last executing test programs: 13.019147294s ago: executing program 1 (id=82): openat$kvm(0xffffffffffffff9c, 0x0, 0x105080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x3, &(0x7f00000001c0)=""/174, &(0x7f0000000580)=0xae) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010100}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x24008050) syz_emit_ethernet(0x86, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0x0, &(0x7f0000000140)) close_range(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xf4c9e94b205b8687}}, './file0\x00'}) mq_timedsend(r5, &(0x7f0000000300)="e8d159ebc205febd232eeac47705dec5ace5ac768fc120fe9b1104fa81a5d05b42325753a42d5bac8544f6a8c2df0dc069ffd71712a3459e85d83cc945755bb63e8ee7bc4ed0a52da49b22f6bb45d9f62b667e046420e289ee93860678147c99fa03289f6bb4416961aca499f0ebd9ccebdf522354cca46bdcb5a462002702c6d1e2c5bef5f2d8634f1111e1bc91efcce6026f7f120ed6b92c61d159156062eca3787be02647ebc0bda9cbaaee044ceabbc15c31e3aa71dbe1793e", 0xbb, 0x0, &(0x7f0000000100)={0x77359400}) 10.38869293s ago: executing program 2 (id=87): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) 10.133891655s ago: executing program 2 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4008004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpriority(0x0, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905060220000200020905a229"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @loopback, 0x9}]}, &(0x7f00000001c0)=0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={r6, 0x4}, 0x8) sendto$inet(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) unshare(0x8000000) r13 = semget$private(0x0, 0x4000, 0x555) semctl$GETALL(r13, 0x0, 0xd, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={r12, 0xfffffffd}, 0x8) 10.039939835s ago: executing program 1 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x311a00, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000fc0)={{}, "d9e5cb3d5a7fb4406f6812f26025d2262d650c11effb311af7948d2ac2d35d58d329234270e40be65918b23ce305fdca67c17cf200c4a5695978e584c81cee9ad2d2cee5666e010deed30da90fc788902276b11c36b5b38c951c15cf6c443bfd5a556198b71d4ca23b3cc4130cb06b75b867ffdcc80fd9a7abc47260c7ba7e15d8c58ab9a643258ce517453911747ab7df412a36949300caf1998014e6a434c14ddb505f733fca21c856eb57dc1f36cf51957e7cbd65b01393f85c2ad3b06b224a5828b01a07409aac25a68fb3e04c1d5ab3ff3fa315fa5a9886787ce267a0d042f436f83491fc595bca05481a52179b9832eb0443bf3c12f945b468a3d75c643972b3bb9b4f1d30bf8ae01dc906c11f76dcb33897af9aebe17abce53768fd5c4a20d03f626b299724b69010f0b5327b4809c299a59fc0a76facb16ae3577282b9dc18d82c9e742ba1575d25d005f84331471e3bd167cb0ee6f22cb0cbdf84f21e1678868a8f7a1dd520e62c9e9dd0906ebabc50094768441da1e43f403c12596930c0a3d3633d695076f33bf5bade164667b646e4f00e7266516299b1efd405dd9d0fb153043269ddd04cf3c280d26b506c8e1d543ff955dd156513e5e6f02419b5c783abdfefdcb1cb4892130d15fc6356c787f779183dc3eaa4265349ae0314eb95f5f01cde625e33db2cb477ccc14304d9b7cdc08b994c89fdd1db1c5154587cda8c8220efe9241711589c462616a78f61c2e3ce5b73e1f6101eadcec9480b1e4167cf98da24dc5d72c3a54bf1346ec19ddaf8bcf19dd7564664bdea1263379c9f9f40dc091e992df4beee2ec91b7620d1daa99eb07ddeb4ebf844a853d128fd8479ba86a83a76f9e58cd69d05b2572b276881bcaa72b1624ba9fffbf6a4ba91fc2c34142dc15ccfddc7443d07791be522c06779cd97e235fabc57e454b0e9144c1cb4e6fefc4673fa7161397ff67c8eba45660791c885f29fb937fd7d2dc1b204463ba0e13591a12971c4515ca88c19918f9284879aa1242c104d9223eec2ed106ecb1d06fe540923b59ace018e453e222989f1e7cffbdf48c2d1e8391a9d93634cf698e253ef37e0d9f012eba3e9d6f998f2333483e28041e5090869706ecf3f7cca236807988786c3fff9ec23fc0a5de47ccaf373aa55d9542b451b3428a5bad16bf4154c68dc9e60b6d486ab9522a0e25f7dee03634d9597964a92038e29dc6d2ac6cf6f07bed1b5ff06c8c9addb361c28557189b533de1cf5d4f950d3276a89d3aa53ce2841733b5f32763eae7c2aa2ccf4bb9c6d0d3ac11fb6c0c05633bd4e5fdca46eee3f5acbc14f2785f808501e837ff5e5ef7224c551e62c9e0cf51445d5e12466e86c1f3e57078eebe87d020e8da3e5ffd676e06aaed7aac5d94cbc64f3d0eed711955f22ca2ba869557833f45ed98f6c50b7a3d4a56fd3de2c54f0752dbc5bc4a048d20a42a35489872cb1b88befedbf69544bc6c0e1370558b059a478e110e64f2a1355f31f04ccc7355737f6e3602cf13daed90dadfd000f91004e015a2c51a786818dccf8075e38025c8792f68d62d665ae7a7d0828de276faf23034f67121a74a632debc603992f0ecbf3c853ab06517dc7f84c84fd3e8ee4305b403794de727f78467e609681270026246c4482a256ea630267195aedb4d1c6b7ed61254c961cc28efe9d237e1280d67ed0f598223da389f74152050837d810aa42bba6bded4fffb62569884c9335d96027f53d6c934151f394dac497de5a93722ba6442cfb43d25a8b551c5aafb0d23ddc067d00c0b51b7061edc927ea195e8db5dd6d5e04a28040e2465506de69a567dbe84e1b740010a08c0d0153c8c72ec596d247f6093c610171c8ac31fe940eb29ff7cb20a7c3a60e7160dc7bad7a42254fce2b53615f249a70e3b423f31bb893fe82a2831ef4852760612a5f29c4e5220744a7d9ab73f9f8c69ab12b42108a15638d249935c5aaf3a482dce09d26cb6e3a48cd238ebdbdc7970ec4bde45d3c0d0a77624a2c17c22c9831a320dcc426e575b11b107c3cf5c05ac1c2ad17b2f7be96cd975a25ff9637382ec6160bd95372dbc7e6041f48f38a53cdece2cb999a96015b56f9fbdf0f4d05ca76bac33bd3140554e7b173c707451b08b5ac5a887762bdd57d14f09755ddc6875a7f9684a6cff812f551067d713072ea4d59acebf1868d042c548041079ea3ac37245812c7038a2256d4dd67e591197acb8923e9a008f3e6dfbf540fd74e7c2e1630fdb4d33bc18d78d476a9e048c90806240eecc03fce468326cd9e997b87bed679730a7e9469aaccb7104fa8bf6ca9099d1a454da420d33b4d2e67d0080c36e03c30dc58082671e2273a6b14dce3f14f5046009629a43d17e0fe7c5e8897671fcddde93d51bfcf91eaa244e481bd1e253346a54d464e5bee716b63d4c642d8a449a809e32cb507ff4ea4892d820d3bc7f514c7dd1bd676de4771e731301f410c6bd6fbf4eadd9639c97964157dbd9c5badcae9603f6898073eabe6c96e6e65f66a7e114054c3e3221321c326546ae9f57cf06d0387c5904523048064b28287e27521bd96444233c2099470073d083be8ca5a3172ef08b78eea163f5b8a6bee02a9d3c75bcbaf3803caf3365a52938888c5f1cff2bf423e9e3999821a5226822ff04d5d6a860d3b9497d95def8bc1ecb5a4e328625a8ca7b630b730e024cc6e0cc264390ad48678c934898f6941d0b878dec03f9ef80fe19289ead079863dc06cfcda9835e5f7cf9079302306df7c5b8b12d9868d3bd46252b0df277c54e2e76d5ef82bd7448af63599e5655cab50f403f65a321f56a9e99135044f8cc204da2c651be0360764a3aa5d053faec84ed40ee0c91308ff623fd065d13b90bdaf50bd3861f1ced5f083a8837ba1a7242031130e2d75dfd7225b4d4812c80a5e833100015653efef5fbb94647bf80ac8806f6aae1ecc53979fa93dcde8a3bd0d078ef6abf62d558843f07902b11d847683218a6d325b2a19a12c5d0462590420e9fe081f5aa89ffad2379f94b70ab29d4c73ebccdc3ee3f79a298024d8d0ec9327f9010dc7ba2bfc7cd38c93a89cc209af87f730bc0431fecb56382d4460dde56ff6f97693a37b507578c60933db29328e43e46bd99ac8042c8ae65e17d99e9e8e42d4fe1d581ae6e6a119730077e6d90dfc74779435dff827b63353f1c56d68e2412034c2b23a45c89c00cb90192c70c3543a7275b219da447c84a8c963b8462f6ea1ecda0664c8cf042a82aac5cd4dcbd48403ddbf381d31df0513e75077e9fcd47abb0810a284ef2199f1d1304a079a4b2614d9236fc6663df3164bad382a098cdb31aa03b7213dd972a721fe116aa9532cb195565cbe205b3f24e98a8be2ec799c087e72bfee0cc33f7ed788ad7f0aef7b087c5e30558b176a94252bbd45152ee90d8a7273262b5c332494e00df4cf10c36b4f4a9934a3fbcd92c304172de7b231daf807cfe136df212b53aeb3717de8bceb368652bd8f03b25f9b5e3d5fc4ae3421c94420d53fc112bfac0755608b33f7c8268fa2979e9ce1c0a3e0aca3471abee8b09f1a5670e0faccd36b074e115b2ff07461aa3a375b25fbac199f6a312041050aaba80199d4f5c4cbd03334a1ba717b736732392b21b4f9ba172ab02529238c2fa4f3c3036768fa8943fbd8ee00cad4ed27675c6e7056ae415e024ee1b6a041f51f3ac46a008b0845fa7576fe187d9444b2f319611e3f53e2c2abc0cb568b9eb3543c4d31d8deaad680aebc23ff87b97e5e59e2494a1b4246d1e720a00af0c15c6c3d90011f8bd68c2fe43da48fdd07d9ee1a12df591a1bc851ed1573c5ccb99894d2ed252cfe7eb0477aaa5f721f64262221710d83d3837467cfad7f86081793d67124f52e98696a5deb79c3a07b1060ad3bbafecfe5fb80989a8d699c41bf72427c1f7b1b308a6d65fa4c2b3e4b6aecf28de5aca91e3f2da14077350ac1b393efb22fb2fd6459d6c54c2dae259c2aafd2afc48c80331dae6a7eb18776b89ed38e4e18da4494b56190e028aca9a0b7c20fad1b8946bb5abff6acde1a0e359d97276d3fe86f4bf6b76ddec5a31c3926041ef97f40feb9546c0e30a4d5aff5579aa97bc22d8ba0da19b00077955f6a695deb617e2c36fcc5fb4e7aab80aeba8fca10d33903e33bfc8280d9717bd62fc9f4cc2293ce0425c783b449fdca7fb1770b911f47ec42004c19e9cc8668a087521ff542f3385451e7f94c3a5723eb7a9dd6e6102e444d02ab1c21d6da9cea8e7475d42bfc4c5fb2cd851792f0a8bcbe0582d3d3570731e47adb9e9d69ae2cf7810a1b77200b38bdf38e8493e20e6d194372ace3c4b4cdd461dde122ce6ff1f60839e6ad4123655cffa8141510dbd257556ec0a7ef859f3fef1503db09f57f4edf2e7625dcb5cc1538a60e3437336b826146ec562e0c74039ec5c734ce3949feb9ff3161949b0e6ae80056c80ff5f41143c1ac10835446c375349f32d25f571b68bedce2a6e3d2855af1446035a0b8db9a1e41be74d585317609e72758ac5b73a7a7317d31a96a817d5a84dfbb382c2824e92f908ca4590c7bb1f93b48064814062a0eba80661b95e30ec5ba87ecf44f3ab65c3284dc06ff2868a7f85e56bba4f8ec20c859786f9f497cf34276e58dabeae0b3643d1bc8363eed7955377075b497f39cf6a2b0214dbcdcb8b4012f7ae68015dd08ac5d09b76e4b093ee3542dc14f65a42df148885148c9ad8e9244680999debb1b926fcbceb74d839de8b146e2b8029a7ba6af7b8ac087bf913496373ec121aa95a0f7f64672aea05a6f658ec66f53d4c202c72ab32140064e79c8fafd8299b1511491ff5831bd5c746635821ec11671709d13976461efb350ca5917f5fef70cf5cceb7897e6ebe17d1cdf4170ad99bb6d37bb90efe16cb6c53156e1f90adf146155a0f55138eb295a72d761422c33d2aed18b5dbd7879f2ae10e80b9fbebfa5d0d81c06f5bf931f3d5fe7475d9d1627ca6ecbc8dcfa76d34388fd013b7f09cf59cc3ca45c21ca5664be4d055790a703572231419fb9f337672fb731fcc02902e4d2e4b07d57a6994f1cb1a6ccf68568d030f0aee1b0ba856062cedecb982575c2623e4b336d6aa0782b7cd2ec8f6e0ab767f2128953dee08436957f5c659bd5f182d893f6566f15193f519dc838ec98daa0e9a5e9d507328268cc8ec2391c379976c0ab8c810262c4ae6bcf03377937028489eefef045d26d40488ce77d81be60f63c43767965babd463997e714652ce9bb8900b14df52018b07861a2b789efe979bbcf2fa5a8a174fe7b559bf84c30a90c640bed619fa3394066f8a513d8546603284ed2e207bcc50d6803745e8b925cb4aa9161e6f40354de18c2d16beed49caff3fd4ed6e19e3bffe470b8e2a076f10326ce21a6a69a119cea653a40c0479ffb7b4dbd51b33e8f7d67db4826ced3935afe7a938c1d61213c0100d18342b7fdac47ffd75a58a2d3b71e63c7a7c8eddf3ac1dd84b050bd175db928cdcd32c237c330285176cd241804bc5a1740028278b1b41650c31f132648ba482dee15e54527aa911434de3615d6868dce37dd3a28d20f21f4562e90f519167558d1e284d9725058964c83d3bb2e972b34ea17fd550061b7140e2906ef438d786908cefacdd1a1df835fee5f8f7e3f4ed1068c4be2b0946ef07fbbe71b4df978e835a9ad553b0bbc4d9abe04096ed275b9cb9548e1799a8ca0b2a558772e156e027b5b816f483d42884dc86120242f89606b275c0c5830e3deb"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000f40)) 9.92291269s ago: executing program 0 (id=91): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000080)=0x801, 0x4) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)={0x1c, 0x3e, 0x711, 0x80000, 0x0, {0x3}, [@nested={0x8, 0x12e, 0x0, 0x1, [@nested={0x4, 0xa}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) 8.928852946s ago: executing program 4 (id=93): socket$nl_generic(0x10, 0x3, 0x10) inotify_init() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {&(0x7f0000000140)=[{0x0, 0x6, {0x0}, 0xa}, {0x9fb, 0x80000000, {0x0}, 0xfff}]}}) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x40, 0x16, 0x20, "f15fffd490cb9a98bf9ae35b9e86ec1682e3217f9feead2abfbfb2209dfef0e9"}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 8.155830881s ago: executing program 0 (id=96): bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r3, 0x0, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600003f00000000008490209357ee619d45d7dc1aeb21a5", @ANYRES32=0x41424344, @ANYBLOB="686919f998def8367a085e3feeacb231d1040738ea205f042b67b2fc0d30be93ccc8a3f0b045a2f79abc79888c06f01a876bc2ce49fb87b7bdb741e3d8024ff81ef5523839635ffd7c2aada877dc9c09209d3742fb755def6460f25f78004c51a724ce8a7a86df263e8cb1c5db252644595cf2a34b2a2486fe0ff0be2e6ea9a715815eb0ae3c5e8e859091b090f11265c1d07e4c947242", @ANYRESDEC], 0x4e) fanotify_mark(0xffffffffffffffff, 0x80, 0x4000002, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000003c0)={0x0, 0x91, &(0x7f0000000040)=""/145}) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x44a, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x55, 0x3c, 0x37, 0x40, 0x2a39, 0x3fa0, 0xe422, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x438, 0x2, 0x5, 0xf, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0xff, 0xd, 0xcc, 