last executing test programs: 2m1.571620432s ago: executing program 3 (id=10): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) (async) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="a50dafd420eb8e3705e0a5d6796dc8d44b5b043fb599dbdb450d4c8af4f84e9aed36c1092e750a2f4937dc3b565b63a2eafddca1e023f482421f8a0d94f9b79b", 0x40}, {&(0x7f0000000600)="1c089a", 0x3}], 0x3, 0x8) (async) vmsplice(r2, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="a50dafd420eb8e3705e0a5d6796dc8d44b5b043fb599dbdb450d4c8af4f84e9aed36c1092e750a2f4937dc3b565b63a2eafddca1e023f482421f8a0d94f9b79b", 0x40}, {&(0x7f0000000600)="1c089a", 0x3}], 0x3, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000000000", @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r4, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m0.132022401s ago: executing program 3 (id=15): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305010000000007000000000000", @ANYRES32=0x0, @ANYBLOB="01220000000000001c002980080001006772650010000280040012000500130000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc0b0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x6, 0xf, 0x4f, 0x46b}, {0x6, 0x0, 0xc2, 0xd}, {0x7, 0x0, 0x5, 0x6}, {0x7, 0xfd, 0x81, 0x9}, {0x1, 0x22, 0x79, 0x8}, {0xffff, 0x5, 0x3, 0x1}, {0x9, 0x4, 0x61, 0x1}, {0x3, 0x2, 0xff, 0x80}, {0x0, 0xff, 0x3, 0x3}]}, 0x10) 1m56.297313569s ago: executing program 3 (id=18): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r6, 0xd, &(0x7f0000000280)={0x8aec, 0x400000000}, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000080), &(0x7f0000000200)=0x4) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642cb71b66e062b47266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m55.773149029s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x204040, 0x50, 0x34}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) sendmmsg$alg(r0, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="12ea898e831ff647d1920ebe5e2c7991797458", 0x13}, {&(0x7f0000000440)="885ce2d2949077efbddcd51becf5513d6077", 0x12}, {&(0x7f0000000480)="4f0973f0c59bb7e191a95ec672d276779ff0ac3bf96f688dc5490a306e09e60cf00eb06f146cd977d5d8db50ccc67a672a9ef8b74032d01a254b9cc5ae4dd395aa876a05f2c9486ed97b228515f9a59c447f8ae999c6d1869a50ae41d9a76dbb4ef8b4e1f45c18f77881f376092830752333cc51cca5c9", 0x77}, {&(0x7f0000000500)="18d4ceb120721faf8eeef2b92eaf5ef663e335ae12efa72da7c9994077cc7e2e4790bbf0e15962161996a67d2dce704df5533c27adf36ddd277f7867d2fba52704aa2cb7c4f2330fa1be9b1b41f43bbade4a61689c4444c1df304a26982b83fd6aac6f4991bd57141e928a008bc3ad6fe4ca84736def282b2bc392d3f2f1d8bc0d089170ee0d61bbc677a39d921934dc20ab6662975d143f87c7036d0321bea2056522abb840e5d7c8ead82d7a7fdbf8f71e89424cfc6edbfca1ab9a35dd2cde3b796cb29c47d372db8f660fab300d39f029196ddd9303f8ce51aec9f0ea4ec0eb112c", 0xe3}, {&(0x7f0000000600)="16ee5a61fe3821b3a0507a0edc93595a591747212a0c20d527f1353f1c694f9913100ffff6a56645e35def11b52260a076f98084f5d3d8a9f41a06831f2a303d9e20ed9538b8bb84ae996a4cde92d99440f3755ffb53a8f605b6af608551cfc6d2b6bf086f2c3bb4d890263959", 0x6d}], 0x5, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x90, "e5398cc50bbb20f4c4ac5ad99379c06ba0f915871070f3d23bbc4edc35e874389e159138c6319764f290edc454b79b5465fd65fc6d70d7e53157bf896087ff5015c823f7ab7908526808f14c6c8a00313f046cdd4ef1d70a485d5edbfcc2b70902fbef3ff01c500b5a9b558e1a20f351fe3f67975c3f472cbfc230b86582fca1824a9a6714bbe42c9d76e893ed65aa82"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x100, 0x117, 0x2, 0xe7, "fdab81e818c29f496909875c8d0384f6ae0241020697d17a370cc74f31c7c08b907f239d5f88b70b27e0fe724e3e41b22417a01c7dc5c775bc280a865c093e56d55ddb44f34c4e278cf5d46abb134a2177f92db988b6c6f3f99f088cad398f9398f165f5eb79675cca9794eec5db759c87481cc2731dabc8226b75f4190b463f9ae78ad177f1ca56e85553f45a62b7e4869368cd60732404411a0f662c26b2407b6aa892b331620af4d3155aa4a17b3b0af312845f48be4d1447393b7304b5842eaab1db26dfaf2f1f66f0e9dc88866579e7c573b25d0b7937865ee7620d11cb0e0b47f9074a4c"}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18, 0x117, 0x3, 0x1}], 0x238, 0x4000}], 0x1, 0x10000810) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) 1m54.654965537s ago: executing program 3 (id=27): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 1m53.009766994s ago: executing program 3 (id=34): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r2, r1, 0xf319}) r3 = io_uring_setup(0x2b2c, &(0x7f0000000380)={0x0, 0x523c, 0x20000, 0x20000009, 0x185, 0x0, r2}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc06}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xec84dba}], 0x38) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000877000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00009ea000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2c000000, 0x30}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r9, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) sendto$inet6(r4, &(0x7f0000000040)="dfd0", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 1m52.5706226s ago: executing program 32 (id=34): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r2, r1, 0xf319}) r3 = io_uring_setup(0x2b2c, &(0x7f0000000380)={0x0, 0x523c, 0x20000, 0x20000009, 0x185, 0x0, r2}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc06}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xec84dba}], 0x38) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000877000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00009ea000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2c000000, 0x30}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r9, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) sendto$inet6(r4, &(0x7f0000000040)="dfd0", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 1m37.710754668s ago: executing program 2 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000004c0)={0x6, 0xb97, &(0x7f00000002c0)="71ea1319e5bc0fccf9a7ca504f8902ee235edfeec1e13c92b556cb9c", &(0x7f00000003c0)="184123f00095ee861bb3ebecb7c6bc45be0483eb561135a51be54098af95daad10a91c855a1f4bb9a1346f4cded501378c678d47b176c1176c46f4c8d620db02123a80372a6ffb5ae2686071bf21bf55563778dfe13ccc496a1ebae7110d0b83260d5aafdfb94d4944b06795cc31476f630ca2decad9318edf0ab96b04bda1a1797568e1947869b0a2f32ae572c34f3fb07678abcdd614ab9d4fe95f58f7e8763045d9bf006a7c5ee181db1c882084fe1d9441fc2ae8dbc6ea9bece281780416cbf51fdc7120c40a2135d40ec347d10c77dcbb", 0x1c, 0xd3}) (async) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000004c0)={0x6, 0xb97, &(0x7f00000002c0)="71ea1319e5bc0fccf9a7ca504f8902ee235edfeec1e13c92b556cb9c", &(0x7f00000003c0)="184123f00095ee861bb3ebecb7c6bc45be0483eb561135a51be54098af95daad10a91c855a1f4bb9a1346f4cded501378c678d47b176c1176c46f4c8d620db02123a80372a6ffb5ae2686071bf21bf55563778dfe13ccc496a1ebae7110d0b83260d5aafdfb94d4944b06795cc31476f630ca2decad9318edf0ab96b04bda1a1797568e1947869b0a2f32ae572c34f3fb07678abcdd614ab9d4fe95f58f7e8763045d9bf006a7c5ee181db1c882084fe1d9441fc2ae8dbc6ea9bece281780416cbf51fdc7120c40a2135d40ec347d10c77dcbb", 0x1c, 0xd3}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000d300000095000000000000010000000000008cca470000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000001c0)='./file0\x00', 0x14000, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x3ff, 0x4000) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2) (async) r5 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2) pwrite64(r5, 0x0, 0x0, 0x14f) sync_file_range(r4, 0x5, 0x4, 0x7) (async) sync_file_range(r4, 0x5, 0x4, 0x7) kexec_load(0x2, 0x4, &(0x7f0000000240)=[{&(0x7f0000000040)="6f987851d3f2f1c1660856fbf6d8019db860c207b1f67ade1e674d4d18baada351e1a61701f8f908469cd32904121bc5cfd1955a45d3aee62abb3120a230e07b1992612a6d92c5cdd687562224d74e852fdc48cc", 0x54, 0xbf1, 0x1}, {&(0x7f00000000c0)="23910fc62f1670dcf96cf79e8821f0ee0740cc9dcf34894039e52e77a6a22416169ba765d3f8be99fdcaa5d53104f8369bc328419fe71d655c44a633792f38ccdec01de390688f761229fa7c4158ccbe45a03e7be9a0d31f1d08424e52ab17e957da2a659ee0638eeeab2f4f180e997e0921aefc913c16658dd238e83da1e78d6cac6f41926f6dd2b7961516ba0aeccf06289b3008844397d306c207ec9582bb2bee", 0xa2, 0x55, 0x8000}, {&(0x7f0000000a40)="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", 0x1000, 0x5, 0x2}, {&(0x7f0000000180)="7b9a6d874b30500ee03a650d02862e10ee6ee85781335c665b2968f50618a335a73db1ca1ca124e7c0", 0x29, 0xfffffffffffff876, 0x3}], 0x0) 1m37.132088202s ago: executing program 2 (id=85): r0 = socket(0x1d, 0x3, 0x1) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1m36.948797827s ago: executing program 2 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x7487, &(0x7f0000000080)=ANY=[@ANYBLOB="a4"]) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x2031b000) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"]) 1m33.771197034s ago: executing program 2 (id=98): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001980)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000130000000500050080ff00000a"], 0xa0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000200)="952b"}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x1b, r3, 0x1, 0xffffffff, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x16e8efef51040b91) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) 1m32.77683238s ago: executing program 2 (id=100): clock_gettime(0x0, &(0x7f0000000640)) pipe(0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000140)=@xdp={0x2c, 0x4, 0x0, 0xb}, 0x80, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x11000000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0xa, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa", 0xb1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="38b700ab4227fb841229f07d000000000000", @ANYRES16=r6, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRESHEX, @ANYBLOB="0400460005003400c4000000080026006c0900000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000045}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r8 = syz_open_dev$vbi(0x0, 0x1, 0x2) fcntl$dupfd(r8, 0x0, r2) 1m31.43580742s ago: executing program 2 (id=105): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,obj_role=trans=rdma,,fu']) 1m30.739302576s ago: executing program 33 (id=105): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,obj_role=trans=rdma,,fu']) 1m26.633420023s ago: executing program 1 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@const={0x0, 0x0, 0x0, 0x2}, @fwd={0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0]}}, 0x0, 0x43}, 0x28) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 1m25.672114596s ago: executing program 1 (id=124): pselect6(0x40, &(0x7f0000000180)={0x0, 0x2, 0xe, 0x200000000001000, 0x0, 0x0, 0xf22}, 0x0, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x3, 0x0, 0x408263, 0x8}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "95a439", 0x2, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1}, [@dstopts={0x2f}]}}}}}}}, 0x0) io_getevents(0x0, 0x6f, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000000)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="16010200925f5510ac05261289b2010203010902"], 0x0) 1m24.126337025s ago: executing program 1 (id=126): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000009b000000000000"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xf049ee726fce115, r6, 0xffffd000) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r7, &(0x7f0000000040), 0xfffffffffffffe0a, 0x6) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) 1m19.154778807s ago: executing program 1 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) 1m18.930491225s ago: executing program 1 (id=141): syz_emit_vhci(0x0, 0x3b) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x790, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0xbbd9, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x10, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xfffc, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0xff, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa21, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xc141, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m18.478652577s ago: executing program 1 (id=142): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m17.900959027s ago: executing program 34 (id=142): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m6.960096434s ago: executing program 0 (id=165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x2, ';'}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "2fa7f2e1"}]}}, 0x0}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0x15, 0x4, "1fe85c7d"}, 0x0, 0x0, 0x0, 0x0}) 1m2.759166668s ago: executing program 0 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) socket(0x200000100000011, 0x3, 0x3) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) (rerun: 64) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000300)="b0deaf17acc0f0b130e3e3f7cfc9be61e91c01518934423d9b615053b62cb51bf54abed45dfc532bfe84e67610250f6d0b4c38e237b109152ae9b3b4cc1e584e50d5ac75f12d82fe7bf3ea5f04e98640c9951faa02fe5e38cbdbe0cf564a99d5d9ac090aedc1ca99abc636963a7e68887f467838c21a3134da0fabc90b8d0136d86faa440cc9d11ee3e23184a43b17e39e6227f4efd92fb72d7a", 0x9a}], 0x1) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) (async) write$evdev(r5, &(0x7f0000000040), 0x373) (async) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='+\xc2\xc798H#\xff\x7fg\x92\xfa\xfaJ\x84\x9aY_\x7f\x01\a\xf3\x02.\xa4\x8c\\$\xf3h\x94\xcb7\xba\xb4\x89\xf0:5\xb9\xeb\x03S:ie\xbf\x84\xe6\xbf\x1b\x13\xc2Kh\xc74\x0e\x9e\xf1y\xfdX\xd2R5', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x80, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x6, 0x3, 0x8000000000000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc00000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1cb600000000, 0x0, 0x0, 0x0, 0x80, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]}) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m1.732464148s ago: executing program 0 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0xfe46) r5 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$inet(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a80)='U', 0x1}], 0x1}, 0x8801) recvmsg$can_raw(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x0, 0x608, 0x0, 0x4, 0x1, 0x4, 0x6a, r7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x5}, 0x8) sendmsg$nl_netfilter(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f00000016c0)=ANY=[@ANYBLOB="18000000100a01080000190000000000070001feed8def8b"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 1m0.317742798s ago: executing program 0 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xc, 0x4002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd25, 0x20234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) read$watch_queue(r0, &(0x7f00000002c0)=""/126, 0x7e) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) 1m0.103478513s ago: executing program 0 (id=182): syz_emit_vhci(0x0, 0x3b) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 59.564111574s ago: executing program 0 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000903000000092900000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xca, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x13, 0x1, 0x0, 0x5}, 0x6f, &(0x7f0000001140)=ANY=[@ANYBLOB="050f6f000503100b14100a19020000000f000900300000000f0000000b100108450002087f007f3d100884047aa41928ab735fcf17fcd1bdaa19f1993fce8088d4fee8bb92eb96f882d21b970bf9c0069f49d4fff49e5c08cfc267bb2d12930b07eb88b30b10010280009e00010085226776b0751915e63137db690d95f8b2cbe34ab3c1d6e50b540a47187c2e074ff4f6b6bdec"], 0x4, [{0x44, &(0x7f0000001040)=ANY=[@ANYRESHEX=0x0]}, {0xe2, &(0x7f0000001880)=ANY=[@ANYRES8=r0, @ANYRES64]}, {0xbe, &(0x7f00000012c0)=@string={0xbe, 0x3, "a559c41aab035a9238750eb70dc1dcccaa7344d59730f17b7e26ca83ce118c8167a7f327b75453748aea1ae99fde9012b8cee6ca157558e29114468fd33747342440a1aad9df463bb183728c875c2c4ba2063b96cf1be4efb0953e461da1dd839c7ceb5c758f265469c9c257209fe59e941065fe0175fb823dff6d33d4af918c14390082432b663671a1d8858a5ed6ab6d19d1294834bc710d4352912f86c5896a9d7ef4f59bf40ad9359f9af17f08ece1b3f1d6e4f7f1d699ee5ec0"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x810, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb017954c51f22f8987b3ecc57eb30f2de7b1bb32b0018000000000000000c0000000c000000042f5600000000a1"], 0x0, 0x28, 0x0, 0x1}, 0x28) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="564004c6852da7a299e4c397654090d1a6e1a6fee5b6ca41a9cb83ca5fad37d47a167cb97ac6f42cd26176b926d86a68c7712d0bdda35a608201c926ac0d3ce30b900b734791b8dcc8e55cac183e1e6fb5f56fdd8effcc2c0cf01c60c6f523", 0x5f}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x0, 0x3, @discrete={0x0, 0xfffffffe}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r4, @ANYRES16, @ANYBLOB="0000000000000000000000000000000000000000000000000040005479965b1bd0c3ccbc0a6fddd01edaf477f2d022422a357097a1a400000000bcb417c0fb481b74c2877153ba3925203465b33d9ed0a2c52b498726f8c18cd53a76a5dfeeb32fe2c7908f500bbdefaaa71a6013b9ea74bc7659036a3a7db5c92129b736ad054f1db18d30f7e2960e8444191f"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x1, 0x80001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000001}}}, 0x108) 58.862565834s ago: executing program 35 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000903000000092900000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xca, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x13, 0x1, 0x0, 0x5}, 0x6f, &(0x7f0000001140)=ANY=[@ANYBLOB="050f6f000503100b14100a19020000000f000900300000000f0000000b100108450002087f007f3d100884047aa41928ab735fcf17fcd1bdaa19f1993fce8088d4fee8bb92eb96f882d21b970bf9c0069f49d4fff49e5c08cfc267bb2d12930b07eb88b30b10010280009e00010085226776b0751915e63137db690d95f8b2cbe34ab3c1d6e50b540a47187c2e074ff4f6b6bdec"], 0x4, [{0x44, &(0x7f0000001040)=ANY=[@ANYRESHEX=0x0]}, {0xe2, &(0x7f0000001880)=ANY=[@ANYRES8=r0, @ANYRES64]}, {0xbe, &(0x7f00000012c0)=@string={0xbe, 