last executing test programs: 23m40.878989301s ago: executing program 1 (id=2767): r0 = socket(0x840000000002, 0x3, 0xfa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) r2 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1400000011000100000000004000e4dc059e2d5300000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 23m39.335450034s ago: executing program 1 (id=2771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r6 = socket(0x1d, 0x2, 0x6) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0xfffffff7, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0x10, 0x6, 0x7, 0x8000, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x89, 0x79, 0x558e0d31, 0x4, 0x0, 0x400091, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0x97, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xe, 0x7, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x0, 0x5, 0x1000, 0x2, 0x200b398, 0x400000, 0x200, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x2, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100007, 0x8000, 0x3fd, 0x3e55, 0xff, 0xcf, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x0, 0x50, 0x2, 0xb, 0x6, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1, 0xbfc, 0x2, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x5, 0xa1c, 0x81, 0x6, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xb, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x3, 0x3, 0xfff, 0xac, 0x1c, 0x4, 0x74, 0x4}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0xed}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x5, 0x1, 0x3, 0x5, {0x6, 0x1, 0x1, 0xf6, 0x2}, {0x2, 0x1, 0x4, 0x5, 0xfffc, 0x74f}, 0x8, 0x3ff, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r12, 0xc018480d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x17, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x80004) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000640)) r13 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000040)=[{r13, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"y'], 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 23m35.266601545s ago: executing program 1 (id=2780): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) unlink(0x0) epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000100), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='\f', 0x1, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 23m32.14029202s ago: executing program 1 (id=2791): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2b1000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x2069af) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1004}, 0x810) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r5}, 0x14) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) r7 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r7, &(0x7f0000000280)=[{0x7, 0xfe, 0x9c, 0x7, @time={0x7, 0x9}, {0x0, 0x3}, {0x2, 0x7}, @control={0x7, 0x8000}}, {0x8, 0xb3, 0xdd, 0x8, @time={0x1}, {0x4, 0x8}, {0xf7, 0x54}, @ext={0xbc, &(0x7f0000000180)="731a291f394192ae6ec8bb7a43e8e92d75d3223ad50e85e33aacbe0cdb736c551260f4e54f290f8fc2f2732c0c62ee829ecf6fc3ca3b3af6432eda8b15bd279332ba224b1c589a2fc3bc56bcade578d28c36b734a3f828c712386865cd60dcc6418e63c476b3d2dc71582db959ceb3648d410f63b634f7d7a2db97c704fb23408578bfdd493e6dde4d356a57f01c6ce1b55fdf03a0ddf088349e036aa5fd6aa474e0584b6dd1b7ded259e857745861a280dd9c1fd378449a34794319"}}, {0x1, 0x6, 0xb2, 0x8, @time={0x2, 0x7}, {0x1, 0x2}, {0x5, 0xc}, @addr={0x6, 0x3}}, {0x6, 0x6, 0xd, 0x2, @time={0x4, 0x1}, {0x8, 0x4}, {0x7, 0x81}, @time=@tick=0x6}, {0x40, 0x40, 0x10, 0x10, @time={0x63, 0x6}, {0x6}, {0x18, 0x4}, @addr={0x6, 0xb}}, {0x8a, 0x40, 0xc, 0x0, @tick=0x200, {0x7, 0x2}, {0x4, 0x2}, @queue={0x12, {0xfffff001, 0x9}}}, {0x7f, 0x4, 0x7, 0x0, @time={0x1, 0x7fff}, {0x1, 0x8}, {0x3}, @raw32={[0xa178, 0xfffffffb, 0x6]}}], 0xc4) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000140)) unshare(0x8040600) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) read$char_usb(r7, &(0x7f0000000380)=""/207, 0xcf) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31e0df876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004084) 23m30.979501924s ago: executing program 1 (id=2795): iopl(0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x0, 0x0}) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0xf5ff}}], 0x400000000000172, 0x4001c00) 23m29.210908567s ago: executing program 1 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r3, 0x0, r0, 0x0, 0x4, 0x0) syz_open_pts(r2, 0x187c3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x5) read$dsp(r5, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="50006fe3f3c401020000001036d3ff56b55cfd0005000400000000000900020073797a3000000a0000000cff4b80082e4c614b6b3d9fdedc23e0c0ff235e81001240", @ANYRESHEX=r9, @ANYRES64=r7, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x140}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x28}}, 0x0) unshare(0x20000400) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = socket(0x15, 0xa, 0x1) recvmmsg(r12, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x39}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40012162, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) 23m14.03519797s ago: executing program 32 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r3, 0x0, r0, 0x0, 0x4, 0x0) syz_open_pts(r2, 0x187c3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x5) read$dsp(r5, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="50006fe3f3c401020000001036d3ff56b55cfd0005000400000000000900020073797a3000000a0000000cff4b80082e4c614b6b3d9fdedc23e0c0ff235e81001240", @ANYRESHEX=r9, @ANYRES64=r7, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x140}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x28}}, 0x0) unshare(0x20000400) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = socket(0x15, 0xa, 0x1) recvmmsg(r12, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x39}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40012162, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) 19m19.078865241s ago: executing program 3 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x4004e, 0x0) openat(r2, &(0x7f0000000340)='./file0\x00', 0x501000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x5}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x400c0d4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x6000000}, 0xffffffff}, 0x1c) r7 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x0) close(r1) 19m17.214753104s ago: executing program 3 (id=3853): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0x5}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x2008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x0, 0x0) shutdown(r5, 0x0) r7 = socket(0x15, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8910, &(0x7f0000000180)={'virt_wifi0\x00', 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r8, 0x4606, 0x0) statx(r8, 0x0, 0x6000, 0x20, &(0x7f0000000240)) inotify_init1(0x100800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r10, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 19m13.374667158s ago: executing program 3 (id=3864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) signalfd(r0, &(0x7f0000000280)={[0x40, 0x6]}, 0x8) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) openat$iommufd(0xffffff9c, &(0x7f00000002c0), 0x2001, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 19m11.474888945s ago: executing program 3 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000001580)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="8106"], 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/126, 0x7e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f00000001c0)=""/25, 0x19}], 0x6}, 0x40000100) sigaltstack(&(0x7f0000001340)={&(0x7f0000000240)=""/4088, 0x0, 0xfffffe16}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0x1) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0xb12, 0x880802) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003", @ANYBLOB="801cfc1936"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) ioctl$I2C_RETRIES(r4, 0x701, 0x7ffe) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10080, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sigaltstack(&(0x7f0000001480)={&(0x7f0000001440), 0x91a0228861da7054}, &(0x7f00000014c0)={&(0x7f0000002140)=""/4096, 0x0, 0x1000}) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(r8, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r9, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6b9fda680ecc528) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10100800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000000206010300000000000000000200000a0500050001000000d8e57517d7d718fd98629d865a4a30b073b825d0e0677ef0000af72b4b6c663f7ff06cb071376ed85e3f81fe6b1060825c0610eddb3db479a60360c47e3f11ff437516b28f3b4ad831860293e78109eef992b14b0e79b07aa32bf35fe9"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x258, 0xc8, 0x320, 0x190, 0x190, 0x408, 0x408, 0x408, 0x408, 0x41d, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="210100000000002058040f50000000001f0109020700e5"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000050a0101000000000000000003000073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) 19m9.822279168s ago: executing program 3 (id=3878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x11012, r1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x1, &(0x7f0000002a00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x8000000000005}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) connect$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000080)={r6, r7+10000000}, 0x0) syz_clone(0xa0243880, 0x0, 0x0, 0x0, 0x0, 0x0) 19m9.485249885s ago: executing program 3 (id=3879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)="a9ff4eb9c9d48eb89762f4d85fae0ee6198cb0b4600531f2f8711c47ebe2ad5e3188681ce7f77138bcd024f0e8de39044f3730e63c1105607b6e786ee647c30df596b1dc3d7772f486c361fad6e4e85cfbf14493ef12e9ccbfabd47ba4b19d6b6f61075dd6bfa7f23032d7ff715921b0c51df9b69dc6b47bbfc8d0f802d87085cdcdb514b8b69f13", 0x88) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000014100000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000d0020000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a30000000009c0211800a000100696e6e65720000008c02028008000140000000000800034000000004780205800e000100696d6d65646961746500000064020280080001400000000e0800014000000012080001400000001108000140000000150800014000000000380202804c00028008000340000000040900020073797a300000000008000180fffffffd080003400000000408000340000000020900020073797a320000000008000180fffffffd08000340000000043100010035713391c7a8f60ec56eca3262da220f08b72a8042cbb2581383c9f461a6a8840eb87fe9db0c1b00000030000280080001800000000008000340000000030900020073797a320000000008000340000000030800034000000003b9000100092b8f6f906a2a7ccb792d8a90c69e212df99767ab36951a6db13869be02fddb01b68b5c856c009f5262d86aaa1226373db82073d38d40fbde1f610fe51af133970aa2e5ec11c7fbf10291d3d84a4a1552101914a0d278b7e54f6aae812dbe3544c27300f4fd151c0835aa60b7571f8481049da6957bc314efcffcc74d007743be67bd671fc083ddaea00eb35d1895460e09d0de64db7791aa6aed5f5569cb559d0859e994756f55afdedf57e69aa53c7db4ef0000002c00028008000180fffffffe09"], 0x370}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000804) syz_usb_control_io$hid(r6, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(r9, &(0x7f0000000100), 0x0, 0x120ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) 19m8.779431475s ago: executing program 33 (id=3879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)="a9ff4eb9c9d48eb89762f4d85fae0ee6198cb0b4600531f2f8711c47ebe2ad5e3188681ce7f77138bcd024f0e8de39044f3730e63c1105607b6e786ee647c30df596b1dc3d7772f486c361fad6e4e85cfbf14493ef12e9ccbfabd47ba4b19d6b6f61075dd6bfa7f23032d7ff715921b0c51df9b69dc6b47bbfc8d0f802d87085cdcdb514b8b69f13", 0x88) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x370}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000804) syz_usb_control_io$hid(r6, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(r9, &(0x7f0000000100), 0x0, 0x120ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) 10m45.814983128s ago: executing program 5 (id=6166): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1) clock_gettime(0xfffffff2, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe4) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="0000000040eb11250251845a1dc71826c9fc98aeab58fcd0b93ae62d480466591e6aae52020b0ac38e10d36425d7f34d8be6da181c38f2c70e7825329e6ed70eb4283aaace571c6eee", @ANYRES32=0xee00, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="040005000000000010000100000000002000000000000000"], 0x4c, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x300, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0xfffffffffffffea8, 0x14, 0x8}]}}}]}, 0x44}}, 0x0) 10m45.6411958s ago: executing program 5 (id=6167): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)="020000000d80ffff", 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x361c82, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40585414, &(0x7f0000000040)={0x6, 0x8, 0x80}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="480000000002010400000000000000007800000004000380300002802c00018014000300fc00005ba7ede500000000000020140004004e261cdfc8a9050d4f1800000000000000000000ffffffffffff9166d9d0d2ba159d7b7d2b5fb20ae83882a7d70539bec8ae070f207f3b465a560504b507df320dce2ac31ff1ca7ac1b3558113e6b141e108fa888a399d820092572b9cb84f98c624e415d194e4d2404d8ba5035c174275987d474cf9b3e063d63874d6dac96391cf4199d6f3f0a0c0339c075fbc3590c2d523221474eb68113a11ccc9baed9884af"], 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000280)=@ethtool_stats}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000015c0)) socket$packet(0x11, 0x3, 0x300) r7 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r7}) eventfd2(0x8001, 0x0) 10m45.488814095s ago: executing program 5 (id=6171): syz_emit_ethernet(0x76, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x40, 0x3a, 0xfe, @local, @mcast2, {[@dstopts={0x2e, 0x0, '\x00', [@jumbo]}], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081321", 0x9, 0xff, 0x0, @mcast1, @mcast2}}}}}}}, 0x0) 10m45.273630283s ago: executing program 5 (id=6172): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd3b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x419a6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x4c}}, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00070000000000850a200100000000000500000014000500200100000000000000000100000000001c00090018"], 0x4c}}, 0x40000) 10m45.053419494s ago: executing program 5 (id=6173): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xfffffffffffffffa}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000180), &(0x7f00000003c0)="6a6d5d70724331f92e831a0ae3d35ad485770ad851c9480195600fabbdef07cc7372e92384484a8530a0b246b7af40fd644cbf48d7742cbe260b75c533351c8232ea45e7e88a461c320b9b516805d2774c009b554216aa12b5e1f14b8b96ab23b42d4d269a96092ad89c8bc032274a8ce8b511f953ad01586a594322ebbcfe4ea60ee201a28c3264cf7d097721a2dfd878f120d7258163b1e3776cdb2e6e18362efbbb0473342773b06e96cab96ecdf7c1ba37917c6da446389be9fd898adbc916de9f4a1164a2768a41", 0xca, r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xe0000014}) fcntl$setpipe(r7, 0x407, 0x7ff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0x40c50) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000019200)={r6, @in={{0x2, 0x4e21, @empty}}, 0x2, 0xcb}, 0x90) r11 = socket(0xa, 0x1, 0x0) ioctl(r11, 0x8916, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, 0xd1e, 0x9c9, 0x9, 0x4, 0x9, 0x5, 0x9}, 0x9c) 10m44.206917181s ago: executing program 5 (id=6175): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f00000005c0)="0dc86340642df4650e171b39ffabd0f4cedfa74274f36ff577a53f60d4c270f9d64369cd4338633122b76aa6a313d987d5f37ad3bd96af470acd4611311da053570493c971fb03068bb570b34aa694c9b24354266ab4b9a7a0a0f180e0de062368559937719273d2cf4fc8a1cd5c01096c478063c106088572b02e7e6d8a20130a31d660cac5fa2d388561c1dfbabce3a6dde16535facc0e36a82d5a1f723e0e0ea98e393fff4d2f7f0cf1", 0xab}, {&(0x7f0000000680)="38edd000ffd8c1139ab39183c2471c6489720fc7380b44640cbe31ded58236f627be8b34b0b3ff98a0e2777efc756b47837bb2d9837149632cd1f2540ce88957f104248113da9ef38612e9aa65b37c88323fd45129e98c271a92f576bb8c1285ba251dfff87ea884b04ba1492f0a6d51f6a498652de3ee1055da302266da074f80147ce852a1bda6a24619f7eb84a9572d3bae5d80a0f754c78b67fde292740e3c5be8c87f09af1e38ed052066ea03f36f8b55cefea337e84c57c377f6905b27e6ebc77ecc735c5cb8b1a1cf", 0xcc}, {&(0x7f0000000780)="08f3b253baebed58db6c9b2740cd4c8694834fee60afa0339f37b48f9bb430c3c42bd8e7d428ccccea49fd73e6164831ed355003c1d1240413e644c037c56b241ff2494423fbd6798a030b", 0x4b}, {&(0x7f0000000800)="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", 0xe3f}], 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000009c0)=0xc43, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ccba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa", 0x8c}], 0x1}}], 0x1, 0x4000001) shutdown(r1, 0x1) 10m29.096331797s ago: executing program 34 (id=6175): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f00000005c0)="0dc86340642df4650e171b39ffabd0f4cedfa74274f36ff577a53f60d4c270f9d64369cd4338633122b76aa6a313d987d5f37ad3bd96af470acd4611311da053570493c971fb03068bb570b34aa694c9b24354266ab4b9a7a0a0f180e0de062368559937719273d2cf4fc8a1cd5c01096c478063c106088572b02e7e6d8a20130a31d660cac5fa2d388561c1dfbabce3a6dde16535facc0e36a82d5a1f723e0e0ea98e393fff4d2f7f0cf1", 0xab}, {&(0x7f0000000680)="38edd000ffd8c1139ab39183c2471c6489720fc7380b44640cbe31ded58236f627be8b34b0b3ff98a0e2777efc756b47837bb2d9837149632cd1f2540ce88957f104248113da9ef38612e9aa65b37c88323fd45129e98c271a92f576bb8c1285ba251dfff87ea884b04ba1492f0a6d51f6a498652de3ee1055da302266da074f80147ce852a1bda6a24619f7eb84a9572d3bae5d80a0f754c78b67fde292740e3c5be8c87f09af1e38ed052066ea03f36f8b55cefea337e84c57c377f6905b27e6ebc77ecc735c5cb8b1a1cf", 0xcc}, {&(0x7f0000000780)="08f3b253baebed58db6c9b2740cd4c8694834fee60afa0339f37b48f9bb430c3c42bd8e7d428ccccea49fd73e6164831ed355003c1d1240413e644c037c56b241ff2494423fbd6798a030b", 