0x2, [@hid_hid={0x9, 0x21, 0x4, 0x81, 0x1, {0x22, 0x2f6}}, @hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0xacb}}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xe9, 0x5, 0x3c, [@generic={0x52, 0x1, "db70bf0d10551da4aa1313e0c0ffc00a6142b221179704be8549f09901a83e698329e1aaa480df8a666daec040bbf0b4d5be7199ee879b077073de822b197a895d55d50e869cac084b9842f914543368"}, @generic={0xeb, 0x22, "c6ec183b3bc6f6fc09e510221647294a53b3298998d97370d3404ac418f1c065aa38c999e84f76dbd1ed0b423657d679d01a5d7016a08aa51efb8afbafa0c72f1a069e5d46a68b877c0bc20a9901dad0614409644a60bda1ce82a5440a6116fc97da0e445d7c6c832c21f7c0fb61b45475d7d20a51fee820e7eaa071487746802ed0def2ca1b0bf6501955b1018e8cdaf89eef6c283b9a44009008edacb7a42056f076f77d89d56d494c42da6a76a314741283636ea3b21013c3f04ce3f1a9f7473f9c587df13f4006804025483c6ae452538abfddb7a559eaadb67646d83d550fa39b4813b76b8a6c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x3, 0xe, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xef, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x80}, @generic={0x16, 0x5, "e51b1321c659e4e3f47032bc10f73beb52d29236"}]}}]}}, {{0x9, 0x4, 0x2e, 0x80, 0x5, 0xa3, 0x50, 0x2a, 0x8, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x56, '\''}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x6, 0xc, "ebaef87a"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x9, 0x8a, "acfa843c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xdf, 0x3, 0x4, 0x81, "55d88c"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0x80, 0x2, [@generic={0x41, 0x30, "50c6a5bb664058947144a3942d42158e05c4dcca5952798e7da8d8f56bd6862da1d579fe701a155ef52e8563f8daefd407ef7c57a9139f08accb8816d753cc"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x0, 0x5, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x800}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8001}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x7, 0x81, 0x1, [@generic={0xf0, 0x2, "95c77892f20919f4055a6246564288595577c7ba7e682b46d6a555e34891ce2939cf77d5cb2dba3e4bfe5dab8a63f6807ccbc4adfd1306b69a182f69f3ec8306830e60212d7d4a1551ee0f0ab81ce1e93de6b1d7197c4755c579a4385d3ff16f2ab551859c46d8fb10b5765561bf65783a79509dbc78b2033a9b378ac83ebea2490991919ca57c31c6ad5ba80b015b2dc404380b401395ae72d30dbce4d63bb7a83a14e62dc74821b68a282c68508e97e26752c8c808eeffc39fa2c132b96c44520ba8f04f1b7b7942ade562805de4324735f785fcbe6b21dcbb03de62108fe71eeb4eb42a99347d306179293314"}, @generic={0xee, 0x1, "c8dc724ad822a69781ab1595e7e57587c398e2a75eba8cce3f820aad5567e10c3040483f6b20e4bb8503c45061ad39f42f59d0dfe74092400cdd6aaa6c1c3f2a3d6d80e4a75adac6e35090e84171a8815020a41d2eea82e589ac8fa9d82ea0dd82156faa989aeef21b683affe7912cf108a067ce57c0637204ae649c12db8dca7e13686f5ce8a1eaf4f0a08ff97364310c49f27e45e7a4ea6e7978ab595737580bbd8a5a1f9f4ca02e9d435209fde70a6ce8270151b694d942113ed5dce95f2b386336147f56b1cb496986b66e41451fb2019fcc4b6e4a4991bf10e62b50af522e6135c70442e20541a3e632"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x7, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x616b}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x2, 0x8, 0xd, 0xff, 0x5}, 0x16c, &(0x7f00000007c0)={0x5, 0xf, 0x16c, 0x5, [@ext_cap={0x0, 0x10, 0x2, 0xa, 0x7, 0x0, 0xff}, @ss_cap={0xfffffde1, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8a, 0x6}, @generic={0xdc, 0x10, 0x2, "653df7876be7a76121e738d327f0f288d8cc87d5816d5dab9965d8bb2d896c84f52a22792f5f3262cc3aaef586496cc78f5b793037264818ad69e015174383e3d7532abaf723ec9dd75714ac08ecdbc8a178c8f52b83f40f907010443d3305a81f3dde79329e872e83052b4bf0bd12e5688ac2f588ad7c63269f7a29b80a469789f88f69548beeaa03b2cb7c6e50c0b48ffc2808ff9197ea1c704d7f17f29ccc9bd626ed2111a4e2ee222097ce813c4ca8f1b94243a31d84237cdb3964b51c1f5cea6492876e1b81e485953050fc98286263bb09fc46df84b2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4d, 0xd9, 0x6, 0x0, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd8, 0x1, 0x9}]}, 0x1, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$sierra_net(r6, &(0x7f0000001180)={0x14, &(0x7f0000001000)={0x20, 0x23, 0xaf, {0xaf, 0x31, "96c46c6b86571481d0c700b98c9d20f935ae09da6ae843af4a8fb874950bcb0908e413dd4ab85cc641156be3befbfe1b82648622f9af2001e80e4e2e30bcb073db7658b11c25e9e61ac6897f399a058d01fce7c152eaee2debe490e27c5045722190fd05cb3eae1b562abbf671fc140e2d61a7dfe0ab7a3661c65fef5f5252c1bad8cf6a017316027c86ed2864d6270178d5e1e1d63145081ca19096fca54f9e94ec4de6bd50efbd93cf0b19a6"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, &(0x7f0000001680)={0x1c, &(0x7f00000011c0)=ANY=[@ANYBLOB="203123000000ee0d0a3d53aace315b3d94a7b406ebea3adf5f6c82d4955549187c92c32e2e204ffac9"], &(0x7f0000001200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001640)={0x21, 0x0, 0x4, "9c2ecf07"}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040cb0668290000000000010902e77e0100000000090400000103000800092100000001220500090500030000000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220507000080000000104a"], 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x40010) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) 6.90784082s ago: executing program 2 (id=98): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000400210008224040e1070000003d3482b0c34b6cbcfca96df7dfeb437d03d33b5c9e1da0fe40ecd0413a5aed20202aa0efbf9ad3205d41e278c46bf3a9cf3da482e56212b4d96413ef9efbee6ea1b604fc1a6286bccfec34918cd7a2c55dab185e6973c9674ae70ce25919d563a65185d3d381d5d2bfbf0c409ee37b54cea639f29a9f394b8b33e2b97ae4e6b5e24cfa200789180d0bd56e580045f8"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000400210008224040e1070000003d3482b0c34b6cbcfca96df7dfeb437d03d33b5c9e1da0fe40ecd0413a5aed20202aa0efbf9ad3205d41e278c46bf3a9cf3da482e56212b4d96413ef9efbee6ea1b604fc1a6286bccfec34918cd7a2c55dab185e6973c9674ae70ce25919d563a65185d3d381d5d2bfbf0c409ee37b54cea639f29a9f394b8b33e2b97ae4e6b5e24cfa200789180d0bd56e580045f8"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0xc, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r6, 0xc984, 0x10000}, &(0x7f00000000c0)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 6.618476475s ago: executing program 1 (id=99): openat$kvm(0xffffffffffffff9c, 0x0, 0x105080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x3, &(0x7f00000001c0)=""/174, &(0x7f0000000580)=0xae) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010100}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x24008050) syz_emit_ethernet(0x86, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0x0, 0x0) close_range(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xf4c9e94b205b8687}}, './file0\x00'}) mq_timedsend(r5, &(0x7f0000000300)="e8d159ebc205febd232eeac47705dec5ace5ac768fc120fe9b1104fa81a5d05b42325753a42d5bac8544f6a8c2df0dc069ffd71712a3459e85d83cc945755bb63e8ee7bc4ed0a52da49b22f6bb45d9f62b667e046420e289ee93860678147c99fa03289f6bb4416961aca499f0ebd9ccebdf522354cca46bdcb5a462002702c6d1e2c5bef5f2d8634f1111e1bc91efcce6026f7f120ed6b92c61d159156062eca3787be02647ebc0bda9cbaaee044ceabbc15c31e3aa71dbe1793e", 0xbb, 0x0, &(0x7f0000000100)={0x77359400}) 6.335900566s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r1 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x2, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x64, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0x3, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x7}, {@loopback, 0x4}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x941, 0x7, 0x9, 0x41008, r0, 0x7, '\x00', r2, r3, 0x5, 0x5, 0x2, 0xc}, 0x50) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0xe0c, 0x5, 0x5, 0x9}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xa0, 0x3b, 0x46, 0x40, 0x6cd, 0x202, 0xa8d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x57, 0x7f, 0x2, 0xdb, 0x2d, 0x94, 0x9, [], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0xd, 0xa, 0x7}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x9, 0x8, 0x2}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000005c0)=0x7) unshare(0x2040600) r6 = semget$private(0x0, 0x5, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$SETVAL(r6, 0x1, 0x10, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='geneve1\x00', 0x10) 6.16680235s ago: executing program 3 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000001200000000013a"], 0xffe) 5.96363763s ago: executing program 3 (id=102): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e23, 0x1ff, @empty, 0x5}, {0xa, 0x4e24, 0x0, @loopback, 0x7}, 0x1, {[0x6, 0x3, 0x25b, 0x1, 0x7, 0x401, 0x3e1, 0x80000000]}}, 0x5c) 5.712132811s ago: executing program 0 (id=103): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006f8e4a087c2c2101b10904dd0600ffffff4d2951e3a268bf055202506b5fd0e4c72a10b23ebce86686d0adb35b16217f79f7b4b3ca3493cebb6d3aad35f777f8ec546a245fd87259ec746dd93e9a7ca1f689416c5c2aac31e2b4149993ae31bd8f89b26a9400e09170f6d5ba39bfe07f00a85b70cd000eea097bf8e16f6cd3d7eb43dd4e85b9791eccad59c12dd5c4a40265f50f1d8f1a1448c6698edf4861ab9203ece2fc821116"], 0x0) 5.089196989s ago: executing program 4 (id=104): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r2) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95d, 0x80, 0x0, 0x30e}) (async) r3 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95d, 0x80, 0x0, 0x30e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000080)={0x9}) (async) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000080)={0x9}) syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}}) 4.907853783s ago: executing program 3 (id=105): io_uring_setup(0x5cb2, &(0x7f00000002c0)={0x0, 0x64a0, 0x8, 0x1, 0x393}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006000806"], 0x24}, 0x1, 0x0, 0x0, 0x200488c0}, 0xc000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x61}]}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) (async) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbf8, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x200480c0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000200)={"bff600fe", 0x7, 0x1, 0x0, 0xff, 0x6, "aaa476daabe861b29c8071125e2e42", "5c5febfe", "08b400ab", "00000010", ["06f79b50c9f7327483e71098", "1d9a08e29107afa6e6cb4622", "9058deefd47aaf9ddfc38bfe", "3629c5294708a2cc459f4966"]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) timer_create(0x4, 0x0, &(0x7f0000000140)) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) write$vga_arbiter(r7, &(0x7f0000000200)=ANY=[], 0x14) syz_usb_disconnect(0xffffffffffffffff) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.618055955s ago: executing program 3 (id=106): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = syz_io_uring_setup(0x21f7, &(0x7f0000000a00)={0x0, 0x4000000, 0x10100, 0x0, 0xcf}, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499259d1fd3f13fcdfb49aa8434aa650dd499c47a11fd125994", 0x30}, {&(0x7f0000000300)="d74fc4ecd631da86b2f70a", 0xb}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)="c2b2c2845878e06770d619d3e9eca0e581d43f7444a57c65dd68a353d6ed418950ce931df506fbc501a2e77fb801ed1410c5dbcbda39aba16fa6079b0edc1a0813efd8aab7db80b981a5a62c232203d9917f728e13cbdc0bae21d8be5c949fb9c1294a947110f6536e0a70eab741daf1ea6dbe8d53d04da5fc73c1faadb4946cfe1bfd35d1084efb2f837823a0ef62475626159337805df4505b272a92879ecc4b05536afd0bd7e4ddce3e5dc65d8e8e4d3b0d08f251614e2e63b3a1", 0xbc}, {&(0x7f0000000640)="84b6992c8c06a69aa3f1bb35f450c791da67ec6906b97ea51bdf54a11b96d6a8ee3883ede75d7bc6494c520c442b650674606426de486e6ba909679b13ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xba}], 0x7, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r6, r2, r7, r1]}}], 0x28}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000b5"], 0x1) shutdown(r5, 0x1) r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, 0x0, &(0x7f0000000480)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x651ca59f1942f388}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x9, 0x10}, {0x3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$LOOP_CTL_GET_FREE(r13, 0x4c82) sched_getattr(r8, &(0x7f00000003c0)={0x38}, 0x38, 