.492589][ T24] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1085.515974][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 1085.739789][T17725] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1085.769928][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.836109][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.849354][ T24] usb 2-1: USB disconnect, device number 24 [ 1086.661397][ T10] usb 3-1: USB disconnect, device number 114 [ 1086.813688][T17743] fuse: Bad value for 'group_id' [ 1086.825615][T17743] fuse: Bad value for 'group_id' [ 1087.970000][T17753] netlink: 'syz.2.3101': attribute type 30 has an invalid length. [ 1087.990291][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3101'. [ 1088.417507][T17753] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1088.662423][T17766] kvm: pic: non byte write [ 1090.078857][T17780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1090.409014][ T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1090.621619][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1090.694452][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1090.732516][ T24] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1090.762289][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.793584][ T24] usb 2-1: config 0 descriptor?? [ 1090.803513][T17800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1091.253550][T17786] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1091.969564][T17786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.980342][T17786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.198148][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1092.225728][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1092.268461][ T24] usb 2-1: USB disconnect, device number 25 [ 1092.445860][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1092.620556][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1092.640802][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1092.661036][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1092.670616][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.913833][ T10] usb 1-1: usb_control_msg returned -32 [ 1092.920888][ T10] usbtmc 1-1:16.0: can't read capabilities [ 1093.135990][ T5937] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1093.319385][ T5937] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1093.335949][ T5937] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1093.347171][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1093.358750][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1093.370299][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1093.385109][ T5937] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1093.404988][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1093.588831][ T5937] usb 3-1: Product: syz [ 1093.645637][ T5937] usb 3-1: Manufacturer: syz [ 1093.786609][T17836] usbtmc 1-1:16.0: INDICATOR_PULSE returned 0 [ 1093.828029][ T5937] cdc_wdm 3-1:1.0: skipping garbage [ 1093.836880][ T5937] cdc_wdm 3-1:1.0: skipping garbage [ 1093.850247][ T5937] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1093.860271][ T5937] cdc_wdm 3-1:1.0: Unknown control protocol [ 1094.087717][ T24] usb 3-1: USB disconnect, device number 115 [ 1094.608072][T17840] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1094.614678][T17840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1094.624319][T17840] vhci_hcd vhci_hcd.0: Device attached [ 1094.795689][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1094.885572][ T5914] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1095.228100][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1095.264808][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1095.275836][T17845] vhci_hcd: connection reset by peer [ 1095.292353][T17851] xt_TCPMSS: Only works on TCP SYN packets [ 1095.311490][ T59] vhci_hcd: stop threads [ 1095.354995][ T59] vhci_hcd: release socket [ 1095.403650][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1095.423043][ T5915] usb 1-1: USB disconnect, device number 102 [ 1095.457483][ T59] vhci_hcd: disconnect device [ 1095.501209][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1095.516948][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1095.544839][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1095.556206][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1095.564282][ T24] usb 3-1: Product: syz [ 1095.574919][ T24] usb 3-1: Manufacturer: syz [ 1095.653286][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 1095.662116][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 1095.671277][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1095.717909][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 1095.922845][ T24] usb 3-1: USB disconnect, device number 116 [ 1096.736482][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1096.875600][ T10] usb 3-1: device descriptor read/64, error -71 [ 1096.905630][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1096.939093][T17881] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3138'. [ 1096.981187][T17885] xt_TCPMSS: Only works on TCP SYN packets [ 1097.085770][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 1097.094318][ T5937] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1097.107935][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.129914][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1097.142084][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1097.154823][ T5937] pvrusb2: ********** [ 1097.160785][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1097.176529][ T5937] pvrusb2: Important functionality might not be entirely working. [ 1097.184574][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1097.201119][ T5937] pvrusb2: ********** [ 1097.205552][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1097.290403][ T10] usb 3-1: device descriptor read/64, error -71 [ 1097.330063][ T2343] pvrusb2: Invalid write control endpoint [ 1097.384565][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1097.417178][ T10] usb usb3-port1: attempt power cycle [ 1097.424641][ T9] usb 5-1: config 0 has no interface number 0 [ 1097.460263][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1097.479322][ T2343] pvrusb2: Invalid write control endpoint [ 1097.485380][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.502038][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1097.512025][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1097.524279][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1097.535870][ T9] usb 5-1: config 0 descriptor?? [ 1097.555012][ T9] usb 5-1: selecting invalid altsetting 1 [ 1097.565311][ T2343] pvrusb2: Device being rendered inoperable [ 1097.572962][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1097.582749][T17873] pvrusb2: Attempted to execute control transfer when device not ok [ 1097.592615][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1097.601378][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1097.610945][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1097.631345][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1097.641831][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1097.656085][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1097.777240][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1097.801337][ T9] DVB: Unable to find symbol ves1820_attach() [ 1097.808405][ T10] usb 3-1: device descriptor read/8, error -71 [ 1097.920121][ T9] DVB: Unable to find symbol stv0297_attach() [ 1097.940790][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1097.969067][ T9] usb 5-1: USB disconnect, device number 94 [ 1098.056457][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1098.106356][ T10] usb 3-1: device descriptor read/8, error -71 [ 1098.706868][ T10] usb usb3-port1: unable to enumerate USB device [ 1099.384071][T17925] xt_TCPMSS: Only works on TCP SYN packets [ 1099.556311][ T10] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1099.651802][ T5937] usb 2-1: USB disconnect, device number 26 [ 1099.696328][T17933] xt_TCPMSS: Only works on TCP SYN packets [ 1099.744385][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.763541][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.790579][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1099.800931][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.460752][ T5914] vhci_hcd: vhci_device speed not set [ 1100.757515][T17940] x_tables: duplicate underflow at hook 1 [ 1100.807433][T12218] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 1100.882774][ T10] usb 1-1: usb_control_msg returned -71 [ 1100.911957][ T10] usbtmc 1-1:16.0: can't read capabilities [ 1100.969871][ T10] usb 1-1: USB disconnect, device number 103 [ 1101.068150][ T5937] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1101.239163][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.250601][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 1101.261343][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.275653][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.290923][ T5937] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1101.300783][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.322282][ T5937] usb 2-1: config 0 descriptor?? [ 1101.336333][ T5937] usbhid 2-1:0.0: can't add hid device: -22 [ 1101.342696][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1101.364142][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.429816][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.865771][ T5914] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1102.073853][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 1102.196188][ T5914] usb 4-1: config 9 has an invalid interface number: 236 but max is 3 [ 1102.228830][ T5914] usb 4-1: config 9 has an invalid interface number: 97 but max is 3 [ 1102.307049][ T5914] usb 4-1: config 9 has an invalid interface number: 172 but max is 3 [ 1102.340597][ T5914] usb 4-1: config 9 has an invalid interface number: 145 but max is 3 [ 1102.381166][ T5914] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1102.555389][ T5914] usb 4-1: config 9 has an invalid interface number: 31 but max is 3 [ 1102.565362][ T5914] usb 4-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 1102.579163][ T5914] usb 4-1: config 9 has no interface number 0 [ 1102.585645][ T5914] usb 4-1: config 9 has no interface number 1 [ 1102.591773][ T5914] usb 4-1: config 9 has no interface number 2 [ 1102.602436][ T5914] usb 4-1: config 9 has no interface number 3 [ 1102.684767][ T5914] usb 4-1: config 9 has no interface number 4 [ 1102.756743][ T5914] usb 4-1: config 9 interface 236 altsetting 8 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1102.829618][ T5914] usb 4-1: config 9 interface 236 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1102.961906][ T5914] usb 4-1: too many endpoints for config 9 interface 97 altsetting 193: 197, using maximum allowed: 30 [ 1102.980413][ T5914] usb 4-1: config 9 interface 97 altsetting 193 has 3 endpoint descriptors, different from the interface descriptor's value: 197 [ 1102.995354][ T5914] usb 4-1: config 9 interface 172 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 16 [ 1103.017431][ T5914] usb 4-1: config 9 interface 172 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1103.034990][ T5914] usb 4-1: config 9 interface 172 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1103.053237][ T5914] usb 4-1: config 9 interface 172 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 1103.443189][ T5914] usb 4-1: config 9 interface 172 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1103.573591][ T5914] usb 4-1: config 9 interface 172 altsetting 5 endpoint 0xB has an invalid bInterval 94, changing to 7 [ 1103.626803][ T5914] usb 4-1: config 9 interface 172 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 1103.670207][ T5914] usb 4-1: config 9 interface 172 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 1103.711651][ T5914] usb 4-1: config 9 interface 145 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1103.738824][ T5914] usb 4-1: config 9 interface 145 altsetting 5 endpoint 0x8 has invalid maxpacket 576, setting to 64 [ 1103.778742][ T5914] usb 4-1: config 9 interface 145 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 1103.832170][ T24] usb 2-1: USB disconnect, device number 27 [ 1103.903298][T17987] FAULT_INJECTION: forcing a failure. [ 1103.903298][T17987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.934905][ T5914] usb 4-1: too many endpoints for config 9 interface 31 altsetting 51: 36, using maximum allowed: 30 [ 1103.952891][T17988] xt_TCPMSS: Only works on TCP SYN packets [ 1103.956197][T17987] CPU: 0 UID: 0 PID: 17987 Comm: syz.1.3165 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1103.956233][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1103.956251][T17987] Call Trace: [ 1103.956261][T17987] [ 1103.956274][T17987] dump_stack_lvl+0x189/0x250 [ 