0x3, "a559c41aab035a9238750eb70dc1dcccaa7344d59730f17b7e26ca83ce118c8167a7f327b75453748aea1ae99fde9012b8cee6ca157558e29114468fd33747342440a1aad9df463bb183728c875c2c4ba2063b96cf1be4efb0953e461da1dd839c7ceb5c758f265469c9c257209fe59e941065fe0175fb823dff6d33d4af918c14390082432b663671a1d8858a5ed6ab6d19d1294834bc710d4352912f86c5896a9d7ef4f59bf40ad9359f9af17f08ece1b3f1d6e4f7f1d699ee5ec0"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x810, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb017954c51f22f8987b3ecc57eb30f2de7b1bb32b0018000000000000000c0000000c000000042f5600000000a1"], 0x0, 0x28, 0x0, 0x1}, 0x28) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="564004c6852da7a299e4c397654090d1a6e1a6fee5b6ca41a9cb83ca5fad37d47a167cb97ac6f42cd26176b926d86a68c7712d0bdda35a608201c926ac0d3ce30b900b734791b8dcc8e55cac183e1e6fb5f56fdd8effcc2c0cf01c60c6f523", 0x5f}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x0, 0x3, @discrete={0x0, 0xfffffffe}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r4, @ANYRES16, @ANYBLOB="0000000000000000000000000000000000000000000000000040005479965b1bd0c3ccbc0a6fddd01edaf477f2d022422a357097a1a400000000bcb417c0fb481b74c2877153ba3925203465b33d9ed0a2c52b498726f8c18cd53a76a5dfeeb32fe2c7908f500bbdefaaa71a6013b9ea74bc7659036a3a7db5c92129b736ad054f1db18d30f7e2960e8444191f"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x1, 0x80001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000001}}}, 0x108) 16.709293001s ago: executing program 7 (id=294): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@loopback, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x29, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfe90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 15.88393885s ago: executing program 7 (id=299): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, 0x0, 0x20048010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000140)={0x4}) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000000901010000000000000000010000020800064000000001480002000c00028005000100210000000c00028005000100880000000c000280050001003a00000014000180080001000000000008000200ffffffff0c00028005000100210000000800034000000bd20900010073797a310000000008000340ffffffd408000640000000000100010073797a300000000018709e84f87b6c3eb86d23c008"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r3, &(0x7f0000000700)=""/115, 0x73, 0x5) r4 = io_uring_setup(0x2340, &(0x7f00000001c0)={0x0, 0x483a, 0x4000, 0x2, 0x385}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xf28e, 0x0, 0x4, 0xb6, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) read(r8, &(0x7f00000000c0)=""/163, 0xd0140f23) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000380)=0x76a, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x12, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close(r10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) 12.285681245s ago: executing program 8 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8182, 0x0) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000cc0)='T', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '.!\'\xa8'}, {0x20, 'rwatl'}, {0x20, 'rwatl'}]}, 0x1c) r8 = socket(0x21, 0x2, 0x4000000) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x4) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 12.140025947s ago: executing program 5 (id=309): r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x2, @raw_data="2afc78dfbaefc23c61eaedd4523f6cf28d6a0dd0c8d003a8903979c62d42b92ddbf1b5736cbbf6b9a1dcada49fec10a50a0938668601000080000000007c9be744313e26ee644802e7431100ee13d84a7ee4db4ccdc57ba9c7067e4b37928df9cbb7a2179ed958e84e6e2016a87c550461e6e3eb82593db6cbf434b6fe4f2467971d26710aca942d173d7008b704093cb2af42c83456afc2033604f4c45fa26ca5981775973fd2a42886d982546169c5abf036097f8b09d2f478babb9dab880464cd0a086b1492ac"}) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x8f, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x2c, {0x8, 0xffffffff}, 0xd0, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000006c00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) 12.050785911s ago: executing program 7 (id=310): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x6, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000fbbdfc88bd5400000200000000000000000000b702000000000000850000004d66a9b397172004824584000000b70000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) (async) r8 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x112, 0x0) mq_timedreceive(r8, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x454c, 0x7fff}}, './file0\x00'}) (async) r9 = getpid() syz_pidfd_open(r9, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) 10.164056764s ago: executing program 4 (id=311): syz_emit_vhci(0x0, 0x3b) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10.025333007s ago: executing program 5 (id=312): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async, rerun: 64) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="7dc4a27f574f456f13a06cc7b47a5ec15962ec0390c492a6b71175dff5a839469764224dc09f5f2edffa7138d4ba194cf77761da81be12bcbd0615e9c107964eac9e48d69336a1073bfcac01f77f72dc57e9e7ea688a73c761a2abfe68290dbe3edb56d3e5de5de28038544dc40e33ddde175ed5f6308ea2d4ce82715e11a753f9b2bdbfb3160d0621a3d00ccfa5107c0e7bdfe8cf51b5ff7105fbaad4e411250b560b8fe112", 0xa6}, {&(0x7f0000000480)="f2bcfa5ff6ef9450cf93a3c15637fad1bff7a42e7d3c98924d9acd4f3523d98839988f5803213a4b9fb5fe8061ebe5bcb75975cc1e08180cf61139dd8da90b144f15232f5b27de6a050f3039db636e5aeb6f2491fe4591c7745207ac636182577af9a659618b1cd32959fde0acf93ab8343e3fadb490e708e9df26622362219d0512978d823251cf789c04d0eeb1398b29ecca50cd64a40e9553a24efce22bc3e5329ea3dbfda431022ee15c532a655d4c3574185b4e69e6d108e02c42baf7a8d89256109f476f718f7b58684cf30ea960250982f5c89a5a36045d0cc68a170ab2", 0xe1}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000740)="fac39b42bf12bb11861c1e83481e1f9b7ac492760fe55b693565048bdc5f65991b3dfaaa940f21777192160ad10bb9b9e14ee594481914ac0f346cb364b5893947b916362f196fea1be4484967e1e0bb8c62c90df9506691132e163623c7fbdb2917f4856df1c04a970fd4e2c4bf0e09f9eed940035ab30b44f42bcd9b19d05cb901c2ebaae1bd5d878c22d4accd131879e9bc7b6ae810b6", 0x98}], 0x4, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x40840) 9.156176154s ago: executing program 5 (id=313): syz_usb_connect$cdc_ncm(0x4, 0x87, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902750002010610000904000001020d00000524060001052400a9b30d240f01020000000300ff00055a241a0c040000000a050905580424020204240212042402020624070806000905810120000e0c000904010000021200000904010102020d0000090582022000ff0b03090503020800090307"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r3, 0x2d04, 0x0, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xfc) mq_open(&(0x7f0000000180)='.[\x00', 0x60d5f43f07f35d73, 0x38, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9.116478983s ago: executing program 8 (id=314): syz_open_dev$sndmidi(&(0x7f0000000380), 0x3, 0x40) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) eventfd2(0xa, 0x801) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fgetxattr(r0, &(0x7f00000003c0)=@random={'user.', '.\x00'}, &(0x7f0000000440)=""/46, 0x2e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'hsr0\x00'}}) r3 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0x9407, 0x400, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x400, 0x2000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x5, &(0x7f0000000100)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r12, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x800) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.997941366s ago: executing program 4 (id=315): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0x15, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026e00010100200009040000ff020200000524060000052400ffff0d240f01010100000000fcff001524120f00a317a88b045e4f01a607c0ffcb7e392a1524129d55a317a88b045e4f01a607c0ffcb7e392a090581122000000000090582022000000000090503"], 0x0) 8.160084768s ago: executing program 8 (id=317): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a3b"], 0x0) (rerun: 64) 7.118654653s ago: executing program 7 (id=318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x1ac8, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1a98, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x46c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x298, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "c91eb0547f9ce5ce805007176cefa0afbfc258553f0746f9b1b0d42b53e1d4cd8e5904b092af4c824ccffa2f55a3211e7df080d1b0883e05"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xfffffffffffffec3, 0x1, "1a6a0cd4a342534802cbbd5848485abef81a97fc44110b880b44a0ee32fe313e26ead46600e62d9b9fcdf6b1d333a24b4ea97e3f67e9edeabc4f58eb6847ab939ce72fca2dac628ce5f2b6e6c77cd095172a6c1c4609847a89c4df92ecccab740cf3ac9a705874bf95bc3dd12f98516e17516311170924b3bacf361113072c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "c2c615b1aaa031225200705dfec357240aadac1bdd1406c0fd2d83c6afc50ce3ae5699cd9880d6df34935db015ba9206aff79c99fc90629f1ad54220f8d7cdccf2abf088b08e5689db9c3bb2f6241c22fd50ef04ca5e07fe483f3445aa8289395922a4593b0c664cec4c459d979cf09e101ddc9986b6cf40ceec86b6e606da8363a41b8a521fe3808efbd7f20b358c0ca568abce99ea8a23"}, @NFTA_DATA_VALUE={0xf1, 0x1, "7ca257f24bb70cc4aacebca55e2e347115503cc550ee3be2a8f2be7ccd036212fef427b711707340485fdb7400d7883b448da9ae809fc65dc066e4b9e13da03df87d9cf48e902e4e8dd55f1588e0dc2e0c94f5e2c714d5afd181c06a676364067348da6f70a9ee2837d87cc668f4b3eb657fae0bf37c1c021c48d20d387f5567429c63f6fddb588585ed166ed5e9b0878c3ee1bbc0115331230b0373dbedfe2c79a29473ee00ddb18b9c5767c26bb7529e15000756dcf5893492795cd4a2923c6c677b93808b64032825ae9cbfd02b7803d941718f93faebcc29a5428b4de4914ea0723b70be6d544428457e7e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xbde}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "04268e9f5e540df30233eb60db16b8017c26ab8792eab9d366ea60771528ae5ea06ac3255232636e96375cb22fdb3e2714d0ca00bc02f3a1077797fd980fd46c4ed0f35ffd879f760dd03544556e1bab4d03fb786f3b12a2834d3351843e16c873f81a76523931e09da93fe9e199fa3024dbb1f9406e183516b6cfc644385e584b5e6ae393aab489beb34c76893d4da9fe49a5a377d919cedfe2d44796266104ba82d53123c28c87b5e9"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "d33cff0a65c749c1df68b3996bcf92d404996e7e94cb6a0f3aa987c46d130307e32658da94281b13f622753d6defec925937dcce7398f0f2cd80192b71860fb11eda6d4bc6c0f256c9abe6364cac4a1034819575d444dea5def0b4aee405ca7acb9c1dc91312095d59a082815a702df41bf004563ccbbbfdc764564102b4f6ccac9086af6211e1b7f3115dca0983fcf91b9a1ca50323394adf3316235a943b521fe895da1d58deac8c45a802638b42544b53e50c4d4d7dea91db89a575adfeedd182437d57beb210a280f2"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x129c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1014, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "4d995020c0f814c5628b4192b64ec50efa2419472fc74b1c85c4213fefd5fe06b331ae6e4012fa647ddf6a0db3a025e9c92f2c5ccdb126d7ede3b6610bdb960000d38a6957580d699c6d978d598caf722694126e51404d2d4095478b862119a6291580556edb1f0719004abd8a3ea21e04489ca7cdd4ccc524e94246aaf9f401b9605bbf098e5210194578e437eab1a9bce3c1a3bf70f0e7249d523eb476256603d5627b6133679bc020425d2a486204eaaacc5f758e6215695ebae097170bcb492bcb5d6373ef88cab689e226186e045193b9b5410df27f6d48704f35577147d5caf2f0babf7045eced"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x90, 0x1, "03a6021752dab7cfde060b21993a7ca970a5ed0ef89ba37bca018a5b10cb8bd8b42659e2d7dfb3520865485b7f0ef3b8e195f797369bf92525dcf88542f646ab46f918f00dfdc591c4aa18477918087a883d01e9aab7bbda238fb0351fb11877e03cd2228099e26101d54c1a696c45e5c0a594191740075668f3030beefb212cbfdf62771af27287ffbec184"}]}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5, 0x1, "95"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "1d1d649e6fade5c74dcb796902e44bb54e24ab318c84ed7a88e4236996021716606d75c6"}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "91d7f7e21d16993e5298990fa77d3bf6756a7fdab49ad397e19de94aff9f4e25e2024c8d932cd9859668bb8d5b1c22c8a0340d968da40b37de387d95a6af088d80ddb30ec9d6646858dc363001212a371d25db041de870d897e4e45b7fd95c8e0d5dd985f4567e134d64d2d5330b7d4a80e24c84b5864bc2d6fb68862843ccec03b46d153f2450296e9d8513ed9a1a3f832787313d3affa7c2c9d313ea8f6cc3cf0d81f17f565f8e6f238043878d98fb7ea04f4b61bd97dd2cb01f6e60fbd459cf7aef20909f1b29861cc55bc9eb0568945e0fd3eeb0f764b80660866a415b41663c2228061b3d61cae19e383a162679f8"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x1ac8}}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030300000000000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.556184112s ago: executing program 7 (id=319): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000202505a1a440000e02030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000010000000006241a00002809058103ff030000000904010000020d00000904010102020d0000090582022000000101090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x209, 0xc, 0x1000, 0x1, 0x10, 0x10, 0x10, 0x100, 0x2, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/123) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FBIOBLANK(r0, 0x4611, 0x7) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 6.135980014s ago: executing program 4 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x1, 0x2) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="000000008400000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c000000000042707af182002000128009000100697069700000000010000280040013000800140006000000"], 0x40}}, 0x0) 5.116378292s ago: executing program 8 (id=321): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000010c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c8008000100d43f0058f40f671ac9775b000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x1) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r7, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x38}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.050339133s ago: executing program 4 (id=322): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000140)=""/165, 0xa5}], 0x4}, 0x0) 4.828734103s ago: executing program 5 (id=323): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2b81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1d}, 0x40800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) 4.772619456s ago: executing program 4 (id=324): r0 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) ustat(0x2, &(0x7f0000000000)) 3.683966446s ago: executing program 5 (id=325): syz_emit_vhci(0x0, 0x3b) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.67003385s ago: executing program 4 (id=326): r0 = socket(0x3, 0x2, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000400)={0x101, 0xffffffe, 0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0) 2.679861312s ago: executing program 8 (id=328): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000010000009500000000000000c55da8b1116262f9d03103b5899abd09a86d6ef583a541f99648f3bf5045fb13b13e10b6003779e928ee59ad1459730f83514840511d210413081bb4f81a3c7cb075b2b100e07ae7f557b7d09c40e55cac8a07a6a5b393c60e1d0f7e79b8d2d32c73935a3fc42132"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) r3 = socket$inet6(0xa, 0x3, 0x2f) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913a, 0x0, 0x8, 0xf42, 0xfffffffffffffff7}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x2b}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='percpu_create_chunk\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, r6}, 0x50) (async, rerun: 32) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r10, 0xffffffef}}, 0x10) (async) close(r9) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000100)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x10, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r11, 0x40087543, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000030000d7eae534056843db69338d532a4920ff5e4e2a8854aef626c39b6edaff518d806836d29aadeddfb4cbb64028fa766bdbe251dbb9233e9b89d0642b49361904dca9adb8d855db6f7201208237efdc"]) 2.556523606s ago: executing program 5 (id=329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000009010100000000000000000000000010000480080001400000000a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r2], 0x0) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000000)=0x8000, 0x0, 0x4) (async, rerun: 64) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) 2.468137119s ago: executing program 6 (id=330): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, 0x0, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x8000) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) (async) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0x6, 0x2, 0xfffffffffffffffd, 0x2004c8, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2000, 0x4], 0x0, 0x200306}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.291896158s ago: executing program 8 (id=331): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000400000025"]) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x100000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x2}, {0x0, 0x5, 0x4}, {0xffffffffffffffff, 0x1}, 0x3, 0x7fe0000}}}, {{@ip={@multicast1, @multicast2, 0x0, 0xff000000, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x2e, 0x0, 0x41}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x10001]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0xe, {0x80000000}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0xfd, {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000000000001000000000010000002"]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x37, 0x1, 0x0, "d569e8000000fa44966262631e8ae0856500", 0x30364d54}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbf4, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000005000/0x2000)=nil}) syz_usb_connect(0x2, 0x4d0, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x23, 0xbc, 0x5f, 0x8, 0xf11, 0x2020, 0xeec2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4be, 0x1, 0x4, 0x6d, 0x20, 0x3, [{{0x9, 