0x0) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) 4.497986547s ago: executing program 1 (id=107): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000009004"]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00') read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x4000000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) pwrite64(r0, 0x0, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="485046601b553b2ba2ca86e71aebb0bd81204019fd5c6210761e8063273fb7858251c74363262f756cc40284d2042500cc92e64376ce98fc22804be08a77560292bdb18455cdffa4f57728a4b5b64449a5d3000000000000000065e5043dbb2bb7add6c53152bfdf59263c4027ddd6036de5f8a5a6ad55aa0e4e244033747766c8928f65e008e33abf6d32bf758f0eaeb87b7af1d82d305943ba636f40d2e4428d165172eb09e4744f8855daecbd8062468d0c8b"], 0xac}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000) r7 = dup2(r0, 0xffffffffffffffff) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, {&(0x7f0000002500)=""/128, 0x80, 0x0, 0x3, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000380)=0x1) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r9) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x40004020) 3.404874456s ago: executing program 1 (id=108): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x81) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000340)=0x9) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000000c0)=0x10001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @timestamp, @window={0x3, 0x4, 0xfff8}, @window, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000700), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, 0x140d, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4018) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x138}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2000, 0x7e6b24dcb378c22c, 0x11}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r7, 0xb01, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r7, 0x8, 0x8001, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0xb, 0xb, 0x6, 0xbe}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000100)=""/12, 0xc, 0x40010601, 0x0, 0x0) 3.211052984s ago: executing program 4 (id=109): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x5, 0xfffffff9, {{0x4b, 0x4, 0x0, 0x33, 0x12c, 0x66, 0x0, 0x8e, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x5a, 0x3, [{0x6, 0xb, "ff47889140e1513350"}, {0x7, 0x3, "80"}, {0x2, 0x4, "4da0"}, {0x5, 0x12, "cb381fd136f2d40e8182177ed96161f9"}, {0x0, 0x10, "4867a1c37b49365e5159c07e7473"}, {0x1, 0xe, "3ad22662bb13de286c46e688"}, {0x2, 0x12, "e1e2855b5131b10f2300195545f388c1"}]}, @cipso={0x86, 0x56, 0x0, [{0x7, 0x9, "125d2103258747"}, {0x5, 0xf, "d4676763f89ab9d1cb73f98d12"}, {0x5edde256c348a099, 0x8, "487282a7d22b"}, {0x5, 0x9, "ec54f2df46bff1"}, {0x7, 0x9, "5c38055224c920"}, {0x2, 0xe, "88b902dd5b04b0e465784a04"}, {0x7, 0x8, "bfb31a3c5457"}, {0x1, 0x8, "bcd497fc942d"}]}, @ssrr={0x89, 0x7, 0xad, [@remote]}, @cipso={0x86, 0x61, 0x0, [{0x6, 0x12, "6112219c540c295ce8435f8560b1aa64"}, {0x6, 0x2}, {0x2, 0x4, "49af"}, {0x0, 0x10, "758543670c5c5a70cc961f09b1b8"}, {0x0, 0xd, "f1ae3c3e150f2bef742532"}, {0x0, 0x7, "231e45d81a"}, {0x5, 0xe, "3c392b5931f01e86083308fe"}, {0x6, 0x11, "c531f00df7282404f5b8a9f8a98121"}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0x70bd2e, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x3, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async, rerun: 64) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async, rerun: 64) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.99993437s ago: executing program 2 (id=110): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0xfdef) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}}, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) dup3(r8, r2, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r10, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000002280)={@remote, 0x67}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.901634016s ago: executing program 3 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r1 = msgget$private(0x0, 0x44) msgsnd(r1, &(0x7f00000000c0)={0x1}, 0x8, 0x800) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x31}]}, 0x66}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.799871712s ago: executing program 3 (id=112): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x5, {0x5, 0x24, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) io_setup(0xffff, &(0x7f0000001080)) 2.659842204s ago: executing program 4 (id=113): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000af8000/0x400000)=nil) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x91) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r10, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 2.576553204s ago: executing program 0 (id=114): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x8) setsockopt(0xffffffffffffffff, 0x80, 0x4, &(0x7f0000000680)="0c1d7fbfea1f5ccd0ff83dc53b1f8662681358", 0x13) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x0, 0x44}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e1f, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x0, {0x2, 0x3, @multicast2}, 'lo\x00'}) 2.174209791s ago: executing program 1 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080007006f000000080005"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) madvise(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000080)="1700be8c", 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) 2.082735658s ago: executing program 2 (id=116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000210000000e0001"], 0x4c}}, 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESDEC=r0], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 1.527985052s ago: executing program 0 (id=117): openat$kvm(0xffffffffffffff9c, 0x0, 0x105080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x3, &(0x7f00000001c0)=""/174, &(0x7f0000000580)=0xae) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @rand_addr=0x64010100}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x24008050) syz_emit_ethernet(0x86, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0x0, 0x0) close_range(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xf4c9e94b205b8687}}, './file0\x00'}) mq_timedsend(r5, &(0x7f0000000300)="e8d159ebc205febd232eeac47705dec5ace5ac768fc120fe9b1104fa81a5d05b42325753a42d5bac8544f6a8c2df0dc069ffd71712a3459e85d83cc945755bb63e8ee7bc4ed0a52da49b22f6bb45d9f62b667e046420e289ee93860678147c99fa03289f6bb4416961aca499f0ebd9ccebdf522354cca46bdcb5a462002702c6d1e2c5bef5f2d8634f1111e1bc91efcce6026f7f120ed6b92c61d159156062eca3787be02647ebc0bda9cbaaee044ceabbc15c31e3aa71dbe1793e", 0xbb, 0x0, &(0x7f0000000100)={0x77359400}) 182.629371ms ago: executing program 4 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x334}}, 0x4040801) 141.101656ms ago: executing program 0 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000001280)={0x0, [[0x60, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x9, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x1001}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x9, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x9, 0x0, 0x0, 0x2}) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f045}) r9 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x60480) r11 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r11, 0x40044591, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 0s ago: executing program 4 (id=120): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x6a600, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/191, 0xbf, 0x0, &(0x7f0000000240)=""/95, 0x5f}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x43c3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000380)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0xfffffffb) (async, rerun: 32) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 83.357499][ T5855] cgroup: Unknown subsys name 'net' [ 83.501746][ T5855] cgroup: Unknown subsys name 'cpuset' [ 83.510435][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.093278][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.754106][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.779016][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.788943][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.797171][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.804361][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.805315][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.819957][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.820453][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.830078][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.836229][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.841164][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.857019][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.865373][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.866920][ T5187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.882693][ T5187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.884357][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.890996][ T5187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.904500][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.905060][ T5187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.928189][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.937254][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.945761][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.961511][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.969774][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.977680][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.434859][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 88.661362][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 88.716124][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.724070][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.733542][ T5878] bridge_slave_0: entered allmulticast mode [ 88.741556][ T5878] bridge_slave_0: entered promiscuous mode [ 88.801067][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.808253][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.815353][ T5878] bridge_slave_1: entered allmulticast mode [ 88.822631][ T5878] bridge_slave_1: entered promiscuous mode [ 88.908113][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 89.007041][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.025106][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 89.065101][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.142155][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.149380][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.156589][ T5880] bridge_slave_0: entered allmulticast mode [ 89.164392][ T5880] bridge_slave_0: entered promiscuous mode [ 89.173447][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 89.192383][ T5878] team0: Port device team_slave_0 added [ 89.212119][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.219353][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.226476][ T5880] bridge_slave_1: entered allmulticast mode [ 89.235192][ T5880] bridge_slave_1: entered promiscuous mode [ 89.271415][ T5878] team0: Port device team_slave_1 added [ 89.333354][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.340986][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.348195][ T5883] bridge_slave_0: entered allmulticast mode [ 89.355284][ T5883] bridge_slave_0: entered promiscuous mode [ 89.406199][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.414910][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.422794][ T5883] bridge_slave_1: entered allmulticast mode [ 89.431878][ T5883] bridge_slave_1: entered promiscuous mode [ 