0x4b}, {&(0x7f0000000800)="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", 0xe3f}], 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000009c0)=0xc43, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ccba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa", 0x8c}], 0x1}}], 0x1, 0x4000001) shutdown(r1, 0x1) 1m27.322052495s ago: executing program 2 (id=8600): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {0x0, 0x600}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x1, 0x9, 0x155}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m26.594959969s ago: executing program 2 (id=8605): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0xfffffffc, &(0x7f0000006680)=0xfe) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000a40)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a394a20c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610", 0xd0}], 0x1) getdents(r0, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000b77d18bda271d91000000000010902240001000000000904000002030002000921040000012205000905810300000c00006eb21d3dd4c6a1272fcbfc27a27c0e28e5c76c4b605d9a0800f252c07180"], 0x0) 1m23.507738883s ago: executing program 2 (id=8615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000bb0200bbbbbb080045000028000000010000ffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5876e40402c0516940a0000000109022400010000000009040000025883b200090509000000000000da0c940439d43e5f80e2784e5785014056000000"], 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x8100, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'wg1\x00', @multicast}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r8) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="f365670f01dc66b9c00d000066b80018000066ba000000000f3066b8010000000f01d912160e002e0f79380f32ba4000b03eee660fdc5c5466b9530200000f321d0000", 0x43}], 0x17, 0x3, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800a000100696e6e657200000040000280080004400000001a0800034000000010080002400000008f08000140000000001c000580170001007061796c6f61641a0c00028008000740000003ff0900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m19.365328725s ago: executing program 2 (id=8626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) recvmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/109, 0x6d}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fstatat64(0xffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xd165b53c21a035e1) syz_emit_ethernet(0x32, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000008d700df2ff58a1c20852ae8353162ab035c83328a65546eeacf2618b84ad3e06379b8bda6938ed32113636b1cdb27824fe10a67abcbed8c97d26b292f4779e86546ae840124ec4bb7cfd0d8970f7af7909d3547a8bae26329566fd0846a0b203", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1m19.023321468s ago: executing program 2 (id=8629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0xc805) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m18.04721577s ago: executing program 2 (id=8632): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x4201, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x2001, 0x3, 0x1}, 0x57) (async) r1 = socket(0x1e, 0x3, 0x5) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 1m17.263777858s ago: executing program 35 (id=8632): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x4201, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x2001, 0x3, 0x1}, 0x57) (async) r1 = socket(0x1e, 0x3, 0x5) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 10.215534307s ago: executing program 0 (id=8923): open(&(0x7f0000000000)='./file0\x00', 0x5a803, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400010000100009042e00027e3a11000905020200000100000905820220"], 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) unshare(0x22020600) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x37}, 0x0, 0x160, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x34}, 0xc, [0x7, 0xa, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0x10, 0x6, 0x7, 0xe4, 0xff, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x7, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x89, 0x79, 0x558e0d31, 0x5, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x803, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x8, 0xf9a2, 0x80000001, 0x97, 0x0, 0x2, 0x10000002, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8, 0x5, 0x2, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b396, 0x400000, 0x0, 0x4, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0x8, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x40007fff, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x4, 0x5, 0xfffffff9, 0x200004, 0xffd, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0xb, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x20006, 0x7, 0x7, 0x15, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100007, 0x8000, 0x3fd, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x2, 0x0, 0x2, 0x2, 0xb, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xf66, 0x10000, 0x1, 0x2dd, 0x1], [0xa772, 0x1, 0x5, 0x1, 0xbfc, 0x8, 0x7c81, 0x9, 0xfffffff8, 0x40, 0x101, 0x5, 0x80000000, 0x7, 0x3, 0xa1c, 0x81, 0x6, 0x9d8a, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x10c, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0xfffffffe, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0x10, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x6, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r2, 0x27e2, 0xda80, 0x24, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0x2138, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000540)={0x4, 0x3, 0x0, "57449de0e06b1664000000000000000000000000703400", 0x3132564e}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x70, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x240000d0) chmod(&(0x7f0000000040)='./file0\x00', 0x48) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800090300000000000000000a00"], 0x24}}, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x20000, 0x11) 8.250920667s ago: executing program 0 (id=8933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000340), 0x4) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888000000002000128009700000000010000280000000000500090000000000"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xa0000) syz_io_uring_setup(0x1645, &(0x7f0000000580)={0x0, 0xc, 0x20000, 0x0, 0xc6, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) unshare(0x20020000) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000200)) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) 6.869058796s ago: executing program 0 (id=8937): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffff4, 0x0, 0xb4a, 0x20000000000005, 0x8, 0x0, 0x3}, 0x0) io_setup(0x8, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000140)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) writev(r3, &(0x7f0000001440)=[{&(0x7f00000011c0)="e4da83e7669a5fe47526913280214270d617a75a2b4b414cc8f93b43c3cf94db0f85de5658c87f63556e2e7130e57268b5c063cc63fe8a3e9c4d06a5433520592a7b5a51a1f6ac5be8b18ec4cc813f29256ac567da958c30bd2404cf0841ce56e647be51a7b48ee818aa0ab4d09c8c4fcc59422f26a424d9d3ad91275f1354d8bd30968ae4b60e8abf57267d3837b5c1d3afb595b1feb6a8a97c8a15244834ca5c24ce73781f944b50b3599eb69a3b661131f1f99d8e232ef8ababfef560bcdcc23e4f7276fd0cacba6d52bf5f", 0xcd}], 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x613000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000001080)=0xfd9) socket(0x27, 0x3, 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r5, 0x0, &(0x7f00000000c0)) syz_open_dev$video4linux(&(0x7f0000000300), 0x599cb702, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000001180)={0x0, 0x4, 0x2006}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000001140)=ANY=[@ANYRES32=r1], 0x50e) setns(0xffffffffffffffff, 0x8020000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 6.796461075s ago: executing program 7 (id=8938): openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) unshare(0x28000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000080)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda6, 0x22, 0x8, 0x0, 0x0}}, 0x10) keyctl$reject(0x13, 0x0, 0x99d8, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002580)=""/4108, 0x100c}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x0, 0x400) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x22, {0x2, 0x4e20, @empty}, 'bond_slave_0\x00'}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 6.605529155s ago: executing program 7 (id=8939): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') socket$rds(0x15, 0x5, 0x0) 5.248765946s ago: executing program 0 (id=8946): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0xfffffffc, &(0x7f0000006680)=0xfe) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000a40)="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", 0x193}], 0x1) getdents(r0, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000b77d18bda271d91000000000010902240001000000000904000002030002000921040000012205000905810300000c00006eb21d3dd4c6a1272fcbfc27a27c0e28e5c76c4b605d9a0800f252c07180"], 0x0) 5.123022542s ago: executing program 6 (id=8947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000340), 0x4) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888000000002000128009700000000010000280000000000500090000000000"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xa0000) syz_io_uring_setup(0x1645, &(0x7f0000000580)={0x0, 0xc, 0x20000, 0x0, 0xc6, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) unshare(0x20020000) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000200)) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) 4.646525889s ago: executing program 4 (id=8948): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0xfffffffc, &(0x7f0000006680)=0xfe) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000a40)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a394a20c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5", 0x1a0}], 0x1) getdents(r0, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000fffd05000100070000000900020073797a30000000000c00078008001240000000090500050002000000050004000000000013000300686173683a6e65742c69666163650000464d45449e275127c2c903e10c5c513a01736400ee6401fd38949db056259abdd5bd8bf3452ce1f5964e7b9f9503b4228928264560c28440ac99df2d31b4db3b55239b21d070f55927587245e442d978687c6cd6bee7a0e5f4bfe14ce49cd2a0793174d0bb3a9e5a2e72df42ae5398076fbb406393d126ad37d24cfd75085fa604c330c23a3790096b591da3400c03529b25361fe167aa12fa26433a2500bb059d07141d9f6d76ec481a506a73b199"], 0x58}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) 4.062304861s ago: executing program 4 (id=8950): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb0000000000000000000000000000040000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x300, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 3.107528014s ago: executing program 6 (id=8951): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f00000000c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff6}}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r1, &(0x7f0000003740)=[{&(0x7f0000001440)="02", 0x1}], 0x1) 2.995087717s ago: executing program 4 (id=8952): r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) ftruncate(r0, 0xdcb) copy_file_range(r0, &(0x7f0000000100)=0xb76, r1, 0x0, 0x2aad109b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40018) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01030000000000001c0012000c000100626f6e64000000000c000200080001000535cb791cf3e5b70232d790d9c04fe43a7bccf8c1da7ccaeb2139e26949091daef3a65ea915fa328ea3e70c9110ba58f2187888ae4d7776b4df2cbc2dc561eaad02975097e535fbd5a237175c2182cb970e188b27e6d601948c2d7647f30ac62ae107bffbd46fb6a6fd4ee99f79ae08ccfaad4753ddce7c44aa8dcefdfec4028ee61b21deb786b416246d65017099d8891d4c54f9b40e58f70a327f816bdf38b626834d53c43f4d7428c476"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x639) readv(r8, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffffff7, @local, 0xe1f7}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x1, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xe, 0x5}}]}}]}}]}}, 0x0) 2.958330176s ago: executing program 7 (id=8953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000001500000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c00"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.845503377s ago: executing program 8 (id=8954): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x8, 0x0, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6db6ec49e3ab5510, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cc09}]}}]}, 0x44}}, 0x400c084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6db6ec49e3ab5510, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cc09}]}}]}, 0x44}}, 0x400c084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080), &(0x7f00000001c0)) (async) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000080)={0xf0f001, 0x1}) listen(r10, 0x0) r12 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r12, 0x1, 0x5004) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r12, 0x1, 0x5004) accept4(r10, 0x0, 0x0, 0x80800) 2.759056996s ago: executing program 6 (id=8955): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) dup3(0xffffffffffffffff, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.746355834s ago: executing program 7 (id=8956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xc0, 0x1b, 0x1, 0x300, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}}, 0xc0}}, 0x0) 2.686127655s ago: executing program 7 (id=8957): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffff4, 0x0, 0xb4a, 0x20000000000005, 0x8, 0x0, 0x3}, 0x0) io_setup(0x8, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000140)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) writev(r3, &(0x7f0000001440)=[{&(0x7f00000011c0)="e4da83e7669a5fe47526913280214270d617a75a2b4b414cc8f93b43c3cf94db0f85de5658c87f63556e2e7130e57268b5c063cc63fe8a3e9c4d06a5433520592a7b5a51a1f6ac5be8b18ec4cc813f29256ac567da958c30bd2404cf0841ce56e647be51a7b48ee818aa0ab4d09c8c4fcc59422f26a424d9d3ad91275f1354d8bd30968ae4b60e8abf57267d3837b5c1d3afb595b1feb6a8a97c8a15244834ca5c24ce73781f944b50b3599eb69a3b661131f1f99d8e232ef8ababfef560bcdcc23e4f7276fd0cacba6d52bf5f", 0xcd}], 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x613000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000001080)=0xfd9) socket(0x27, 0x3, 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r5, 0x0, &(0x7f00000000c0)) syz_open_dev$video4linux(&(0x7f0000000300), 0x599cb702, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000001180)={0x0, 0x4, 0x2006}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000001140)=ANY=[@ANYRES32=r1], 0x50e) setns(0xffffffffffffffff, 0x8020000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 2.500709827s ago: executing program 6 (id=8958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x5c, 0x2e, 0x800, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x4, 0xfff1}, {0xfff1, 0x2}}, [{0x8, 0xb, 0xf2d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 2.202639109s ago: executing program 6 (id=8959): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xb9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/160, 0xa0}, {&(0x7f00000006c0)=""/126, 0x7e}], 0x2, &(0x7f0000000940)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/174, 0xae}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000b00)=""/60, 0x3c}], 0x3}, 0x7}, {{&(0x7f0000000b80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/201, 0xc9}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/126, 0x7e}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x4, &(0x7f0000000ec0)=""/166, 0xa6}, 0x4}, {{&(0x7f0000000f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000033c0), 0x0, &(0x7f0000003400)}}, {{&(0x7f0000003440)=@rc={0x1f, @none}, 0x80, &(0x7f0000004800)=[{&(0x7f00000034c0)=""/221, 0xdd}, {&(0x7f00000035c0)=""/16, 0x10}, {&(0x7f0000003600)=""/199, 0xc7}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/74, 0x4a}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000004780)=""/85, 0x55}], 0x7}, 0x2}, {{&(0x7f0000004840)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000048c0)=""/7, 0x7}, {&(0x7f0000004900)=""/155, 0x9b}, {&(0x7f0000008bc0)=""/194, 0xc2}], 0x3, &(0x7f0000004a00)=""/89, 0x59}, 0x5}, {{&(0x7f0000004a80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004b00)=""/104, 0x68}, {&(0x7f0000007100)=""/241, 0xf1}], 0x2, &(0x7f0000005d40)=""/99, 0x63}, 0x1}, {{&(0x7f0000005dc0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000004cc0)=""/36, 0x24}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/209, 0xd1}], 0x3, &(0x7f0000006f80)=""/17, 0x11}, 0xfffffffd}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20040010) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0xb522855c690fc04f}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x7ffd, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xc4}}, 0x20050890) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x5b30, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000140)=""/158) recvmmsg(r2, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/38, 0x26}, 0x4}, {{&(0x7f0000004b80)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003400)=[{&(0x7f0000007200)=""/235, 0xeb}, {&(0x7f0000007300)=""/222, 0xde}, {&(0x7f0000004c00)=""/97, 0x61}, {&(0x7f00000002c0)=""/53, 0x35}, {0xfffffffffffffffe}, {&(0x7f0000007400)=""/162, 0xa2}], 0x6, &(0x7f00000074c0)=""/114, 0x72}, 0x5}, {{&(0x7f0000007540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000008980)=[{&(0x7f00000075c0)=""/75, 0x4b}, {&(0x7f0000007640)=""/26, 0x1a}, {&(0x7f0000007680)=""/89, 0x59}, {&(0x7f0000007700)=""/240, 0xf0}, {&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/180, 0xb4}, {&(0x7f00000088c0)=""/155, 0x9b}], 0x7, &(0x7f00000089c0)=""/177, 0xb1}, 0x1}], 0x3, 0x45833af92e4b38ff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40400d4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) 