0x4, 0x6f, 0xed, 0xc, 0x8e, 0x29, 0x5f, 0x84, [], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x6, 0x45, 0x4, [@generic={0xcd, 0x1, "924c0884711bd69412a28df9b48589ac347c93d8a6d8b3fc034f45eb2723e128eaebd1c9d8932641bd1175d26532bc3335dc9372016016b2fc0e7a1c917e620b76c80f8b8e7ff7a78d0c7b8227b133f5e604e672a30db627e9e644ae496fb5cf858e355670b85b53fb9be1df49a6d1d6515587b9c040cbf2055e425ba148ef4b4b3c0de8bad24861c813190c68b51a76dc204d2984cb12ed1736339b96aeacea663a1b62a710605e8bb897e6cba6109bc38e5e75e65b05fd6591f5671a3b4673b9a33a33ddcba7c8bd5bef"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd2, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x2, 0x48, 0x1, [@generic={0xd6, 0x10, "c5ce30fbac6976b28149a557ef58e853d36ee44d168019fa0f8ad9779e447da44c9f52f59736a2e894f045078d50bef595d20d04db7d9078c7d392aca2c8a296ad9f69d45e275855ea14430faf6f0edca33516fe17be177bcf8054bef3ac36f2dffcdfbd085dd1efcd84070b57b98a3d6e922e0f0cbb15a7d4a5448e3a62a7c864343da85965dc2037ba546b21238055f18acbc405eb0582b2f6d53a9209a26cecacd3025c12431146fe61b65f4da8723881dd7028f4c7db9d72da0fe58175067d90d2d38ab4c8d57d07b269755580c2831a6aa3"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x4, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd4, 0x7f}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x6, 0xe8, [@generic={0x40, 0x21, "425134cb368597a4e1a558b81a7e7b5dfd081948906deee32523624f19291a6562086d88b3feac2f007048a1365151f86942563e6b482f0b7f7431f2aca1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x5, 0x7, 0x1}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x8, 0x6, 0x9, [@generic={0x9a, 0x8, "7dce75dd55275de39ccd3e6ba219bd42692179cb074aedf22d86b293afc918bc1d06e5206c876515583853e611408065d0a92f67de12a8ede06b3feea44751c1884fac013a6b87edc541239761b24628b6a0767675be83951f9b036d2345141904960e5a1f0d32dd8397a1dc081949acdb18d22a50ace535a64c7f1ba5ac391d9aca444ad6d4b737939adca217c358211b0be0407962a488"}, @generic={0xd7, 0xc, "4274ad1705714a240394a496f784fa6575ce3cb9aeaa15a6b3f292468d41a9e0bd16c522b85fb0257a84bccb243fe6651cc5e831ecca49fc86a06e1f3b4c732cf460bda9fe2643865029f8d544d66ba6b66b4c2f9e255a69c98b37d7000dfeaddb925d34aefd7a941c6504e1e66b5e2dd25ccb549b5d842fd36a514677fad34880d8b3a7da1306039a022cf621e92cbf85823b22c9c5ec41358ff2a752336401bbc234fb2ce3fdad70936114293650f42e74fc8004967ecafe0c40854dc000ee9bee2154e69db24b71bc0edd7c08c789208226e12d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3af, 0x8, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xd2, 0x3, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x6}, @generic={0xc2, 0x11, "3899e8fc6dc990abef543fbbed9a98497c463cf12a97e24b67e8a04221efaa3974143f1f4adbcd26cbb26ac18828f877400419fea664b97ceec60e11a583cee4d676b154fe67f4fb90adad9f1069e5f99d331cd2fe6dcfeb6829dd996099250aea6c4b4c0255d9398d64c97f5036f0325329da711ab6a8849331febad9c62017cdc3a35151a7617a1b983d78e29e0b026a1014ba299fd490e0d1234fbda795c5e49005a2936892bf193306e7b094c6e43f749ec7104e76781891a2e8e7b8d398"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0xe, 0x76, 0x80}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x7, 0xa, 0x8}, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="050f1800020c100a04c00000008f0706000710021c9603008bd74fdb4ccaaf437f2fed2b12dd7b5ba86350662089dd600e1636c24b83631c8689346cfd705e888d6f0e660b0dbba31c4f2b94f5cee9c5b537f4a2acae3b900b55241e3743660ecc9392c5fff0e1558e45b142"], 0x1, [{0x3c, &(0x7f00000000c0)=@string={0x3c, 0x3, "7aea27b04303189ca1805e349e0de6860e1f17313da0f936dfa145244ee92a8ef8ecae2b904d86e983efdd72538243c3bc943ca5d82ae3fd1a71"}}]}) 1.688839484s ago: executing program 6 (id=332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xae}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x5, 0xc, 0x7, 0x100, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xd, 0x76, 0x22, @private1, @mcast1, 0x700, 0x40, 0x2, 0x2}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x57}, @ptr={0xa}, @enum64={0x9, 0xa, 0x0, 0x13, 0x1, 0x2, [{0x3, 0x40, 0x9}, {0xc, 0x7, 0x80000000}, {0x1, 0x101, 0x400}, {0xd, 0x0, 0x9}, {0xf, 0x10, 0x8}, {0x1, 0xb, 0xd1d}, {0x10, 0x1, 0x736}, {0x5, 0x31f3}, {0x10, 0x8dc, 0x7f}, {0xe, 0x400, 0x9}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x2e]}}, &(0x7f00000004c0)=""/194, 0xe7, 0xc2, 0x1, 0x4, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r6}, &(0x7f0000000380), &(0x7f0000000400)) (async) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r6}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x100) (async) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x100) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+hugetlU'], 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f00000005c0), &(0x7f00000006c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000140)='syzkaller\x00', 0xc5, 0x4e, &(0x7f0000000180)=""/78, 0x41100, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[r5, r6, r9, r10], &(0x7f0000000780)=[{0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0x0, 0x8}, {0x0, 0x5, 0x7, 0x6}, {0x0, 0x1, 0x0, 0x4}, {0x5, 0x1, 0x2}, {0x5, 0x2, 0x2, 0x9}, {0x2, 0x5, 0x6, 0xc}, {0x4, 0x2, 0x4, 0x1}, {0x0, 0x3, 0xf, 0x7}]}, 0x94) 1.557584628s ago: executing program 7 (id=333): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x9}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x23, 0xa0, 0x10, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "e8784e9be5"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0xd, 0x1, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x1, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x410, 0xa3, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x8f, 0x4}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0x5b, 0x9, 0x8, 0x40}, 0x10b, &(0x7f0000000180)={0x5, 0xf, 0x10b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0xc, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x75, 0x4, 0x6, 0xf9}, @generic={0xd2, 0x10, 0x2, "e2855eb0eac3f5b84caa6cd6b7b3eaaf2e105eb4b2e6be31184a1e277493da0fdd543da81decdf28411c9f558224e7c8be98f3475412700dc184fc5eed6b022c5e3180d505af93313814a016f494e43da83c134f812149610b99e2aef5ba95c967ee2483aeaaa67f94bfacba52ef642685effdae354f60e8d19fee4df94b13b64e065d6dc5ea41fd25a74c9fbe4bad9739633f91baef724fe625ae305f6057160dc9b0bd742cb2c8a443a667b36cc5644ae3db8e6f3b5fd198c0c00f0cb1a29e51139fa71fdabcf8891a4f44d71447"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x76, 0x63, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xf000, 0x101, [0x30]}]}, 0x1, [{0x1f, &(0x7f00000002c0)=@string={0x1f, 0x3, "8ff70afffa8e2e8c0df3e23537ef38f0eddff27f4adfd5e987be06d0d7"}}]}) syz_usb_ep_read(r1, 0xf5, 0x1d, &(0x7f0000000340)=""/29) r2 = socket(0x0, 0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x8, 0x7, 0x3, 0x1, r0, 0xa3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000400)=0x6) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000440)={0x0, 0x3, 0x300e, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000480)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r4, r0, 0x5, 0x5, 0x1}, 0x50) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000640)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000680)='coredump_filter\x00') ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000006c0)={0x1, 0x0, @pic={0x6, 0x2, 0x9, 0x6, 0x36, 0x8e, 0xff, 0x9, 0x9, 0x1, 0x4e, 0x6, 0x0, 0xab, 0x2, 0x8f}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a40), 0x40, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000a80), 0x800, 0x311900) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmmsg$unix(r7, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="a8d1e30cd601b0fa7b1365b2d3385b5683c4b685ea381906979f4d9ba54a58a9e2944ba30938afcdb484819e170c3371b9b3cf7664c9d625932bdeca38a1c5986dc99b927af51726939897e077ea0bae82f2de3c12602b63a75f62623dfa", 0x5e}, {&(0x7f0000000b40)="7e02d2f7f9a27c793ebdc4b48e2d09164ff6696899a44355b51e8bb7a23d5a258176b459dbdd070e4f2320ffced47a5f1cc9a72ed9845081b9809a677c518235cc77b647669508aaa6ce617004a2801402a71e218dfac85972de1566a1b3bc46a1ffae090e9e7003c9c60b67c79c11fde7d74fa4014e11dd5181c1d675f0b598af3ae544d7a4de973acbf3812ad5a15147ae28cee7ba188209c284bac25d62eb3c0939aa22aaa5c0ceda286a3b5867697ae48c67480f95", 0xb7}, {&(0x7f0000000c00)="1fc3e4a5fe237cf25e0a8691ceb0c9d4dc9f9e30cb62992a12c2d2756dc2a25c211c89a6cf8bc139dfbd3cefcbde9115f2ddbad9ec57c43c0c4a6b722ffd17dfc248eb389975cfeb297627777fd16e1b26fde00d8bb353091deb44532a6d78396c04292c3af087f839a15954cdd7cc057d73e6ca0592c090ec12965731a0e5834074ebb35f3f9a2eb295174f0b2df0917cfb31b98fcbf910f97fc89c6ddf97d4e3054154efb2da393354245bc3af83ea563abe7b86a56e5c", 0xb8}, {&(0x7f0000000cc0)="90cc2e1ee20dc2e1d5e7f0ddd487ebd65edd2d4f530068cad5ebfa6d9a1ad3d5f574ae62a2300643a55284dea913c063847ae3befb65f2fc1ca4e65a9f55b86abbfec367ce331fbc320e86a607d88f34c6a6ed0bf8220958bbf390b6bb5a67ad24b3d8afb2a8e57a6f1b1538c94bef0ed7", 0x71}, {&(0x7f0000000d40)="f521195cb443654538e910a6a629dc87f55754611881bd3bd1130dfa66ee4263c9b2faa341bc5e2c55d6618f2d0f1f1e", 0x30}, {&(0x7f0000000d80)="558aef1ffef612559b1107afee175078379ae5eebffe5c03777fe7f8b6963e1e397f38cf2d530be12abdeac937c6fa2a7f9a36521ed64012c07bf76a9053cf77c92f700dcecc08f2214415ac9c5b8871324b6a3ea944a2cdf867b178ce0ea1f97719a1081b23b52864789f1b513ee2dc96", 0x71}], 0x6, 0x0, 0x0, 0x4000881}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000f00)="2bdeedc1d36107a5b86345e509a86356dabec78a7335fabbcd2ff65ef5abd9dd45a3f86ecdcf97fa0d54a2cb9c00320c8bbceda3a233d3bb1bc062c3609732a9275ab6d3b5afe476bf9f806f7ee30cbb4c66f8b7b06092acc882fca2c7385b1c90a2ccfb828c979fa26438508a605cf35dded8f3fba95fa221ec894a10b9e4ca09d4aa0b1033da1f0726a6279fbb99f3435d790ea974f8f725d7fc0c399d76545aba01a9fa0ee563180f063d474d678a404c6585b750b08455e2c3", 0xbb}, {&(0x7f0000000fc0)="4c454cb18ee50960b29e6d3bf237e2e5fb21c63f7d7d4b8188c37dab619807364c7f9518849f92b3ce90f69bcf326c1a1bb07a54d0292ae4ed36491804c86aa2aa1dd6bc37ef60c954889976948e5f51eefd7edb61d7180d1f832c5ed2a1329019f42309ddaa983516d0a3be0ccbe5e08137bb73f34c6e369a6de507c13de56fd528803a1e90d4a977780da09f0cd721fab7240a18b139a7ac001aa5fa1fc4374dc7b90fcec6eacf1cc4bb4f28037a566d21c37daec51d", 0xb7}, {&(0x7f0000001080)="93321af3aaf20d80a6368d8b9ce023cebe3624529500c7bc781905a02d29908e636c6bdf11af623f1c1fe56f65fdd51079e312ce1f4798dc429c1eca5cf4b1261f773b5b13a8dc95995f6b6e4529a63a7475", 0x52}, {&(0x7f0000001100)="41535e4dfba0a53682984c835cfbf094e55d7a08bef514bb6aba08fc4dd9b4a3e960096a5f504b99bd", 0x29}, {&(0x7f0000001140)="48b9a6737fda96a7e5e423f8a1ae1ca657e6d0d05dc4ef3383599378d2fc9ff3d81fd9302d4a56aef6aa7079118538243579f5575bf491933e5b1c8c74cb7205a87891ce4650a8175221dd07ecf0e7779d79e41f66d8b2c89bb7e2a308523a3262cc9cd678dc269511ccec12404d6464608b04c7278e2886819a41fce58beaf4b1ae1eaf5334b2c5bbeb7c94b587f3a636fdb6f3ddff993c93da2fbe709b3f8f21fa85eac8a9ee172eecbb4f11a04f2ee3dce9c21d6baea614d795cff7aa9e937685d9067b64", 0xc6}, {&(0x7f0000001240)="98a057f394538b57c7c6bb709b3a", 0xe}], 0x6, 0x0, 0x0, 0xc080}}], 0x2, 0x840) fanotify_init(0x8, 0x80000) close_range(r5, r3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r2) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000014c0)={0xf6d, 0x33524742, 0x2, @discrete={0x2, 0x7}}) truncate(&(0x7f0000001500)='./file0\x00', 0x3) 1.36007657s ago: executing program 6 (id=334): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000140)=""/165, 0xa5}], 0x4}, 0x0) 1.212967888s ago: executing program 6 (id=335): socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000ffdbdf25510000000c009900070000000f00000005008a000100000005008a00000000000a000600080211000001000005008a0001000000932b134d3b1b5adc527a9c2633c9ea97"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000640)={0x0, 0x9, 0x1, 0x1, 0x401}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r11, 0x0}) (async) socket(0x2, 0x80805, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2b, 0x2, @thr={&(0x7f0000000000)="c15c3644cadf2aeb35b704539e9f5ff69903417aeec8181a6622c180b7a24ff93bc958f8642f27eb82bb1fe5913bf0fee6a88f41073400e93411", &(0x7f0000000240)="ed3ffd624d13a1acc6d84f699dc5c64c0e0181893aa5d9d5cc76a5bd06d7104ddddac1dc98b330b4984cde5732e22a4854b4d59b35db0a39780050994dcef6703f4cf595c55939acd6925dde0f3bdf5e2b38f7a5d70f82a097629fccbb8a7dff2b89aaccddcc0d74dfc6ca3ab487623cd03a19f8cc"}}, &(0x7f0000000180)) shutdown(r12, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) 1.045232917s ago: executing program 6 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4080) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = memfd_create(&(0x7f0000000880)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c+\x1b\x1c\xbf\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x10\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd2\xf5\xd56\xd70\xa2\x17\xca\xde\x1b\xaa\xdel\xfc\x85\x8fc&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dc\xeb\xe9\xaeyO-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xd8unu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\x89\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7\x84\\!\xb04X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xcc\xd8\xe1O\xeb\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cnm\xbe\x1f\xa9\"\x93\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\x00\x10\xe7n\x83H\x02\xac\x80\x16\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xeeF}\xf1\xd2\xbc\x90\xa39\x89qW\x141J%\xf9\xa7\x11\xe9\xb7\x04\xf3\xa3R\x05\xbb7(\xd1b\xba-\xf8M\x14\xab2\x9e\xf1WVq\xbe\t\xf2\x1d\xbb\\\x92i\xa0o\xd0\xb8\xef\xbej\xad9t8k\b0\x1cS\xf1l\xa3fX\x91\x95\xe0b(N\xaaa\xe4\xf7\xc7;\xf9\x81\x94\xd2z\xc6\xb64\xae\xc6~A\xf3\x05\x92\xc4\xf3S\x9f\r5\x1c\xaaH\x0f\xaa\x93\x80\x0eR\x99\x1f\xec\xc1-\x15\x887}Zqe\xef\x8c\xbf\x9a\xe6f\xb5\xfb\xb1\xf9\x8aO\xcfv\"\x11uX\"\xbf\xc2\xd9\xbf\xca^\xf4]\x1e\x0e\xfa,\x16\xe7{o\x7f\xdcs\xa5\x83\xe4\xc9\xb2\xcc\xd1\xce\x15[\xc9\xfd>9\xa54\x1b\x1d\xa4\xa8/\xb1\xb5\xdd\xc6\xc6\xae\xc6\xef\xa5\xe1\x9c\x93\x84\x89\x8e#Zy\x88\xc6Kd\xfa\xd4\xff\xcfT)(\xcey\x1d\a\ty\xc1\xd9F\xf0\xfb\xa5~\xcb\x98\x96\xa8\xcf\x87\xaa>\xe3Gu\xba\x97\xbe\xa3\xbe^\xf1\x0e\xaa\x9e\xcd\xae\xeep\xa6\xbe\xd5\xdd\x88f<\t\xc5\x93P)\xdb\xff\xf4\xa0P\xaf\x02\xe2\xdf\f\x86(-B\x1b:\xd3\x84\xc84\xea\xeb\xc4\xdf\x04\xcd\x96\xf2\xc8\aQ\xcc\xb0\xd0\xf5\a\x82n\x8b\xa8\xb8\x01r\xb7\xe6{\\;\x9f\xb5\xb8\x99Z\xab\x19\x8e\xc7\xac\xfc\x99]\'`\x14\x86\x1b\xa4\xe87?Qz\r\xce\xe5 1 [ 106.287916][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.296971][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.313735][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.322406][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.374464][ T5930] logitech-hidpp-device 0003:046D:C262.0001: item fetching failed at offset 0/3 [ 106.396059][ T5930] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 106.405207][ T5930] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -22 [ 106.602408][ T5902] usb 5-1: USB disconnect, device number 2 [ 106.859883][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 107.022375][ T12] bridge_slave_1: left allmulticast mode [ 107.039966][ T12] bridge_slave_1: left promiscuous mode [ 107.056265][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.137941][ T12] bridge_slave_0: left allmulticast mode [ 107.144063][ T12] bridge_slave_0: left promiscuous mode [ 107.157867][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.417480][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.744995][ T5840] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 107.844269][ T5840] usb 1-1: config 0 has no interface number 0 [ 107.972944][ T5840] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 108.085504][ T5840] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 108.112764][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.152032][ T5840] usb 1-1: Product: syz [ 108.171059][ T5840] usb 1-1: Manufacturer: syz [ 108.180754][ T5840] usb 1-1: SerialNumber: syz [ 108.205217][ T5840] usb 1-1: config 0 descriptor?? [ 108.230951][ T6105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.407659][ T5155] Bluetooth: hci0: command tx timeout [ 108.440522][ T6125] openvswitch: netlink: Missing key (keys=40, expected=80) [ 108.479665][ T5840] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.491865][ T5840] usb 1-1: MIDIStreaming interface descriptor not found [ 108.670456][ T5840] usb 1-1: USB disconnect, device number 4 [ 108.873842][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.808270][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 109.842254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.865959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.894873][ T12] bond0 (unregistering): Released all slaves [ 110.313382][ T6168] sctp: [Deprecated]: syz.0.54 (pid 6168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.313382][ T6168] Use struct sctp_sack_info instead [ 110.336657][ T6167] sctp: [Deprecated]: syz.0.54 (pid 6167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.336657][ T6167] Use struct sctp_sack_info instead [ 110.412027][ T30] audit: type=1800 audit(1753910906.504:2): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.55" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 110.491533][ T5155] Bluetooth: hci0: command tx timeout [ 110.567508][ T5902] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 110.707466][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.741063][ T5902] usb 5-1: Invalid ep0 maxpacket: 32 [ 110.798836][ T6185] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 110.806264][ T6185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.869737][ T6185] vhci_hcd vhci_hcd.0: Device attached [ 110.967661][ T5902] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 111.049730][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 111.077091][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 111.109601][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 111.190921][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.217955][ T5902] usb 