89.486283][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.503785][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.510820][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.538652][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.581817][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.605655][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.612698][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.638760][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.661024][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.670783][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.678077][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.685870][ T5884] bridge_slave_0: entered allmulticast mode [ 89.693446][ T5884] bridge_slave_0: entered promiscuous mode [ 89.730896][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.752872][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.760109][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.767258][ T5884] bridge_slave_1: entered allmulticast mode [ 89.775787][ T5884] bridge_slave_1: entered promiscuous mode [ 89.795964][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.803176][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.810878][ T5881] bridge_slave_0: entered allmulticast mode [ 89.818061][ T5881] bridge_slave_0: entered promiscuous mode [ 89.826296][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.833793][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.841190][ T5881] bridge_slave_1: entered allmulticast mode [ 89.848799][ T5881] bridge_slave_1: entered promiscuous mode [ 89.883907][ T5880] team0: Port device team_slave_0 added [ 89.917854][ T5883] team0: Port device team_slave_0 added [ 89.943338][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.954682][ T5880] team0: Port device team_slave_1 added [ 89.959269][ T5869] Bluetooth: hci1: command tx timeout [ 89.960394][ T5871] Bluetooth: hci0: command tx timeout [ 89.966513][ T5867] Bluetooth: hci2: command tx timeout [ 90.027681][ T5883] team0: Port device team_slave_1 added [ 90.038162][ T5867] Bluetooth: hci4: command tx timeout [ 90.038214][ T5871] Bluetooth: hci3: command tx timeout [ 90.045324][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.076496][ T5878] hsr_slave_0: entered promiscuous mode [ 90.082926][ T5878] hsr_slave_1: entered promiscuous mode [ 90.092505][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.105107][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.139172][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.146145][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.174705][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.187425][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.194609][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.220790][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.277132][ T5884] team0: Port device team_slave_0 added [ 90.322107][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.329157][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.355335][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.368073][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.375220][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.401202][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.414230][ T5884] team0: Port device team_slave_1 added [ 90.451656][ T5881] team0: Port device team_slave_0 added [ 90.465812][ T5881] team0: Port device team_slave_1 added [ 90.571459][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.578677][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.605821][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.618525][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.625494][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.651624][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.699454][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.706449][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.736305][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.749710][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.756689][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.783148][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.820182][ T5880] hsr_slave_0: entered promiscuous mode [ 90.826841][ T5880] hsr_slave_1: entered promiscuous mode [ 90.833674][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 90.839687][ T5880] Cannot create hsr debugfs directory [ 90.887242][ T5884] hsr_slave_0: entered promiscuous mode [ 90.893660][ T5884] hsr_slave_1: entered promiscuous mode [ 90.900200][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 90.905939][ T5884] Cannot create hsr debugfs directory [ 90.916820][ T5883] hsr_slave_0: entered promiscuous mode [ 90.923247][ T5883] hsr_slave_1: entered promiscuous mode [ 90.929820][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 90.935575][ T5883] Cannot create hsr debugfs directory [ 91.110788][ T5881] hsr_slave_0: entered promiscuous mode [ 91.117099][ T5881] hsr_slave_1: entered promiscuous mode [ 91.123968][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 91.129803][ T5881] Cannot create hsr debugfs directory [ 91.362353][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.375126][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.420883][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.466800][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.613547][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.626389][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.654025][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.664357][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.745670][ T5884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.760738][ T5884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.783648][ T5884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.793827][ T5884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.875598][ T5883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.885196][ T43] cfg80211: failed to load regulatory.db [ 91.901219][ T5883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.912890][ T5883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.940716][ T5883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.038226][ T5871] Bluetooth: hci2: command tx timeout [ 92.038360][ T5867] Bluetooth: hci1: command tx timeout [ 92.048479][ T5871] Bluetooth: hci0: command tx timeout [ 92.065050][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.077165][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.099245][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.118412][ T5871] Bluetooth: hci4: command tx timeout [ 92.118662][ T5867] Bluetooth: hci3: command tx timeout [ 92.135935][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.181928][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.192441][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.245883][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.272459][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.315008][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.322235][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.333526][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.341193][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.352688][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.359829][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.405528][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.412690][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.463856][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.491026][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.512534][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.546896][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.583619][ T5880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.594644][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.616687][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.623891][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.639954][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.647084][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.685076][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.692313][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.722638][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.734671][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.741815][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.784757][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.823853][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.831013][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.863065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.870266][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.884700][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.894709][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.010511][ T5881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.021603][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.060238][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.124252][ T5880] veth0_vlan: entered promiscuous mode [ 93.156549][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.176717][ T5880] veth1_vlan: entered promiscuous mode [ 93.187133][ T5878] veth0_vlan: entered promiscuous mode [ 93.203945][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.248274][ T5883] veth0_vlan: entered promiscuous mode [ 93.256004][ T5878] veth1_vlan: entered promiscuous mode [ 93.305148][ T5883] veth1_vlan: entered promiscuous mode [ 93.349618][ T5884] veth0_vlan: entered promiscuous mode [ 93.390216][ T5878] veth0_macvtap: entered promiscuous mode [ 93.397279][ T5880] veth0_macvtap: entered promiscuous mode [ 93.425236][ T5881] veth0_vlan: entered promiscuous mode [ 93.434186][ T5878] veth1_macvtap: entered promiscuous mode [ 93.444191][ T5884] veth1_vlan: entered promiscuous mode [ 93.455815][ T5880] veth1_macvtap: entered promiscuous mode [ 93.481875][ T5883] veth0_macvtap: entered promiscuous mode [ 93.496528][ T5881] veth1_vlan: entered promiscuous mode [ 93.510006][ T5883] veth1_macvtap: entered promiscuous mode [ 93.537262][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.564162][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.576719][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.596750][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.610355][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.636306][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.667249][ T5884] veth0_macvtap: entered promiscuous mode [ 93.675648][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.685692][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.696988][ T5881] veth0_macvtap: entered promiscuous mode [ 93.714475][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.725268][ T5884] veth1_macvtap: entered promiscuous mode [ 93.742721][ T5881] veth1_macvtap: entered promiscuous mode [ 93.753174][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762686][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.788532][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.821295][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831497][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853514][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.862794][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.895699][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.906043][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.916224][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931680][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.952605][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.967409][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.989382][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.005441][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047012][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055981][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.095571][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.111074][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.124533][ T5867] Bluetooth: hci1: command tx timeout [ 94.126559][ T3573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.131353][ T5871] Bluetooth: hci0: command tx timeout [ 94.138890][ T5869] Bluetooth: hci2: command tx timeout [ 94.151742][ T3573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.191727][ T3573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.203017][ T5867] Bluetooth: hci4: command tx timeout [ 94.210329][ T5871] Bluetooth: hci3: command tx timeout [ 94.225396][ T3573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.240502][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.248516][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.273858][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.283410][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.320674][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.331130][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.368285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.376205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.394069][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.406473][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.491518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.500500][ T5883] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.506027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.558692][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.566634][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.724155][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.756861][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.839348][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.872486][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.971594][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.243052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.395431][ T5970] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 95.410912][ T5970] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 95.480145][ T30] audit: type=1326 audit(1757649986.673:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae2f8eba9 code=0x7ffc0000 [ 95.591417][ T30] audit: type=1326 audit(1757649986.683:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae2f8eba9 code=0x7ffc0000 [ 95.618615][ T30] audit: type=1326 audit(1757649986.683:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5ae2f8eba9 code=0x7ffc0000 [ 95.645012][ T30] audit: type=1326 audit(1757649986.683:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae2f8eba9 code=0x7ffc0000 [ 95.678745][ T30] audit: type=1326 audit(1757649986.683:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae2f8eba9 code=0x7ffc0000 [ 95.768478][ T2154] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.019022][ T2154] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 96.033796][ T2154] usb 4-1: can't read configurations, error -61 [ 96.098446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.108518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.131794][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.158697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.218463][ T5871] Bluetooth: hci0: command tx timeout [ 96.223923][ T5867] Bluetooth: hci1: command tx timeout [ 96.223938][ T5869] Bluetooth: hci2: command tx timeout [ 96.269345][ T2154] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.278306][ T5867] Bluetooth: hci3: command tx timeout [ 96.283915][ T5867] Bluetooth: hci4: command tx timeout [ 96.298450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.461167][ T2154] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 96.483370][ T2154] usb 4-1: can't read configurations, error -61 [ 96.493505][ T2154] usb usb4-port1: attempt power cycle [ 96.579374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.589592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.633823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.658295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.808022][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.868398][ T2154] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 96.882526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.929876][ T2154] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 96.968620][ T2154] usb 4-1: can't read configurations, error -61 [ 97.066032][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.097680][ T5936] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.118474][ T2154] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.146328][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.196983][ T5936] usb 3-1: config 0 descriptor?? [ 97.209476][ T2154] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 97.227540][ T2154] usb 4-1: can't read configurations, error -61 [ 97.235627][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 97.243630][ T2154] usb usb4-port1: unable to enumerate USB device [ 97.411110][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.613617][ T5936] pwc: recv_control_msg error -32 req 02 val 2700 [ 97.621248][ T5936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.628822][ T5936] pwc: recv_control_msg error -32 req 04 val 1000 [ 97.635939][ T5936] pwc: recv_control_msg error -32 req 04 val 1300 [ 97.644868][ T5936] pwc: recv_control_msg error -32 req 04 val 1400 [ 97.652518][ T5936] pwc: recv_control_msg error -32 req 02 val 2000 [ 97.660247][ T5936] pwc: recv_control_msg error -32 req 02 val 2100 [ 97.678730][ T5936] pwc: recv_control_msg error -32 req 04 val 1500 [ 97.689302][ T5936] pwc: recv_control_msg error -32 req 02 val 2500 [ 97.696552][ T5936] pwc: recv_control_msg error -32 req 02 val 2400 [ 97.772695][ T5936] pwc: recv_control_msg error -32 req 02 val 2600 [ 97.797167][ T5936] pwc: recv_control_msg error -32 req 02 val 2900 [ 97.839714][ T5936] pwc: recv_control_msg error -32 req 02 val 2800 [ 97.846921][ T5936] pwc: recv_control_msg error -32 req 04 val 1100 [ 97.854300][ T5936] pwc: recv_control_msg error -32 req 04 val 1200 [ 97.863332][ T5936] pwc: Registered as video103. [ 97.870331][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 98.274917][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.288483][ T5936] usb 3-1: USB disconnect, device number 2 [ 98.392880][ T6018] Zero length message leads to an empty skb [ 98.582957][ T6023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.600929][ T6023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.760197][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.789807][ T6022] tipc: Started in network mode [ 98.795687][ T6022] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 98.852692][ T6022] tipc: Enabled bearer , priority 3 [ 99.060359][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.325121][ T10] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 99.336238][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.393444][ T10] usb 4-1: Product: syz [ 99.408006][ T10] usb 4-1: Manufacturer: syz [ 99.421580][ T10] usb 4-1: SerialNumber: syz [ 99.435191][ T10] usb 4-1: config 0 descriptor?? [ 99.723436][ T10] usb 4-1: USB disconnect, device number 6 [ 99.988849][ T5957] tipc: Node number set to 10005162 [ 100.829310][ T5936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.953787][ T6059] geneve2: entered promiscuous mode [ 101.028026][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 101.076868][ T5936] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.101582][ T5936] usb 3-1: config 179 has no interface number 0 [ 101.179448][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.276220][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.302480][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.317858][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.331737][ T5936] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.361750][ T5936] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.437970][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.471903][ T6049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.801821][ T6068] sctp: failed to load transform for md5: -4 [ 101.961837][ T5936] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 103.074209][ T10] usb 3-1: USB disconnect, device number 3 [ 103.074207][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.189388][ T6090] syzkaller1: entered promiscuous mode [ 103.195020][ T6090] syzkaller1: entered allmulticast mode [ 103.315255][ T6092] netlink: 'syz.0.31': attribute type 8 has an invalid length. [ 103.434035][ T30] audit: type=1804 audit(1757649994.633:7): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.31" name="/newroot/4/file1" dev="fuse" ino=1 res=1 errno=0 [ 103.633728][ T6099] fuse: Unknown parameter 'gro£w_id' [ 104.565554][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 104.728060][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.823125][ T6115] netlink: 'syz.3.37': attribute type 6 has an invalid length. [ 104.869160][ T5936] usb 2-1: device descriptor read/64, error -71 [ 104.896692][ T5957] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.128005][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 105.167247][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 105.242955][ T5936] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.287248][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 105.332989][ T5957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 105.343258][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 13925, setting to 1024 [ 105.367977][ T5957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 105.384210][ T5957] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 105.428202][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.436526][ T5957] usb 3-1: Product: syz [ 105.441004][ T5957] usb 3-1: Manufacturer: syz [ 105.445749][ T5957] usb 3-1: SerialNumber: syz [ 105.529385][ T5936] usb 2-1: device descriptor read/64, error -71 [ 105.639555][ T5957] usb 3-1: config 0 descriptor?? [ 105.648486][ T6110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.658569][ T5936] usb usb2-port1: attempt power cycle [ 105.690069][ T5957] kvaser_usb 3-1:0.0: error -EPROTO: Cannot get software info [ 105.728070][ T5957] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -71 [ 105.988214][ T5995] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.049810][ T5936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.078026][ T5996] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.087464][ T5936] usb 2-1: device descriptor read/8, error -71 [ 106.138154][ T5995] usb 5-1: device descriptor read/64, error -71 [ 106.251345][ T5996] usb 1-1: Using ep0 maxpacket: 8 [ 106.269069][ T5996] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 106.281599][ T5996] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 106.300316][ T5996] usb 1-1: Product: syz [ 106.313238][ T5996] usb 1-1: Manufacturer: syz [ 106.326333][ T5996] usb 1-1: SerialNumber: syz [ 106.328238][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.348154][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.363778][ T5996] usb 1-1: config 0 descriptor?? [ 106.370641][ T5936] usb 2-1: device descriptor read/8, error -71 [ 106.408331][ T5995] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.409050][ T5996] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 106.501119][ T5936] usb usb2-port1: unable to enumerate USB device [ 106.504725][ T10] usb 4-1: device descriptor read/64, error -71 [ 106.578315][ T5995] usb 5-1: device descriptor read/64, error -71 [ 106.699202][ T5995] usb usb5-port1: attempt power cycle [ 106.768196][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.823795][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.859146][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.908280][ T10] usb 4-1: device descriptor read/64, error -71 [ 107.023971][ T10] usb usb4-port1: attempt