1103.956312][T17987] ? __pfx____ratelimit+0x10/0x10 [ 1103.956340][T17987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.956371][T17987] ? __pfx__printk+0x10/0x10 [ 1103.956405][T17987] ? __might_fault+0xb0/0x130 [ 1103.956454][T17987] should_fail_ex+0x414/0x560 [ 1103.956487][T17987] _copy_from_user+0x2d/0xb0 [ 1103.956524][T17987] ___sys_sendmsg+0x158/0x2a0 [ 1103.956569][T17987] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.956659][T17987] ? __fget_files+0x2a/0x420 [ 1103.956681][T17987] ? __fget_files+0x3a0/0x420 [ 1103.956716][T17987] __x64_sys_sendmsg+0x19b/0x260 [ 1103.956759][T17987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1103.956809][T17987] ? __pfx_ksys_write+0x10/0x10 [ 1103.956841][T17987] ? rcu_is_watching+0x15/0xb0 [ 1103.956878][T17987] ? do_syscall_64+0xbe/0x3b0 [ 1103.956912][T17987] do_syscall_64+0xfa/0x3b0 [ 1103.956940][T17987] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.956964][T17987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.956989][T17987] ? clear_bhb_loop+0x60/0xb0 [ 1103.957019][T17987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.957044][T17987] RIP: 0033:0x7fb79b38e9a9 [ 1103.957068][T17987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.957090][T17987] RSP: 002b:00007fb79c1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.957117][T17987] RAX: ffffffffffffffda RBX: 00007fb79b5b5fa0 RCX: 00007fb79b38e9a9 [ 1103.957136][T17987] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1103.957152][T17987] RBP: 00007fb79c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.957168][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.957183][T17987] R13: 0000000000000000 R14: 00007fb79b5b5fa0 R15: 00007fb79b6dfa28 [ 1103.957221][T17987] [ 1104.197152][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0xC, skipping [ 1104.208537][ T5914] usb 4-1: config 9 interface 31 altsetting 51 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1104.219754][ T5914] usb 4-1: config 9 interface 31 altsetting 51 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1104.230922][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0xC, skipping [ 1104.505520][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0xC, skipping [ 1104.525565][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0x3, skipping [ 1104.635810][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0x5, skipping [ 1104.646793][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0xA, skipping [ 1104.659362][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0xA, skipping [ 1104.891550][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has a duplicate endpoint with address 0x6, skipping [ 1104.954943][ T5914] usb 4-1: config 9 interface 31 altsetting 51 has 11 endpoint descriptors, different from the interface descriptor's value: 36 [ 1104.976389][ T5914] usb 4-1: config 9 interface 236 has no altsetting 0 [ 1104.997720][ T5914] usb 4-1: config 9 interface 97 has no altsetting 0 [ 1105.021310][ T5914] usb 4-1: config 9 interface 172 has no altsetting 0 [ 1105.077391][ T5914] usb 4-1: config 9 interface 145 has no altsetting 0 [ 1105.101563][ T5914] usb 4-1: config 9 interface 31 has no altsetting 0 [ 1105.132626][ T5914] usb 4-1: string descriptor 0 read error: -71 [ 1105.156176][ T5914] usb 4-1: New USB device found, idVendor=06e0, idProduct=f114, bcdDevice=b3.bc [ 1105.171622][T17999] gretap0: entered promiscuous mode [ 1105.180230][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.230938][ T5914] usb 4-1: can't set config #9, error -71 [ 1105.288141][ T5914] usb 4-1: USB disconnect, device number 102 [ 1106.109496][ T30] audit: type=1800 audit(1752882103.052:676): pid=18021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3172" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1106.232020][ T30] audit: type=1326 audit(1752882103.122:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1106.292278][ T30] audit: type=1326 audit(1752882103.122:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1106.346301][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1106.382156][ T30] audit: type=1326 audit(1752882103.122:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1106.482589][T18027] xt_TCPMSS: Only works on TCP SYN packets [ 1106.490287][ T30] audit: type=1326 audit(1752882103.122:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1106.541321][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1106.715542][ T30] audit: type=1326 audit(1752882103.122:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1107.278261][ T30] audit: type=1326 audit(1752882103.132:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1107.343437][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1107.356768][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1107.399932][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1107.404109][ T30] audit: type=1326 audit(1752882103.132:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1107.437016][ T30] audit: type=1326 audit(1752882103.132:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1107.456662][T18034] dvmrp0: entered allmulticast mode [ 1107.487079][ T30] audit: type=1326 audit(1752882103.142:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1107.508997][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.520040][ T24] usb 3-1: Product: syz [ 1107.524801][ T24] usb 3-1: Manufacturer: syz [ 1107.550194][ T24] usb 3-1: SerialNumber: syz [ 1107.572375][ T24] usb 3-1: config 0 descriptor?? [ 1108.085573][ T5956] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1108.147849][ T24] usb 3-1: USB disconnect, device number 121 [ 1108.326967][ T5956] usb 5-1: config 0 has no interfaces? [ 1108.343074][ T5956] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.362782][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.389926][ T5956] usb 5-1: Product: syz [ 1108.474774][ T5956] usb 5-1: Manufacturer: syz [ 1108.490763][ T5956] usb 5-1: SerialNumber: syz [ 1108.504614][ T5956] usb 5-1: config 0 descriptor?? [ 1108.827514][T18065] netlink: 'syz.4.3180': attribute type 2 has an invalid length. [ 1110.017924][T18073] fuse: Bad value for 'fd' [ 1110.086328][T18076] xt_TCPMSS: Only works on TCP SYN packets [ 1110.332874][T18084] xt_TCPMSS: Only works on TCP SYN packets [ 1110.646935][T18097] fuse: Unknown parameter 'grou`cid' [ 1110.718986][T18101] FAULT_INJECTION: forcing a failure. [ 1110.718986][T18101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.760246][T18101] CPU: 1 UID: 0 PID: 18101 Comm: syz.1.3199 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1110.760279][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.760292][T18101] Call Trace: [ 1110.760301][T18101] [ 1110.760310][T18101] dump_stack_lvl+0x189/0x250 [ 1110.760343][T18101] ? __pfx____ratelimit+0x10/0x10 [ 1110.760368][T18101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.760394][T18101] ? __pfx__printk+0x10/0x10 [ 1110.760437][T18101] should_fail_ex+0x414/0x560 [ 1110.760466][T18101] _copy_to_user+0x31/0xb0 [ 1110.760500][T18101] simple_read_from_buffer+0xe1/0x170 [ 1110.760537][T18101] proc_fail_nth_read+0x1df/0x250 [ 1110.760563][T18101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.760590][T18101] ? rw_verify_area+0x258/0x650 [ 1110.760618][T18101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.760652][T18101] vfs_read+0x200/0x980 [ 1110.760689][T18101] ? __pfx_vfs_read+0x10/0x10 [ 1110.760729][T18101] ? __x64_sys_sendmsg+0x1b4/0x260 [ 1110.760774][T18101] ksys_read+0x145/0x250 [ 1110.760804][T18101] ? __pfx_ksys_read+0x10/0x10 [ 1110.760830][T18101] ? rcu_is_watching+0x15/0xb0 [ 1110.760861][T18101] ? do_syscall_64+0xbe/0x3b0 [ 1110.760890][T18101] do_syscall_64+0xfa/0x3b0 [ 1110.760913][T18101] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.760933][ T10] usb 5-1: USB disconnect, device number 95 [ 1110.760934][T18101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.760957][T18101] ? clear_bhb_loop+0x60/0xb0 [ 1110.760982][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.761000][T18101] RIP: 0033:0x7fb79b38d3bc [ 1110.761022][T18101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1110.761045][T18101] RSP: 002b:00007fb79c1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.761071][T18101] RAX: ffffffffffffffda RBX: 00007fb79b5b5fa0 RCX: 00007fb79b38d3bc [ 1110.761092][T18101] RDX: 000000000000000f RSI: 00007fb79c1a70a0 RDI: 0000000000000007 [ 1110.761108][T18101] RBP: 00007fb79c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.761124][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.761136][T18101] R13: 0000000000000000 R14: 00007fb79b5b5fa0 R15: 00007fb79b6dfa28 [ 1110.761175][T18101] [ 1110.915748][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1111.185640][T18107] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1111.286762][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1111.286783][ T30] audit: type=1326 audit(1752882108.122:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.479135][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1111.496049][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1111.526493][T18111] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1111.549146][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1111.565482][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.575810][ T30] audit: type=1326 audit(1752882108.122:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.575867][ T30] audit: type=1326 audit(1752882108.122:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.575915][ T30] audit: type=1326 audit(1752882108.122:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.575964][ T30] audit: type=1326 audit(1752882108.122:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.576010][ T30] audit: type=1326 audit(1752882108.122:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.576058][ T30] audit: type=1326 audit(1752882108.122:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1111.904141][T18111] bond8: entered allmulticast mode [ 1111.920201][T18111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1112.015100][T18116] FAULT_INJECTION: forcing a failure. [ 1112.015100][T18116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.064811][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1112.074573][T18116] CPU: 1 UID: 0 PID: 18116 Comm: syz.2.3202 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1112.074604][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1112.074620][T18116] Call Trace: [ 1112.074628][T18116] [ 1112.074639][T18116] dump_stack_lvl+0x189/0x250 [ 1112.074671][T18116] ? __pfx____ratelimit+0x10/0x10 [ 1112.074695][T18116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.074722][T18116] ? __pfx__printk+0x10/0x10 [ 1112.074775][T18116] should_fail_ex+0x414/0x560 [ 1112.074805][T18116] strncpy_from_user+0x36/0x290 [ 1112.074832][T18116] path_removexattrat+0xe0/0x690 [ 1112.074862][T18116] ? __pfx_path_removexattrat+0x10/0x10 [ 1112.074887][T18116] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1112.074913][T18116] ? __pfx_vfs_write+0x10/0x10 [ 1112.074974][T18116] ? __pfx_ksys_write+0x10/0x10 [ 1112.075000][T18116] ? rcu_is_watching+0x15/0xb0 [ 1112.075035][T18116] __x64_sys_fremovexattr+0x62/0x70 [ 1112.075062][T18116] do_syscall_64+0xfa/0x3b0 [ 1112.075085][T18116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1112.075108][T18116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.075130][T18116] ? clear_bhb_loop+0x60/0xb0 [ 1112.075158][T18116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.075179][T18116] RIP: 0033:0x7fb99ff8e9a9 [ 1112.075199][T18116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.075219][T18116] RSP: 002b:00007fb9a0ebf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 1112.075243][T18116] RAX: ffffffffffffffda RBX: 00007fb9a01b5fa0 RCX: 00007fb99ff8e9a9 [ 1112.075259][T18116] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffffff [ 1112.075275][T18116] RBP: 00007fb9a0ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.075290][T18116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.075303][T18116] R13: 0000000000000000 R14: 00007fb9a01b5fa0 R15: 00007fb9a02dfa28 [ 1112.075336][T18116] [ 1112.271397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.501958][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 1112.536745][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1112.557813][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1112.569760][ T24] usb 4-1: Product: syz [ 1112.574055][ T24] usb 4-1: Manufacturer: syz [ 1112.595577][ T5937] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1112.705528][ T30] audit: type=1326 audit(1752882108.122:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1112.755597][ T30] audit: type=1326 audit(1752882108.122:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1112.778247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.907961][ T5937] usb 2-1: config 0 has no interfaces? [ 1112.995745][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1113.035618][ T30] audit: type=1326 audit(1752882108.122:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1113.070346][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.081301][T18097] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.140172][ T5937] usb 2-1: Product: syz [ 1113.144520][ T5937] usb 2-1: Manufacturer: syz [ 1113.187802][ T5937] usb 2-1: SerialNumber: syz [ 1113.212017][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1113.212582][ T5937] usb 2-1: config 0 descriptor?? [ 1113.391477][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1113.511732][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1113.524766][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 1113.591145][T16099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1113.604734][T16099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1113.654214][T16099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1113.664703][T16099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1113.675341][T18127] batadv_slave_0: entered promiscuous mode [ 1113.682459][T16099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.814756][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1113.905706][ T24] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1114.168986][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.261312][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.315282][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.338423][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.362086][T18135] chnl_net:caif_netlink_parms(): no params data found [ 1114.379562][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.439414][ T24] usb 1-1: config 0 descriptor?? [ 1114.635146][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.643458][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.651252][T18135] bridge_slave_0: entered allmulticast mode [ 1114.663858][T18135] bridge_slave_0: entered promiscuous mode [ 1114.673984][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.681446][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.690215][T18135] bridge_slave_1: entered allmulticast mode [ 1114.699178][T18135] bridge_slave_1: entered promiscuous mode [ 1114.760240][T18135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.781913][T18135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.881292][T18135] team0: Port device team_slave_0 added [ 1114.890874][ T24] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1114.904272][T18135] team0: Port device team_slave_1 added [ 1115.017160][T18135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.024514][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.069909][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1115.081301][ T24] usb 1-1: USB disconnect, device number 104 [ 1115.092966][T18135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.109489][T18135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.117001][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.209682][T18135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.292013][T18127] batadv_slave_0 (unregistering): left promiscuous mode [ 1115.299425][T18127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.490119][ T24] usb 2-1: USB disconnect, device number 28 [ 1115.612385][T18135] hsr_slave_0: entered promiscuous mode [ 1115.622763][T18135] hsr_slave_1: entered promiscuous mode [ 1115.635080][T18135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.644806][T18135] Cannot create hsr debugfs directory [ 1115.790323][T16099] Bluetooth: hci0: command tx timeout [ 1115.940584][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.949885][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.075912][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1116.385586][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1116.461577][ T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.534057][ T24] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1116.589414][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1116.596452][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1116.623970][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.642260][T18135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.671241][ T24] usb 2-1: config 0 descriptor?? [ 1116.818515][T18135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.926756][T18145] sg_write: data in/out 1037/16 bytes for SCSI command 0x22-- guessing data in; [ 1116.926756][T18145] program syz.1.3208 not setting count and/or reply_len properly [ 1117.003724][T18135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.167479][T18145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.192276][T18135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.220024][ T24] corsair-cpro 0003:1B1C:0C10.001D: item fetching failed at offset 2/5 [ 1117.231060][ T24] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -22 [ 1117.755642][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1117.791189][T18160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1117.826633][T18160] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1117.858671][T16099] Bluetooth: hci0: command tx timeout [ 1118.072060][T18160] bond3: entered allmulticast mode [ 1118.079176][T18160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1118.385907][ T24] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1118.479781][T18135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1118.511836][T18135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1118.544337][T18135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1118.554409][ T24] usb 1-1: config 0 has no interfaces? [ 1118.576407][T18135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1118.602109][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1118.624141][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.661849][ T24] usb 1-1: Product: syz [ 1118.683321][ T24] usb 1-1: Manufacturer: syz [ 1118.727217][ T24] usb 1-1: SerialNumber: syz [ 1118.763274][ T24] usb 1-1: config 0 descriptor?? [ 1118.884179][ T5937] usb 2-1: USB disconnect, device number 29 [ 1118.978882][T18177] xt_TCPMSS: Only works on TCP SYN packets [ 1118.996746][T18135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.134819][T18135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.161850][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.169095][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.456630][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.463932][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.825379][ T5937] usb 4-1: USB disconnect, device number 103 [ 1119.937297][T16099] Bluetooth: hci0: command tx timeout [ 1120.726028][ T5937] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1120.887494][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.970492][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.115741][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1121.135226][ T5937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1121.149188][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.190441][ T5937] usb 4-1: config 0 descriptor?? [ 1121.477570][ T9] usb 1-1: USB disconnect, device number 105 [ 1121.708214][T18135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.794416][ T5937] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1122.016922][T16099] Bluetooth: hci0: command tx timeout [ 1122.085549][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1122.120983][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1122.185337][ T5937] usb 4-1: USB disconnect, device number 104 [ 1122.264448][T18135] veth0_vlan: entered promiscuous mode [ 1122.301790][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1122.366751][T18135] veth1_vlan: entered promiscuous mode [ 1122.543193][T18135] veth0_macvtap: entered promiscuous mode [ 1122.559722][ T9] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 1122.739983][ T9] usb 1-1: config 0 has no interface number 0 [ 1122.772976][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1122.783699][T18135] veth1_macvtap: entered promiscuous mode [ 1122.790425][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.890611][ T9] usb 1-1: Product: syz [ 1122.939325][ T9] usb 1-1: Manufacturer: syz [ 1122.965528][ T9] usb 1-1: SerialNumber: syz [ 1122.977012][T18135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.007610][ T9] usb 1-1: config 0 descriptor?? [ 1123.079085][ T5915] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1123.085195][ T9] radioshark2 1-1:0.206: Invalid radioSHARK2 device [ 1123.116238][T18135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.124696][ T9] radioshark2 1-1:0.206: probe with driver radioshark2 failed with error -22 [ 1123.161131][T18135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.171320][ T9] usbhid 1-1:0.206: couldn't find an input interrupt endpoint [ 1123.179893][T18135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.195990][T18135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.225093][T18135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.499148][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1123.627385][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.650346][ T5915] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1123.804402][ T5915] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1123.814254][ T5914] usb 1-1: USB disconnect, device number 106 [ 1123.823923][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.861369][ T5915] usb 3-1: Product: syz [ 1123.869120][ T5915] usb 3-1: Manufacturer: syz [ 1123.873981][ T5915] usb 3-1: SerialNumber: syz [ 1123.884405][ T5915] usb 3-1: config 0 descriptor?? [ 1123.985855][ T5956] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1124.036051][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1124.178026][ T5956] usb 2-1: config 0 has no interfaces? [ 1124.213198][ T5956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1124.244300][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.304724][ T5956] usb 2-1: Product: syz [ 1124.342009][ T5956] usb 2-1: Manufacturer: syz [ 1124.405607][ T5956] usb 2-1: SerialNumber: syz [ 1124.447280][ T5956] usb 2-1: config 0 descriptor?? [ 1124.462598][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.498905][ T24] usb 4-1: config 0 has no interfaces? [ 1124.534627][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.550391][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1124.575103][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.607334][ T24] usb 4-1: Product: syz [ 1124.611859][ T24] usb 4-1: Manufacturer: syz [ 1124.633720][ T24] usb 4-1: SerialNumber: syz [ 1124.641254][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.666956][ T24] usb 4-1: config 0 descriptor?? [ 1124.674081][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.925811][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1124.925835][ T30] audit: type=1326 audit(1752882121.842:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1124.966717][ T30] audit: type=1326 audit(1752882121.842:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1124.996653][ T30] audit: type=1326 audit(1752882121.842:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1125.023542][ T30] audit: type=1326 audit(1752882121.842:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1125.140187][ T30] audit: type=1326 audit(1752882121.842:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1125.166406][ T30] audit: type=1326 audit(1752882121.842:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1125.250207][ T30] audit: type=1326 audit(1752882121.842:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1125.446369][T18216] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1125.526197][ T30] audit: type=1326 audit(1752882121.852:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7bdb79083c code=0x7ffc0000 [ 1125.933883][T18216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.039770][ T5937] usb 3-1: USB disconnect, device number 122 [ 1126.093991][T18216] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1126.125558][ T30] audit: type=1326 audit(1752882121.852:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7bdb790774 code=0x7ffc0000 [ 1126.190746][T18216] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1126.247171][T18216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.256009][ T30] audit: type=1326 audit(1752882121.852:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.3.