5-1: Invalid ep0 maxpacket: 32 [ 111.264297][ T5902] usb usb5-port1: attempt power cycle [ 111.327698][ T978] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 111.369836][ T9] usb 1-1: Product: syz [ 111.437954][ T9] usb 1-1: Manufacturer: syz [ 111.534301][ T9] usb 1-1: SerialNumber: syz [ 111.788489][ T5902] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 111.953695][ T5902] usb 5-1: Invalid ep0 maxpacket: 32 [ 111.965484][ T9] usb 1-1: config 0 descriptor?? [ 112.086863][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 112.090120][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 112.126809][ T9] usb 1-1: Detected FT232R [ 112.207421][ T5902] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 112.225518][ T12] hsr_slave_0: left promiscuous mode [ 112.239047][ T5902] usb 5-1: Invalid ep0 maxpacket: 32 [ 112.244937][ T5902] usb usb5-port1: unable to enumerate USB device [ 112.255497][ T12] hsr_slave_1: left promiscuous mode [ 112.275422][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.297585][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 112.317660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.325990][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 112.345124][ T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 112.369637][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.409134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.418081][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.451335][ T9] usb 1-1: USB disconnect, device number 5 [ 112.467241][ T12] veth1_macvtap: left promiscuous mode [ 112.481007][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.497686][ T12] veth0_macvtap: left promiscuous mode [ 112.504760][ T12] veth1_vlan: left promiscuous mode [ 112.513873][ T9] ftdi_sio 1-1:0.0: device disconnected [ 112.526564][ T12] veth0_vlan: left promiscuous mode [ 112.567397][ T5155] Bluetooth: hci0: command tx timeout [ 112.630836][ T6187] vhci_hcd: connection reset by peer [ 112.637842][ T3579] vhci_hcd: stop threads [ 112.643100][ T3579] vhci_hcd: release socket [ 112.716358][ T3579] vhci_hcd: disconnect device [ 112.934978][ T6211] netlink: 76 bytes leftover after parsing attributes in process `syz.1.60'. [ 112.947487][ T6211] nbd: illegal input index -65456 [ 113.193629][ T6222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.63'. [ 113.523651][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.600254][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.797400][ T5930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.014262][ T5930] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.025197][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.048294][ T5930] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 114.083956][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.101591][ T5930] usb 5-1: config 0 descriptor?? [ 114.449622][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.519846][ T5929] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.549553][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.559609][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.566982][ T6084] bridge_slave_0: entered allmulticast mode [ 114.576176][ T6084] bridge_slave_0: entered promiscuous mode [ 114.588212][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.605700][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.625049][ T5930] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 114.630175][ T6084] bridge_slave_1: entered allmulticast mode [ 114.637403][ T5840] usb 3-1: device descriptor read/64, error -71 [ 114.647568][ T5155] Bluetooth: hci0: command tx timeout [ 114.667530][ T6084] bridge_slave_1: entered promiscuous mode [ 114.681218][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 114.713569][ T5929] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 114.757970][ T5929] usb 1-1: config 0 has no interface number 0 [ 114.786100][ T9] usb 5-1: USB disconnect, device number 7 [ 114.787241][ T5929] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.837558][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.906248][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.907113][ T5929] usb 1-1: Product: syz [ 114.931160][ T6250] fido_id[6250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 114.946138][ T5929] usb 1-1: Manufacturer: syz [ 114.955343][ T5929] usb 1-1: SerialNumber: syz [ 114.960122][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.985823][ T5929] usb 1-1: config 0 descriptor?? [ 114.988997][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.024229][ T5929] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 115.125018][ T6084] team0: Port device team_slave_0 added [ 115.138603][ T5840] usb 3-1: device descriptor read/64, error -71 [ 115.160440][ T6084] team0: Port device team_slave_1 added [ 115.248163][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.255629][ T5840] usb usb3-port1: attempt power cycle [ 115.256248][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.262202][ T5929] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 115.291277][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.332435][ T5929] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 115.333600][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.356396][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.390261][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.623102][ T6084] hsr_slave_0: entered promiscuous mode [ 115.654234][ T6084] hsr_slave_1: entered promiscuous mode [ 115.674118][ T6084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.716014][ T6084] Cannot create hsr debugfs directory [ 115.817492][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.363785][ T5840] usb 3-1: device descriptor read/8, error -71 [ 116.412767][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 116.414211][ T5902] usb 1-1: USB disconnect, device number 6 [ 116.456048][ T5902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 116.537927][ T5902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 116.559224][ T978] vhci_hcd: vhci_device speed not set [ 116.652651][ T5902] quatech2 1-1:0.51: device disconnected [ 116.707477][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.742118][ T5840] usb 3-1: device descriptor read/8, error -71 [ 116.859337][ T5840] usb usb3-port1: unable to enumerate USB device [ 116.908941][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.033950][ T6084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.078699][ T5930] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.080994][ T6084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.097458][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 117.111915][ T5929] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 117.157504][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.176965][ T6084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.185319][ T6283] kvm: MONITOR instruction emulated as NOP! [ 117.187376][ T5929] usb 2-1: Product: syz [ 117.211862][ T6084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.234481][ T5929] usb 2-1: Manufacturer: syz [ 117.247554][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 117.257037][ T5929] usb 2-1: SerialNumber: syz [ 117.271269][ T5930] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 117.306811][ T5929] usb 2-1: config 0 descriptor?? [ 117.315796][ T5930] usb 5-1: New USB device strings: Mfr=249, Product=255, SerialNumber=3 [ 117.340153][ T5929] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 117.348986][ T5930] usb 5-1: Product: syz [ 117.353475][ T5930] usb 5-1: Manufacturer: syz [ 117.392159][ T5929] usb 2-1: Detected FT232H [ 117.399078][ T5930] usb 5-1: SerialNumber: syz [ 117.450504][ T5930] usb 5-1: config 0 descriptor?? [ 117.674600][ T5930] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 117.685348][ T5929] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 117.697124][ T5929] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 117.707871][ T5929] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 117.723476][ T5929] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.737598][ T5929] usb 2-1: USB disconnect, device number 2 [ 117.755563][ T5929] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.789037][ T5929] ftdi_sio 2-1:0.0: device disconnected [ 118.059973][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.112861][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.159217][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.166741][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.227075][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.234477][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.412680][ T6084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.509220][ T6319] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.535198][ T5930] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 118.573706][ T5930] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 118.584733][ T6323] Zero length message leads to an empty skb [ 118.636488][ T5930] usb 5-1: USB disconnect, device number 8 [ 119.168831][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.397834][ T5930] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.572274][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.608295][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 119.654048][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.672492][ T5930] usb 5-1: config 0 descriptor?? [ 119.805824][ T6345] random: crng reseeded on system resumption [ 119.811023][ T6346] loop6: detected capacity change from 0 to 524287999 [ 119.912032][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.950626][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.108404][ T978] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.393547][ T978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.421794][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.439509][ T978] usb 1-1: Product: syz [ 120.452788][ T5923] usb 5-1: USB disconnect, device number 9 [ 120.487756][ T978] usb 1-1: Manufacturer: syz [ 120.497956][ T978] usb 1-1: SerialNumber: syz [ 120.559149][ T6084] veth0_vlan: entered promiscuous mode [ 120.576794][ T978] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.611971][ T6084] veth1_vlan: entered promiscuous mode [ 120.687452][ T5895] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.735450][ T6084] veth0_macvtap: entered promiscuous mode [ 120.786959][ T6084] veth1_macvtap: entered promiscuous mode [ 120.866669][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.904986][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.934431][ T6084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.952337][ T6084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.972211][ T6084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.007979][ T6084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.102148][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.169328][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.305206][ T6371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.338695][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.372170][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.490149][ T24] usb 1-1: USB disconnect, device number 7 [ 121.598805][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.653502][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.667956][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.787709][ T5840] usb 3-1: device descriptor read/64, error -71 [ 121.932079][ T5895] usb 1-1: Service connection timeout for: 256 [ 121.971031][ T5895] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 122.018631][ T5895] ath9k_htc: Failed to initialize the device [ 122.062186][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 122.097555][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.195499][ T6380] netlink: 'syz.5.35': attribute type 1 has an invalid length. [ 122.245474][ T6380] gretap1: entered promiscuous mode [ 122.277638][ T5840] usb 3-1: device descriptor read/64, error -71 [ 122.304613][ T6386] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.408854][ T5840] usb usb3-port1: attempt power cycle [ 122.813188][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.855477][ T5840] usb 3-1: device descriptor read/8, error -71 [ 123.118740][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.189765][ T5840] usb 3-1: device descriptor read/8, error -71 [ 123.234596][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 123.271876][ T6410] input: syz0 as /devices/virtual/input/input6 [ 123.346082][ T5840] usb usb3-port1: unable to enumerate USB device [ 123.369728][ T6410] comedi comedi2: comedi_parport: I/O port conflict (0xe,3) [ 123.839979][ T6415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.94'. [ 124.137497][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.326028][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 124.364868][ T5923] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 124.364899][ T5923] usb 6-1: config 0 has no interface number 0 [ 124.364939][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.364959][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 124.364984][ T5923] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 124.365009][ T5923] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 124.365032][ T5923] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 124.365055][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.376919][ T5923] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 124.376952][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.376973][ T5923] usb 6-1: Product: syz [ 124.376989][ T5923] usb 6-1: Manufacturer: syz [ 124.377004][ T5923] usb 6-1: SerialNumber: syz [ 124.391532][ T5923] usb 6-1: config 0 descriptor?? [ 124.397838][ T6407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.398045][ T6407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.478856][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.97'. [ 124.587061][ T6418] netlink: set zone limit has 4 unknown bytes [ 124.679414][ T5923] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 124.964355][ T5923] etas_es58x 6-1:0.219: could not parse product info: '424242424242' [ 125.353615][ T5923] usb 6-1: USB disconnect, device number 2 [ 125.594040][ T6422] syz.0.95 (6422) used greatest stack depth: 17992 bytes left [ 125.623578][ T5923] etas_es58x 6-1:0.219: Disconnecting syz syz [ 125.777214][ T30] audit: type=1326 audit(1753910921.844:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 125.801658][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.357821][ T30] audit: type=1326 audit(1753910921.854:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.390084][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 126.442721][ T30] audit: type=1326 audit(1753910921.854:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.469839][ T30] audit: type=1326 audit(1753910921.854:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.478570][ T6453] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 126.505887][ T30] audit: type=1326 audit(1753910921.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.528364][ T30] audit: type=1326 audit(1753910921.854:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.552511][ T30] audit: type=1326 audit(1753910921.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.677384][ T30] audit: type=1326 audit(1753910921.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.737495][ T30] audit: type=1326 audit(1753910921.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.932702][ T30] audit: type=1326 audit(1753910921.