power cycle [ 107.068013][ T5995] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.096972][ T5996] gspca_zc3xx: reg_w_i err -71 [ 107.132087][ T5995] usb 5-1: device descriptor read/8, error -71 [ 107.139389][ T5996] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 107.170069][ T5996] usb 1-1: USB disconnect, device number 2 [ 107.378085][ T5995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.408186][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.418329][ T5995] usb 5-1: device descriptor read/8, error -71 [ 107.440216][ T10] usb 4-1: device descriptor read/8, error -71 [ 107.560725][ T5995] usb usb5-port1: unable to enumerate USB device [ 107.596849][ T5995] usb 3-1: USB disconnect, device number 4 [ 107.700377][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.788693][ T10] usb 4-1: device descriptor read/8, error -71 [ 107.898756][ T10] usb usb4-port1: unable to enumerate USB device [ 108.700643][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.720117][ T6160] netlink: 10 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.808476][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.871726][ T6160] netlink: 10 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.919538][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.952322][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 109.035474][ T6163] syzkaller1: entered promiscuous mode [ 109.065055][ T6163] syzkaller1: entered allmulticast mode [ 109.177381][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 109.186668][ T6160] netlink: 10 bytes leftover after parsing attributes in process `syz.0.48'. [ 109.201169][ T6166] netlink: 'syz.4.49': attribute type 8 has an invalid length. [ 109.227287][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 109.242800][ T30] audit: type=1804 audit(1757650000.443:8): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.49" name="/newroot/9/file1" dev="fuse" ino=1 res=1 errno=0 [ 109.290138][ T5936] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.388070][ T5957] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.448020][ T5936] usb 4-1: device descriptor read/64, error -71 [ 109.632721][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 109.653017][ T5957] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 109.669126][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.680075][ T5957] usb 3-1: config 0 descriptor?? [ 109.707993][ T5936] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.734411][ T5957] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 109.869070][ T5936] usb 4-1: device descriptor read/64, error -71 [ 109.990231][ T5936] usb usb4-port1: attempt power cycle [ 110.318099][ T5995] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 110.369721][ T5936] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 110.372930][ T6183] netlink: 'syz.4.55': attribute type 41 has an invalid length. [ 110.419263][ T5936] usb 4-1: device descriptor read/8, error -71 [ 110.483012][ T5995] usb 2-1: not running at top speed; connect to a high speed hub [ 110.539350][ T5995] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.573098][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.588562][ T5995] usb 2-1: Product: à ‡ [ 110.614974][ T5995] usb 2-1: Manufacturer: 伹桻꾯ેㅑì»ê­ˆî£½ç­ƒá’¤éŸŽì‡›ë‚콑슠î‘ሆë¡çŠ¨è»•ê„®î•«ä–䌓é‡ï§¹î«¹Ø™ä„„뼩墠ퟮ홂å—繯鱉蜻鿵–삙ꕳ톌筭å—㙊啃餯áŒáš«ì¸‹ã縀 [ 110.711413][ T5936] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 110.731141][ T6186] __nla_validate_parse: 2 callbacks suppressed [ 110.731161][ T6186] netlink: 76 bytes leftover after parsing attributes in process `syz.0.56'. [ 110.773560][ T6188] syz.4.57 uses obsolete (PF_INET,SOCK_PACKET) [ 110.789771][ T5936] usb 4-1: device descriptor read/8, error -71 [ 110.930586][ T5995] cdc_ncm 2-1:1.0: bind() failure [ 110.940218][ T5936] usb usb4-port1: unable to enumerate USB device [ 110.987076][ T5995] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 111.017131][ T5995] cdc_ncm 2-1:1.1: bind() failure [ 111.066982][ T5995] usb 2-1: USB disconnect, device number 6 [ 111.737694][ T6209] binder: BINDER_SET_CONTEXT_MGR already set [ 111.748707][ T6209] binder: 6202:6209 ioctl 4018620d 200000000100 returned -16 [ 111.854917][ T6208] binder: BINDER_SET_CONTEXT_MGR already set [ 111.861059][ T6208] binder: 6202:6208 ioctl 4018620d 200000004a80 returned -16 [ 111.938570][ T5936] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.075322][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.0.64'. [ 112.087828][ T6219] netlink: 80 bytes leftover after parsing attributes in process `syz.0.64'. [ 112.176633][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.186483][ T5936] usb 5-1: not running at top speed; connect to a high speed hub [ 112.201843][ T5936] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 112.216857][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 112.236354][ T5936] usb 5-1: config 3 has no interface number 0 [ 112.260977][ T5936] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 112.272532][ T5936] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 112.289790][ T5936] usb 5-1: config 3 interface 106 has no altsetting 0 [ 112.315349][ T5936] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 112.325120][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.337962][ T5936] usb 5-1: Product: syz [ 112.342327][ T5936] usb 5-1: Manufacturer: syz [ 112.348107][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 112.354613][ T5936] usb 5-1: SerialNumber: syz [ 112.368441][ T6204] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 112.375900][ T6204] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 112.409139][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.65'. [ 112.649078][ T6226] netlink: 'syz.4.59': attribute type 6 has an invalid length. [ 112.688232][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 112.869271][ T5957] input: sonixj as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 112.968161][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 112.976009][ T24] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 112.997730][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.005850][ T24] usb 4-1: can't read configurations, error -61 [ 113.063726][ T5995] usb 3-1: USB disconnect, device number 5 [ 113.199839][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 113.626619][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 113.668828][ T24] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 113.708938][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.732211][ T24] usb 4-1: can't read configurations, error -61 [ 113.747733][ T24] usb usb4-port1: attempt power cycle [ 114.005232][ T6240] netlink: 144 bytes leftover after parsing attributes in process `syz.2.67'. [ 114.109301][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 114.163754][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 114.170251][ T24] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 114.180055][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 114.190585][ T24] usb 4-1: can't read configurations, error -61 [ 114.338232][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 114.381894][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 114.399405][ T24] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 114.446495][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 114.472879][ T24] usb 4-1: can't read configurations, error -61 [ 114.502265][ T24] usb usb4-port1: unable to enumerate USB device [ 114.998458][ T6250] netlink: 76 bytes leftover after parsing attributes in process `syz.0.71'. [ 115.452590][ T5936] kobil_sct 5-1:3.106: KOBIL USB smart card terminal converter detected [ 115.574262][ T5936] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 115.673127][ T5936] usb 5-1: USB disconnect, device number 6 [ 115.799037][ T5972] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 115.853665][ T5936] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 115.931255][ T6265] random: crng reseeded on system resumption [ 115.980935][ T5972] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 115.989379][ T5972] usb 3-1: config 0 has no interface number 0 [ 116.013939][ T5936] kobil_sct 5-1:3.106: device disconnected [ 116.057717][ T5972] usb 3-1: config 0 interface 29 has no altsetting 0 [ 116.095843][ T5972] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 116.095876][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.095899][ T5972] usb 3-1: Product: syz [ 116.095916][ T5972] usb 3-1: Manufacturer: syz [ 116.095933][ T5972] usb 3-1: SerialNumber: syz [ 116.113157][ T5972] usb 3-1: config 0 descriptor?? [ 116.318920][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 116.353949][ T5972] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 116.545927][ T6284] netlink: 80 bytes leftover after parsing attributes in process `syz.3.76'. [ 116.563849][ T6284] netlink: 80 bytes leftover after parsing attributes in process `syz.3.76'. [ 116.769655][ T5995] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.938255][ T5995] usb 1-1: Using ep0 maxpacket: 8 [ 116.953676][ T5995] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 116.984676][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.993785][ T5995] usb 1-1: Product: syz [ 117.004550][ T5995] usb 1-1: Manufacturer: syz [ 117.011022][ T5995] usb 1-1: SerialNumber: syz [ 117.035090][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'. [ 117.056285][ T5995] usb 1-1: config 0 descriptor?? [ 117.080272][ T5995] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 117.114826][ T6292] syzkaller1: entered promiscuous mode [ 117.122159][ T6292] syzkaller1: entered allmulticast mode [ 117.312974][ T6293] netlink: 'syz.4.79': attribute type 8 has an invalid length. [ 117.427370][ T30] audit: type=1804 audit(1757650008.623:9): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.79" name="/newroot/17/file1" dev="fuse" ino=1 res=1 errno=0 [ 117.603604][ T5995] gspca_sonixj: reg_w1 err -110 [ 117.639798][ T5995] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 118.220550][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 118.524567][ T6305] tipc: Resetting bearer [ 119.174607][ T2154] usb 1-1: USB disconnect, device number 3 [ 119.788192][ T6305] tipc: Disabling bearer [ 120.403034][ T5972] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 120.455061][ T5972] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 120.658032][ T5936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.789135][ T5972] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 120.801350][ T5972] usb 3-1: USB disconnect, device number 6 [ 120.819016][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 120.832982][ T5936] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.851754][ T5936] usb 5-1: config 0 has no interface number 0 [ 120.889386][ T5936] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 120.909784][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.968926][ T5936] usb 5-1: Product: syz [ 121.008006][ T5936] usb 5-1: Manufacturer: syz [ 121.041044][ T5936] usb 5-1: SerialNumber: syz [ 121.098149][ T5936] usb 5-1: config 0 descriptor?? [ 121.152760][ T5936] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.181687][ T5936] usb 5-1: selecting invalid altsetting 1 [ 121.205495][ T5936] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.260197][ T5936] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.304920][ T5936] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.317210][ T5936] usb 5-1: media controller created [ 121.450181][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.652746][ T6337] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 121.678158][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.748126][ T5972] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 121.808585][ T5936] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 