2.128453528s ago: executing program 0 (id=8960): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0xfffffffc, &(0x7f0000006680)=0xfe) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000a40)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a394a20c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5", 0x1a0}], 0x1) getdents(r0, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) 1.668958783s ago: executing program 6 (id=8961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000340), 0x4) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888000000002000128009700000000010000280000000000500090000000000"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xa0000) syz_io_uring_setup(0x1645, &(0x7f0000000580)={0x0, 0xc, 0x20000, 0x0, 0xc6, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) unshare(0x20020000) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000200)) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) 1.52698434s ago: executing program 8 (id=8962): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x2e288501978821b, 0x80) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x18ca2382, 0x0) r5 = dup3(r1, r0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x10}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x97dc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) 892.305736ms ago: executing program 8 (id=8963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 720.787164ms ago: executing program 8 (id=8964): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4008804) 523.0791ms ago: executing program 7 (id=8965): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r3, @ANYRESHEX], 0x0) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300040ef", @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf25110000001400018008000b0073697000060001000a0000000800050002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) stat(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xe4) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x40000, &(0x7f0000000800)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@obj_type}, {@euid_lt={'euid<', r10}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000900)="1cc8aa4a5af4806e05b27a60cd8612fb35c2a3183d67fc5ae0ffb8cc51240570ef8e47810458336183b4fcec2772") connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x1010, r2, 0xeb000) sendmmsg$sock(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 455.167573ms ago: executing program 8 (id=8966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000001500000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 423.008842ms ago: executing program 4 (id=8967): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'vxcan1\x00', 0x4}) 211.460296ms ago: executing program 4 (id=8968): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) dup3(0xffffffffffffffff, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 173.400317ms ago: executing program 0 (id=8969): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb4}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x400) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}]}}}]}]}], {0x14}}, 0xf4}}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x4ad1]}, &(0x7f0000000440), 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000780)=""/243}, 0x20) syz_open_dev$usbmon(&(0x7f00000000c0), 0xcf, 0x1ed000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0xffffffffffffffd7, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400) ioctl$HIDIOCGUCODE(r5, 0xc018480d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf2, 0x3, 0xb2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xff, 0xf3}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0x1, 0x2, 0x10, 0xf}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x3, 0x3ff, 0x10}]}, 0x9, [{0xd8, &(0x7f00000001c0)=@string={0xd8, 0x3, "c11868a4b625efccf0c20c9520adec7d29f39ea383a238dcbaf855f9973c227e5bb3d66286112817ff522cb3e173dc14c24820dfd9f456678e72e1326dced403f08beb10fe47d7a9a37547c501ceb511426b719a8b03cde6b4349fb4fb178e4d5b86f15e5b983ae8e20907431e785da9328a0017397f9cec80c6296b7c75b60ffcf929634add4ec96c7212cf87fe0981ddf305e4769e0657744f4d65ba4e4238c0bb015c8851492f42fa50844778c4885ecb40b06645133c2ca5bdbf7cd55edb3578de97cfa9baf8b4cdf6838bf3813639870b8f1e02"}}, {0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "03e26969ce00f95172eb195627de519635b08e9d45f4aac2edcf8e297600d79e60cf"}}, {0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="3f034dc2232fc101896b10b0367ab0b6a5dc15ac2d357fda331b0100d61e9abef68c61e2f64f912eacbe4f9b3ac5eac451d4e51581f0"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x810}}, {0xe, &(0x7f00000003c0)=@string={0xe, 0x3, "62877548e8542097b4c385e3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0xa8, &(0x7f0000000440)=@string={0xa8, 0x3, "8ace02f6ff436f303dd3da13a46efae20665b4e44e98936b9be64a8670a9e5d20aa19dc803cc0cd6ca1ba94d8fc6f266fcb5254c93c7a31a8cff0cedc45ecd998e577658f2c1421f60abadaf00285263814e6786277f79a1568c2aa0a5ebc9cc473aaee2ba58ea5401a3281e53e7da9725a8e19deab9bc33e0ddd4e079e256cb27cac21640ce9fe323e99b25ca3b5a199e78aa49a40c55cc0b4782b0d7cb0969fbf4df654b84"}}, {0xd6, &(0x7f0000000500)=@string={0xd6, 0x3, "7f890f2fae5b5f760d23e0bb4965af5d0d5623e23e67ee3b4c2aaf5ca31e01bb9e3c579dca16929db0632aa2784a4c63c7a8e79cc1ed7c4466f98bb67ba4b4d5a26586ad7155e59163771e9a13d23a8b3e5e5dedaf93f8fc23bd76dcee88e3ad94a880a803c87637bb7f1ff3e113b3df0cb7cd9dc4f4794288323f026ef6f2ac0f6286c2d598b47e7db28a4bedecafbf7110db01a725d4cb8a283d1fb3b418d3d7b59139a5939a5c0c889b5e33dcab6378946334c8075e98ddb5e2ae71d8fceec71282aef30debbf9857144558018d813f159e19"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x28}}]}) 161.220443ms ago: executing program 8 (id=8970): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x4, 0x7fff0000}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) unshare(0x24060400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x9}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x10, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x4, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x80004, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40008, 0xaf, 0x5, 0x6, 0x7, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x40, [0x9, 0x2, 0x18, 0x2, 0x2, 0x3, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffdfffb, 0x2004, 0x3, 0x0, 0xf250, 0x1, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0x4, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xfffffe01, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x3, 0x4, 0x4008, 0x9, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x5, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x400, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x80000000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x1, 0x100fdfd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x8000, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/41, 0x29}], 0x2) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0xec, &(0x7f00000000c0)=0x0) r10 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x121240) io_submit(r9, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, r10, 0x0, 0x0, 0x6, 0x0, 0x3}]) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@host, 0x2}, @any, 0x6, 0x5, 0x80000000006, 0x81, 0x33a41516, 0x2800, 0x80000001}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r12, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r12, 0x80104592, &(0x7f0000000180)={0x0, 0xa3, &(0x7f0000000740)="7fa88fedbcb48ef29ef3bfde224dda89d97f114526a05860b5e73918a6e963aa70af984a86af31643e7fbdcf76b5686d68937edf627bfe10c60574736dabfe259f959d0f89e5a28c1a618724a51596ddcda2e66a497e61cf4b53a25556cb607d382cb01606b2adc9b08a4ada029bd4957d0cbe4696516e3e27d36d8753dfdf874eb7d3c1f72583ab29bec6c654c1cbecbaa98447adf1f58bd0d0fbc453494360cdeb97"}) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 0s ago: executing program 4 (id=8971): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x20000000001005, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x430080) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.8651'. [ 2138.802445][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2138.848211][ T4388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8651'. [ 2138.907731][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2139.018072][ T4390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8652'. [ 2139.126538][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 2139.161155][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2139.190568][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.197786][T10935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2139.306179][ T5841] Bluetooth: hci4: command tx timeout [ 2139.317312][ T4395] delete_channel: no stack [ 2139.428140][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2139.474117][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.481304][T10925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.509772][ T4332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2139.541098][ T4332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2139.578308][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2139.734240][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2139.784420][ T4332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2139.883673][ T5841] Bluetooth: hci2: command tx timeout [ 2139.918979][ T4332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2140.224541][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2140.409811][ T4309] veth0_vlan: entered promiscuous mode [ 2140.444478][ T4309] veth1_vlan: entered promiscuous mode [ 2140.539578][ T4412] input: syz1 as /devices/virtual/input/input129 [ 2140.584852][ T4309] veth0_macvtap: entered promiscuous mode [ 2140.668580][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.685994][ T4309] veth1_macvtap: entered promiscuous mode [ 2140.729773][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 2140.769235][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2140.785066][ T4415] FAULT_INJECTION: forcing a failure. [ 2140.785066][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.808837][ T4415] CPU: 0 UID: 0 PID: 4415 Comm: syz.7.8657 Not tainted syzkaller #0 PREEMPT(full) [ 2140.808864][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2140.808877][ T4415] Call Trace: [ 2140.808886][ T4415] [ 2140.808894][ T4415] dump_stack_lvl+0x189/0x250 [ 2140.808926][ T4415] ? __pfx____ratelimit+0x10/0x10 [ 2140.808950][ T4415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2140.808976][ T4415] ? __pfx__printk+0x10/0x10 [ 2140.809002][ T4415] ? __pfx___might_resched+0x10/0x10 [ 2140.809023][ T4415] ? fs_reclaim_acquire+0x7d/0x100 [ 2140.809057][ T4415] should_fail_ex+0x414/0x560 [ 2140.809091][ T4415] should_failslab+0xa8/0x100 [ 2140.809112][ T4415] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2140.809139][ T4415] ? vm_area_dup+0x2b/0x680 [ 2140.809162][ T4415] vm_area_dup+0x2b/0x680 [ 2140.809185][ T4415] __split_vma+0x1a9/0xa00 [ 2140.809208][ T4415] ? mas_next_slot+0xc20/0xcf0 [ 2140.809237][ T4415] ? __pfx___split_vma+0x10/0x10 [ 2140.809268][ T4415] ? mas_find+0xb0e/0xd30 [ 2140.809297][ T4415] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 2140.809337][ T4415] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2140.809358][ T4415] ? __page_table_check_zero+0x406/0x530 [ 2140.809382][ T4415] ? __page_table_check_zero+0xba/0x530 [ 2140.809413][ T4415] ? post_alloc_hook+0x253/0x2a0 [ 2140.809450][ T4415] do_vmi_align_munmap+0x268/0x440 [ 2140.809488][ T4415] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 2140.809542][ T4415] do_vmi_munmap+0x253/0x2e0 [ 2140.809569][ T4415] do_munmap+0xcf/0x120 [ 2140.809595][ T4415] ? __lock_acquire+0xab9/0xd20 [ 2140.809614][ T4415] ? __pfx_do_munmap+0x10/0x10 [ 2140.809658][ T4415] mremap_to+0x2c8/0x790 [ 2140.809683][ T4415] ? mtree_load+0x101/0x6f0 [ 2140.809708][ T4415] ? __pfx_mremap_to+0x10/0x10 [ 2140.809728][ T4415] ? may_expand_vm+0x1b6/0x2f0 [ 2140.809758][ T4415] ? check_prep_vma+0x8bb/0xb00 [ 2140.809789][ T4415] __se_sys_mremap+0xd45/0xfb0 [ 2140.809828][ T4415] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2140.809867][ T4415] ? __pfx___se_sys_mremap+0x10/0x10 [ 2140.809895][ T4415] ? fput+0xa0/0xd0 [ 2140.809916][ T4415] ? ksys_write+0x22a/0x250 [ 2140.809941][ T4415] ? exc_page_fault+0x82/0x100 [ 2140.809966][ T4415] ? __pfx_ksys_write+0x10/0x10 [ 2140.809995][ T4415] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2140.810022][ T4415] ? lockdep_hardirqs_on+0x9c/0x150 [ 2140.810043][ T4415] ? __ia32_sys_mremap+0x20/0xc0 [ 2140.810067][ T4415] __do_fast_syscall_32+0xb6/0x2b0 [ 2140.810094][ T4415] ? lockdep_hardirqs_on+0x9c/0x150 [ 2140.810122][ T4415] do_fast_syscall_32+0x34/0x80 [ 2140.810148][ T4415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2140.810172][ T4415] RIP: 0023:0xf70cd539 [ 2140.810189][ T4415] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2140.810206][ T4415] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 2140.810228][ T4415] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 2140.810242][ T4415] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 2140.810255][ T4415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2140.810266][ T4415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2140.810278][ T4415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2140.810306][ T4415] [ 2141.208059][T10935] net_ratelimit: 2 callbacks suppressed [ 2141.208079][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2141.227574][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2141.296003][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.303239][T10925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2141.320921][T10935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.330514][T10935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.340339][T10935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.363622][ T5841] Bluetooth: hci4: command tx timeout [ 2141.389923][T10935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.409974][ T1993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.417333][ T1993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.480123][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2141.559059][ T1993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.580572][ T1993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.644351][T10925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.665798][T10925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.861107][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2141.897140][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2141.917581][ T5841] Bluetooth: hci2: command tx timeout [ 2141.924193][ T4429] input: syz1 as /devices/virtual/input/input130 [ 2141.978839][ T4332] veth0_vlan: entered promiscuous mode [ 2141.993016][ T4332] veth1_vlan: entered promiscuous mode [ 2142.038989][ T4332] veth0_macvtap: entered promiscuous mode [ 2142.087557][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2142.103138][ T4434] batman_adv: batadv0: Adding interface: vlan2 [ 2142.116824][ T4434] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.148688][ T4434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2142.148799][ T4434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2142.148808][ T4434] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 2142.157458][ T4332] veth1_macvtap: entered promiscuous mode [ 2142.166254][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2142.247436][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2142.265519][T30123] IPVS: starting estimator thread 0... [ 2142.281318][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2142.333370][ T1993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.370697][ T1993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.390978][ T1993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.401521][ T4438] IPVS: using max 34 ests per chain, 81600 per kthread [ 2142.447675][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2142.455515][ T1993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.467400][ T5837] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2142.482982][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8665'. [ 2142.520221][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8665'. [ 2142.634274][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2142.757045][ T5837] usb 5-1: device descriptor read/64, error -71 [ 2142.768335][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2142.815676][T10935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2142.837126][T30121] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2142.878250][T10935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2143.007124][ T5837] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2143.018986][T30121] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2143.028890][T30121] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2143.059785][T30121] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2143.108895][T30121] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2143.124717][T30121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.137076][ T5837] usb 5-1: device descriptor read/64, error -71 [ 2143.144243][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2143.184798][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2143.187747][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2143.192322][T30121] usb 1-1: Product: syz [ 2143.235082][T30121] usb 1-1: Manufacturer: syz [ 2143.251185][ T5837] usb usb5-port1: attempt power cycle [ 2143.315116][T30121] usb 1-1: SerialNumber: syz [ 2143.323514][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2143.366649][T30121] hub 1-1:1.0: bad descriptor, ignoring hub [ 2143.407902][T30121] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2143.441933][ T5841] Bluetooth: hci4: command tx timeout [ 2143.546878][T30121] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2143.647496][ T5837] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2143.758910][ T5837] usb 5-1: device descriptor read/8, error -71 [ 2143.997163][ T5837] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2144.190306][ T5826] IPVS: starting estimator thread 0... [ 2144.205509][ T4460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8678'. [ 2144.287717][ T5837] usb 5-1: device descriptor read/8, error -71 [ 2144.302794][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8678'. [ 2144.357204][ T4462] IPVS: using max 50 ests per chain, 120000 per kthread [ 2144.401328][ T5837] usb usb5-port1: unable to enumerate USB device [ 2144.427016][T30129] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2144.487551][ T4424] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 2144.579307][T30129] usb 9-1: device descriptor read/64, error -71 [ 2144.847009][T30129] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2145.083541][T30129] usb 9-1: device descriptor read/64, error -71 [ 2145.139960][ T24] usb 1-1: USB disconnect, device number 16 [ 2145.147845][ T24] usblp0: removed [ 2145.207626][T30129] usb usb9-port1: attempt power cycle [ 2145.488502][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2145.488520][ T30] audit: type=1326 audit(1761487202.365:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2145.656628][ T30] audit: type=1326 audit(1761487202.395:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2145.657545][T30129] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2145.774866][T30129] usb 9-1: device descriptor read/8, error -71 [ 2145.864106][ T30] audit: type=1326 audit(1761487202.395:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.047392][T30129] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2146.048263][ T30] audit: type=1326 audit(1761487202.395:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.079717][T30129] usb 9-1: device descriptor read/8, error -71 [ 2146.102319][ T30] audit: type=1326 audit(1761487202.395:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.146570][ T30] audit: type=1326 audit(1761487202.395:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.176352][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8672'. [ 2146.187453][T30129] usb usb9-port1: unable to enumerate USB device [ 2146.248321][ T1993] net_ratelimit: 17 callbacks suppressed [ 2146.248342][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2146.267648][ T30] audit: type=1326 audit(1761487202.395:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.342019][ T30] audit: type=1326 audit(1761487202.395:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.377146][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2146.415374][ T30] audit: type=1326 audit(1761487202.395:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.506612][ T30] audit: type=1326 audit(1761487202.395:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2146.542066][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.078720][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.179015][ T4492] netlink: 232 bytes leftover after parsing attributes in process `syz.8.8677'. [ 2147.194536][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.288266][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8677'. [ 2147.401795][ T4494] @: renamed from vlan0 [ 2147.607708][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.718038][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.837493][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2147.876464][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8681'. [ 2147.944205][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8681'. [ 2147.975640][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2148.098598][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2149.539955][ T4512] bond1 (unregistering): Released all slaves [ 2150.110799][ T4539] delete_channel: no stack [ 2150.527342][T30129] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2150.679297][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2150.679316][ T30] audit: type=1326 audit(1761487207.555:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2150.893230][ T30] audit: type=1326 audit(1761487207.665:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2150.950800][ T30] audit: type=1326 audit(1761487207.825:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2150.993072][T30129] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2151.003765][ T30] audit: type=1326 audit(1761487207.825:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.005965][T30129] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2151.050288][T30129] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2151.072084][ T30] audit: type=1326 audit(1761487207.865:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.165321][T30129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.180992][ T30] audit: type=1326 audit(1761487207.865:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.204429][ T4539] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2151.217521][T30129] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2151.287075][ T1993] net_ratelimit: 16 callbacks suppressed [ 2151.287098][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2151.287366][ T4554] netlink: 'syz.7.8694': attribute type 2 has an invalid length. [ 2151.308589][ T30] audit: type=1326 audit(1761487207.865:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.397726][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2151.408498][ T4554] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8694'. [ 2151.421568][ T30] audit: type=1326 audit(1761487207.865:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.454830][ T30] audit: type=1326 audit(1761487207.865:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.529904][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2151.660110][ T30] audit: type=1326 audit(1761487207.865:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.8.8689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 2151.682206][ C1] vkms_vblank_simulate: vblank timer overrun [ 2151.729839][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2151.895635][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2151.944904][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2152.112366][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2152.124842][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.137127][ T10] usb 1-1: Product: syz [ 2152.141433][ T10] usb 1-1: Manufacturer: syz [ 2152.146372][ T10] usb 1-1: SerialNumber: syz [ 2152.159836][ T10] usb 1-1: config 0 descriptor?? [ 2152.170692][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2152.297435][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2152.417283][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2152.531078][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2152.647548][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2153.004504][ T10] usb 1-1: USB disconnect, device number 17 [ 2153.144545][T30121] usb 9-1: USB disconnect, device number 6 [ 2153.328006][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8700'. [ 2153.383317][ T4567] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2153.406522][ T4567] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2153.414745][ T4567] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.476115][ T4567] batman_adv: batadv0: Interface activated: ip6gretap1 [ 2153.498404][ T4572] syzkaller0: entered promiscuous mode [ 2153.503886][ T4572] syzkaller0: entered allmulticast mode [ 2153.927131][T30129] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2154.118688][T30129] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 2154.136308][T30129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 2154.173774][T30129] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 2154.200046][T30129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.269061][T30129] usb 1-1: config 0 descriptor?? [ 2154.437387][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2154.489070][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.513766][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.525346][ T4603] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8709'. [ 2154.538727][ T4603] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8709'. [ 2154.622987][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 2154.631300][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2154.650737][ T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2154.664807][ T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2154.679795][ T10] usb 9-1: Product: syz [ 2154.686700][ T10] usb 9-1: Manufacturer: syz [ 2154.695084][ T10] usb 9-1: SerialNumber: syz [ 2154.708839][ T10] usb 9-1: config 0 descriptor?? [ 2154.716588][T30129] usbhid 1-1:0.0: can't add hid device: -71 [ 2154.744648][ T4590] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2154.768260][T30129] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2154.783898][T30129] usb 1-1: USB disconnect, device number 18 [ 2155.179438][ T5826] usb 9-1: USB disconnect, device number 7 [ 2155.512938][ T4621] xt_connbytes: Forcing CT accounting to be enabled [ 2155.524310][ T4621] Cannot find add_set index 4 as target [ 2156.417271][ T1993] net_ratelimit: 23 callbacks suppressed [ 2156.417292][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2156.607835][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2156.717303][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2156.869367][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2156.988712][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2157.109330][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2157.237845][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2157.378053][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2157.617526][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2157.741466][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2158.454497][T30121] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2158.517375][T30129] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2158.629203][T30121] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2158.641695][T30121] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2158.661030][T30121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.677123][T30129] usb 1-1: Using ep0 maxpacket: 32 [ 2158.684112][T30121] usb 5-1: config 0 descriptor?? [ 2158.686237][T30129] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2158.699767][ T5826] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2158.739664][T30129] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2158.749323][T30129] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2158.763704][T30129] usb 1-1: Product: syz [ 2158.772537][T30129] usb 1-1: Manufacturer: syz [ 2158.783358][T30129] usb 1-1: SerialNumber: syz [ 2158.815564][T30129] usb 1-1: config 0 descriptor?? [ 2158.857410][ T5826] usb 9-1: device descriptor read/64, error -71 [ 2158.864834][ T4670] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2158.973962][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.040795][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.107943][ T5826] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2159.122052][T30129] usb 1-1: USB disconnect, device number 19 [ 2159.151818][T30121] usbhid 5-1:0.0: can't add hid device: -71 [ 2159.165752][T30121] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2159.222250][T30121] usb 5-1: USB disconnect, device number 2 [ 2159.231732][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.243716][ T4679] gtp0: entered promiscuous mode [ 2159.249801][ T5826] usb 9-1: device descriptor read/64, error -71 [ 2159.260976][ T4679] gtp0: entered allmulticast mode [ 2159.295665][ T4679] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 2159.367714][ T5826] usb usb9-port1: attempt power cycle [ 2159.431246][ T4682] Unknown options in mask b7f2 [ 2159.629801][ T4689] ALSA: mixer_oss: invalid OSS volume 'LIN$' [ 2159.718242][ T5826] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2159.747716][ T5826] usb 9-1: device descriptor read/8, error -71 [ 2160.014491][ T5826] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2160.041544][ T5826] usb 9-1: device descriptor read/8, error -71 [ 2160.221003][ T5826] usb usb9-port1: unable to enumerate USB device [ 2160.279489][T30129] IPVS: starting estimator thread 0... [ 2160.377861][ T4706] IPVS: using max 27 ests per chain, 64800 per kthread [ 2160.482695][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.489785][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.382831][ T4725] netlink: 'syz.8.8748': attribute type 2 has an invalid length. [ 2161.391009][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8748'. [ 2161.453991][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8749'. [ 2161.463464][T10933] net_ratelimit: 31 callbacks suppressed [ 2161.463494][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2161.497215][ T4052] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 2161.587391][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2161.687718][ T4052] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2161.698498][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2161.714955][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2161.730615][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2161.750593][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2161.765674][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2161.775594][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2161.785165][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2161.797251][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2161.810815][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2161.820377][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2161.829604][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2161.838828][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2161.850295][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2161.864207][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2161.873779][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2161.886001][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2161.898047][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2161.911407][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2161.921505][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2161.930808][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2161.942091][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2161.949686][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2161.961021][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2162.029762][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2162.038887][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2162.050470][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2162.062090][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2162.069720][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2162.080036][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2162.096776][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2162.109810][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2162.126492][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2162.156101][ T4052] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2162.175732][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2162.187363][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2162.205499][ T4052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 902, setting to 64 [ 2162.218423][ T4052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2162.228573][ T4052] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2162.237822][ T4052] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2162.246733][ T4052] usb 5-1: Product: syz [ 2162.251706][ T4052] usb 5-1: Manufacturer: syz [ 2162.256620][ T4052] usb 5-1: SerialNumber: syz [ 2162.294627][ T4052] usb 5-1: config 0 descriptor?? [ 2162.297377][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2162.358046][ T4718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2162.372694][ T4052] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2162.420543][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2162.537273][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2162.680855][ T5918] usb 5-1: USB disconnect, device number 3 [ 2162.721703][ T5918] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2163.209729][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8756'. [ 2163.970136][ T4766] FAULT_INJECTION: forcing a failure. [ 2163.970136][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.007187][ T4766] CPU: 0 UID: 0 PID: 4766 Comm: syz.8.8760 Not tainted syzkaller #0 PREEMPT(full) [ 2164.007216][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2164.007230][ T4766] Call Trace: [ 2164.007239][ T4766] [ 2164.007249][ T4766] dump_stack_lvl+0x189/0x250 [ 2164.007282][ T4766] ? __pfx____ratelimit+0x10/0x10 [ 2164.007305][ T4766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2164.007330][ T4766] ? __pfx__printk+0x10/0x10 [ 2164.007352][ T4766] ? __lock_acquire+0xab9/0xd20 [ 2164.007380][ T4766] should_fail_ex+0x414/0x560 [ 2164.007415][ T4766] should_failslab+0xa8/0x100 [ 2164.007438][ T4766] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2164.007463][ T4766] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 2164.007489][ T4766] ? skb_clone+0x212/0x3a0 [ 2164.007517][ T4766] skb_clone+0x212/0x3a0 [ 2164.007536][ T4766] ? ip6_finish_output2+0x476/0x1480 [ 2164.007569][ T4766] ip6_finish_output2+0x48a/0x1480 [ 2164.007607][ T4766] ? ip6_fraglist_prepare+0x2b1/0x770 [ 2164.007636][ T4766] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2164.007666][ T4766] ? ip6_copy_metadata+0x889/0xd50 [ 2164.007703][ T4766] ip6_fragment+0x1857/0x1e20 [ 2164.007750][ T4766] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2164.007787][ T4766] ? __pfx_ip6_fragment+0x10/0x10 [ 2164.007811][ T4766] ? ip6_mtu+0x7d/0x490 [ 2164.007842][ T4766] ? ip6_mtu+0x38c/0x490 [ 2164.007869][ T4766] ? ip6_finish_output+0x219/0x4e0 [ 2164.007893][ T4766] ? ip6_output+0x126/0x550 [ 2164.007917][ T4766] ip6_output+0x340/0x550 [ 2164.007949][ T4766] ip6_mr_output+0x4e9/0x1100 [ 2164.007985][ T4766] ? ip6_mr_output+0x1ca/0x1100 [ 2164.008024][ T4766] ? __pfx_ip6_mr_output+0x10/0x10 [ 2164.008056][ T4766] ? __ip6_local_out+0x609/0x870 [ 2164.008084][ T4766] ? __ip6_local_out+0x82c/0x870 [ 2164.008110][ T4766] ? __ip6_local_out+0x609/0x870 [ 2164.008133][ T4766] ? __pfx___ip6_local_out+0x10/0x10 [ 2164.008169][ T4766] ? skb_dst+0x4f/0xd0 [ 2164.008193][ T4766] ? dst_output+0x17b/0x1c0 [ 2164.008214][ T4766] ? ip6_send_skb+0x10f/0x390 [ 2164.008243][ T4766] ip6_send_skb+0x1d5/0x390 [ 2164.008273][ T4766] udp_v6_send_skb+0xc17/0x1830 [ 2164.008321][ T4766] udp_v6_push_pending_frames+0x130/0x220 [ 2164.008352][ T4766] udpv6_sendmsg+0xf2e/0x2510 [ 2164.008389][ T4766] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2164.008423][ T4766] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 2164.008455][ T4766] ? __pfx___might_resched+0x10/0x10 [ 2164.008496][ T4766] ? aa_sk_perm+0x81e/0x950 [ 2164.008539][ T4766] ? inet_send_prepare+0x5c/0x270 [ 2164.008572][ T4766] ? inet6_sendmsg+0xe4/0x120 [ 2164.008596][ T4766] __sock_sendmsg+0xe5/0x270 [ 2164.008626][ T4766] sock_write_iter+0x279/0x360 [ 2164.008653][ T4766] ? __pfx_sock_write_iter+0x10/0x10 [ 2164.008690][ T4766] ? bpf_lsm_file_permission+0x9/0x20 [ 2164.008712][ T4766] ? security_file_permission+0x75/0x290 [ 2164.008745][ T4766] vfs_write+0x5c9/0xb30 [ 2164.008779][ T4766] ? __pfx_sock_write_iter+0x10/0x10 [ 2164.008805][ T4766] ? __pfx_vfs_write+0x10/0x10 [ 2164.008845][ T4766] ? __fget_files+0x2a/0x420 [ 2164.008875][ T4766] ksys_write+0x145/0x250 [ 2164.008901][ T4766] ? exc_page_fault+0x82/0x100 [ 2164.008928][ T4766] ? __pfx_ksys_write+0x10/0x10 [ 2164.008959][ T4766] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2164.008986][ T4766] ? lockdep_hardirqs_on+0x9c/0x150 [ 2164.009021][ T4766] __do_fast_syscall_32+0xb6/0x2b0 [ 2164.009050][ T4766] ? lockdep_hardirqs_on+0x9c/0x150 [ 2164.009079][ T4766] do_fast_syscall_32+0x34/0x80 [ 2164.009106][ T4766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2164.009131][ T4766] RIP: 0023:0xf7f75539 [ 2164.009149][ T4766] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2164.009168][ T4766] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2164.009189][ T4766] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 2164.009203][ T4766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2164.009216][ T4766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2164.009228][ T4766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2164.009241][ T4766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2164.009272][ T4766] [ 2165.125934][ T4776] FAULT_INJECTION: forcing a failure. [ 2165.125934][ T4776] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.157404][ T4776] CPU: 0 UID: 0 PID: 4776 Comm: syz.0.8764 Not tainted syzkaller #0 PREEMPT(full) [ 2165.157432][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2165.157445][ T4776] Call Trace: [ 2165.157454][ T4776] [ 2165.157463][ T4776] dump_stack_lvl+0x189/0x250 [ 2165.157502][ T4776] ? __pfx____ratelimit+0x10/0x10 [ 2165.157526][ T4776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2165.157553][ T4776] ? __pfx__printk+0x10/0x10 [ 2165.157580][ T4776] ? __pfx___might_resched+0x10/0x10 [ 2165.157601][ T4776] ? fs_reclaim_acquire+0x7d/0x100 [ 2165.157636][ T4776] should_fail_ex+0x414/0x560 [ 2165.157670][ T4776] should_failslab+0xa8/0x100 [ 2165.157692][ T4776] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2165.157718][ T4776] ? __kasan_slab_alloc+0x6c/0x80 [ 2165.157753][ T4776] ? __alloc_skb+0x112/0x2d0 [ 2165.157780][ T4776] ? __alloc_skb+0x142/0x2d0 [ 2165.157806][ T4776] ? tipc_nl_compat_dumpit+0x34d/0x7b0 [ 2165.157827][ T4776] ? tipc_nl_compat_recv+0x802/0xbe0 [ 2165.157853][ T4776] __alloc_skb+0x112/0x2d0 [ 2165.157886][ T4776] __tipc_nl_compat_dumpit+0x155/0xb70 [ 2165.157934][ T4776] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 2165.157976][ T4776] ? rcu_is_watching+0x15/0xb0 [ 2165.158017][ T4776] ? __asan_memset+0x22/0x50 [ 2165.158041][ T4776] ? __nlmsg_put+0xef/0x1b0 [ 2165.158072][ T4776] tipc_nl_compat_dumpit+0x566/0x7b0 [ 2165.158103][ T4776] tipc_nl_compat_recv+0x802/0xbe0 [ 2165.158129][ T4776] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2165.158149][ T4776] ? __mutex_trylock_common+0x153/0x260 [ 2165.158172][ T4776] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 2165.158198][ T4776] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 2165.158223][ T4776] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2165.158245][ T4776] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2165.158273][ T4776] ? trace_contention_end+0x39/0x120 [ 2165.158307][ T4776] genl_family_rcv_msg_doit+0x215/0x300 [ 2165.158339][ T4776] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2165.158392][ T4776] genl_rcv_msg+0x60e/0x790 [ 2165.158423][ T4776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2165.158445][ T4776] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2165.158470][ T4776] ? __asan_memcpy+0x40/0x70 [ 2165.158495][ T4776] ? __pfx_ref_tracker_free+0x10/0x10 [ 2165.158522][ T4776] netlink_rcv_skb+0x208/0x470 [ 2165.158549][ T4776] ? __lock_acquire+0xab9/0xd20 [ 2165.158569][ T4776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2165.158594][ T4776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2165.158643][ T4776] ? down_read+0x1ad/0x2e0 [ 2165.158675][ T4776] genl_rcv+0x28/0x40 [ 2165.158696][ T4776] netlink_unicast+0x82f/0x9e0 [ 2165.158731][ T4776] ? __pfx_netlink_unicast+0x10/0x10 [ 2165.158760][ T4776] ? netlink_sendmsg+0x642/0xb30 [ 2165.158776][ T4776] ? skb_put+0x11b/0x210 [ 2165.158799][ T4776] netlink_sendmsg+0x805/0xb30 [ 2165.158827][ T4776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2165.158849][ T4776] ? __import_iovec+0x5d4/0x7f0 [ 2165.158871][ T4776] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2165.158901][ T4776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2165.158927][ T4776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2165.158947][ T4776] __sock_sendmsg+0x21c/0x270 [ 2165.158976][ T4776] ____sys_sendmsg+0x505/0x830 [ 2165.159003][ T4776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2165.159041][ T4776] ___sys_sendmsg+0x21f/0x2a0 [ 2165.159064][ T4776] ? __pfx____sys_sendmsg+0x10/0x10 [ 2165.159131][ T4776] ? __fget_files+0x2a/0x420 [ 2165.159150][ T4776] ? __fget_files+0x3a0/0x420 [ 2165.159190][ T4776] __sys_sendmsg+0x164/0x220 [ 2165.159213][ T4776] ? __pfx___sys_sendmsg+0x10/0x10 [ 2165.159243][ T4776] ? __pfx_ksys_write+0x10/0x10 [ 2165.159274][ T4776] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2165.159303][ T4776] ? lockdep_hardirqs_on+0x9c/0x150 [ 2165.159331][ T4776] __do_fast_syscall_32+0xb6/0x2b0 [ 2165.159359][ T4776] ? lockdep_hardirqs_on+0x9c/0x150 [ 2165.159387][ T4776] do_fast_syscall_32+0x34/0x80 [ 2165.159412][ T4776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2165.159445][ T4776] RIP: 0023:0xf70bd539 [ 2165.159463][ T4776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2165.159480][ T4776] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2165.159502][ T4776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 2165.159517][ T4776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2165.159529][ T4776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2165.159540][ T4776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2165.159552][ T4776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2165.159584][ T4776] [ 2166.206244][ T4787] @: renamed from vlan0 (while UP) [ 2166.487435][T10933] net_ratelimit: 19 callbacks suppressed [ 2166.487459][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2166.879104][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.017120][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.153806][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.156488][ T5918] hid_parser_main: 5 callbacks suppressed [ 2167.156508][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.273954][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.409536][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.428135][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.428186][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.435574][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.435604][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.476362][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8770'. [ 2167.566372][ T4809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8771'. [ 2167.575680][ T4809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8771'. [ 2167.587136][ T4052] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 2167.594960][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.631145][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.694328][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.699654][T26738] Bluetooth: hci1: command 0x0406 tx timeout [ 2167.704715][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.741931][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.770465][ T5918] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 2167.788891][ T4052] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2167.807927][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2167.824120][ T4052] usb 1-1: config 0 has no interface number 0 [ 2167.826582][ T5918] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2167.830638][ T4052] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2167.830667][ T4052] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2167.830694][ T4052] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2167.830721][ T4052] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2167.927244][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2168.142100][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2168.260900][ T4811] fido_id[4811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2168.273396][ T4052] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2168.379562][ T4052] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2168.393033][ T4052] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2168.403853][ T4052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.536204][ T4052] usb 1-1: config 0 descriptor?? [ 2168.563409][ T4805] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2168.602371][ T4805] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2168.635140][ T4052] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2168.939862][ T5888] usb 1-1: USB disconnect, device number 20 [ 2168.986605][ T5888] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 2169.232705][ T4824] FAULT_INJECTION: forcing a failure. [ 2169.232705][ T4824] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.253806][ T4824] CPU: 1 UID: 0 PID: 4824 Comm: syz.8.8776 Not tainted syzkaller #0 PREEMPT(full) [ 2169.253825][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2169.253833][ T4824] Call Trace: [ 2169.253840][ T4824] [ 2169.253845][ T4824] dump_stack_lvl+0x189/0x250 [ 2169.253874][ T4824] ? __pfx____ratelimit+0x10/0x10 [ 2169.253888][ T4824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2169.253903][ T4824] ? __pfx__printk+0x10/0x10 [ 2169.253916][ T4824] ? __pfx___might_resched+0x10/0x10 [ 2169.253931][ T4824] should_fail_ex+0x414/0x560 [ 2169.253951][ T4824] should_failslab+0xa8/0x100 [ 2169.253964][ T4824] __kmalloc_noprof+0xcb/0x7f0 [ 2169.253979][ T4824] ? __tipc_nl_compat_dumpit+0x23c/0xb70 [ 2169.253992][ T4824] ? _raw_spin_unlock+0x28/0x50 [ 2169.254007][ T4824] __tipc_nl_compat_dumpit+0x23c/0xb70 [ 2169.254029][ T4824] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 2169.254050][ T4824] ? rcu_is_watching+0x15/0xb0 [ 2169.254072][ T4824] ? __asan_memset+0x22/0x50 [ 2169.254093][ T4824] ? __nlmsg_put+0xef/0x1b0 [ 2169.254122][ T4824] tipc_nl_compat_dumpit+0x566/0x7b0 [ 2169.254151][ T4824] tipc_nl_compat_recv+0x802/0xbe0 [ 2169.254174][ T4824] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2169.254185][ T4824] ? __mutex_trylock_common+0x153/0x260 [ 2169.254197][ T4824] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 2169.254209][ T4824] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 2169.254219][ T4824] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 2169.254232][ T4824] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2169.254244][ T4824] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2169.254259][ T4824] ? trace_contention_end+0x39/0x120 [ 2169.254278][ T4824] genl_family_rcv_msg_doit+0x215/0x300 [ 2169.254295][ T4824] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2169.254320][ T4824] genl_rcv_msg+0x60e/0x790 [ 2169.254336][ T4824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2169.254348][ T4824] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2169.254360][ T4824] ? __asan_memcpy+0x40/0x70 [ 2169.254373][ T4824] ? __pfx_ref_tracker_free+0x10/0x10 [ 2169.254388][ T4824] netlink_rcv_skb+0x208/0x470 [ 2169.254403][ T4824] ? __lock_acquire+0xab9/0xd20 [ 2169.254414][ T4824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2169.254427][ T4824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2169.254464][ T4824] ? down_read+0x1ad/0x2e0 [ 2169.254491][ T4824] genl_rcv+0x28/0x40 [ 2169.254510][ T4824] netlink_unicast+0x82f/0x9e0 [ 2169.254540][ T4824] ? __pfx_netlink_unicast+0x10/0x10 [ 2169.254556][ T4824] ? netlink_sendmsg+0x642/0xb30 [ 2169.254564][ T4824] ? skb_put+0x11b/0x210 [ 2169.254577][ T4824] netlink_sendmsg+0x805/0xb30 [ 2169.254591][ T4824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.254603][ T4824] ? __import_iovec+0x5d4/0x7f0 [ 2169.254615][ T4824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2169.254633][ T4824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2169.254644][ T4824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.254654][ T4824] __sock_sendmsg+0x21c/0x270 [ 2169.254671][ T4824] ____sys_sendmsg+0x505/0x830 [ 2169.254685][ T4824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2169.254705][ T4824] ___sys_sendmsg+0x21f/0x2a0 [ 2169.254718][ T4824] ? __pfx____sys_sendmsg+0x10/0x10 [ 2169.254747][ T4824] ? __fget_files+0x2a/0x420 [ 2169.254757][ T4824] ? __fget_files+0x3a0/0x420 [ 2169.254772][ T4824] __sys_sendmsg+0x164/0x220 [ 2169.254784][ T4824] ? __pfx___sys_sendmsg+0x10/0x10 [ 2169.254800][ T4824] ? __pfx_ksys_write+0x10/0x10 [ 2169.254816][ T4824] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2169.254831][ T4824] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.254847][ T4824] __do_fast_syscall_32+0xb6/0x2b0 [ 2169.254864][ T4824] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.254896][ T4824] do_fast_syscall_32+0x34/0x80 [ 2169.254920][ T4824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2169.254940][ T4824] RIP: 0023:0xf7f75539 [ 2169.254957][ T4824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2169.254975][ T4824] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2169.254988][ T4824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2169.254996][ T4824] RDX: 0000000000001004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2169.255003][ T4824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.255009][ T4824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2169.255015][ T4824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.255031][ T4824] [ 2169.685540][ C1] vkms_vblank_simulate: vblank timer overrun [ 2169.809378][ T4828] FAULT_INJECTION: forcing a failure. [ 2169.809378][ T4828] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.857560][ T4828] CPU: 0 UID: 0 PID: 4828 Comm: syz.8.8777 Not tainted syzkaller #0 PREEMPT(full) [ 2169.857577][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2169.857585][ T4828] Call Trace: [ 2169.857590][ T4828] [ 2169.857595][ T4828] dump_stack_lvl+0x189/0x250 [ 2169.857686][ T4828] ? __pfx____ratelimit+0x10/0x10 [ 2169.857700][ T4828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2169.857714][ T4828] ? __pfx__printk+0x10/0x10 [ 2169.857727][ T4828] ? __pfx___might_resched+0x10/0x10 [ 2169.857739][ T4828] ? fs_reclaim_acquire+0x7d/0x100 [ 2169.857758][ T4828] should_fail_ex+0x414/0x560 [ 2169.857778][ T4828] should_failslab+0xa8/0x100 [ 2169.857790][ T4828] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2169.857806][ T4828] ? nf_tables_newchain+0xfe5/0x2750 [ 2169.857821][ T4828] nf_tables_newchain+0xfe5/0x2750 [ 2169.857841][ T4828] ? __pfx_nf_tables_newchain+0x10/0x10 [ 2169.857871][ T4828] ? nfnl_pernet+0x23/0x240 [ 2169.857890][ T4828] ? __nla_parse+0x40/0x60 [ 2169.857904][ T4828] nfnetlink_rcv+0x11d9/0x2590 [ 2169.857936][ T4828] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2169.857959][ T4828] ? ref_tracker_free+0x63a/0x7d0 [ 2169.857984][ T4828] ? __netlink_deliver_tap+0x807/0x850 [ 2169.858000][ T4828] ? netlink_deliver_tap+0x2e/0x1b0 [ 2169.858025][ T4828] netlink_unicast+0x82f/0x9e0 [ 2169.858045][ T4828] ? __pfx_netlink_unicast+0x10/0x10 [ 2169.858060][ T4828] ? netlink_sendmsg+0x642/0xb30 [ 2169.858068][ T4828] ? skb_put+0x11b/0x210 [ 2169.858080][ T4828] netlink_sendmsg+0x805/0xb30 [ 2169.858095][ T4828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.858111][ T4828] ? __import_iovec+0x5d4/0x7f0 [ 2169.858124][ T4828] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2169.858141][ T4828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2169.858151][ T4828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.858162][ T4828] __sock_sendmsg+0x21c/0x270 [ 2169.858177][ T4828] ____sys_sendmsg+0x505/0x830 [ 2169.858192][ T4828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2169.858211][ T4828] ___sys_sendmsg+0x21f/0x2a0 [ 2169.858224][ T4828] ? __pfx____sys_sendmsg+0x10/0x10 [ 2169.858253][ T4828] ? __fget_files+0x2a/0x420 [ 2169.858263][ T4828] ? __fget_files+0x3a0/0x420 [ 2169.858278][ T4828] __sys_sendmsg+0x164/0x220 [ 2169.858290][ T4828] ? __pfx___sys_sendmsg+0x10/0x10 [ 2169.858305][ T4828] ? __pfx_ksys_write+0x10/0x10 [ 2169.858322][ T4828] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2169.858338][ T4828] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.858353][ T4828] __do_fast_syscall_32+0xb6/0x2b0 [ 2169.858368][ T4828] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.858383][ T4828] do_fast_syscall_32+0x34/0x80 [ 2169.858398][ T4828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2169.858411][ T4828] RIP: 0023:0xf7f75539 [ 2169.858421][ T4828] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2169.858431][ T4828] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2169.858443][ T4828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2169.858451][ T4828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2169.858457][ T4828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.858463][ T4828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2169.858469][ T4828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.858485][ T4828] [ 2170.469291][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8778'. [ 2170.480855][ T4836] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 2170.636243][ T4841] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8781'. [ 2170.704170][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8781'. [ 2171.125313][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8783'. [ 2171.685372][T10935] net_ratelimit: 20 callbacks suppressed [ 2171.685387][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2171.822944][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2171.949206][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2172.031067][ T4855] loop8: detected capacity change from 0 to 7 [ 2172.059544][ T4855] Dev loop8: unable to read RDB block 7 [ 2172.067167][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2172.073507][ T4855] loop8: unable to read partition table [ 2172.097452][ T4855] loop8: partition table beyond EOD, truncated [ 2172.117352][ T4855] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2172.330148][ T5199] Dev loop8: unable to read RDB block 7 [ 2172.352649][ T5199] loop8: unable to read partition table [ 2172.441904][ T5199] loop8: partition table beyond EOD, truncated [ 2172.488139][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2172.524373][ T4858] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2172.639217][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 2172.646362][ T5918] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 2172.658802][ T5918] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2172.686397][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2172.688074][ T4869] kvm: user requested TSC rate below hardware speed [ 2172.705355][ T5918] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 2172.718469][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2172.765361][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.811244][ T5918] usb 5-1: config 0 descriptor?? [ 2172.848508][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2172.931640][ T5199] Dev loop8: unable to read RDB block 7 [ 2172.935814][ T4875] netlink: 200 bytes leftover after parsing attributes in process `syz.7.8792'. [ 2172.946678][ T5199] loop8: unable to read partition table [ 2172.953429][ T4875] FAULT_INJECTION: forcing a failure. [ 2172.953429][ T4875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2172.968957][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2172.984292][ T4875] CPU: 0 UID: 0 PID: 4875 Comm: syz.7.8792 Not tainted syzkaller #0 PREEMPT(full) [ 2172.984322][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2172.984336][ T4875] Call Trace: [ 2172.984386][ T4875] [ 2172.984396][ T4875] dump_stack_lvl+0x189/0x250 [ 2172.984428][ T4875] ? __pfx____ratelimit+0x10/0x10 [ 2172.984453][ T4875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2172.984481][ T4875] ? __pfx__printk+0x10/0x10 [ 2172.984502][ T4875] ? __might_fault+0xb0/0x130 [ 2172.984542][ T4875] should_fail_ex+0x414/0x560 [ 2172.984577][ T4875] _copy_from_user+0x2d/0xb0 [ 2172.984601][ T4875] kstrtouint_from_user+0xc4/0x170 [ 2172.984624][ T4875] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2172.984663][ T4875] proc_fail_nth_write+0x88/0x200 [ 2172.984688][ T4875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2172.984719][ T4875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2172.984746][ T4875] vfs_write+0x27e/0xb30 [ 2172.984783][ T4875] ? __pfx_vfs_write+0x10/0x10 [ 2172.984811][ T4875] ? __fget_files+0x2a/0x420 [ 2172.984832][ T4875] ? __fget_files+0x3a0/0x420 [ 2172.984849][ T4875] ? __fget_files+0x2a/0x420 [ 2172.984875][ T4875] ksys_write+0x145/0x250 [ 2172.984902][ T4875] ? __pfx_ksys_write+0x10/0x10 [ 2172.984928][ T4875] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2172.984956][ T4875] ? lockdep_hardirqs_on+0x9c/0x150 [ 2172.984985][ T4875] __do_fast_syscall_32+0xb6/0x2b0 [ 2172.985011][ T4875] ? lockdep_hardirqs_on+0x9c/0x150 [ 2172.985041][ T4875] do_fast_syscall_32+0x34/0x80 [ 2172.985072][ T4875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2172.985096][ T4875] RIP: 0023:0xf70cd539 [ 2172.985113][ T4875] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2172.985130][ T4875] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2172.985151][ T4875] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54bd620 [ 2172.985166][ T4875] RDX: 0000000000000001 RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 2172.985179][ T4875] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2172.985191][ T4875] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2172.985203][ T4875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2172.985235][ T4875] [ 2173.230679][ T5199] loop8: partition table beyond EOD, truncated [ 2173.267729][ T5918] corsair 0003:1B1C:1B09.005F: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.4-1/input0 [ 2173.339036][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2173.545532][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.577918][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.589058][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2173.609455][ T4886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8795'. [ 2173.667106][ T5199] Dev loop8: unable to read RDB block 7 [ 2173.680391][ T5199] loop8: unable to read partition table [ 2173.689408][ T5918] usb 5-1: USB disconnect, device number 4 [ 2173.914016][ T5199] loop8: partition table beyond EOD, truncated [ 2173.949978][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2174.303991][ T4887] fido_id[4887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2174.745805][ T5199] Dev loop8: unable to read RDB block 7 [ 2174.765215][ T5199] loop8: unable to read partition table [ 2174.785816][ T5199] loop8: partition table beyond EOD, truncated [ 2174.908473][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8798'. [ 2175.757046][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2175.910566][ T5918] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 2175.921664][ T5918] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2175.954836][ T5918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2175.982175][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2175.993720][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.012273][ T5918] usb 5-1: Product: î†â¿»î¦©â¶’撚寡ਸদ膢攵â®å¿à¾Šá€ê”¸ã¨•鰂糜䊤㦲䯫Š閻㋡隒䞟씻눑件ྠ쬈椇 [ 2176.067843][ T5918] usb 5-1: Manufacturer: о [ 2176.096690][ T5918] usb 5-1: SerialNumber: Ð [ 2176.106262][ T4917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2176.127579][ T4917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2176.340556][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.353628][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.437563][ T5918] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 2176.596466][ T5918] usb 5-1: USB disconnect, device number 5 [ 2176.627323][ T5918] usblp0: removed [ 2176.661144][ T4943] program syz.6.8811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2176.860089][T10935] net_ratelimit: 20 callbacks suppressed [ 2176.860112][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2176.997130][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.107377][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.309007][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.330168][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8815'. [ 2177.507569][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.617294][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.739782][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2177.867800][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2178.020406][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2178.156049][ T4971] fuse: Unknown parameter ' ' [ 2178.167393][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2179.157037][ T5918] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2179.269694][ T4989] netlink: 'syz.6.8824': attribute type 2 has an invalid length. [ 2179.280194][ T4989] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8824'. [ 2179.309453][ T5918] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2179.331606][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2179.372646][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2179.451674][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2179.504392][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2179.586300][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2179.751747][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.769604][ T5918] usb 5-1: config 0 descriptor?? [ 2179.822896][ T4986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2180.245976][ T5918] plantronics 0003:047F:FFFF.0060: reserved main item tag 0xd [ 2180.273448][ T5918] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2180.789484][T30123] usb 5-1: USB disconnect, device number 6 [ 2180.916404][ T5013] fido_id[5013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2181.043221][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2181.043238][ T30] audit: type=1326 audit(1761487237.915:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.157466][ T30] audit: type=1326 audit(1761487237.915:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.254154][ T30] audit: type=1326 audit(1761487237.915:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.374289][ T30] audit: type=1326 audit(1761487237.915:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.441727][ T30] audit: type=1326 audit(1761487237.915:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.519939][ T30] audit: type=1326 audit(1761487237.955:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.6.8831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 2181.849856][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8837'. [ 2181.867706][ T145] net_ratelimit: 28 callbacks suppressed [ 2181.867725][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.048225][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.089186][ T5042] input: syz1 as /devices/virtual/input/input133 [ 2182.169800][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.289640][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.439212][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.557117][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.677064][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.787056][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2182.848020][ T5050] netlink: 'syz.4.8842': attribute type 2 has an invalid length. [ 2182.856125][ T5050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8842'. [ 2182.897144][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2183.065149][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2183.987057][ T5069] FAULT_INJECTION: forcing a failure. [ 2183.987057][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.049189][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.6.8848 Not tainted syzkaller #0 PREEMPT(full) [ 2184.049207][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2184.049214][ T5069] Call Trace: [ 2184.049219][ T5069] [ 2184.049225][ T5069] dump_stack_lvl+0x189/0x250 [ 2184.049244][ T5069] ? __pfx____ratelimit+0x10/0x10 [ 2184.049258][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2184.049272][ T5069] ? __pfx__printk+0x10/0x10 [ 2184.049286][ T5069] ? __pfx___might_resched+0x10/0x10 [ 2184.049301][ T5069] should_fail_ex+0x414/0x560 [ 2184.049321][ T5069] should_failslab+0xa8/0x100 [ 2184.049333][ T5069] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2184.049349][ T5069] ? __alloc_skb+0x112/0x2d0 [ 2184.049368][ T5069] __alloc_skb+0x112/0x2d0 [ 2184.049386][ T5069] netlink_ack+0x146/0xa50 [ 2184.049401][ T5069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2184.049416][ T5069] ? __asan_memcpy+0x40/0x70 [ 2184.049430][ T5069] ? __pfx_ref_tracker_free+0x10/0x10 [ 2184.049444][ T5069] netlink_rcv_skb+0x28c/0x470 [ 2184.049459][ T5069] ? __lock_acquire+0xab9/0xd20 [ 2184.049469][ T5069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2184.049483][ T5069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2184.049508][ T5069] ? down_read+0x1ad/0x2e0 [ 2184.049525][ T5069] genl_rcv+0x28/0x40 [ 2184.049536][ T5069] netlink_unicast+0x82f/0x9e0 [ 2184.049558][ T5069] ? __pfx_netlink_unicast+0x10/0x10 [ 2184.049574][ T5069] ? netlink_sendmsg+0x642/0xb30 [ 2184.049582][ T5069] ? skb_put+0x11b/0x210 [ 2184.049594][ T5069] netlink_sendmsg+0x805/0xb30 [ 2184.049609][ T5069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2184.049620][ T5069] ? __import_iovec+0x5d4/0x7f0 [ 2184.049632][ T5069] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2184.049649][ T5069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2184.049660][ T5069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2184.049670][ T5069] __sock_sendmsg+0x21c/0x270 [ 2184.049686][ T5069] ____sys_sendmsg+0x505/0x830 [ 2184.049700][ T5069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2184.049722][ T5069] ___sys_sendmsg+0x21f/0x2a0 [ 2184.049734][ T5069] ? __pfx____sys_sendmsg+0x10/0x10 [ 2184.049763][ T5069] ? __fget_files+0x2a/0x420 [ 2184.049773][ T5069] ? __fget_files+0x3a0/0x420 [ 2184.049788][ T5069] __sys_sendmsg+0x164/0x220 [ 2184.049806][ T5069] ? __pfx___sys_sendmsg+0x10/0x10 [ 2184.049822][ T5069] ? __pfx_ksys_write+0x10/0x10 [ 2184.049839][ T5069] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2184.049855][ T5069] ? lockdep_hardirqs_on+0x9c/0x150 [ 2184.049870][ T5069] __do_fast_syscall_32+0xb6/0x2b0 [ 2184.049885][ T5069] ? lockdep_hardirqs_on+0x9c/0x150 [ 2184.049908][ T5069] do_fast_syscall_32+0x34/0x80 [ 2184.049932][ T5069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2184.049954][ T5069] RIP: 0023:0xf7f91539 [ 2184.049970][ T5069] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2184.049985][ T5069] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2184.050005][ T5069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2184.050018][ T5069] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2184.050025][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2184.050031][ T5069] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2184.050036][ T5069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2184.050053][ T5069] [ 2186.331670][T30123] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2186.379973][T10935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.492483][T30123] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2186.522610][T30123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.575732][T30123] usb 1-1: config 0 descriptor?? [ 2186.698729][T10935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.898146][ T1151] net_ratelimit: 26 callbacks suppressed [ 2186.898189][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2186.926057][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.018135][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.027857][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.040811][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.092880][T30123] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2187.105752][T30123] [drm:udl_init] *ERROR* Selecting channel failed [ 2187.143257][T10935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.157390][ T5918] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2187.180627][T30123] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 2187.247327][T30123] [drm] Initialized udl on minor 2 [ 2187.279566][T30123] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2187.301747][T30123] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2187.335252][ T4052] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2187.343637][ T4052] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2187.351833][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2187.376296][T30123] usb 1-1: USB disconnect, device number 21 [ 2187.462813][T10935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.507093][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2187.547760][ T5123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8862'. [ 2187.568607][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8862'. [ 2187.961354][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2188.187118][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2188.357750][ T5138] FAULT_INJECTION: forcing a failure. [ 2188.357750][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.417069][ T5138] CPU: 0 UID: 0 PID: 5138 Comm: syz.7.8868 Not tainted syzkaller #0 PREEMPT(full) [ 2188.417096][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2188.417108][ T5138] Call Trace: [ 2188.417114][ T5138] [ 