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6446 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fb29458e9a9 code=0x7ffc0000 [ 126.955987][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.030703][ T6460] syz.5.104: attempt to access beyond end of device [ 127.030703][ T6460] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 127.045793][ T6460] FAT-fs (loop11): unable to read boot sector [ 127.046296][ T6462] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.224785][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.498252][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.567447][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 127.798993][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.990124][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.327959][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 128.378076][ T9] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 128.397153][ T9] usb 1-1: config 0 has no interface number 0 [ 128.423879][ T9] usb 1-1: config 0 interface 78 has no altsetting 0 [ 128.434123][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.469473][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 128.500150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.528516][ T9] usb 1-1: Product: syz [ 128.558970][ T9] usb 1-1: Manufacturer: syz [ 128.563876][ T9] usb 1-1: SerialNumber: syz [ 128.595901][ T9] usb 1-1: config 0 descriptor?? [ 128.619841][ T9] snd_usb_pod 1-1:0.78: Line 6 BassPODxt found [ 128.754172][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.766196][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.778646][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.800210][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.813255][ T9] snd_usb_pod 1-1:0.78: endpoint not available, using fallback values [ 128.826630][ T9] snd_usb_pod 1-1:0.78: invalid control EP [ 128.834049][ T9] snd_usb_pod 1-1:0.78: cannot start listening: -22 [ 128.844915][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.854508][ T9] snd_usb_pod 1-1:0.78: Line 6 BassPODxt now disconnected [ 128.865965][ T9] snd_usb_pod 1-1:0.78: probe with driver snd_usb_pod failed with error -22 [ 129.106549][ T9] usb 1-1: USB disconnect, device number 8 [ 129.549890][ T49] bridge_slave_1: left allmulticast mode [ 129.556773][ T49] bridge_slave_1: left promiscuous mode [ 129.565276][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.605545][ T49] bridge_slave_0: left allmulticast mode [ 129.617535][ T49] bridge_slave_0: left promiscuous mode [ 129.623565][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.893876][ T6507] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.902306][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.911749][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.924542][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.957712][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.959902][ T6507] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.967227][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.986941][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 130.261254][ T6513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 130.268193][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.277036][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 130.382788][ T6518] tipc: Failed to remove unknown binding: 66,1,1/0:4093534188/4093534191 [ 130.392387][ T6518] tipc: Failed to remove unknown binding: 66,1,1/0:4093534188/4093534191 [ 130.503412][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.515448][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.529284][ T49] bond0 (unregistering): Released all slaves [ 130.556825][ T6505] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 130.577798][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 130.578037][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.594174][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 130.784065][ T5840] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 130.807567][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.824303][ T5840] usb 2-1: Product: syz [ 130.829577][ T5840] usb 2-1: Manufacturer: syz [ 130.834705][ T5840] usb 2-1: SerialNumber: syz [ 130.846975][ T5840] usb 2-1: config 0 descriptor?? [ 130.893458][ T6529] xt_hashlimit: max too large, truncated to 1048576 [ 130.980971][ T5155] Bluetooth: hci3: command tx timeout [ 131.005459][ T6529] fuse: Unknown parameter 'fscontext' [ 131.562155][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.627614][ T978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.692113][ T5840] usb 2-1: Firmware version (0.0) predates our first public release. [ 131.703778][ T5840] usb 2-1: Please update to version 0.2 or newer [ 131.718295][ T6514] usb 35-1: recv xbuf, 0 [ 131.764386][ T5923] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.778677][ T36] vhci_hcd: stop threads [ 131.800168][ T36] vhci_hcd: release socket [ 131.812866][ T36] vhci_hcd: disconnect device [ 131.829443][ T5840] usb 2-1: USB disconnect, device number 3 [ 131.847831][ T24] usb 35-1: device descriptor read/64, error -71 [ 131.898989][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 131.921634][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.983415][ T5923] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 131.995239][ T978] usb 6-1: config 2 has an invalid interface number: 107 but max is 0 [ 132.017371][ T5923] usb 1-1: config 0 has no interface number 0 [ 132.026933][ T978] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 132.037756][ T24] vhci_hcd: vhci_device speed not set [ 132.045241][ T5923] usb 1-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 132.070639][ T978] usb 6-1: config 2 has no interface number 0 [ 132.087731][ T978] usb 6-1: config 2 interface 107 has no altsetting 0 [ 132.095306][ T5923] usb 1-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 132.128205][ T978] usb 6-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=13.6a [ 132.157469][ T5923] usb 1-1: config 0 interface 101 has no altsetting 0 [ 132.186805][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.200018][ T978] usb 6-1: Product: syz [ 132.208070][ T5923] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 132.225924][ T978] usb 6-1: Manufacturer: syz [ 132.232466][ T49] hsr_slave_0: left promiscuous mode [ 132.240076][ T5923] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 132.248507][ T978] usb 6-1: SerialNumber: syz [ 132.258895][ T49] hsr_slave_1: left promiscuous mode [ 132.271355][ T5923] usb 1-1: Product: syz [ 132.284397][ T5923] usb 1-1: Manufacturer: syz [ 132.297657][ T5923] usb 1-1: SerialNumber: syz [ 132.298333][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.320529][ T5923] usb 1-1: config 0 descriptor?? [ 132.345389][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.413352][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.444081][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.518893][ T49] veth1_macvtap: left promiscuous mode [ 132.534811][ T49] veth0_macvtap: left promiscuous mode [ 132.577506][ T49] veth1_vlan: left promiscuous mode [ 132.600112][ T49] veth0_vlan: left promiscuous mode [ 132.798338][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.987492][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 133.004097][ T5840] usb 2-1: config 0 has no interfaces? [ 133.047797][ T5155] Bluetooth: hci3: command tx timeout [ 133.057192][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 133.080556][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.100914][ T5840] usb 2-1: Product: syz [ 133.105285][ T5840] usb 2-1: Manufacturer: syz [ 133.110638][ T5840] usb 2-1: SerialNumber: syz [ 133.145822][ T5840] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 133.394733][ T5840] apple-mfi-fastcharge 2-1: USB disconnect, device number 4 [ 133.463014][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.469962][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.741524][ T49] team0 (unregistering): Port device team_slave_1 removed [ 133.812402][ T49] team0 (unregistering): Port device team_slave_0 removed [ 133.870351][ T5923] asix 1-1:0.101 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 133.891986][ T5923] asix 1-1:0.101: probe with driver asix failed with error -71 [ 133.930952][ T5923] usb 1-1: USB disconnect, device number 9 [ 134.872425][ T6575] i2c i2c-0: Invalid block write size 34 [ 134.884514][ T6575] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 135.330039][ T5155] Bluetooth: hci3: command tx timeout [ 135.990296][ T6543] netlink: 60 bytes leftover after parsing attributes in process `syz.4.123'. [ 136.043882][ T6575] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 136.075163][ T978] usb 6-1: USB disconnect, device number 3 [ 136.424148][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 136.668327][ T6590] FAULT_INJECTION: forcing a failure. [ 136.668327][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.741700][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.4.131 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 136.741717][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.741729][ T6590] Call Trace: [ 136.741736][ T6590] [ 136.741742][ T6590] dump_stack_lvl+0x189/0x250 [ 136.741760][ T6590] ? __pfx____ratelimit+0x10/0x10 [ 136.741777][ T6590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.741788][ T6590] ? __pfx__printk+0x10/0x10 [ 136.741802][ T6590] ? __might_fault+0xb0/0x130 [ 136.741818][ T6590] should_fail_ex+0x414/0x560 [ 136.741832][ T6590] _copy_to_iter+0x3f5/0x16f0 [ 136.741852][ T6590] ? __pfx__copy_to_iter+0x10/0x10 [ 136.741863][ T6590] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 136.741877][ T6590] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 136.741891][ T6590] __skb_datagram_iter+0xf8/0x990 [ 136.741902][ T6590] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 136.741917][ T6590] skb_copy_datagram_iter+0xc5/0x230 [ 136.741929][ T6590] netlink_recvmsg+0x2ab/0xa30 [ 136.741949][ T6590] ? __pfx_netlink_recvmsg+0x10/0x10 [ 136.741969][ T6590] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 136.741979][ T6590] ? security_socket_recvmsg+0x7e/0x2e0 [ 136.741990][ T6590] ? __pfx_netlink_recvmsg+0x10/0x10 [ 136.742004][ T6590] sock_recvmsg+0x22c/0x270 [ 136.742018][ T6590] ____sys_recvmsg+0x1c9/0x460 [ 136.742033][ T6590] ? __pfx_____sys_recvmsg+0x10/0x10 [ 136.742051][ T6590] ? import_iovec+0x74/0xa0 [ 136.742066][ T6590] ___sys_recvmsg+0x1b5/0x510 [ 136.742079][ T6590] ? __pfx____sys_recvmsg+0x10/0x10 [ 136.742101][ T6590] ? __fget_files+0x3a0/0x420 [ 136.742119][ T6590] __x64_sys_recvmsg+0x198/0x260 [ 136.742130][ T6590] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 136.742144][ T6590] ? __pfx_ksys_write+0x10/0x10 [ 136.742152][ T6590] ? rcu_is_watching+0x15/0xb0 [ 136.742166][ T6590] ? do_syscall_64+0xbe/0x3b0 [ 136.742179][ T6590] do_syscall_64+0xfa/0x3b0 [ 136.742190][ T6590] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.742200][ T6590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.742210][ T6590] ? clear_bhb_loop+0x60/0xb0 [ 136.742223][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.742232][ T6590] RIP: 0033:0x7fb13598e9a9 [ 136.742246][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.742254][ T6590] RSP: 002b:00007fb136743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 136.742266][ T6590] RAX: ffffffffffffffda RBX: 00007fb135bb5fa0 RCX: 00007fb13598e9a9 [ 136.742274][ T6590] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 136.742280][ T6590] RBP: 00007fb136743090 R08: 0000000000000000 R09: 0000000000000000 [ 136.742286][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.742292][ T6590] R13: 0000000000000000 R14: 00007fb135bb5fa0 R15: 00007ffeaef536b8 [ 136.742307][ T6590] [ 137.139691][ T6598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.448035][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.521980][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.530102][ T5155] Bluetooth: hci3: command tx timeout [ 137.576681][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.625858][ T6604] input: syz0 as /devices/virtual/input/input8 [ 137.661066][ T6604] Smack: duplicate mount options [ 137.887535][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 137.912786][ T6488] bridge_slave_0: entered allmulticast mode [ 138.142327][ T6488] bridge_slave_0: entered promiscuous mode [ 138.150983][ T5840] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 138.270958][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.136'. [ 138.483435][ T5840] usb 1-1: config 254 has no interface number 0 [ 138.491495][ T5840] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 138.502855][ T5840] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.508587][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.538391][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.545774][ T6488] bridge_slave_1: entered allmulticast mode [ 138.624422][ T6488] bridge_slave_1: entered promiscuous mode [ 138.626778][ T5840] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.658637][ T5840] usb 1-1: config 254 interface 235 has no altsetting 0 [ 138.713957][ T5840] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 138.752384][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 138.765773][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.786335][ T5840] usb 1-1: Product: syz [ 138.791326][ T5840] usb 1-1: Manufacturer: syz [ 138.796261][ T5840] usb 1-1: SerialNumber: syz [ 138.801486][ T5930] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.868901][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.895675][ T6598] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.978032][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 139.002728][ T5930] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 139.026628][ T6488] team0: Port device team_slave_0 added [ 139.049523][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 139.060007][ T6488] team0: Port device team_slave_1 added [ 139.073897][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 139.083901][ T5930] usb 5-1: Product: syz [ 139.102867][ T5930] usb 5-1: Manufacturer: syz [ 139.148154][ T5930] usb 5-1: SerialNumber: syz [ 139.186240][ T5930] usb 5-1: config 0 descriptor?? [ 139.210173][ T5930] pwc: Philips SPC 880NC USB webcam detected. [ 139.314811][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.340720][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.386773][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.416772][ T5930] pwc: Warning: more than 1 configuration available. [ 139.436330][ T5930] pwc: Failed to set LED on/off time (-71) [ 139.454666][ T5930] pwc: send_video_command error -71 [ 139.460892][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.464012][ T5930] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 139.475619][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.487959][ T5930] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 139.524860][ T5930] usb 5-1: USB disconnect, device number 10 [ 139.530346][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.637359][ T5902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.716405][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.797663][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 139.813930][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.840413][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.869899][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.902078][ T5902] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.914715][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.922256][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.962026][ T5902] usb 6-1: config 0 descriptor?? [ 140.021997][ T6488] hsr_slave_0: entered promiscuous mode [ 140.040257][ T6488] hsr_slave_1: entered promiscuous mode [ 140.074748][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.112044][ T6488] Cannot create hsr debugfs directory [ 140.218128][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.344844][ T6640] FAULT_INJECTION: forcing a failure. [ 140.344844][ T6640] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 140.395243][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.404960][ T5840] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 140.425431][ T5902] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 140.441072][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.4.144 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 140.441101][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.441112][ T6640] Call Trace: [ 140.441121][ T6640] [ 140.441130][ T6640] dump_stack_lvl+0x189/0x250 [ 140.441159][ T6640] ? __pfx____ratelimit+0x10/0x10 [ 140.441181][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.441203][ T6640] ? __pfx__printk+0x10/0x10 [ 140.441229][ T6640] ? fs_reclaim_acquire+0x7d/0x100 [ 140.441262][ T6640] should_fail_ex+0x414/0x560 [ 140.441289][ T6640] prepare_alloc_pages+0x213/0x610 [ 140.441321][ T6640] __alloc_frozen_pages_noprof+0x123/0x370 [ 140.441351][ T6640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.441384][ T6640] ? policy_nodemask+0x27c/0x720 [ 140.441412][ T6640] alloc_pages_mpol+0x232/0x4a0 [ 140.441437][ T6640] vma_alloc_folio_noprof+0xe4/0x200 [ 140.441461][ T6640] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 140.441496][ T6640] folio_prealloc+0x30/0x180 [ 140.441519][ T6640] do_wp_page+0x1231/0x5800 [ 140.441573][ T6640] ? __pfx_do_wp_page+0x10/0x10 [ 140.441599][ T6640] ? do_raw_spin_lock+0x121/0x290 [ 140.441628][ T6640] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.441665][ T6640] __handle_mm_fault+0x1144/0x5620 [ 140.441724][ T6640] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.441776][ T6640] ? find_vma+0xe7/0x160 [ 140.441794][ T6640] ? __pfx_find_vma+0x10/0x10 [ 140.441815][ T6640] handle_mm_fault+0x2d5/0x7f0 [ 140.441856][ T6640] do_user_addr_fault+0x764/0x1390 [ 140.441904][ T6640] exc_page_fault+0x76/0xf0 [ 140.441928][ T6640] asm_exc_page_fault+0x26/0x30 [ 140.441948][ T6640] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 140.441976][ T6640] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 140.441992][ T6640] RSP: 0018:ffffc90003bef658 EFLAGS: 00050202 [ 140.442011][ T6640] RAX: ffffffff84b6e701 RBX: ffff8880731b0000 RCX: 0000000000000e5c [ 140.442025][ T6640] RDX: 0000000000000000 RSI: ffff8880731b0000 RDI: 0000200000001600 [ 140.442038][ T6640] RBP: ffffc90003bef7b0 R08: ffff8880731b0e5b R09: 1ffff1100e6361cb [ 140.442053][ T6640] R10: dffffc0000000000 R11: ffffed100e6361cc R12: dffffc0000000000 [ 140.442068][ T6640] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e5c [ 140.442093][ T6640] ? _copy_to_iter+0x3e1/0x16f0 [ 140.442125][ T6640] _copy_to_iter+0x484/0x16f0 [ 140.442160][ T6640] ? __pfx__copy_to_iter+0x10/0x10 [ 140.442181][ T6640] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 140.442209][ T6640] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 140.442237][ T6640] __skb_datagram_iter+0xf8/0x990 [ 140.442259][ T6640] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 140.442290][ T6640] skb_copy_datagram_iter+0xc5/0x230 [ 140.442315][ T6640] netlink_recvmsg+0x2ab/0xa30 [ 140.442355][ T6640] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.442393][ T6640] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 140.442412][ T6640] ? security_socket_recvmsg+0x7e/0x2e0 [ 140.442432][ T6640] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.442458][ T6640] sock_recvmsg+0x22c/0x270 [ 140.442487][ T6640] ____sys_recvmsg+0x1c9/0x460 [ 140.442516][ T6640] ? __pfx_____sys_recvmsg+0x10/0x10 [ 140.442553][ T6640] ? import_iovec+0x74/0xa0 [ 140.442584][ T6640] ___sys_recvmsg+0x1b5/0x510 [ 140.442608][ T6640] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.442654][ T6640] ? __fget_files+0x3a0/0x420 [ 140.442698][ T6640] __x64_sys_recvmsg+0x198/0x260 [ 140.442719][ T6640] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 140.442748][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 140.442764][ T6640] ? rcu_is_watching+0x15/0xb0 [ 140.442791][ T6640] ? do_syscall_64+0xbe/0x3b0 [ 140.442817][ T6640] do_syscall_64+0xfa/0x3b0 [ 140.442837][ T6640] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.442856][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.442875][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 140.442899][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.442918][ T6640] RIP: 0033:0x7fb13598e9a9 [ 140.442933][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.442945][ T6640] RSP: 002b:00007fb136722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 140.442959][ T6640] RAX: ffffffffffffffda RBX: 00007fb135bb6080 RCX: 00007fb13598e9a9 [ 140.442970][ T6640] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 140.442980][ T6640] RBP: 00007fb136722090 R08: 0000000000000000 R09: 0000000000000000 [ 140.442994][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.443005][ T6640] R13: 0000000000000001 R14: 00007fb135bb6080 R15: 00007ffeaef536b8 [ 140.443034][ T6640] [ 140.443059][ T5840] usbtest 1-1:254.235: probe with driver usbtest failed with error -71 [ 140.467185][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.471143][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.486242][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.707434][ T5840] usb 1-1: USB disconnect, device number 10 [ 140.818160][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.073623][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.140'. [ 141.127422][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.135214][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.145106][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.300122][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 141.406467][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.670721][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.709282][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.720078][ T6650] loop8: detected capacity change from 0 to 16384 [ 141.727401][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.752798][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.787206][ T5902] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 141.811417][ T5902] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 141.856832][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.878098][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.889654][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.906534][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.918370][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.960131][ T5902] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 141.981225][ T5902] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 141.997716][ T5902] microsoft 0003:045E:07DA.0004: no inputs found [ 142.006319][ T5902] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 142.213264][ T5840] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 142.422365][ T5840] usb 5-1: config 252 has an invalid interface number: 191 but max is 0 [ 142.441108][ T49] bridge_slave_1: left allmulticast mode [ 142.453504][ T5840] usb 5-1: config 252 has no interface number 0 [ 142.462162][ T49] bridge_slave_1: left promiscuous mode [ 142.479135][ T5840] usb 5-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 142.499650][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.515836][ T49] bridge_slave_0: left allmulticast mode [ 142.532789][ T49] bridge_slave_0: left promiscuous mode [ 142.552476][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.568370][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.598887][ T5840] usb 5-1: Product: syz [ 142.604181][ T5840] usb 5-1: Manufacturer: syz [ 142.634029][ T5840] usb 5-1: SerialNumber: syz [ 142.659429][ T5840] usb-storage 5-1:252.191: USB Mass Storage device detected [ 142.751050][ T5840] usb-storage 5-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 143.119832][ T5840] usb 5-1: USB disconnect, device number 11 [ 143.318301][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 143.454607][ T5902] usb 6-1: USB disconnect, device number 4 [ 144.011378][ T5834] Bluetooth: hci4: command tx timeout [ 145.214276][ T6693] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 145.221871][ T6693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.889959][ T6693] vhci_hcd vhci_hcd.0: Device attached [ 146.087779][ T5834] Bluetooth: hci4: command tx timeout [ 146.147870][ T5929] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 146.262992][ T6696] vhci_hcd: connection reset by peer [ 146.299691][ T1105] vhci_hcd: stop threads [ 146.333952][ T1105] vhci_hcd: release socket [ 146.344548][ T1105] vhci_hcd: disconnect device [ 146.521633][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.535257][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.548114][ T49] bond0 (unregistering): Released all slaves [ 148.168608][ T5834] Bluetooth: hci4: command tx timeout [ 148.807949][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 149.364527][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 150.147692][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.247658][ T5834] Bluetooth: hci4: command tx timeout [ 150.719748][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 150.757575][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.808174][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.855368][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 150.905248][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 151.070471][ T6488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.086476][ T5840] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.096519][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.121364][ T5840] hub 5-1:1.0: bad descriptor, ignoring hub [ 151.232786][ T5840] hub 5-1:1.0: probe with driver hub failed with error -5 [ 151.303160][ T5929] vhci_hcd: vhci_device speed not set [ 151.386046][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 151.462518][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 151.565988][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.568670][ T5840] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 151.601737][ T5840] cdc_wdm 5-1:1.0: Unknown control protocol [ 151.606589][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.629126][ T49] hsr_slave_0: left promiscuous mode [ 151.658905][ T49] hsr_slave_1: left promiscuous mode [ 151.677561][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.685652][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.771234][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.787434][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.987624][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.988990][ T49] veth1_macvtap: left promiscuous mode [ 152.032644][ T49] veth0_macvtap: left promiscuous mode [ 152.053275][ T49] veth1_vlan: left promiscuous mode [ 152.073452][ T49] veth0_vlan: left promiscuous mode [ 152.178702][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 152.190441][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.236238][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.280662][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 152.397836][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 152.571799][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.802918][ T24] usb 1-1: config 0 descriptor?? [ 152.886274][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 152.886286][ T30] audit: type=1326 audit(1753910948.974:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.5.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f836458e9a9 code=0x0 [ 153.189289][ T5929] usb 5-1: USB disconnect, device number 12 [ 153.426967][ T24] kone 0003:1E7D:2CED.0005: bogus close delimiter [ 153.433842][ T24] kone 0003:1E7D:2CED.0005: item 0 0 2 10 parsing failed [ 153.462720][ T24] kone 0003:1E7D:2CED.0005: parse failed [ 153.474824][ T24] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22 [ 153.671723][ T49] team0 (unregistering): Port device team_slave_1 removed [ 153.723018][ T49] team0 (unregistering): Port device team_slave_0 removed [ 154.435457][ T6488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.186060][ T6762] warning: `syz.0.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.200154][ T6488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.255995][ T5902] usb 1-1: USB disconnect, device number 11 [ 155.257228][ T6488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.217508][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 156.923720][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 157.894792][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.918835][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.926443][ T6653] bridge_slave_0: entered allmulticast mode [ 157.959859][ T6653] bridge_slave_0: entered promiscuous mode [ 158.015532][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.017227][ T6845] capability: warning: `syz.4.180' uses 32-bit capabilities (legacy support in use) [ 158.025204][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.062060][ T6653] bridge_slave_1: entered allmulticast mode [ 158.073180][ T6653] bridge_slave_1: entered promiscuous mode [ 158.396253][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.440432][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.850022][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.940665][ T6653] team0: Port device team_slave_0 added [ 158.981741][ T6653] team0: Port device team_slave_1 added [ 159.052932][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.195938][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.334007][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.535450][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.577716][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.619519][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.711322][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.741202][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.749436][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.781886][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.852434][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.906306][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.913602][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.105345][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.114406][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.156252][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.166797][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.176533][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.219019][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.227075][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.283187][ T6653] hsr_slave_0: entered promiscuous mode [ 160.320869][ T6653] hsr_slave_1: entered promiscuous mode [ 160.337494][ T5902] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 160.387148][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.419893][ T6653] Cannot create hsr debugfs directory [ 160.550746][ T5902] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 160.587582][ T5902] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 160.602956][ T5902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.647961][ T5902] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 160.657099][ T5902] usb 6-1: config 1 has no interface number 0 [ 160.674465][ T5902] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 160.707659][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.780956][ T5902] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 161.047691][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.078193][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.249236][ T5902] snd_usb_pod 6-1:1.1: set_interface failed [ 161.257030][ T5902] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 161.293934][ T5902] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 161.359516][ T5902] usb 6-1: USB disconnect, device number 5 [ 161.512150][ T12] bridge_slave_1: left allmulticast mode [ 161.523257][ T12] bridge_slave_1: left promiscuous mode [ 161.541815][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.569706][ T12] bridge_slave_0: left allmulticast mode [ 161.576038][ T12] bridge_slave_0: left promiscuous mode [ 161.586920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.327591][ T5155] Bluetooth: hci2: command tx timeout [ 162.664595][ T6918] netlink: 'syz.4.195': attribute type 4 has an invalid length. [ 163.407063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.458701][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.490575][ T12] bond0 (unregistering): Released all slaves [ 164.407633][ T5155] Bluetooth: hci2: command tx timeout [ 164.671209][ T6653] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 164.782720][ T6880] chnl_net:caif_netlink_parms(): no params data found [ 164.894922][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.069311][ T12] hsr_slave_0: left promiscuous mode [ 165.129232][ T12] hsr_slave_1: left promiscuous mode [ 165.135538][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.197445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.210037][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.225439][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.261462][ T12] veth1_macvtap: left promiscuous mode [ 165.267590][ T12] veth0_macvtap: left promiscuous mode [ 165.273447][ T12] veth1_vlan: left promiscuous mode [ 165.755292][ T12] team0 (unregistering): Port device team_slave_1 removed [ 165.811920][ T12] team0 (unregistering): Port device team_slave_0 removed [ 166.368436][ T6653] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.402476][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.200'. [ 166.477478][ T6653] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.492735][ T5155] Bluetooth: hci2: command tx timeout [ 166.640230][ T6653] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.947843][ T6985] input: syz0 as /devices/virtual/input/input9 [ 167.062875][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.107859][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.115369][ T6880] bridge_slave_0: entered allmulticast mode [ 167.145854][ T6880] bridge_slave_0: entered promiscuous mode [ 167.197167][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.219581][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.226960][ T6880] bridge_slave_1: entered allmulticast mode [ 167.299539][ T6880] bridge_slave_1: entered promiscuous mode [ 167.475801][ T6880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.518424][ T6880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.579730][ T7004] capability: warning: `syz.5.206' uses deprecated v2 capabilities in a way that may be insecure [ 167.645193][ T6880] team0: Port device team_slave_0 added [ 167.683429][ T6880] team0: Port device team_slave_1 added [ 167.862687][ T6488] veth0_vlan: entered promiscuous mode [ 167.872172][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.882220][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.913661][ T6880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.937221][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.944969][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.972650][ T6880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.079928][ T6488] veth1_vlan: entered promiscuous mode [ 168.094988][ T6880] hsr_slave_0: entered promiscuous mode [ 168.100953][ T5902] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 168.110459][ T6880] hsr_slave_1: entered promiscuous mode [ 168.119388][ T6880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.128231][ T6880] Cannot create hsr debugfs directory [ 168.256924][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.269669][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.291359][ T5902] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 168.300864][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.309712][ T5902] usb 5-1: Product: syz [ 168.313953][ T5902] usb 5-1: Manufacturer: syz [ 168.319053][ T5902] usb 5-1: SerialNumber: syz [ 168.326763][ T5902] usb 5-1: config 0 descriptor?? [ 168.337695][ T5902] hub 5-1:0.0: bad descriptor, ignoring hub [ 168.367932][ T5902] hub 5-1:0.0: probe with driver hub failed with error -5 [ 168.391185][ T5902] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.445454][ T5902] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 168.477612][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.555369][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.572417][ T5155] Bluetooth: hci2: command tx timeout [ 168.657907][ T24] usb 5-1: USB disconnect, device number 13 [ 168.689983][ T6488] veth0_macvtap: entered promiscuous mode [ 168.771634][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.779386][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.793829][ T7025] hsr0: entered allmulticast mode [ 168.804661][ T7025] hsr_slave_0: entered allmulticast mode [ 168.814312][ T7025] hsr_slave_1: entered allmulticast mode [ 168.840956][ T7027] hsr_slave_0: left promiscuous mode [ 168.853588][ T7027] hsr_slave_1: left promiscuous mode [ 168.884186][ T7027] hsr0 (unregistering): left allmulticast mode [ 168.907288][ T6488] veth1_macvtap: entered promiscuous mode [ 168.936907][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.944623][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.129427][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.182625][ T6880] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.234515][ T6880] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.293463][ T7038] tipc: Started in