121.848018][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 121.856987][ T10] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 121.868852][ T2154] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 121.882789][ T5972] usb 2-1: device descriptor read/64, error -71 [ 121.891237][ T10] usb 3-1: config 254 has no interface number 0 [ 121.896879][ T5936] usb 5-1: USB disconnect, device number 7 [ 121.897546][ T10] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 121.944406][ T10] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 121.968709][ T10] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.981517][ T10] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.992325][ T10] usb 3-1: config 254 interface 235 has no altsetting 0 [ 122.002099][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 122.011239][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.019557][ T10] usb 3-1: Product: syz [ 122.023737][ T10] usb 3-1: Manufacturer: syz [ 122.029478][ T10] usb 3-1: SerialNumber: syz [ 122.038602][ T6331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.046229][ T2154] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.058180][ T2154] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.069684][ T2154] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.080514][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.098716][ T919] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.099766][ T6336] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.117838][ T2154] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.168410][ T5972] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 122.251006][ T6331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.262648][ T10] usbtest 3-1:254.235: Linux gadget zero [ 122.269163][ T10] usbtest 3-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 122.283338][ T919] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.293943][ T919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.304150][ T919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.313339][ T919] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.328459][ T5972] usb 2-1: device descriptor read/64, error -71 [ 122.336684][ T919] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.350274][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.361600][ T919] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.374404][ T919] usb 1-1: Product: syz [ 122.388120][ T919] usb 1-1: Manufacturer: syz [ 122.388190][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.441092][ T5972] usb usb2-port1: attempt power cycle [ 122.448951][ T919] cdc_wdm 1-1:1.0: skipping garbage [ 122.456757][ T919] cdc_wdm 1-1:1.0: skipping garbage [ 122.465291][ T919] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 122.584646][ T919] usb 4-1: USB disconnect, device number 19 [ 122.690377][ T5996] usb 1-1: USB disconnect, device number 4 [ 122.798418][ T5972] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 122.819014][ T5972] usb 2-1: device descriptor read/8, error -71 [ 122.908099][ T2154] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.068135][ T2154] usb 5-1: Using ep0 maxpacket: 16 [ 123.068164][ T5972] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 123.082344][ T2154] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 123.098877][ T2154] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 123.107087][ T2154] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 123.121053][ T5972] usb 2-1: device descriptor read/8, error -71 [ 123.137923][ T2154] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 123.146998][ T2154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 123.156052][ T2154] usb 5-1: config 0 has no interface number 0 [ 123.162682][ T2154] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 123.173816][ T2154] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 123.183785][ T2154] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.193840][ T2154] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.210670][ T2154] usb 5-1: config 0 interface 125 has no altsetting 0 [ 123.230925][ T2154] usb 5-1: config 0 interface 125 has no altsetting 2 [ 123.246003][ T5972] usb usb2-port1: unable to enumerate USB device [ 123.259906][ T2154] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 123.282086][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.307577][ T2154] usb 5-1: Product: syz [ 123.324060][ T2154] usb 5-1: Manufacturer: syz [ 123.341446][ T2154] usb 5-1: SerialNumber: syz [ 123.362287][ T2154] usb 5-1: config 0 descriptor?? [ 123.382708][ T2154] usb 5-1: selecting invalid altsetting 2 [ 123.708104][ T919] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.872959][ T6366] netlink: 80 bytes leftover after parsing attributes in process `syz.3.97'. [ 123.889924][ T6366] netlink: 80 bytes leftover after parsing attributes in process `syz.3.97'. [ 123.910343][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 123.921176][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.932746][ T919] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.942699][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.960223][ T919] usb 1-1: config 0 descriptor?? [ 124.387016][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.418780][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.451011][ T5972] usb 3-1: USB disconnect, device number 7 [ 124.464111][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.542256][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.749661][ T919] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 124.761842][ T919] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 124.795815][ T919] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 124.805359][ T919] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x1 [ 124.872050][ T919] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 125.023960][ T919] usb 1-1: USB disconnect, device number 5 [ 125.448076][ T5996] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 125.610335][ T5996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.618851][ T5996] usb 3-1: not running at top speed; connect to a high speed hub [ 125.627684][ T5996] usb 3-1: config 9 has an invalid interface number: 87 but max is 0 [ 125.636573][ T5996] usb 3-1: config 9 has no interface number 0 [ 125.644109][ T5996] usb 3-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 125.656722][ T5996] usb 3-1: config 9 interface 87 has no altsetting 0 [ 125.668568][ T5996] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 125.678461][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.694767][ T5996] usb 3-1: Product: syz [ 125.703296][ T5996] usb 3-1: Manufacturer: syz [ 125.708039][ T5996] usb 3-1: SerialNumber: syz [ 126.035245][ T6389] vlan2: entered allmulticast mode [ 126.079104][ T919] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.248200][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 126.403636][ T5972] usb 5-1: USB disconnect, device number 8 [ 126.412370][ T919] usb 1-1: no configurations [ 126.430183][ T919] usb 1-1: can't read configurations, error -22 [ 126.597749][ T919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.635621][ T6398] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.778686][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 126.845166][ T919] usb 1-1: no configurations [ 126.870896][ T919] usb 1-1: can't read configurations, error -22 [ 126.942508][ T919] usb usb1-port1: attempt power cycle [ 127.311109][ T919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.448627][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 127.473831][ T919] usb 1-1: no configurations [ 127.484098][ T919] usb 1-1: can't read configurations, error -22 [ 127.758085][ T919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.798791][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 127.815473][ T919] usb 1-1: no configurations [ 127.830795][ T919] usb 1-1: can't read configurations, error -22 [ 127.918369][ T919] usb usb1-port1: unable to enumerate USB device [ 128.434098][ T6415] pim6reg: entered allmulticast mode [ 128.462277][ T5996] usb 3-1: USB disconnect, device number 8 [ 128.511205][ T6419] netlink: 108 bytes leftover after parsing attributes in process `syz.2.110'. [ 128.583624][ T6413] pim6reg: left allmulticast mode [ 128.623011][ T6419] syzkaller1: entered promiscuous mode [ 128.631796][ T6419] syzkaller1: entered allmulticast mode [ 128.687352][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.700882][ T6425] netlink: 'syz.2.110': attribute type 8 has an invalid length. [ 128.728932][ T30] audit: type=1804 audit(1757650019.923:10): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.110" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 128.728937][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.918504][ T5996] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 129.055302][ T6435] loop7: detected capacity change from 0 to 16384 [ 129.229183][ T5996] usb 4-1: Using ep0 maxpacket: 16 [ 129.299694][ T5996] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 129.346090][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.409247][ T5996] usb 4-1: config 0 descriptor?? [ 129.492797][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 129.555036][ T6436] loop7: detected capacity change from 16384 to 0 [ 129.562954][ C0] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.584896][ C0] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 129.597314][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 129.759013][ T919] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.863107][ T5996] lenovo 0003:17EF:6047.0002: item fetching failed at offset 2/5 [ 129.878822][ T5996] lenovo 0003:17EF:6047.0002: hid_parse failed [ 129.888030][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.898603][ T5996] lenovo 0003:17EF:6047.0002: probe with driver lenovo failed with error -22 [ 129.928145][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 129.937769][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.966666][ T919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 129.980942][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 130.008070][ T919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 130.027726][ T919] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 130.039625][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.047737][ T919] usb 2-1: Product: syz [ 130.137978][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 130.751009][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 130.764993][ T24] usb 3-1: config 0 has no interface number 0 [ 130.770578][ T919] usb 2-1: Manufacturer: syz [ 130.781876][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 130.835488][ T919] usb 2-1: SerialNumber: syz [ 130.840381][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 130.850815][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 130.860778][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 130.876480][ T919] usb 2-1: config 0 descriptor?? [ 130.890185][ T24] usb 3-1: Product: syz [ 130.894676][ T919] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 130.933189][ T24] usb 3-1: SerialNumber: syz [ 130.938707][ T919] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 130.958990][ T10] usb 4-1: USB disconnect, device number 20 [ 131.021303][ T24] usb 3-1: config 0 descriptor?? [ 131.071827][ T24] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 131.095561][ T919] usb 2-1: USB disconnect, device number 11 [ 131.135858][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 131.137054][ T919] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 131.189324][ T919] omninet 2-1:0.0: device disconnected [ 131.480123][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 131.487211][ C1] ------------[ cut here ]------------ [ 131.492834][ C1] URB ffff88807df85200 submitted while active [ 131.499661][ C1] WARNING: CPU: 1 PID: 6440 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 131.509246][ C1] Modules linked in: [ 131.513448][ C1] CPU: 1 UID: 0 PID: 6440 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 131.522651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.532721][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 131.538283][ C1] Code: 44 89 f2 e8 71 5b 00 fa e9 13 fc ff ff e8 77 85 93 fa c6 05 a9 5f 61 08 01 90 48 c7 c7 20 03 35 8c 48 89 de e8 c0 20 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 51 85 93 fa eb 11 e8 4a 85 93 fa bd [ 131.558002][ C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046 [ 131.564084][ C1] RAX: 70a717ac06777b00 RBX: ffff88807df85200 RCX: 0000000000040000 [ 131.572150][ C1] RDX: ffffc900023c1000 RSI: 0000000000004b43 RDI: 0000000000004b44 [ 131.580150][ C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 131.588130][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 131.596122][ C1] R13: ffff88807aafc030 R14: ffff88807df85208 R15: 0000000000000820 [ 131.604121][ C1] FS: 000055559457e500(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 131.613155][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.619784][ C1] CR2: 00007f94f6dd3d58 CR3: 0000000078a32000 CR4: 00000000003526f0 [ 131.627868][ C1] Call Trace: [ 131.631164][ C1] [ 131.634021][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 131.639941][ C1] ? kcov_remote_start+0x97/0x7f0 [ 131.644985][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 131.650374][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 131.655767][ C1] dummy_timer+0x862/0x4550 [ 131.660305][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.665694][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 131.671467][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 131.676428][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 131.681381][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 131.686329][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 131.691734][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 131.697475][ C1] ? read_tsc+0x9/0x20 [ 131.701569][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 131.707397][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 131.712537][ C1] handle_softirqs+0x283/0x870 [ 131.717337][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 131.722129][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 131.727449][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 131.732670][ C1] __irq_exit_rcu+0xca/0x1f0 [ 131.737278][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 131.742498][ C1] irq_exit_rcu+0x9/0x30 [ 131.746750][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.752484][ C1] [ 131.755419][ C1] [ 131.758358][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.764356][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 131.770897][ C1] Code: 74 05 e8 cb 89 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 2e 13 f6 65 8b 05 6c d1 23 07 85 c0 74 40 48 c7 04 24 0e 36 [ 131.790520][ C1] RSP: 0018:ffffc9000bc07a00 EFLAGS: 00000206 [ 131.796605][ C1] RAX: 70a717ac06777b00 RBX: 0000000000000a02 RCX: 70a717ac06777b00 [ 131.804597][ C1] RDX: 0000000000000006 RSI: ffffffff8d9b9b6e RDI: 0000000000000001 [ 131.812579][ C1] RBP: ffffc9000bc07a90 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 131.820550][ C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: dffffc0000000000 [ 131.828552][ C1] R13: ffff888027aea900 R14: ffffffff8ede6880 R15: 1ffff92001780f40 [ 131.836558][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.842914][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 131.848316][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 131.853720][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 131.859661][ C1] dummy_pullup+0x19b/0x200 [ 131.864179][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 131.869213][ C1] usb_gadget_disconnect_locked+0x143/0x4b0 [ 131.875129][ C1] gadget_unbind_driver+0xc4/0x430 [ 131.880251][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 131.885994][ C1] device_release_driver_internal+0x46c/0x800 [ 131.892084][ C1] driver_detach+0x1f3/0x2d0 [ 131.896693][ C1] bus_remove_driver+0x226/0x2f0 [ 131.901653][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 131.907406][ C1] raw_release+0xd7/0x260 [ 131.911754][ C1] ? __pfx_raw_release+0x10/0x10 [ 131.916716][ C1] __fput+0x449/0xa70 [ 131.920721][ C1] task_work_run+0x1d1/0x260 [ 131.925343][ C1] ? __pfx_task_work_run+0x10/0x10 [ 131.930484][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 131.935963][ C1] exit_to_user_mode_loop+0xec/0x110 [ 131.941264][ C1] do_syscall_64+0x2bd/0x3b0 [ 131.945869][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.951941][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.957596][ C1] ? clear_bhb_loop+0x60/0xb0 [ 131.962288][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.968197][ C1] RIP: 0033:0x7fec48f8eba9 [ 131.972649][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.992268][ C1] RSP: 002b:00007fec492ffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 132.000704][ C1] RAX: 0000000000000000 RBX: 000000000001f9f9 RCX: 00007fec48f8eba9 [ 132.008687][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 132.016680][ C1] RBP: 00007fec491d7da0 R08: 0000000000000001 R09: 00000008492ffe7f [ 132.024669][ C1] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007fec491d5fac [ 132.032689][ C1] R13: 00007fec491d5fa0 R14: ffffffffffffffff R15: 00007fec492ffca0 [ 132.040718][ C1] [ 132.043756][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.051057][ C1] CPU: 1 UID: 0 PID: 6440 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 132.060261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.070341][ C1] Call Trace: [ 132.073633][ C1] [ 132.076493][ C1] dump_stack_lvl+0x99/0x250 [ 132.081106][ C1] ? __asan_memcpy+0x40/0x70 [ 132.085724][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.090942][ C1] ? __pfx__printk+0x10/0x10 [ 132.095572][ C1] vpanic+0x281/0x750 [ 132.099588][ C1] ? __pfx__printk+0x10/0x10 [ 132.104221][ C1] ? __pfx_vpanic+0x10/0x10 [ 132.108759][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 132.113996][ C1] panic+0xb9/0xc0 [ 132.117734][ C1] ? __pfx_panic+0x10/0x10 [ 132.122176][ C1] __warn+0x31b/0x4b0 [ 132.126167][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 132.131125][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 132.136091][ C1] report_bug+0x2be/0x4f0 [ 132.140429][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 132.145379][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 132.150331][ C1] ? usb_submit_urb+0xfc3/0x1830 [ 132.155280][ C1] handle_bug+0x84/0x160 [ 132.159553][ C1] exc_invalid_op+0x1a/0x50 [ 132.164114][ C1] asm_exc_invalid_op+0x1a/0x20 [ 132.168971][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 132.174714][ C1] Code: 44 89 f2 e8 71 5b 00 fa e9 13 fc ff ff e8 77 85 93 fa c6 05 a9 5f 61 08 01 90 48 c7 c7 20 03 35 8c 48 89 de e8 c0 20 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 51 85 93 fa eb 11 e8 4a 85 93 fa bd [ 132.194949][ C1] RSP: 0018:ffffc90000a08868 EFLAGS: 00010046 [ 132.201033][ C1] RAX: 70a717ac06777b00 RBX: ffff88807df85200 RCX: 0000000000040000 [ 132.209011][ C1] RDX: ffffc900023c1000 RSI: 0000000000004b43 RDI: 0000000000004b44 [ 132.217007][ C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 132.224992][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 132.232972][ C1] R13: ffff88807aafc030 R14: ffff88807df85208 R15: 0000000000000820 [ 132.240970][ C1] ? usb_submit_urb+0xfc0/0x1830 [ 132.245939][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 132.251847][ C1] ? kcov_remote_start+0x97/0x7f0 [ 132.256891][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 132.262282][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 132.267674][ C1] dummy_timer+0x862/0x4550 [ 132.272207][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.277584][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 132.283316][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 132.288253][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 132.293191][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 132.298122][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 132.303345][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 132.309073][ C1] ? read_tsc+0x9/0x20 [ 132.313165][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 132.318989][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 132.324108][ C1] handle_softirqs+0x283/0x870 [ 132.328876][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 132.333651][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 132.338944][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 132.344165][ C1] __irq_exit_rcu+0xca/0x1f0 [ 132.348853][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 132.354081][ C1] irq_exit_rcu+0x9/0x30 [ 132.358348][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 132.363984][ C1] [ 132.366922][ C1] [ 132.369856][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.375858][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 132.382509][ C1] Code: 74 05 e8 cb 89 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 2e 13 f6 65 8b 05 6c d1 23 07 85 c0 74 40 48 c7 04 24 0e 36 [ 132.402130][ C1] RSP: 0018:ffffc9000bc07a00 EFLAGS: 00000206 [ 132.408217][ C1] RAX: 70a717ac06777b00 RBX: 0000000000000a02 RCX: 70a717ac06777b00 [ 132.416201][ C1] RDX: 0000000000000006 RSI: ffffffff8d9b9b6e RDI: 0000000000000001 [ 132.424183][ C1] RBP: ffffc9000bc07a90 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 132.432259][ C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: dffffc0000000000 [ 132.440251][ C1] R13: ffff888027aea900 R14: ffffffff8ede6880 R15: 1ffff92001780f40 [ 132.448251][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.454631][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 132.460043][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 132.465450][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 132.471394][ C1] dummy_pullup+0x19b/0x200 [ 132.475938][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 132.481001][ C1] usb_gadget_disconnect_locked+0x143/0x4b0 [ 132.486951][ C1] gadget_unbind_driver+0xc4/0x430 [ 132.492078][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 132.497811][ C1] device_release_driver_internal+0x46c/0x800 [ 132.503902][ C1] driver_detach+0x1f3/0x2d0 [ 132.508514][ C1] bus_remove_driver+0x226/0x2f0 [ 132.513471][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 132.519207][ C1] raw_release+0xd7/0x260 [ 132.523569][ C1] ? __pfx_raw_release+0x10/0x10 [ 132.528529][ C1] __fput+0x449/0xa70 [ 132.532546][ C1] task_work_run+0x1d1/0x260 [ 132.537188][ C1] ? __pfx_task_work_run+0x10/0x10 [ 132.542417][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 132.547903][ C1] exit_to_user_mode_loop+0xec/0x110 [ 132.553219][ C1] do_syscall_64+0x2bd/0x3b0 [ 132.557831][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.563920][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 132.569569][ C1] ? clear_bhb_loop+0x60/0xb0 [ 132.574261][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.580165][ C1] RIP: 0033:0x7fec48f8eba9 [ 132.584589][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.604249][ C1] RSP: 002b:00007fec492ffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 132.612705][ C1] RAX: 0000000000000000 RBX: 000000000001f9f9 RCX: 00007fec48f8eba9 [ 132.620686][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 132.628667][ C1] RBP: 00007fec491d7da0 R08: 0000000000000001 R09: 00000008492ffe7f [ 132.636646][ C1] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007fec491d5fac [ 132.644623][ C1] R13: 00007fec491d5fa0 R14: ffffffffffffffff R15: 00007fec492ffca0 [ 132.652613][ C1] [ 132.655936][ C1] Kernel Offset: disabled [ 132.660269][ C1] Rebooting in 86400 seconds..