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x7ffc0000 [ 1126.299665][T18216] usb 1-1: config 0 descriptor?? [ 1126.341355][ T5956] usb 2-1: USB disconnect, device number 30 [ 1126.390455][T18216] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1126.397522][T18216] dvb-usb: bulk message failed: -22 (3/0) [ 1126.418099][T18216] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1126.440922][T18216] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1126.490280][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1126.499429][T18216] usb 1-1: media controller created [ 1126.540152][T18216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.129670][T18216] dvb-usb: bulk message failed: -22 (6/0) [ 1127.222494][T18216] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1127.381549][T18216] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 1127.482233][T18216] dvb-usb: schedule remote query interval to 150 msecs. [ 1127.618211][T18216] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1127.878305][T18216] dvb-usb: bulk message failed: -22 (1/0) [ 1128.077755][T18216] dvb-usb: error while querying for an remote control event. [ 1128.267244][T18216] dvb-usb: bulk message failed: -22 (1/0) [ 1128.322044][T18216] dvb-usb: error while querying for an remote control event. [ 1128.585766][T18216] dvb-usb: bulk message failed: -22 (1/0) [ 1128.613211][T18216] dvb-usb: error while querying for an remote control event. [ 1128.697088][T18244] program syz.1.3228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.827064][T18245] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 1128.851521][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 1128.916566][ T5956] dvb-usb: error while querying for an remote control event. [ 1128.932765][T18245] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1128.943672][T18245] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1128.960291][T18245] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1129.033000][T18244] syz.1.3228 (18244): drop_caches: 2 [ 1129.039514][T18244] syz.1.3228 (18244): drop_caches: 2 [ 1129.116447][T12218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.121567][ T5956] usb 4-1: USB disconnect, device number 105 [ 1129.136378][ T9] usb 1-1: USB disconnect, device number 107 [ 1129.164359][T12218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.182314][T12218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.202821][T12218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.210865][T12218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.396092][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1129.464975][T18252] batadv_slave_0: entered promiscuous mode [ 1129.665590][T18216] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1129.743364][ T3568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.780300][T18266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1129.790045][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1129.944063][T18262] vhci_hcd vhci_hcd.0: port 0 already used [ 1130.088630][T18216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.108983][T18216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.126230][T18216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1130.140431][T18216] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1130.167557][T18216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.180408][T18256] vhci_hcd vhci_hcd.0: port 1 already used [ 1130.199546][T18273] FAULT_INJECTION: forcing a failure. [ 1130.199546][T18273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.213814][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.0.3234 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1130.213844][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1130.213859][T18273] Call Trace: [ 1130.213868][T18273] [ 1130.213877][T18273] dump_stack_lvl+0x189/0x250 [ 1130.213911][T18273] ? __pfx____ratelimit+0x10/0x10 [ 1130.213935][T18273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1130.213963][T18273] ? __pfx__printk+0x10/0x10 [ 1130.213993][T18273] ? __might_fault+0xb0/0x130 [ 1130.214038][T18273] should_fail_ex+0x414/0x560 [ 1130.214065][T18273] _copy_from_user+0x2d/0xb0 [ 1130.214098][T18273] sk_setsockopt+0x276/0x2d30 [ 1130.214136][T18273] ? get_pid_task+0x20/0x1f0 [ 1130.214167][T18273] ? aa_label_sk_perm+0x413/0x560 [ 1130.214188][T18273] ? __pfx_sk_setsockopt+0x10/0x10 [ 1130.214222][T18273] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1130.214257][T18273] ? vfs_write+0x8d8/0xa90 [ 1130.214291][T18273] ? __pfx___might_resched+0x10/0x10 [ 1130.214319][T18273] ? vfs_write+0x8d8/0xa90 [ 1130.214351][T18273] mptcp_setsockopt+0x155d/0x3460 [ 1130.214391][T18273] ? aa_sk_perm+0x81e/0x950 [ 1130.214410][T18273] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1130.214440][T18273] ? do_sys_openat2+0x154/0x1c0 [ 1130.214466][T18273] ? __pfx_aa_sk_perm+0x10/0x10 [ 1130.214493][T18273] ? aa_sock_opt_perm+0x74/0x110 [ 1130.214517][T18273] ? sock_common_setsockopt+0x36/0xc0 [ 1130.214545][T18273] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1130.214575][T18273] do_sock_setsockopt+0x179/0x1b0 [ 1130.214613][T18273] __x64_sys_setsockopt+0x13f/0x1b0 [ 1130.214660][T18273] do_syscall_64+0xfa/0x3b0 [ 1130.214684][T18273] ? lockdep_hardirqs_on+0x9c/0x150 [ 1130.214707][T18273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.214730][T18273] ? clear_bhb_loop+0x60/0xb0 [ 1130.214757][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.214779][T18273] RIP: 0033:0x7fc627d8e9a9 [ 1130.214800][T18273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.214821][T18273] RSP: 002b:00007fc628bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1130.214845][T18273] RAX: ffffffffffffffda RBX: 00007fc627fb5fa0 RCX: 00007fc627d8e9a9 [ 1130.214862][T18273] RDX: 000000000000002e RSI: 0000000000000001 RDI: 0000000000000003 [ 1130.214876][T18273] RBP: 00007fc628bff090 R08: 0000000000000004 R09: 0000000000000000 [ 1130.214890][T18273] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1130.214904][T18273] R13: 0000000000000000 R14: 00007fc627fb5fa0 R15: 00007fc6280dfa28 [ 1130.214937][T18273] [ 1130.738912][T18216] usb 2-1: config 0 descriptor?? [ 1130.745994][T18271] vhci_hcd vhci_hcd.0: port 2 already used [ 1130.812811][T18266] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1130.944384][T18266] bond1: entered allmulticast mode [ 1130.963191][T18266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1131.120873][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1131.249862][ T3568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.261705][T18216] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1131.351042][T16099] Bluetooth: hci4: command tx timeout [ 1131.452852][ T9] usb 5-1: config 0 has no interfaces? [ 1131.709298][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1131.730901][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.757451][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'. [ 1131.768774][ T9] usb 5-1: Product: syz [ 1131.792062][T18216] usb 2-1: USB disconnect, device number 31 [ 1131.804658][ T9] usb 5-1: Manufacturer: syz [ 1131.851478][T18252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.874098][ T9] usb 5-1: SerialNumber: syz [ 1131.892018][T18278] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.3235'. [ 1131.915658][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1131.919813][ T30] audit: type=1326 audit(1752882128.832:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1131.988533][ T30] audit: type=1326 audit(1752882128.832:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.012103][ T30] audit: type=1326 audit(1752882128.832:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.013251][ T9] usb 5-1: config 0 descriptor?? [ 1132.086413][ T30] audit: type=1326 audit(1752882128.832:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.115337][ T30] audit: type=1326 audit(1752882128.832:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.314505][T18252] batadv_slave_0 (unregistering): left promiscuous mode [ 1132.323062][T18252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.361651][ T30] audit: type=1326 audit(1752882128.832:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.387400][ T30] audit: type=1326 audit(1752882128.832:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.414144][ T30] audit: type=1326 audit(1752882128.832:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.474470][ T30] audit: type=1326 audit(1752882128.832:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.527024][ T3568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.558835][ T30] audit: type=1326 audit(1752882128.832:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.0.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc627d8e9a9 code=0x7ffc0000 [ 1132.733725][ T3568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.992808][T18248] chnl_net:caif_netlink_parms(): no params data found [ 1133.375533][T16099] Bluetooth: hci4: command tx timeout [ 1133.884689][ T5914] usb 5-1: USB disconnect, device number 96 [ 1134.121203][T18309] tipc: Trying to set illegal importance in message [ 1134.199776][T18248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.236197][T18248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.285133][T18248] bridge_slave_0: entered allmulticast mode [ 1134.306772][T18314] netlink: 'syz.4.3242': attribute type 30 has an invalid length. [ 1134.314762][T18314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1134.331732][T18248] bridge_slave_0: entered promiscuous mode [ 1134.354952][T18248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.369109][T18248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.378517][T18248] bridge_slave_1: entered allmulticast mode [ 1134.392028][T18248] bridge_slave_1: entered promiscuous mode [ 1134.398679][ T5956] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1134.540903][T18320] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1134.623714][ T5956] usb 1-1: config 0 has no interfaces? [ 1134.716302][ T5956] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1134.725898][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.733911][ T5956] usb 1-1: Product: syz [ 1134.784057][ T5956] usb 1-1: Manufacturer: syz [ 1135.053826][ T5956] usb 1-1: SerialNumber: syz [ 1135.175969][ T5956] usb 1-1: config 0 descriptor?? [ 1135.458233][T16099] Bluetooth: hci4: command tx timeout [ 1136.008357][T18248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.137426][T18248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.207699][ T3568] bridge_slave_1: left allmulticast mode [ 1136.263559][T18330] FAULT_INJECTION: forcing a failure. [ 1136.263559][T18330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.297872][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.3.3244 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1136.297898][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1136.297909][T18330] Call Trace: [ 1136.297916][T18330] [ 1136.297923][T18330] dump_stack_lvl+0x189/0x250 [ 1136.297949][T18330] ? __pfx____ratelimit+0x10/0x10 [ 1136.297966][T18330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.297986][T18330] ? __pfx__printk+0x10/0x10 [ 1136.298007][T18330] ? __might_fault+0xb0/0x130 [ 1136.298037][T18330] should_fail_ex+0x414/0x560 [ 1136.298064][T18330] _copy_from_iter+0x1db/0x16f0 [ 1136.298087][T18330] ? rcu_is_watching+0x15/0xb0 [ 1136.298107][T18330] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1136.298131][T18330] ? __pfx__copy_from_iter+0x10/0x10 [ 1136.298152][T18330] ? __build_skb_around+0x257/0x3e0 [ 1136.298177][T18330] ? netlink_sendmsg+0x642/0xb30 [ 1136.298198][T18330] ? skb_put+0x11b/0x210 [ 1136.298227][T18330] netlink_sendmsg+0x6b2/0xb30 [ 1136.298256][T18330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.298281][T18330] ? aa_sock_msg_perm+0x94/0x160 [ 1136.298300][T18330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1136.298316][T18330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.298339][T18330] __sock_sendmsg+0x219/0x270 [ 1136.298360][T18330] ____sys_sendmsg+0x505/0x830 [ 1136.298388][T18330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.298419][T18330] ? import_iovec+0x74/0xa0 [ 1136.298443][T18330] ___sys_sendmsg+0x21f/0x2a0 [ 1136.298469][T18330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.298518][T18330] ? __fget_files+0x2a/0x420 [ 1136.298532][T18330] ? __fget_files+0x3a0/0x420 [ 1136.298553][T18330] __x64_sys_sendmsg+0x19b/0x260 [ 1136.298579][T18330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1136.298611][T18330] ? __pfx_ksys_write+0x10/0x10 [ 1136.298630][T18330] ? rcu_is_watching+0x15/0xb0 [ 1136.298652][T18330] ? do_syscall_64+0xbe/0x3b0 [ 1136.298672][T18330] do_syscall_64+0xfa/0x3b0 [ 1136.298688][T18330] ? lockdep_hardirqs_on+0x9c/0x150 [ 1136.298705][T18330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.298720][T18330] ? clear_bhb_loop+0x60/0xb0 [ 1136.298739][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.298755][T18330] RIP: 0033:0x7f7bdb78e9a9 [ 1136.298769][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.298783][T18330] RSP: 002b:00007f7bdc5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.298800][T18330] RAX: ffffffffffffffda RBX: 00007f7bdb9b5fa0 RCX: 00007f7bdb78e9a9 [ 1136.298812][T18330] RDX: 0000000000008080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1136.298822][T18330] RBP: 