network mode [ 169.307145][ T7038] tipc: Node identity 5e5c59435cd5, cluster identity 4711 [ 169.315421][ T7038] tipc: Enabled bearer , priority 0 [ 169.323626][ T6880] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.352520][ T6880] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.526315][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.555572][ T6488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.565135][ T6488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.575433][ T6488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.607671][ T6488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.028914][ T7030] tipc: Disabling bearer [ 170.445804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.477425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.523666][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.635430][ T7064] bridge0: port 3(netdevsim0) entered blocking state [ 170.654313][ T7064] bridge0: port 3(netdevsim0) entered disabled state [ 170.669550][ T7064] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 170.722699][ T7064] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 170.755017][ T7064] bridge0: port 3(netdevsim0) entered blocking state [ 170.762466][ T7064] bridge0: port 3(netdevsim0) entered forwarding state [ 170.881321][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.888412][ T6880] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.897781][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.019199][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.026390][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.071835][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.079285][ T6835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.140877][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.484256][ T7098] GUP no longer grows the stack in syz.5.216 (7098): 200000005000-200000008000 (200000004000) [ 172.501559][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.5.216 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 172.501586][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.501597][ T7098] Call Trace: [ 172.501605][ T7098] [ 172.501615][ T7098] dump_stack_lvl+0x189/0x250 [ 172.501647][ T7098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.501669][ T7098] ? __pfx__printk+0x10/0x10 [ 172.501690][ T7098] ? find_vma+0xe7/0x160 [ 172.501723][ T7098] fixup_user_fault+0x661/0x720 [ 172.501756][ T7098] fault_in_user_writeable+0x72/0xe0 [ 172.501779][ T7098] futex_lock_pi+0x283/0xa60 [ 172.501816][ T7098] ? __pfx_futex_lock_pi+0x10/0x10 [ 172.501838][ T7098] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 172.501895][ T7098] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.501943][ T7098] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 172.501982][ T7098] do_futex+0x292/0x420 [ 172.502011][ T7098] ? __pfx_do_futex+0x10/0x10 [ 172.502034][ T7098] ? __vm_munmap+0x301/0x3d0 [ 172.502067][ T7098] __se_sys_futex+0x36f/0x400 [ 172.502095][ T7098] ? __pfx___se_sys_futex+0x10/0x10 [ 172.502117][ T7098] ? rcu_is_watching+0x15/0xb0 [ 172.502140][ T7098] ? __x64_sys_futex+0x21/0xf0 [ 172.502164][ T7098] do_syscall_64+0xfa/0x3b0 [ 172.502187][ T7098] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.502207][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.502227][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 172.502251][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.502270][ T7098] RIP: 0033:0x7f836458e9a9 [ 172.502289][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.502306][ T7098] RSP: 002b:00007f8365325038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.502327][ T7098] RAX: ffffffffffffffda RBX: 00007f83647b6160 RCX: 00007f836458e9a9 [ 172.502342][ T7098] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 172.502355][ T7098] RBP: 00007f8364610d69 R08: 0000000000000000 R09: 0000000000000000 [ 172.502366][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.502378][ T7098] R13: 0000000000000000 R14: 00007f83647b6160 R15: 00007ffd5e54cd38 [ 172.502408][ T7098] [ 173.274777][ T6653] veth0_vlan: entered promiscuous mode [ 173.304364][ T6653] veth1_vlan: entered promiscuous mode [ 173.317481][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 173.392711][ T6653] veth0_macvtap: entered promiscuous mode [ 173.421587][ T6653] veth1_macvtap: entered promiscuous mode [ 173.508707][ T5930] usb 7-1: no configurations [ 173.513364][ T5930] usb 7-1: can't read configurations, error -22 [ 173.527217][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.580102][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.642746][ T6653] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.665196][ T6653] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.684821][ T6653] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.700237][ T6653] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.717491][ T5930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 173.776312][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.909034][ T5930] usb 7-1: no configurations [ 173.924559][ T5930] usb 7-1: can't read configurations, error -22 [ 173.959490][ T5930] usb usb7-port1: attempt power cycle [ 174.060856][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.105520][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.189694][ T6835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.219217][ T6835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.317517][ T5930] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 174.401439][ T5930] usb 7-1: no configurations [ 174.451449][ T5930] usb 7-1: can't read configurations, error -22 [ 174.607792][ T5930] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 174.654807][ T5930] usb 7-1: no configurations [ 174.697485][ T5930] usb 7-1: can't read configurations, error -22 [ 174.742877][ T5930] usb usb7-port1: unable to enumerate USB device [ 174.968113][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.143'. [ 176.346545][ T7140] befs: (nullb0): invalid magic header [ 176.468748][ T6880] veth0_vlan: entered promiscuous mode [ 176.566523][ T6880] veth1_vlan: entered promiscuous mode [ 176.773594][ T6880] veth0_macvtap: entered promiscuous mode [ 176.787506][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.850174][ T6880] veth1_macvtap: entered promiscuous mode [ 176.922520][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.976680][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.987866][ T5902] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=36.65 [ 176.998026][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 177.006347][ T5902] usb 6-1: Product: syz [ 177.022472][ T6880] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.031919][ T5902] usb 6-1: SerialNumber: syz [ 177.037139][ T6880] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.060728][ T5902] usb 6-1: config 0 descriptor?? [ 177.087343][ T6880] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.105113][ T6880] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.229160][ T7161] fuse: Bad value for 'fd' [ 177.349783][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.388468][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.407145][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.447494][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.548341][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.562186][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.578410][ T5902] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 177.587381][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 178.203271][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.268024][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.354596][ T7185] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 179.643346][ T9] usb 6-1: USB disconnect, device number 6 [ 179.857855][ T5929] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.365294][ T7217] netlink: 'syz.5.234': attribute type 21 has an invalid length. [ 182.017446][ T5930] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 182.326221][ T7225] process 'syz.5.236' launched './file1' with NULL argv: empty string added [ 182.701293][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 183.311616][ T5923] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.321760][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.415400][ T5923] usb 6-1: Product: syz [ 183.436791][ T5923] usb 6-1: Manufacturer: syz [ 183.456583][ T5923] usb 6-1: SerialNumber: syz [ 183.485079][ T5923] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.545812][ T5929] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 183.558114][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.834517][ T5929] usb 5-1: config index 0 descriptor too short (expected 12174, got 154) [ 183.881763][ T5929] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.035352][ T5929] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.132843][ T5929] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 184.209835][ T5929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 4 [ 184.304052][ T5929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12320, setting to 1023 [ 184.401589][ T5929] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.429640][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.608458][ T5929] usb 5-1: Product: syz [ 184.656205][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 184.672483][ T10] ath9k_htc: Failed to initialize the device [ 184.676098][ T5929] usb 5-1: Manufacturer: syz [ 184.744452][ T7250] fuse: Unknown parameter 'Td' [ 184.795092][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 185.146013][ T5929] usb 5-1: SerialNumber: syz [ 185.743243][ T5929] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 185.815445][ T5929] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 185.923269][ T5929] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 186.026903][ T5929] usb 5-1: 2:1: All rates were zero [ 186.597723][ T5929] usb 5-1: USB disconnect, device number 15 [ 186.841292][ T5923] usb 6-1: USB disconnect, device number 7 [ 187.099273][ T5840] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 187.385564][ T7279] netlink: 284 bytes leftover after parsing attributes in process `syz.8.247'. [ 187.417545][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 187.442750][ T5840] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.462275][ T5840] usb 8-1: config 0 has no interface number 0 [ 187.491764][ T5840] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 187.508256][ T5840] usb 8-1: config 0 interface 1 has no altsetting 0 [ 187.537948][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 187.551645][ T5840] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 187.595554][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.245'. [ 187.637409][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.646645][ T5840] usb 8-1: Product: syz [ 187.656460][ T5840] usb 8-1: Manufacturer: syz [ 187.666261][ T5840] usb 8-1: SerialNumber: syz [ 187.743929][ T10] usb 5-1: device descriptor read/64, error -71 [ 187.750533][ T5840] usb 8-1: config 0 descriptor?? [ 188.137404][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 188.287428][ T10] usb 5-1: device descriptor read/64, error -71 [ 188.314226][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.8.249'. [ 188.345257][ T5840] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 188.348709][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.8.249'. [ 188.375787][ T5840] cx231xx 8-1:0.1: Not found matching IAD interface [ 188.409257][ T10] usb usb5-port1: attempt power cycle [ 188.439543][ T5840] usb 8-1: USB disconnect, device number 3 [ 188.821435][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.964387][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.267657][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.299552][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.435235][ T10] usb usb5-port1: unable to enumerate USB device [ 191.306681][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.411338][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.261'. [ 191.764146][ T7351] 9pnet_virtio: no channels available for device 127.0.0.1 [ 191.849495][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 191.914660][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.954649][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.008354][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.029906][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.087426][ T10] usb 5-1: Product: syz [ 192.113742][ T10] usb 5-1: Manufacturer: syz [ 192.154199][ T10] usb 5-1: SerialNumber: syz [ 192.277587][ T5840] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 192.432013][ T10] usb 5-1: 0:2 : does not exist [ 192.452093][ T5840] usb 9-1: Using ep0 maxpacket: 8 [ 192.460307][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 192.486735][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.673077][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.684200][ T5840] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.701376][ T5840] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 192.710614][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.745670][ T5840] usb 9-1: config 0 descriptor?? [ 193.357004][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.369962][ T10] usb 5-1: USB disconnect, device number 20 [ 193.392821][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.636891][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.686167][ T5840] usbhid 9-1:0.0: can't add hid device: -71 [ 193.686286][ T5840] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 193.856304][ T5840] usb 9-1: USB disconnect, device number 3 [ 195.052429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.052492][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.250070][ T7403] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 195.264490][ T7403] cgroup: none used incorrectly [ 195.415571][ T7411] overlayfs: conflicting options: nfs_export=on,index=off [ 195.430481][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.273'. [ 195.432381][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.273'. [ 195.703754][ T5840] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 195.885813][ T5840] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.970911][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 196.315784][ T5840] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.326928][ T5840] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.413840][ T5840] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.425170][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.443072][ T5840] usb 9-1: Product: syz [ 196.456638][ T5840] usb 9-1: Manufacturer: syz [ 196.482808][ T5840] usb 9-1: SerialNumber: syz [ 197.701339][ T5840] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 197.781998][ T5840] cdc_ncm 9-1:1.0: bind() failure [ 197.869020][ T5840] usb 9-1: USB disconnect, device number 4 [ 197.997570][ T7439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.590474][ T7481] netlink: 'syz.6.286': attribute type 1 has an invalid length. [ 199.917454][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.128301][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 200.163187][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.228712][ T10] usb 6-1: config 14 has an invalid interface number: 115 but max is 0 [ 200.237206][ T10] usb 6-1: config 14 has no interface number 0 [ 200.284321][ T7487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 200.316285][ T10] usb 6-1: config 14 interface 115 has no altsetting 0 [ 200.425437][ T10] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 200.474828][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.560719][ T10] usb 6-1: Product: syz [ 200.565041][ T10] usb 6-1: Manufacturer: syz [ 200.637325][ T10] usb 6-1: SerialNumber: syz [ 200.890321][ T10] xr_serial 6-1:14.115: More than one union descriptor, skipping ... [ 201.003332][ T10] usb 6-1: USB disconnect, device number 8 [ 201.327353][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.569644][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 201.599411][ T7516] netlink: 'syz.7.294': attribute type 10 has an invalid length. [ 201.628348][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.658584][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.674320][ T7516] macvlan0: entered promiscuous mode [ 201.688054][ T7516] macvlan0: entered allmulticast mode [ 201.706775][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.763654][ T7516] veth1_vlan: entered allmulticast mode [ 201.784496][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.823801][ T7516] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 201.858990][ T9] usb 5-1: config 0 descriptor?? [ 201.889175][ T9] hub 5-1:0.0: USB hub found [ 202.037741][ T7527] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 202.089913][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 202.307722][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 202.333697][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 202.378202][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 202.378821][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.7.299'. [ 202.387010][ T9] usb 5-1: USB disconnect, device number 21 [ 202.469025][ T7533] netlink: 'syz.7.299': attribute type 2 has an invalid length. [ 202.558329][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 202.561884][ T7533] netlink: 'syz.7.299': attribute type 2 has an invalid length. [ 202.571752][ T10] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 202.571782][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.571799][ T10] usb 9-1: Product: syz [ 202.571812][ T10] usb 9-1: Manufacturer: syz [ 