00007f7bdc5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.298831][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.298841][T18330] R13: 0000000000000000 R14: 00007f7bdb9b5fa0 R15: 00007f7bdbadfa28 [ 1136.298863][T18330] [ 1136.911601][ T3568] bridge_slave_1: left promiscuous mode [ 1136.934270][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.947021][T18332] xt_TCPMSS: Only works on TCP SYN packets [ 1136.981479][ T3568] bridge_slave_0: left allmulticast mode [ 1137.006133][ T3568] bridge_slave_0: left promiscuous mode [ 1137.036539][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.224764][ T10] usb 1-1: USB disconnect, device number 108 [ 1137.438730][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1137.463704][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1137.479040][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1137.536780][T16099] Bluetooth: hci4: command tx timeout [ 1137.804183][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1137.813682][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1137.973653][ T10] usb 4-1: config 0 has no interfaces? [ 1137.987496][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1138.008800][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.055551][ T10] usb 4-1: Product: syz [ 1138.062350][ T10] usb 4-1: Manufacturer: syz [ 1138.073507][ T10] usb 4-1: SerialNumber: syz [ 1138.083580][ T10] usb 4-1: config 0 descriptor?? [ 1138.757100][ T3568] team0: Port device bond0 removed [ 1138.765344][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.794174][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.818721][ T3568] bond0 (unregistering): Released all slaves [ 1139.076554][ T3568] bond1 (unregistering): Released all slaves [ 1139.102127][ T3568] bond2 (unregistering): Released all slaves [ 1139.367350][ T3568] bond3 (unregistering): Released all slaves [ 1139.553548][ T3568] bond4 (unregistering): Released all slaves [ 1139.721445][ T3568] bond5 (unregistering): Released all slaves [ 1139.738131][ T3568] bond6 (unregistering): Released all slaves [ 1139.809336][T18343] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1139.894213][T18343] bond6: entered allmulticast mode [ 1139.900653][T18343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1139.994844][T18248] team0: Port device team_slave_0 added [ 1140.031421][T18248] team0: Port device team_slave_1 added [ 1140.041717][ T3568] tipc: Left network mode [ 1140.248460][T18248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.269513][T18248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.318702][T18248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.336346][ T5956] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1140.376988][ T5974] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1140.424068][T18248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.440536][T18248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.474883][T18248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.506534][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 1140.526747][ T5956] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1140.555569][ T5974] usb 5-1: Using ep0 maxpacket: 16 [ 1140.563236][ T5956] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1140.574560][ T5956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1140.586078][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.597519][ T5956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1140.609704][ T5974] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1140.619931][ T5956] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.634531][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.654137][ T5956] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1140.682712][ T5974] usb 5-1: config 0 descriptor?? [ 1140.719032][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.804293][T18248] hsr_slave_0: entered promiscuous mode [ 1140.833532][T18248] hsr_slave_1: entered promiscuous mode [ 1140.853189][T18248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1140.871180][T18248] Cannot create hsr debugfs directory [ 1141.011616][ T5956] usb 2-1: usb_control_msg returned -32 [ 1141.024888][ T5956] usbtmc 2-1:16.0: can't read capabilities [ 1141.043706][ T9] usb 4-1: USB disconnect, device number 106 [ 1141.183078][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1141.267731][ T5974] aquacomputer_d5next 0003:0C70:F003.0020: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 1141.331700][T18373] netlink: 'syz.3.3252': attribute type 21 has an invalid length. [ 1141.528556][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1141.528576][ T30] audit: type=1326 audit(1752882138.472:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18372 comm="syz.3.3252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bdb78e9a9 code=0x0 [ 1141.565240][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.593826][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.765055][T18384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.859956][T18384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.876058][T18216] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1141.966876][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.005958][ T3568] hsr_slave_0: left promiscuous mode [ 1142.026765][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.052880][ T9] usb 5-1: USB disconnect, device number 97 [ 1142.070213][T18216] usb 4-1: config index 0 descriptor too short (expected 65352, got 72) [ 1142.092205][ T3568] hsr_slave_1: left promiscuous mode [ 1142.092300][T18216] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1142.162765][T18216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.180241][T18216] usb 4-1: Product: syz [ 1142.205342][T18216] usb 4-1: Manufacturer: syz [ 1142.218363][T18216] usb 4-1: SerialNumber: syz [ 1142.250782][T18216] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1142.271874][ T3568] veth1_macvtap: left promiscuous mode [ 1142.443075][ T3568] veth0_macvtap: left promiscuous mode [ 1142.450388][ T3568] veth1_vlan: left promiscuous mode [ 1142.456104][ T3568] veth0_vlan: left promiscuous mode [ 1142.472482][ T5974] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1142.923086][T18388] xt_TCPMSS: Only works on TCP SYN packets [ 1143.130563][ T9] usb 2-1: USB disconnect, device number 32 [ 1143.261882][T18393] xt_TCPMSS: Only works on TCP SYN packets [ 1143.545955][ T5974] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1143.553339][ T5974] ath9k_htc: Failed to initialize the device [ 1143.792043][ T5974] usb 4-1: ath9k_htc: USB layer deinitialized [ 1143.905559][T18216] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1144.209214][T18401] fuse: Bad value for 'group_id' [ 1144.220092][T18401] fuse: Bad value for 'group_id' [ 1144.433207][T18404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1144.442836][T18404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1144.516258][ T9] usb 4-1: USB disconnect, device number 107 [ 1144.533799][T18216] usb 2-1: config 0 has no interfaces? [ 1144.546601][T18216] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1144.556888][T18216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.622718][T18216] usb 2-1: Product: syz [ 1144.689342][T18216] usb 2-1: Manufacturer: syz [ 1144.693995][T18216] usb 2-1: SerialNumber: syz [ 1144.759575][T18216] usb 2-1: config 0 descriptor?? [ 1145.002892][ T30] audit: type=1326 audit(1752882141.942:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1145.320786][T18216] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1145.414235][ T30] audit: type=1326 audit(1752882141.942:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1145.460951][ T30] audit: type=1326 audit(1752882141.942:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1145.503755][ T30] audit: type=1326 audit(1752882141.942:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1145.580879][T18216] usb 5-1: config 0 has no interfaces? [ 1145.592739][T18216] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1145.614941][T18216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.627862][ T30] audit: type=1326 audit(1752882141.942:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1145.661179][T18216] usb 5-1: Product: syz [ 1145.956178][T18216] usb 5-1: Manufacturer: syz [ 1146.021548][T18216] usb 5-1: SerialNumber: syz [ 1146.059396][T18216] usb 5-1: config 0 descriptor?? [ 1146.064734][ T30] audit: type=1326 audit(1752882141.942:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1146.171475][ T30] audit: type=1326 audit(1752882141.942:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1146.241367][ T30] audit: type=1326 audit(1752882141.942:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18395 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb79b39083c code=0x7ffc0000 [ 1146.793107][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 1147.014791][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 1147.812159][T18404] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1147.826170][T18404] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1147.853603][T18414] bond_slave_0: entered promiscuous mode [ 1147.868082][T18414] bond_slave_1: entered promiscuous mode [ 1147.947589][T18414] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1147.963373][ T9] usb 5-1: USB disconnect, device number 98 [ 1148.067024][ T10] usb 2-1: USB disconnect, device number 33 [ 1148.270710][T18427] xt_TCPMSS: Only works on TCP SYN packets [ 1148.868768][ T3568] IPVS: stop unused estimator thread 0... [ 1149.025699][T18216] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1149.064893][T18443] xt_TCPMSS: Only works on TCP SYN packets [ 1149.275928][T18216] usb 4-1: Using ep0 maxpacket: 8 [ 1149.307316][T18216] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1149.351895][T18216] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1149.405020][T18216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1149.440572][T18216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1149.500787][T18216] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.586896][T18216] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1149.629291][T18248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1149.735714][T18216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.772382][T18460] futex_wake_op: syz.4.3266 tries to shift op by 36; fix this program [ 1149.839657][T18248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1149.942127][T18248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1150.138229][T18468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1150.205372][T18216] usb 4-1: usb_control_msg returned -32 [ 1150.239581][T18248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1150.257336][T18216] usbtmc 4-1:16.0: can't read capabilities [ 1150.510204][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1151.434805][T18248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.633377][T18248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.790665][ T5914] usb 4-1: USB disconnect, device number 108 [ 1152.169013][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.176207][ T8813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.263014][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.270243][ T8813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.793100][T18248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.913060][T18496] program syz.3.3273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.981737][T18248] veth0_vlan: entered promiscuous mode [ 1153.032199][T18248] veth1_vlan: entered promiscuous mode [ 1153.049598][T18496] syz.3.3273 (18496): drop_caches: 2 [ 1153.070888][T18499] netlink: 'syz.3.3273': attribute type 10 has an invalid length. [ 1153.155801][T18499] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1153.160212][T18496] syz.3.3273 (18496): drop_caches: 2 [ 1153.172044][T18499] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1153.186210][T18499] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1153.205465][T18248] veth0_macvtap: entered promiscuous mode [ 1153.246586][T18248] veth1_macvtap: entered promiscuous mode [ 1153.354212][T18248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.359257][T18453] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1153.427018][T18248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.449586][T18248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.471997][T18248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.500806][T18248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.523111][T18248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.692266][T18506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1153.704747][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1153.888305][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1153.906690][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1153.916347][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1153.926773][ T5914] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1153.934321][ T5914] rtc rtc0: __rtc_set_alarm: err=-22 [ 1153.949906][T18506] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1154.096302][ T5944] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 1154.195564][ T5914] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1154.278478][ T5944] usb 4-1: Invalid ep0 maxpacket: 64 [ 1154.342646][T18523] xt_TCPMSS: Only works on TCP SYN packets [ 1154.390743][ T5914] usb 5-1: config 0 has no interfaces? [ 1154.425716][ T5944] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1154.484847][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1154.509940][T18506] bond3: entered allmulticast mode [ 1154.518044][T18506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.535083][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.549539][ T5914] usb 5-1: Product: syz [ 1154.564102][ T5914] usb 5-1: Manufacturer: syz [ 1154.573739][ T5914] usb 5-1: SerialNumber: syz [ 1154.585580][ T5944] usb 4-1: Invalid ep0 maxpacket: 64 [ 1154.609541][ T5944] usb usb4-port1: attempt power cycle [ 1154.641124][ T5914] usb 5-1: config 0 descriptor?? [ 1155.018323][ T8813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.025736][ T5944] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 1155.027090][ T8813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.061087][ T5944] usb 4-1: Invalid ep0 maxpacket: 64 [ 1155.245824][ T5944] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 1155.371360][ T5944] usb 4-1: Invalid ep0 maxpacket: 64 [ 1155.381245][ T5944] usb usb4-port1: unable to enumerate USB device [ 1155.390840][ T8813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.432668][ T8813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.619027][T18545] syz.1.3279: attempt to access beyond end of device [ 1155.619027][T18545] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1155.756164][T18547] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1158.573718][T12218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1158.597942][T12218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1158.609011][T12218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1158.617310][T12218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1158.625299][T12218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1158.750539][ T5944] usb 5-1: USB disconnect, device number 99 [ 1158.862454][ T30] audit: type=1326 audit(1752882155.802:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.4.3286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cd938e9a9 code=0x0 [ 1159.741096][ T3568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.839140][ T5974] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1160.075735][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 1160.203495][ T5974] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1160.316976][ T3568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.357192][T18608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.428608][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1160.678117][ T5974] usb 4-1: Product: syz [ 1160.682351][ T5974] usb 4-1: Manufacturer: syz [ 1160.725486][ T5974] usb 4-1: SerialNumber: syz [ 1160.741480][ T5974] usb 4-1: config 0 descriptor?? [ 1160.815867][T12218] Bluetooth: hci5: command tx timeout [ 1161.004581][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 1161.014210][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3287'. [ 1161.175810][ T3568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.730841][ T3568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.850682][T18626] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1162.893898][T18626] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1162.907721][T12218] Bluetooth: hci5: command tx timeout [ 1162.913477][T18626] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1162.925532][T18626] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1162.947065][T18626] geneve2: entered promiscuous mode [ 1162.965818][T18626] geneve2: entered allmulticast mode [ 1162.992140][T18626] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1163.070268][T18626] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1163.131642][T18626] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1163.181455][T18626] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1163.547854][T18629] sctp: [Deprecated]: syz.2.3295 (pid 18629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.547854][T18629] Use struct sctp_sack_info instead [ 1163.782890][T18583] chnl_net:caif_netlink_parms(): no params data found [ 1164.042663][ T5914] usb 4-1: USB disconnect, device number 113 [ 1164.145312][ T3568] bridge0: port 3(team0) entered disabled state [ 1164.175693][ T5944] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1164.236751][ T3568] bridge_slave_1: left allmulticast mode [ 1164.264294][ T3568] bridge_slave_1: left promiscuous mode [ 1164.336235][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.507349][ T5974] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1164.578149][ T5944] usb 5-1: config 0 has no interfaces? [ 1164.596838][ T3568] bridge_slave_0: left allmulticast mode [ 1164.641347][ T3568] bridge_slave_0: left promiscuous mode [ 1164.655572][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.706121][ T5974] usb 3-1: Using ep0 maxpacket: 8 [ 1164.714368][ T5974] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1164.730727][ T5974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.771331][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1164.802424][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.840229][ T5974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.864312][ T5974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1164.878442][ T5944] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1164.903961][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.912434][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.978012][T12218] Bluetooth: hci5: command tx timeout [ 1164.983583][ T5944] usb 5-1: Product: syz [ 1164.997593][ T5944] usb 5-1: Manufacturer: syz [ 1165.030823][ T5944] usb 5-1: SerialNumber: syz [ 1165.060097][ T5944] usb 5-1: config 0 descriptor?? [ 1165.146560][ T5974] usb 3-1: usb_control_msg returned -32 [ 1165.162449][ T5974] usbtmc 3-1:16.0: can't read capabilities [ 1165.352399][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1165.977359][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.995183][ T3568] bond_slave_0: left promiscuous mode [ 1166.019312][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.042170][ T3568] bond_slave_1: left promiscuous mode [ 1166.049704][ T3568] bond0 (unregistering): Released all slaves [ 1166.411243][ T3568] bond1 (unregistering): Released all slaves [ 1166.634424][ T3568] bond2 (unregistering): Released all slaves [ 1166.813720][ T3568] bond3 (unregistering): Released all slaves [ 1167.065555][T12218] Bluetooth: hci5: command tx timeout [ 1167.176232][ T3568] tipc: Left network mode [ 1167.387462][ T10] usb 3-1: USB disconnect, device number 123 [ 1167.617809][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1167.774578][T18674] xt_policy: neither incoming nor outgoing policy selected [ 1167.799839][T18674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1168.184495][T18216] usb 5-1: USB disconnect, device number 100 [ 1168.311340][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.331920][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.436367][T18583] bridge_slave_0: entered allmulticast mode [ 1168.586120][T18583] bridge_slave_0: entered promiscuous mode [ 1168.667209][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.674496][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.900093][T18583] bridge_slave_1: entered allmulticast mode [ 1168.945763][ T5944] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1169.007053][T18583] bridge_slave_1: entered promiscuous mode [ 1169.057042][T18216] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1169.155855][ T5944] usb 5-1: device descriptor read/64, error -71 [ 1169.206112][ T5914] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1169.238952][T18216] usb 2-1: config 0 has no interfaces? [ 1169.250801][T18216] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1169.288664][T18216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.319990][T18216] usb 2-1: Product: syz [ 1169.346008][T18216] usb 2-1: Manufacturer: syz [ 1169.361143][T18216] usb 2-1: SerialNumber: syz [ 1169.403626][T18216] usb 2-1: config 0 descriptor?? [ 1169.425906][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 1169.435834][ T5944] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1169.460280][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1169.498119][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.563343][ T5914] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1169.603868][ T5914] pvrusb2: ********** [ 1169.672633][ T5914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1169.730306][ T5914] pvrusb2: Important functionality might not be entirely working. [ 1169.741227][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.760260][ T5914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1169.785802][ T5944] usb 5-1: device descriptor read/64, error -71 [ 1169.803728][ T5914] pvrusb2: ********** [ 1169.824184][ T2343] pvrusb2: Invalid write control endpoint [ 1170.039884][ T5944] usb usb5-port1: attempt power cycle [ 1170.300661][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.356484][ T2343] pvrusb2: Invalid write control endpoint [ 1170.387023][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1170.439376][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1170.463552][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1170.476363][ T2343] pvrusb2: Device being rendered inoperable [ 1170.482668][ T5944] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1170.482690][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1170.500797][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1170.542246][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1170.558780][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1170.578850][ T5944] usb 5-1: device descriptor read/8, error -71 [ 1170.625096][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1170.922476][T18583] team0: Port device team_slave_0 added [ 1170.937705][ T5944] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1170.978081][ T5944] usb 5-1: device descriptor read/8, error -71 [ 1171.020823][T18583] team0: Port device team_slave_1 added [ 1171.117299][ T5944] usb usb5-port1: unable to enumerate USB device [ 1171.229544][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.253965][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.337169][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.408240][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.441193][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.551688][T18703] program syz.4.3305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1171.576441][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.624816][T18703] syz.4.3305 (18703): drop_caches: 2 [ 1171.638136][T18703] syz.4.3305 (18703): drop_caches: 2 [ 1171.645144][T18704] netlink: 'syz.4.3305': attribute type 10 has an invalid length. [ 1171.748602][T18704] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1171.759566][T18704] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1171.772118][T18704] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1171.891529][ T5974] usb 2-1: USB disconnect, device number 34 [ 1171.911225][T18216] usb 4-1: USB disconnect, device number 114 [ 1172.804653][T18583] hsr_slave_0: entered promiscuous mode [ 1172.880670][T18583] hsr_slave_1: entered promiscuous mode [ 1172.925647][T18583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.423788][T18583] Cannot create hsr debugfs directory [ 1173.866010][ T5944] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1174.030591][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 1174.071067][ T5944] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1174.086463][ T5944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.145590][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.295815][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.340831][ T5944] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.392647][T18732] syz.1.3312: attempt to access beyond end of device [ 1174.392647][T18732] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1174.418547][ T5944] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1174.440584][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.729812][ T5944] usb 4-1: usb_control_msg returned -32 [ 1174.737518][ T5944] usbtmc 4-1:16.0: can't read capabilities [ 1174.896619][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1175.619920][T18744] program syz.1.3313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.663379][ T3568] hsr_slave_0: left promiscuous