202.571825][ T10] usb 9-1: SerialNumber: syz [ 202.575798][ T10] usb 9-1: config 0 descriptor?? [ 202.722131][ T10] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 202.761576][ T7533] netlink: 'syz.7.299': attribute type 2 has an invalid length. [ 202.762262][ T10] usb 9-1: Detected FT-X [ 202.838171][ T7533] netlink: 'syz.7.299': attribute type 1 has an invalid length. [ 202.924652][ T7527] sctp: [Deprecated]: syz.8.297 (pid 7527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.924652][ T7527] Use struct sctp_sack_info instead [ 202.958149][ T7533] netlink: 'syz.7.299': attribute type 2 has an invalid length. [ 202.984766][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 203.011073][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 203.060402][ T10] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 203.113438][ T10] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.170717][ T10] usb 9-1: USB disconnect, device number 5 [ 203.266465][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.295184][ T10] ftdi_sio 9-1:0.0: device disconnected [ 203.654326][ T7553] sctp: [Deprecated]: syz.6.302 (pid 7553) Use of int in maxseg socket option. [ 203.654326][ T7553] Use struct sctp_assoc_value instead [ 204.231178][ T7560] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 207.531074][ T7599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.516956][ T978] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 209.980869][ T978] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 209.992661][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.039738][ T978] usb 5-1: config 0 has no interface number 0 [ 210.072488][ T978] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 210.095214][ T5902] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.163660][ T978] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.304401][ T5902] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 210.317346][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 210.327641][ T5902] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 210.330562][ T978] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 210.351535][ T5902] usb 6-1: config 220 has no interface number 2 [ 210.367432][ T5902] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 210.381081][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.398217][ T978] usb 5-1: Product: syz [ 210.406837][ T5902] usb 6-1: config 220 interface 0 has no altsetting 0 [ 210.424160][ T978] usb 5-1: Manufacturer: syz [ 210.429186][ T5902] usb 6-1: config 220 interface 76 has no altsetting 0 [ 210.436342][ T5902] usb 6-1: config 220 interface 1 has no altsetting 0 [ 210.443496][ T978] usb 5-1: SerialNumber: syz [ 210.673512][ T978] usb 5-1: config 0 descriptor?? [ 210.775903][ T10] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 210.826275][ T10] usb 9-1: config 0 has no interface number 0 [ 210.856085][ T5902] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.879252][ T10] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 210.897539][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.935944][ T10] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 210.957160][ T5902] usb 6-1: Product: syz [ 210.965044][ T5902] usb 6-1: Manufacturer: syz [ 210.972113][ T10] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 210.987295][ T5902] usb 6-1: SerialNumber: syz [ 211.015088][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.087899][ T10] usb 9-1: config 0 descriptor?? [ 211.130563][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input11 [ 211.232637][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.267905][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.316689][ T978] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 211.330151][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.370081][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.424013][ T978] usb 5-1: USB disconnect, device number 22 [ 211.433287][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.499785][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.570354][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.617864][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.628301][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.701918][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.786195][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.847950][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.044858][ T10] usb 9-1: USB disconnect, device number 6 [ 212.138272][ T5923] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 212.412400][ T7657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 212.702250][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 212.837903][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 212.856767][ T5923] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.059818][ T5923] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 213.122574][ T5923] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.142014][ T5923] usb 8-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 213.199158][ T5923] usb 8-1: Product: syz [ 213.217303][ T5923] usb 8-1: Manufacturer: syz [ 213.260083][ T5923] usb 8-1: SerialNumber: syz [ 213.305458][ T7663] netlink: 'syz.8.321': attribute type 1 has an invalid length. [ 213.350926][ T5902] usb 6-1: selecting invalid altsetting 0 [ 213.368878][ T5902] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 213.386107][ T5902] usb 6-1: No valid video chain found. [ 213.479561][ T5902] usb 6-1: selecting invalid altsetting 0 [ 213.514265][ T5902] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 213.662653][ T7649] raw-gadget.7 gadget.7: fail, usb_ep_enable returned -22 [ 213.703856][ T5902] usb 6-1: USB disconnect, device number 9 [ 214.787945][ T7649] raw-gadget.7 gadget.7: fail, usb_ep_enable returned -22 [ 215.143493][ T5923] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 215.175548][ T5923] cdc_ncm 8-1:1.0: dwNtbInMaxSize=12 is too small. Using 2048 [ 215.196936][ T5923] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 215.307411][ T5902] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 215.587564][ T5902] usb 5-1: device descriptor read/64, error -71 [ 215.882925][ T7696] program syz.8.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.911330][ T5887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 216.005508][ T5902] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 216.197558][ T5902] usb 5-1: device descriptor read/64, error -71 [ 216.277430][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 216.299428][ T5887] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 216.345016][ T5902] usb usb5-port1: attempt power cycle [ 216.391787][ T5887] usb 6-1: config 0 has no interface number 0 [ 216.399239][ T5887] usb 6-1: config 0 interface 98 has no altsetting 0 [ 216.418721][ T5887] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 216.429912][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.439073][ T5887] usb 6-1: Product: syz [ 216.443669][ T5887] usb 6-1: Manufacturer: syz [ 216.451313][ T5887] usb 6-1: SerialNumber: syz [ 216.465363][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 216.468826][ T5887] usb 6-1: config 0 descriptor?? [ 216.507050][ T9] usb 9-1: config 4 has an invalid interface number: 111 but max is 0 [ 216.529475][ T5923] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 216.556627][ T9] usb 9-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 216.581533][ T5923] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 216.593841][ T9] usb 9-1: config 4 has no interface number 0 [ 216.606924][ T9] usb 9-1: config 4 interface 111 altsetting 237 has a duplicate endpoint with address 0x6, skipping [ 216.639127][ T9] usb 9-1: config 4 interface 111 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 216.654266][ T5923] usb 8-1: USB disconnect, device number 4 [ 216.689333][ T5923] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 216.703325][ T9] usb 9-1: config 4 interface 111 altsetting 237 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 216.729332][ T5902] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 216.742457][ T5887] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 216.757913][ T9] usb 9-1: config 4 interface 111 altsetting 237 has a duplicate endpoint with address 0x6, skipping [ 216.775975][ T9] usb 9-1: config 4 interface 111 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 216.797139][ T9] usb 9-1: config 4 interface 111 has no altsetting 0 [ 216.806738][ T5902] usb 5-1: device descriptor read/8, error -71 [ 216.823405][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=ee.c2 [ 216.842865][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.874155][ T9] usb 9-1: Product: syz [ 216.880622][ T9] usb 9-1: Manufacturer: syz [ 216.888304][ T9] usb 9-1: SerialNumber: syz [ 216.934006][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.329'. [ 216.986106][ T7711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.988777][ T7691] netlink: 'syz.5.329': attribute type 1 has an invalid length. [ 217.006127][ T7691] netlink: 'syz.5.329': attribute type 2 has an invalid length. [ 217.030390][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.329'. [ 217.057559][ T5902] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 217.098431][ T5902] usb 5-1: device descriptor read/8, error -71 [ 217.124728][ T9] ldusb 9-1:4.111: Interrupt in endpoint not found [ 217.169356][ T9] usb 9-1: USB disconnect, device number 7 [ 217.177479][ T5923] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 217.212483][ T5902] usb usb5-port1: unable to enumerate USB device [ 217.445761][ T5923] usb 8-1: config 1 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 163, changing to 11 [ 217.548495][ T5923] usb 8-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 217.633920][ T5923] usb 8-1: config 1 interface 0 altsetting 48 bulk endpoint 0x82 has invalid maxpacket 1023 [ 217.821409][ T5923] usb 8-1: config 1 interface 0 altsetting 48 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.860783][ T5887] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 218.013865][ T5887] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 218.022350][ T5930] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 218.031723][ T5930] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 218.040249][ T5923] usb 8-1: config 1 interface 0 has no altsetting 0 [ 218.051785][ T5887] usb 6-1: USB disconnect, device number 10 [ 218.095339][ T5930] ------------[ cut here ]------------ [ 218.101359][ T5930] WARNING: CPU: 1 PID: 5930 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 218.107489][ T5923] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.109953][ T5930] Modules linked in: [ 218.123319][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: kworker/1:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 218.134072][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.144513][ T5930] Workqueue: events request_firmware_work_func [ 218.151299][ T5930] RIP: 0010:kernfs_get+0x72/0x90 [ 218.156285][ T5930] Code: e8 63 60 66 ff 48 89 df be 04 00 00 00 e8 36 4a c6 ff f0 ff 03 eb 05 e8 4c 60 66 ff 5b 5d c3 cc cc cc cc cc e8 3f 60 66 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 218.178602][ T5930] RSP: 0018:ffffc9000a6f7620 EFLAGS: 00010293 [ 218.184829][ T5930] RAX: ffffffff8259c581 RBX: ffff88805050c3c0 RCX: ffff88802ec55a00 [ 218.194620][ T5930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.195720][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.204169][ T5930] RBP: 0000000000000000 R08: ffff88805050c3c3 R09: 1ffff1100a0a1878 [ 218.219797][ T5930] R10: dffffc0000000000 R11: ffffed100a0a1879 R12: ffff888027f74030 [ 218.228343][ T5930] R13: 1ffff11004fee807 R14: ffff888027f74038 R15: 1ffff11004fee806 [ 218.236402][ T5930] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 218.245449][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.252153][ T5930] CR2: 000055556b1ee5c8 CR3: 00000000297e6000 CR4: 00000000003526f0 [ 218.260266][ T5930] Call Trace: [ 218.263615][ T5930] [ 218.266616][ T5930] kobject_add_internal+0x632/0xb40 [ 218.271945][ T5930] kobject_add+0x155/0x220 [ 218.276417][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 218.281453][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 218.286608][ T5930] ? kobject_put+0x43f/0x480 [ 218.292273][ T5930] ? get_device_parent+0x366/0x3a0 [ 218.298242][ T5930] device_add+0x408/0xb50 [ 218.302717][ T5930] firmware_fallback_sysfs+0x2e4/0x9b0 [ 218.307387][ T5923] usb 8-1: Product: syz [ 218.308280][ T5930] _request_firmware+0xf83/0x15b0 [ 218.312400][ T5923] usb 8-1: Manufacturer: syz [ 218.317508][ T5930] ? __pfx__request_firmware+0x10/0x10 [ 218.317547][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 218.317574][ T5930] request_firmware_work_func+0xaf/0x1c0 [ 218.317601][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 218.345352][ T5930] process_scheduled_works+0xade/0x17b0 [ 218.351163][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.357397][ T5930] worker_thread+0x8a0/0xda0 [ 218.361511][ T5923] usb 8-1: SerialNumber: syz [ 218.362009][ T5930] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 218.373299][ T5930] ? __kthread_parkme+0x7b/0x200 [ 218.378330][ T5930] kthread+0x70e/0x8a0 [ 218.382450][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 218.387739][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.393261][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.399349][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.404597][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.409447][ T5930] ret_from_fork+0x3fc/0x770 [ 218.414075][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 218.419456][ T5930] ? __switch_to_asm+0x39/0x70 [ 218.424433][ T5930] ? __switch_to_asm+0x33/0x70 [ 218.429414][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.434062][ T5930] ret_from_fork_asm+0x1a/0x30 [ 218.439201][ T5930] [ 218.442251][ T5930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.449645][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: kworker/1:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 218.459909][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.470251][ T5930] Workqueue: events request_firmware_work_func [ 218.476781][ T5930] Call Trace: [ 218.480071][ T5930] [ 218.483197][ T5930] dump_stack_lvl+0x99/0x250 [ 218.487810][ T5930] ? __asan_memcpy+0x40/0x70 [ 218.492510][ T5930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.497725][ T5930] ? __pfx__printk+0x10/0x10 [ 218.502363][ T5930] panic+0x2db/0x790 [ 218.506469][ T5930] ? __pfx_panic+0x10/0x10 [ 218.510908][ T5930] ? show_trace_log_lvl+0x4fb/0x550 [ 218.516238][ T5930] ? ret_from_fork_asm+0x1a/0x30 [ 218.521333][ T5930] __warn+0x31b/0x4b0 [ 218.525323][ T5930] ? kernfs_get+0x72/0x90 [ 218.529668][ T5930] ? kernfs_get+0x72/0x90 [ 218.534008][ T5930] report_bug+0x2be/0x4f0 [ 218.538346][ T5930] ? kernfs_get+0x72/0x90 [ 218.542772][ T5930] ? kernfs_get+0x72/0x90 [ 218.547118][ T5930] ? kernfs_get+0x74/0x90 [ 218.551626][ T5930] handle_bug+0x84/0x160 [ 218.555989][ T5930] exc_invalid_op+0x1a/0x50 [ 218.560621][ T5930] asm_exc_invalid_op+0x1a/0x20 [ 218.565489][ T5930] RIP: 0010:kernfs_get+0x72/0x90 [ 218.570622][ T5930] Code: e8 63 60 66 ff 48 89 df be 04 00 00 00 e8 36 4a c6 ff f0 ff 03 eb 05 e8 4c 60 66 ff 5b 5d c3 cc cc cc cc cc e8 3f 60 66 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 218.590644][ T5930] RSP: 0018:ffffc9000a6f7620 EFLAGS: 00010293 [ 218.596724][ T5930] RAX: ffffffff8259c581 RBX: ffff88805050c3c0 RCX: ffff88802ec55a00 [ 218.604704][ T5930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.612808][ T5930] RBP: 0000000000000000 R08: ffff88805050c3c3 R09: 1ffff1100a0a1878 [ 218.620957][ T5930] R10: dffffc0000000000 R11: ffffed100a0a1879 R12: ffff888027f74030 [ 218.629130][ T5930] R13: 1ffff11004fee807 R14: ffff888027f74038 R15: 1ffff11004fee806 [ 218.637302][ T5930] ? kernfs_get+0x71/0x90 [ 218.641835][ T5930] kobject_add_internal+0x632/0xb40 [ 218.647101][ T5930] kobject_add+0x155/0x220 [ 218.651526][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 218.656561][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 218.661592][ T5930] ? kobject_put+0x43f/0x480 [ 218.666469][ T5930] ? get_device_parent+0x366/0x3a0 [ 218.671596][ T5930] device_add+0x408/0xb50 [ 218.675979][ T5930] firmware_fallback_sysfs+0x2e4/0x9b0 [ 218.681674][ T5930] _request_firmware+0xf83/0x15b0 [ 218.686787][ T5930] ? __pfx__request_firmware+0x10/0x10 [ 218.692728][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 218.698671][ T5930] request_firmware_work_func+0xaf/0x1c0 [ 218.704443][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 218.710185][ T5930] process_scheduled_works+0xade/0x17b0 [ 218.716036][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.722131][ T5930] worker_thread+0x8a0/0xda0 [ 218.726755][ T5930] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 218.733314][ T5930] ? __kthread_parkme+0x7b/0x200 [ 218.738304][ T5930] kthread+0x70e/0x8a0 [ 218.742419][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 218.747553][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.752160][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.757374][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.762583][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.767390][ T5930] ret_from_fork+0x3fc/0x770 [ 218.772054][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 218.777391][ T5930] ? __switch_to_asm+0x39/0x70 [ 218.782300][ T5930] ? __switch_to_asm+0x33/0x70 [ 218.787193][ T5930] ? __pfx_kthread+0x10/0x10 [ 218.791821][ T5930] ret_from_fork_asm+0x1a/0x30 [ 218.796720][ T5930] [ 218.800183][ T5930] Kernel Offset: disabled [ 218.804545][ T5930] Rebooting in 86400 seconds..