mode [ 1175.707953][ T3568] hsr_slave_1: left promiscuous mode [ 1175.726824][T18744] syz.1.3313 (18744): drop_caches: 2 [ 1175.757253][T18745] netlink: 'syz.1.3313': attribute type 10 has an invalid length. [ 1175.758627][T18744] syz.1.3313 (18744): drop_caches: 2 [ 1175.771971][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.781214][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.874689][ T3568] veth0_macvtap: left allmulticast mode [ 1175.887649][ T3568] veth1_macvtap: left promiscuous mode [ 1175.901625][ T3568] veth0_macvtap: left promiscuous mode [ 1175.986433][ T3568] veth1_vlan: left allmulticast mode [ 1175.992177][ T3568] veth1_vlan: left promiscuous mode [ 1176.017468][ T3568] veth0_vlan: left promiscuous mode [ 1176.622318][ T5937] usb 4-1: USB disconnect, device number 115 [ 1176.822703][T18751] xt_TCPMSS: Only works on TCP SYN packets [ 1177.389854][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.397165][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.031882][ T5944] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1178.231370][ T5944] usb 4-1: config 0 has no interfaces? [ 1178.263288][ T5944] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1178.278709][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.303038][ T5944] usb 4-1: Product: syz [ 1178.307391][ T5944] usb 4-1: Manufacturer: syz [ 1178.312064][ T5944] usb 4-1: SerialNumber: syz [ 1178.349761][ T5944] usb 4-1: config 0 descriptor?? [ 1178.472813][ T3568] team_slave_1 (unregistering): left promiscuous mode [ 1178.488842][ T3568] team_slave_1 (unregistering): left allmulticast mode [ 1178.517185][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 1179.369304][T18745] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1179.388072][T18745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1179.410475][T18745] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1179.642022][T18775] program syz.1.3318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.665797][T18775] syz.1.3318 (18775): drop_caches: 2 [ 1179.676034][T18775] syz.1.3318 (18775): drop_caches: 2 [ 1179.682728][T18775] netlink: 'syz.1.3318': attribute type 10 has an invalid length. [ 1179.690809][T18775] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1179.706366][T18775] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1179.724055][T18775] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1180.215527][ T5944] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1180.229019][T18782] x_tables: duplicate underflow at hook 1 [ 1180.425229][ T5944] usb 3-1: config 0 has no interfaces? [ 1180.439570][ T5944] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1180.448777][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.456965][ T5944] usb 3-1: Product: syz [ 1180.461724][ T5944] usb 3-1: Manufacturer: syz [ 1180.495454][ T5944] usb 3-1: SerialNumber: syz [ 1180.696512][ T5944] usb 3-1: config 0 descriptor?? [ 1180.940693][ T5944] usb 4-1: USB disconnect, device number 116 [ 1182.683503][ T3568] IPVS: stop unused estimator thread 0... [ 1183.861265][T18216] usb 3-1: USB disconnect, device number 124 [ 1183.958835][T18814] fuse: Unknown parameter '0x0000000000000005' [ 1184.067681][T18583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1184.160269][T18583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1184.254679][T18583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1184.398224][T18583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1184.434319][T18831] usb usb8: check_ctrlrecip: process 18831 (syz.4.3327) requesting ep 01 but needs 81 [ 1184.453946][T18831] usb usb8: usbfs: process 18831 (syz.4.3327) did not claim interface 0 before use [ 1185.663445][T18583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.787210][T18854] vivid-000: disconnect [ 1186.432418][T18583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.909207][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.916513][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.941284][T18850] vivid-000: reconnect [ 1186.992594][ T30] audit: type=1326 audit(1752882183.932:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.3.3332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb78e9a9 code=0x0 [ 1187.050896][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.058109][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.563716][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.965548][T18216] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1187.984209][T18583] veth0_vlan: entered promiscuous mode [ 1188.317331][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1188.344765][T18216] usb 2-1: config 0 has no interfaces? [ 1188.375766][T18216] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1188.394220][T18583] veth1_vlan: entered promiscuous mode [ 1188.415533][T18216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.423598][T18216] usb 2-1: Product: syz [ 1188.524001][T18216] usb 2-1: Manufacturer: syz [ 1188.631279][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1188.641991][T18881] FAULT_INJECTION: forcing a failure. [ 1188.641991][T18881] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.655027][T18216] usb 2-1: SerialNumber: syz [ 1188.673619][T18583] veth0_macvtap: entered promiscuous mode [ 1188.692259][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.723873][T18884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1188.759352][T18216] usb 2-1: config 0 descriptor?? [ 1188.765581][T18881] CPU: 1 UID: 0 PID: 18881 Comm: syz.3.3336 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1188.765616][T18881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1188.765630][T18881] Call Trace: [ 1188.765639][T18881] [ 1188.765649][T18881] dump_stack_lvl+0x189/0x250 [ 1188.765687][T18881] ? __pfx____ratelimit+0x10/0x10 [ 1188.765712][T18881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1188.765740][T18881] ? __pfx__printk+0x10/0x10 [ 1188.765776][T18881] ? __pfx___might_resched+0x10/0x10 [ 1188.765800][T18881] ? fs_reclaim_acquire+0x7d/0x100 [ 1188.765828][T18881] should_fail_ex+0x414/0x560 [ 1188.765856][T18881] should_failslab+0xa8/0x100 [ 1188.765892][T18881] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1188.765929][T18881] ? getname_flags+0xb8/0x540 [ 1188.765955][T18881] getname_flags+0xb8/0x540 [ 1188.765980][T18881] do_sys_openat2+0xbc/0x1c0 [ 1188.766008][T18881] ? __pfx_do_sys_openat2+0x10/0x10 [ 1188.766032][T18881] ? ksys_write+0x22a/0x250 [ 1188.766064][T18881] ? __pfx_ksys_write+0x10/0x10 [ 1188.766091][T18881] ? rcu_is_watching+0x15/0xb0 [ 1188.766121][T18881] __x64_sys_openat+0x138/0x170 [ 1188.766151][T18881] do_syscall_64+0xfa/0x3b0 [ 1188.766176][T18881] ? lockdep_hardirqs_on+0x9c/0x150 [ 1188.766199][T18881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.766223][T18881] ? clear_bhb_loop+0x60/0xb0 [ 1188.766250][T18881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.766270][T18881] RIP: 0033:0x7f7bdb78e9a9 [ 1188.766290][T18881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.766310][T18881] RSP: 002b:00007f7bdc581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1188.766334][T18881] RAX: ffffffffffffffda RBX: 00007f7bdb9b6160 RCX: 00007f7bdb78e9a9 [ 1188.766351][T18881] RDX: 00000000000010fe RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1188.766367][T18881] RBP: 00007f7bdc581090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.766381][T18881] R10: 00000000000001c8 R11: 0000000000000246 R12: 0000000000000001 [ 1188.766394][T18881] R13: 0000000000000000 R14: 00007f7bdb9b6160 R15: 00007f7bdbadfa28 [ 1188.766428][T18881] [ 1188.782639][T18583] veth1_macvtap: entered promiscuous mode [ 1188.791462][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.791498][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1188.791545][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1188.791564][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.901125][ T9] usb 3-1: config 0 descriptor?? [ 1189.002635][T18583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.028256][T18583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.077991][ T30] audit: type=1326 audit(1752882185.992:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078055][ T30] audit: type=1326 audit(1752882185.992:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078103][ T30] audit: type=1326 audit(1752882186.002:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078150][ T30] audit: type=1326 audit(1752882186.002:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078198][ T30] audit: type=1326 audit(1752882186.002:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078246][ T30] audit: type=1326 audit(1752882186.002:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078294][ T30] audit: type=1326 audit(1752882186.002:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79b38e9a9 code=0x7ffc0000 [ 1189.078341][ T30] audit: type=1326 audit(1752882186.002:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb79b39083c code=0x7ffc0000 [ 1189.079981][T18583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.080023][T18583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.080080][T18583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.080112][T18583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.109315][ T30] audit: type=1326 audit(1752882186.032:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb79b390774 code=0x7ffc0000 [ 1189.286886][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.286922][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.313077][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313105][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313125][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313146][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313165][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313185][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313205][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313225][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313244][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313264][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313284][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313303][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313323][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313342][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.313362][ T9] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1189.417113][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0021/input/input50 [ 1189.459581][ T9] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1189.511793][T18870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.146020][T18870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.212897][ T8813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.228191][ T31] INFO: task kworker/0:2:978 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1190.274699][ T8813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.327853][ T31] Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 [ 1190.364304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1190.388632][ T31] task:kworker/0:2 state:D stack:20376 pid:978 tgid:978 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1190.465213][ T31] Workqueue: usb_hub_wq hub_event [ 1190.484168][ T31] Call Trace: [ 1190.500943][ T31] [ 1190.519506][ T31] __schedule+0x16f5/0x4d00 [ 1190.545261][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1190.574605][ T31] ? schedule+0x165/0x360 [ 1190.684615][ T5944] usb 2-1: USB disconnect, device number 35 [ 1190.718017][ T31] ? __pfx___schedule+0x10/0x10 [ 1190.798678][ T31] ? schedule+0x91/0x360 [ 1190.803043][ T31] schedule+0x165/0x360 [ 1190.849923][ T31] schedule_preempt_disabled+0x13/0x30 [ 1190.871678][ T31] __mutex_lock+0x724/0xe80 [ 1190.889590][ T31] ? __mutex_lock+0x51b/0xe80 [ 1190.909301][ T9] usb 3-1: USB disconnect, device number 125 [ 1190.925968][ T31] ? hub_event+0x21cb/0x4a00 [ 1190.985985][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1190.996683][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1191.003999][T18888] fido_id[18888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1191.035777][ T31] hub_event+0x21cb/0x4a00 [ 1191.040299][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1191.085471][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1191.090645][ T31] ? __pfx_hub_event+0x10/0x10 [ 1191.142821][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1191.155593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1191.160886][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1191.225449][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1191.231381][ T31] process_scheduled_works+0xae1/0x17b0 [ 1191.265543][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1191.271692][ T31] worker_thread+0x8a0/0xda0 [ 1191.303685][T17042] vhci_hcd: connection closed [ 1191.315621][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1191.331649][ T8813] vhci_hcd: stop threads [ 1191.357403][T17040] vhci_hcd: connection closed [ 1191.357483][T17034] vhci_hcd: connection closed [ 1191.370026][T17025] vhci_hcd: connection reset by peer [ 1191.371726][T17028] vhci_hcd: connection closed [ 1191.385829][ T31] ? __kthread_parkme+0x7b/0x200 [ 1191.405723][ T8813] vhci_hcd: release socket [ 1191.410936][ T8813] vhci_hcd: disconnect device [ 1191.438070][ T8813] vhci_hcd: stop threads [ 1191.438166][ T31] kthread+0x70e/0x8a0 [ 1191.442377][ T8813] vhci_hcd: release socket [ 1191.452365][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1191.474140][ T31] ? __pfx_kthread+0x10/0x10 [ 1191.483659][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1191.485286][ T8813] vhci_hcd: disconnect device [ 1191.505553][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.506660][ T8813] vhci_hcd: stop threads [ 1191.510907][ T31] ? __pfx_kthread+0x10/0x10 [ 1191.515174][ T8813] vhci_hcd: release socket [ 1191.535529][ T31] ret_from_fork+0x3fc/0x770 [ 1191.540225][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.561214][ T8813] vhci_hcd: disconnect device [ 1191.565475][ T31] ? __switch_to_asm+0x39/0x70 [ 1191.570839][ T31] ? __switch_to_asm+0x33/0x70 [ 1191.581003][ T31] ? __pfx_kthread+0x10/0x10 [ 1191.588164][ T8813] vhci_hcd: stop threads [ 1191.592493][ T8813] vhci_hcd: release socket [ 1191.595613][ T31] ret_from_fork_asm+0x1a/0x30 [ 1191.602154][ T31] [ 1191.610865][ T8813] vhci_hcd: disconnect device [ 1191.646076][ T8813] vhci_hcd: stop threads [ 1191.652358][ T8813] vhci_hcd: release socket [ 1191.663369][ T8813] vhci_hcd: disconnect device [ 1191.688844][ T44] vhci_hcd: vhci_device speed not set [ 1191.733060][ T31] [ 1191.733060][ T31] Showing all locks held in the system: [ 1191.832033][ T31] 3 locks held by kworker/0:0/9: [ 1191.867038][T12243] tipc: Resetting bearer [ 1191.873355][ T31] #0: ffff888143eb5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1191.957378][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.005499][ T31] #2: ffff888028051198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1192.014533][ T31] 1 lock held by khungtaskd/31: [ 1192.075506][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1192.163424][ T31] 6 locks held by kworker/1:1/44: [ 1192.168645][ T31] #0: ffff888143eb5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1192.215535][ T31] #1: ffffc90000b47bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.275572][ T31] #2: ffff88823beb6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1192.284622][ T31] #3: ffff8881457b4510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1192.345515][ T31] #4: ffff888145735868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1192.405484][ T31] #5: ffffffff99d2e280 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 1192.462248][ T31] 3 locks held by kworker/u8:5/750: [ 1192.485510][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1192.535467][ T31] #1: ffffc90003147bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.555480][ T31] #2: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1192.585800][ T31] 5 locks held by kworker/0:2/978: [ 1192.591008][ T31] #0: ffff888143eb5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1192.623040][ T31] #1: ffffc9000391fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.637804][ T31] #2: ffff888029002198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1192.647161][ T31] #3: ffff888029005510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1192.657898][ T31] #4: ffff888145735868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1192.668069][ T31] 3 locks held by kworker/u8:7/3455: [ 1192.673732][ T31] #0: ffff88802fff8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1192.692010][ T31] #1: ffffc9000bf57bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.710531][ T31] #2: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1192.722294][ T31] 2 locks held by getty/5605: [ 1192.732764][ T31] #0: ffff8880305e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1192.765449][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1192.785449][ T31] 3 locks held by kworker/0:5/5944: [ 1192.790747][ T31] 2 locks held by kworker/1:8/5974: [ 1192.816643][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1192.835504][ T31] #1: ffffc90004b77bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1192.855465][ T31] 2 locks held by syz.3.1687/12243: [ 1192.860766][ T31] #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1192.885460][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1192.905478][ T31] 4 locks held by syz-executor/14668: [ 1192.910941][ T31] #0: ffff888034440dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1192.935461][ T31] #1: ffff8880344400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1192.945277][ T31] #2: ffffffff8f683cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1192.967289][ T978] usb usb40-port1: attempt power cycle [ 1192.986088][ T31] #3: ffff8880593b9338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1193.005497][ T31] 1 lock held by syz.1.2347/14887: [ 1193.010700][ T31] #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1193.035501][ T31] 1 lock held by syz-executor/18583: [ 1193.040888][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1193.075571][ T31] 3 locks held by syz.2.3335/18869: [ 1193.080871][ T31] #0: ffff888028744dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1193.105480][ T31] #1: ffff8880287440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1193.115292][ T31] #2: ffffffff8f683cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1193.158101][ T31] 3 locks held by syz.4.3337/18880: [ 1193.163396][ T31] #0: ffff8880453d8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1193.195474][ T31] #1: ffff8880453d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1193.215818][ T31] #2: ffffffff8f683cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1193.235450][ T31] 1 lock held by syz.3.3338/18890: [ 1193.240664][ T31] #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1193.265496][ T31] 1 lock held by sed/18916: [ 1193.270146][ T31] [ 1193.291680][ T31] ============================================= [ 1193.291680][ T31] [ 1193.318704][ T31] NMI backtrace for cpu 0 [ 1193.318728][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1193.318755][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1193.318769][ T31] Call Trace: [ 1193.318778][ T31] [ 1193.318788][ T31] dump_stack_lvl+0x189/0x250 [ 1193.318819][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1193.318854][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.318881][ T31] ? __pfx__printk+0x10/0x10 [ 1193.318924][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1193.318958][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1193.318988][ T31] ? _printk+0xcf/0x120 [ 1193.319024][ T31] ? __pfx__printk+0x10/0x10 [ 1193.319055][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1193.319080][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1193.319117][ T31] watchdog+0xfee/0x1030 [ 1193.319140][ T31] ? watchdog+0x1de/0x1030 [ 1193.319167][ T31] kthread+0x70e/0x8a0 [ 1193.319202][ T31] ? __pfx_watchdog+0x10/0x10 [ 1193.319222][ T31] ? __pfx_kthread+0x10/0x10 [ 1193.319254][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.319276][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.319296][ T31] ? __pfx_kthread+0x10/0x10 [ 1193.319329][ T31] ret_from_fork+0x3fc/0x770 [ 1193.319355][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.319386][ T31] ? __switch_to_asm+0x39/0x70 [ 1193.319422][ T31] ? __switch_to_asm+0x33/0x70 [ 1193.319449][ T31] ? __pfx_kthread+0x10/0x10 [ 1193.319480][ T31] ret_from_fork_asm+0x1a/0x30 [ 1193.319525][ T31] [ 1193.319533][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1193.479351][ C1] NMI backtrace for cpu 1 [ 1193.479370][ C1] CPU: 1 UID: 0 PID: 18915 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1193.479393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1193.479406][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8f/0x130 [ 1193.479442][ C1] Code: 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 d0 9f 92 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 <65> 44 8b 1d 29 a1 df 10 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 [ 1193.479459][ C1] RSP: 0018:ffffc90003f9f6e0 EFLAGS: 00000202 [ 1193.479476][ C1] RAX: 0000000000000004 RBX: ffffc90003f9fb40 RCX: 0000000000000005 [ 1193.479489][ C1] RDX: ffffffff8b67bd88 RSI: ffffffff8f88ad30 RDI: 0000000000000003 [ 1193.479502][ C1] RBP: dffffc0000000000 R08: ffff888026910000 R09: 0000000000000003 [ 1193.479515][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880615cf000 [ 1193.479526][ C1] R13: 0000000000000005 R14: 0000000000000003 R15: 0000000000000003 [ 1193.479538][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1193.479552][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.479565][ C1] CR2: 00007f9a2e3ec7d0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1193.479582][ C1] Call Trace: [ 1193.479589][ C1] [ 1193.479598][ C1] mas_next_node+0x3d8/0xd60 [ 1193.479632][ C1] mas_next_slot+0x407/0xcf0 [ 1193.479660][ C1] mas_find+0x9e7/0xc10 [ 1193.479678][ C1] ? unlink_file_vma_batch_add+0x12c/0x1e0 [ 1193.479704][ C1] free_pgtables+0x69e/0xaf0 [ 1193.479726][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1193.479747][ C1] ? __pfx_down_write+0x10/0x10 [ 1193.479771][ C1] ? __mas_set_range+0x12f/0x3c0 [ 1193.479791][ C1] exit_mmap+0x444/0xb50 [ 1193.479816][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1193.479838][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1193.479863][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1193.479890][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1193.479922][ C1] ? uprobe_clear_state+0x274/0x290 [ 1193.479944][ C1] __mmput+0x118/0x420 [ 1193.479966][ C1] exit_mm+0x1da/0x2c0 [ 1193.479994][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1193.480018][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1193.480041][ C1] ? rcu_is_watching+0x15/0xb0 [ 1193.480064][ C1] do_exit+0x648/0x22e0 [ 1193.480092][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1193.480120][ C1] ? __pfx_do_exit+0x10/0x10 [ 1193.480157][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.480174][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.480195][ C1] do_group_exit+0x21c/0x2d0 [ 1193.480225][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1193.480252][ C1] x64_sys_call+0x21ba/0x21c0 [ 1193.480277][ C1] do_syscall_64+0xfa/0x3b0 [ 1193.480296][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.480315][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.480334][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1193.480355][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.480373][ C1] RIP: 0033:0x7f9a2e2ea6c5 [ 1193.480388][ C1] Code: Unable to access opcode bytes at 0x7f9a2e2ea69b. [ 1193.480398][ C1] RSP: 002b:00007fffd16e8818 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1193.480418][ C1] RAX: ffffffffffffffda RBX: 00007fffd16e8b04 RCX: 00007f9a2e2ea6c5 [ 1193.480432][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1193.480444][ C1] RBP: 0000000000000003 R08: 00007fffd16e8910 R09: 0000000000000002 [ 1193.480456][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1193.480467][ C1] R13: 00007fffd16e8b50 R14: 00007f9a2e4fa000 R15: 000055d85e978d98 [ 1193.480489][ C1] [ 1193.866088][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1193.873040][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1193.884981][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1193.895092][ T31] Call Trace: [ 1193.898407][ T31] [ 1193.901381][ T31] dump_stack_lvl+0x99/0x250 [ 1193.906024][ T31] ? __asan_memcpy+0x40/0x70 [ 1193.910660][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.915902][ T31] ? __pfx__printk+0x10/0x10 [ 1193.920551][ T31] panic+0x2db/0x790 [ 1193.924501][ T31] ? __pfx_panic+0x10/0x10 [ 1193.928963][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1193.934815][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1193.940242][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1193.946467][ T31] watchdog+0x102d/0x1030 [ 1193.950837][ T31] ? watchdog+0x1de/0x1030 [ 1193.955299][ T31] kthread+0x70e/0x8a0 [ 1193.959437][ T31] ? __pfx_watchdog+0x10/0x10 [ 1193.964249][ T31] ? __pfx_kthread+0x10/0x10 [ 1193.968892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.974136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.979379][ T31] ? __pfx_kthread+0x10/0x10 [ 1193.984036][ T31] ret_from_fork+0x3fc/0x770 [ 1193.988672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.993967][ T31] ? __switch_to_asm+0x39/0x70 [ 1193.998794][ T31] ? __switch_to_asm+0x33/0x70 [ 1194.003603][ T31] ? __pfx_kthread+0x10/0x10 [ 1194.008250][ T31] ret_from_fork_asm+0x1a/0x30 [ 1194.013090][ T31] [ 1194.016492][ T31] Kernel Offset: disabled [ 1194.020835][ T31] Rebooting in 86400 seconds..