2188.417120][ T5138] dump_stack_lvl+0x189/0x250 [ 2188.417140][ T5138] ? __pfx____ratelimit+0x10/0x10 [ 2188.417154][ T5138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2188.417168][ T5138] ? __pfx__printk+0x10/0x10 [ 2188.417180][ T5138] ? __pfx___might_resched+0x10/0x10 [ 2188.417193][ T5138] ? fs_reclaim_acquire+0x7d/0x100 [ 2188.417216][ T5138] should_fail_ex+0x414/0x560 [ 2188.417237][ T5138] should_failslab+0xa8/0x100 [ 2188.417250][ T5138] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2188.417264][ T5138] ? sk_prot_alloc+0x57/0x220 [ 2188.417278][ T5138] sk_prot_alloc+0x57/0x220 [ 2188.417287][ T5138] ? sk_alloc+0x24/0x370 [ 2188.417297][ T5138] sk_alloc+0x3a/0x370 [ 2188.417310][ T5138] inet6_create+0x7f0/0x1260 [ 2188.417322][ T5138] ? inet6_create+0x83/0x1260 [ 2188.417337][ T5138] __sock_create+0x4b3/0x9f0 [ 2188.417357][ T5138] udp_sock_create6+0xcb/0x690 [ 2188.417376][ T5138] ? __pfx_udp_sock_create6+0x10/0x10 [ 2188.417394][ T5138] ? rxrpc_lookup_local+0xc1a/0x1410 [ 2188.417414][ T5138] rxrpc_lookup_local+0xc92/0x1410 [ 2188.417436][ T5138] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 2188.417455][ T5138] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2188.417475][ T5138] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2188.417488][ T5138] ? rxrpc_bind+0x164/0x460 [ 2188.417505][ T5138] rxrpc_bind+0x198/0x460 [ 2188.417521][ T5138] __sys_bind+0x2c6/0x3e0 [ 2188.417537][ T5138] ? __pfx___sys_bind+0x10/0x10 [ 2188.417558][ T5138] ? __pfx_ksys_write+0x10/0x10 [ 2188.417577][ T5138] __ia32_sys_bind+0x7a/0x90 [ 2188.417593][ T5138] __do_fast_syscall_32+0xb6/0x2b0 [ 2188.417608][ T5138] ? lockdep_hardirqs_on+0x9c/0x150 [ 2188.417624][ T5138] do_fast_syscall_32+0x34/0x80 [ 2188.417639][ T5138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2188.417651][ T5138] RIP: 0023:0xf70cd539 [ 2188.417661][ T5138] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2188.417676][ T5138] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2188.417696][ T5138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2188.417709][ T5138] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 2188.417720][ T5138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2188.417729][ T5138] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2188.417739][ T5138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2188.417768][ T5138] [ 2188.775441][ T5141] fuse: Bad value for 'user_id' [ 2188.787003][ T5141] fuse: Bad value for 'user_id' [ 2188.800840][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2188.923553][T10935] bridge_slave_1: left allmulticast mode [ 2188.938539][T10935] bridge_slave_1: left promiscuous mode [ 2188.957740][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.983624][T10935] bridge_slave_0: left allmulticast mode [ 2189.048544][T10935] bridge_slave_0: left promiscuous mode [ 2189.072418][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.371988][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8873'. [ 2190.161192][T10935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2190.181331][T10935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2190.193770][T10935] bond0 (unregistering): Released all slaves [ 2190.261516][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2190.487238][T10935] tipc: Disabling bearer [ 2190.524167][T10935] tipc: Left network mode [ 2190.534644][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2190.648183][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2190.988067][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2191.160646][ T5918] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 2191.239530][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277ac400: rx timeout, send abort [ 2191.267474][T10935] hsr_slave_0: left promiscuous mode [ 2191.278916][T10935] hsr_slave_1: left promiscuous mode [ 2191.285191][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2191.318866][T10935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2191.347974][ T5918] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 2191.369392][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 2191.388094][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2191.404407][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 2191.412065][T10935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2191.423914][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 2191.453902][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2191.463911][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.481771][T10935] veth1_macvtap: left promiscuous mode [ 2191.490544][ T5196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2191.495734][T10935] veth0_macvtap: left promiscuous mode [ 2191.503910][ T5196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2191.520675][T10935] veth1_vlan: left promiscuous mode [ 2191.536463][T10935] veth0_vlan: left promiscuous mode [ 2191.540815][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2191.563863][ T5918] usb 5-1: invalid MIDI in EP 0 [ 2191.724309][ T5918] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2191.736072][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277ac000: rx timeout, send abort [ 2191.748011][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277ac400: abort rx timeout. Force session deactivation [ 2191.804291][ T5918] usb 5-1: USB disconnect, device number 7 [ 2192.044634][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8885'. [ 2192.134091][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8885'. [ 2192.244527][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277ac000: abort rx timeout. Force session deactivation [ 2192.455987][ T30] audit: type=1326 audit(1761487249.325:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.500747][ T30] audit: type=1326 audit(1761487249.325:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.530418][ T30] audit: type=1326 audit(1761487249.325:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.562265][ T30] audit: type=1326 audit(1761487249.325:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.587027][ T30] audit: type=1326 audit(1761487249.325:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.610477][ T30] audit: type=1326 audit(1761487249.325:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.635094][ T30] audit: type=1326 audit(1761487249.325:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.662279][ T30] audit: type=1326 audit(1761487249.325:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.693363][ T30] audit: type=1326 audit(1761487249.325:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2192.716733][ T30] audit: type=1326 audit(1761487249.325:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.4.8887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2193.363208][T10935] team0 (unregistering): Port device team_slave_1 removed [ 2193.433376][T10935] team0 (unregistering): Port device team_slave_0 removed [ 2194.207417][ T1151] net_ratelimit: 1 callbacks suppressed [ 2194.207439][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2194.402678][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2194.461531][ T5244] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8890'. [ 2194.528597][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2194.660740][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2194.816184][T10935] IPVS: stop unused estimator thread 0... [ 2194.833170][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2194.949802][T30129] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 2194.981295][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8893'. [ 2194.999085][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2195.120982][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2195.166224][T30129] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 2195.187074][T30129] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2195.247774][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2195.367472][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2195.375291][T30129] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2195.466282][T30129] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2195.485207][T30129] usb 9-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 2195.517306][T30129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.537884][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2195.547228][T30129] usb 9-1: config 0 descriptor?? [ 2195.959577][T30129] usbhid 9-1:0.0: can't add hid device: -71 [ 2195.979164][T30129] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2196.011093][T30129] usb 9-1: USB disconnect, device number 13 [ 2196.532130][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8900'. [ 2197.247914][T30123] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2197.437150][T30123] usb 9-1: device descriptor read/64, error -71 [ 2197.549383][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8904'. [ 2197.727082][T30123] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2197.867513][T30123] usb 9-1: device descriptor read/64, error -71 [ 2197.987690][T30123] usb usb9-port1: attempt power cycle [ 2198.546127][T30123] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2198.597824][T30123] usb 9-1: device descriptor read/8, error -71 [ 2198.627634][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8909'. [ 2198.677886][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8909'. [ 2198.790991][ T5334] FAULT_INJECTION: forcing a failure. [ 2198.790991][ T5334] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.877758][ T5334] CPU: 1 UID: 0 PID: 5334 Comm: syz.6.8909 Not tainted syzkaller #0 PREEMPT(full) [ 2198.877784][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2198.877796][ T5334] Call Trace: [ 2198.877805][ T5334] [ 2198.877814][ T5334] dump_stack_lvl+0x189/0x250 [ 2198.877846][ T5334] ? __pfx____ratelimit+0x10/0x10 [ 2198.877876][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.877903][ T5334] ? __pfx__printk+0x10/0x10 [ 2198.877939][ T5334] should_fail_ex+0x414/0x560 [ 2198.877973][ T5334] should_failslab+0xa8/0x100 [ 2198.877995][ T5334] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2198.878022][ T5334] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 2198.878045][ T5334] ? sctp_add_bind_addr+0x8c/0x370 [ 2198.878066][ T5334] ? sctp_add_bind_addr+0xb0/0x370 [ 2198.878094][ T5334] sctp_add_bind_addr+0x8c/0x370 [ 2198.878123][ T5334] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2198.878152][ T5334] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2198.878176][ T5334] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2198.878204][ T5334] ? sctp_v6_is_any+0x64/0x80 [ 2198.878231][ T5334] ? sctp_copy_one_addr+0x93/0x360 [ 2198.878256][ T5334] sctp_bind_addr_copy+0xb3/0x3c0 [ 2198.878280][ T5334] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2198.878306][ T5334] sctp_connect_new_asoc+0x2e0/0x690 [ 2198.878339][ T5334] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2198.878366][ T5334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2198.878395][ T5334] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2198.878416][ T5334] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2198.878442][ T5334] sctp_sendmsg+0x155c/0x2810 [ 2198.878483][ T5334] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2198.878515][ T5334] ? aa_sk_perm+0x81e/0x950 [ 2198.878547][ T5334] ? __pfx_aa_sk_perm+0x10/0x10 [ 2198.878576][ T5334] ? sock_rps_record_flow+0x19/0x410 [ 2198.878609][ T5334] ? inet_sendmsg+0x2f4/0x370 [ 2198.878641][ T5334] __sock_sendmsg+0x19c/0x270 [ 2198.878670][ T5334] __sys_sendto+0x3bd/0x520 [ 2198.878708][ T5334] ? __pfx___sys_sendto+0x10/0x10 [ 2198.878735][ T5334] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2198.878775][ T5334] ? __fget_files+0x3a0/0x420 [ 2198.878805][ T5334] ? ksys_write+0x22a/0x250 [ 2198.878831][ T5334] ? exc_page_fault+0x82/0x100 [ 2198.878856][ T5334] ? __pfx_ksys_write+0x10/0x10 [ 2198.878888][ T5334] __ia32_sys_sendto+0xdd/0x100 [ 2198.878921][ T5334] __do_fast_syscall_32+0xb6/0x2b0 [ 2198.878949][ T5334] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.878977][ T5334] do_fast_syscall_32+0x34/0x80 [ 2198.879004][ T5334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.879029][ T5334] RIP: 0023:0xf7f91539 [ 2198.879046][ T5334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2198.879064][ T5334] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2198.879086][ T5334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2198.879100][ T5334] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 2198.879114][ T5334] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2198.879126][ T5334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2198.879138][ T5334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2198.879169][ T5334] [ 2199.202855][T30123] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2199.323144][T30123] usb 9-1: device descriptor read/8, error -71 [ 2199.483070][T10933] net_ratelimit: 26 callbacks suppressed [ 2199.483092][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2199.598072][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2199.627408][T30123] usb usb9-port1: unable to enumerate USB device [ 2199.717631][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2199.858522][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2199.979701][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2200.048378][ T5354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8915'. [ 2200.097597][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2200.308456][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2200.450856][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2200.728160][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2200.837270][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2201.568020][ T5384] fuse: Bad value for 'user_id' [ 2201.568042][ T5384] fuse: Bad value for 'user_id' [ 2201.580104][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2201.580123][ T30] audit: type=1326 audit(1761487258.305:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.7.8922" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x0 [ 2201.617512][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2201.776991][ T10] usb 5-1: device descriptor read/64, error -71 [ 2201.967156][T30129] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 2202.037076][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2202.125864][T30129] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2202.125896][T30129] usb 1-1: config 0 has no interface number 0 [ 2202.125938][T30129] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2202.129889][T30129] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2202.129929][T30129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.129953][T30129] usb 1-1: Product: syz [ 2202.129969][T30129] usb 1-1: Manufacturer: syz [ 2202.129985][T30129] usb 1-1: SerialNumber: syz [ 2202.167168][ T10] usb 5-1: device descriptor read/64, error -71 [ 2202.168108][T30129] usb 1-1: config 0 descriptor?? [ 2202.172125][T30129] ums-karma 1-1:0.46: USB Mass Storage device detected [ 2202.283034][ T10] usb usb5-port1: attempt power cycle [ 2202.429825][T30129] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 2202.627056][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2202.678558][ T10] usb 5-1: device descriptor read/8, error -71 [ 2202.917089][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2202.954962][ T10] usb 5-1: device descriptor read/8, error -71 [ 2203.110520][ T10] usb usb5-port1: unable to enumerate USB device [ 2203.403695][ T10] usb 1-1: USB disconnect, device number 22 [ 2203.640663][ T5424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8933'. [ 2204.013882][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8935'. [ 2204.032756][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8935'. [ 2204.053248][ T5427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2204.062330][ T5427] macvlan2: entered allmulticast mode [ 2204.068989][ T5427] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2204.567730][T10935] net_ratelimit: 30 callbacks suppressed [ 2204.567747][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2204.637850][ T5918] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2204.707041][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2204.810536][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.819793][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2204.837531][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.903504][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.937443][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.947289][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2204.965756][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2204.981614][ T5918] usb 5-1: no configurations [ 2204.994752][ T5918] usb 5-1: can't read configurations, error -22 [ 2205.087152][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2205.210950][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2205.337174][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2205.457354][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2205.569925][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2205.687669][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2206.284870][ T5454] loop2: detected capacity change from 0 to 7 [ 2206.294487][ T5454] Dev loop2: unable to read RDB block 7 [ 2206.300508][ T5454] loop2: unable to read partition table [ 2206.306507][ T5454] loop2: partition table beyond EOD, truncated [ 2206.323167][ T5454] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2207.107788][ T5837] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2207.140465][ T5468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8947'. [ 2207.247144][ T5837] usb 1-1: device descriptor read/64, error -71 [ 2207.498185][ T5837] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2207.739004][ T5837] usb 1-1: device descriptor read/64, error -71 [ 2207.857419][ T5837] usb usb1-port1: attempt power cycle [ 2207.963161][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 2208.071618][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 2208.142418][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 2208.170845][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 2208.216979][ T5837] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2208.669088][ T5837] usb 1-1: device descriptor read/8, error -71 [ 2208.811571][ T5484] netlink: 'syz.4.8952': attribute type 1 has an invalid length. [ 2208.928850][ T5484] bond1: entered promiscuous mode [ 2208.933947][ T5484] bond1: entered allmulticast mode [ 2208.946021][ T5837] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2209.001546][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8956'. [ 2209.037688][ T5484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2209.058019][ T5837] usb 1-1: device descriptor read/8, error -71 [ 2209.136414][ T5490] bond1: (slave gretap1): making interface the new active one [ 2209.182558][ T5837] usb usb1-port1: unable to enumerate USB device [ 2209.340595][ T5490] gretap1: entered promiscuous mode [ 2209.357048][ T24] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 2209.370792][ T5490] gretap1: entered allmulticast mode [ 2209.396147][ T5490] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2209.591937][ T24] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 2209.669529][T10925] net_ratelimit: 24 callbacks suppressed [ 2209.669552][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2209.690441][ T24] usb 5-1: config 0 has no interface number 0 [ 2209.696697][ T24] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 2209.857820][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2210.090634][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 2210.165396][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2210.177029][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.278118][ T24] usb 5-1: config 0 descriptor?? [ 2210.294475][ T5484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2210.363561][ T24] hub 5-1:0.3: bad descriptor, ignoring hub [ 2210.503870][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2210.637597][ T24] hub 5-1:0.3: probe with driver hub failed with error -5 [ 2210.668135][ T24] sierra 5-1:0.3: Sierra USB modem converter detected [ 2210.745078][ T24] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 2210.767124][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2210.778509][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8961'. [ 2210.888528][ T24] usb 5-1: USB disconnect, device number 14 [ 2210.900607][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2210.910000][ T24] sierra 5-1:0.3: device disconnected [ 2210.957178][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2211.134279][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2211.258086][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2211.417650][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2211.527427][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2211.808105][ T5548] input: syz1 as /devices/virtual/input/input134 [ 2212.539961][ T5568] ptrace attach of "./syz-executor exec"[3931] was attempted by "./syz-executor exec"[5568] [ 2213.077059][ T5837] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2213.116783][ T5582] Invalid logical block size (16777472) [ 2213.257022][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 2213.280786][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.351042][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.395848][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2213.450290][ T5596] tipc: Started in network mode [ 2213.473552][ T5596] tipc: Node identity 3a31cf5466c1, cluster identity 4711 [ 2213.494110][ T5596] tipc: Enabled bearer , priority 0 [ 2213.501751][ T5837] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2213.506318][ T5598] loop2: detected capacity change from 0 to 7 [ 2213.523198][ T5598] Dev loop2: unable to read RDB block 7 [ 2213.535925][ T5598] loop2: unable to read partition table [ 2213.555193][ T5596] tipc: Resetting bearer [ 2213.563971][ T5598] loop2: partition table beyond EOD, truncated [ 2213.599699][ T5598] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2213.612663][ T5593] tipc: Disabling bearer [ 2213.664545][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.695288][ T5837] usb 1-1: config 0 descriptor?? [ 2214.778094][T10929] net_ratelimit: 25 callbacks suppressed [ 2214.778139][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2214.958270][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.067312][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.194116][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.308455][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.417144][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.529852][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.647161][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.758012][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2215.867164][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2216.249525][ T5837] usbhid 1-1:0.0: can't add hid device: -71 [ 2216.255557][ T5837] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2216.290811][ T5837] usb 1-1: USB disconnect, device number 27 [ 2219.847453][T10929] net_ratelimit: 34 callbacks suppressed [ 2219.847476][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2219.977367][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.097164][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.207260][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.318399][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.427356][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.537319][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.648376][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.767195][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2220.877379][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2221.930372][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.936766][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.938266][ T1151] net_ratelimit: 35 callbacks suppressed [ 2224.938289][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.067208][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.177202][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.287163][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.398089][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.517188][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.627118][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.737209][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.847115][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2225.957843][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2229.117226][T26738] Bluetooth: hci0: command 0x0406 tx timeout [ 2229.957214][T10929] net_ratelimit: 35 callbacks suppressed [ 2229.957237][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.077629][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.187189][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.297121][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.407246][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.517484][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.627233][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.737189][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.847240][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2230.957777][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.007893][T10935] net_ratelimit: 35 callbacks suppressed [ 2235.007915][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.128039][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.237195][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.347077][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.457178][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.567253][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.687210][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.797095][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2235.907555][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2236.017082][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.117132][ T1151] net_ratelimit: 36 callbacks suppressed [ 2240.117154][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.238115][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.348359][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.457112][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.567761][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.677086][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.788096][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2240.897114][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2241.008166][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2241.117344][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.127721][T10925] net_ratelimit: 35 callbacks suppressed [ 2245.127744][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.247379][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.357290][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.477226][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.587142][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.697241][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.807112][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2245.917981][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2246.027911][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2246.147518][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.167456][T10935] net_ratelimit: 35 callbacks suppressed [ 2250.167480][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.287198][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.397163][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.507109][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.617238][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.727068][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.837164][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2250.947119][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2251.057172][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2251.167088][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.267122][T10925] net_ratelimit: 36 callbacks suppressed [ 2255.267144][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.387241][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.497085][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.607136][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.717146][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.827342][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2255.937142][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2256.047237][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2256.157456][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2256.267114][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2259.842238][ T5659] Bluetooth: hci2: command 0x0406 tx timeout [ 2259.849179][ T5659] Bluetooth: hci4: command 0x0406 tx timeout [ 2260.378220][ T1151] net_ratelimit: 36 callbacks suppressed [ 2260.378242][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2260.498285][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2260.608084][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2260.719721][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2260.837322][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2260.957838][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2261.067228][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2261.177058][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2261.287286][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2261.397213][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2265.438156][ T1151] net_ratelimit: 35 callbacks suppressed [ 2265.438179][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2265.567356][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2265.687467][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2265.797266][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2265.907089][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2266.017285][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2266.127139][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2266.238849][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2266.347267][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2266.457265][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2270.457123][ T145] net_ratelimit: 35 callbacks suppressed [ 2270.457146][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2270.577117][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2270.687122][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2270.797290][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2270.917363][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2271.027418][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2271.137325][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2271.257179][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2271.367088][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2271.477511][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2275.487198][ T1151] net_ratelimit: 35 callbacks suppressed [ 2275.487221][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2275.608451][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2275.718215][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2275.827105][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2275.937144][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2276.047091][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2276.157281][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2276.267093][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2276.377864][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2276.487305][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2280.517328][ T145] net_ratelimit: 35 callbacks suppressed [ 2280.517351][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2280.637192][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2280.747076][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2280.867120][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2280.977218][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2281.087245][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2281.197228][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2281.307660][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2281.417163][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2281.528560][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2283.361753][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.368227][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.528145][ T145] net_ratelimit: 35 callbacks suppressed [ 2285.528168][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2285.647343][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2285.757223][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2285.867478][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2285.977183][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2286.087524][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2286.197248][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2286.307630][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2286.417369][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2286.527615][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2290.567101][T10933] net_ratelimit: 35 callbacks suppressed [ 2290.567125][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2290.687251][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2290.807666][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2290.917235][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.027117][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.137260][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.247113][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.368172][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.477089][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2291.597463][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2295.677395][ T145] net_ratelimit: 35 callbacks suppressed [ 2295.677418][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2295.797466][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2295.917546][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.027136][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.147187][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.257150][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.367540][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.478748][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.587345][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2296.707226][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2300.747425][T10935] net_ratelimit: 35 callbacks suppressed [ 2300.747447][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2300.867059][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2300.977146][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.087162][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.197255][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.308118][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.427140][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.537148][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.647146][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2301.758329][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2305.787576][ T145] net_ratelimit: 35 callbacks suppressed [ 2305.787599][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2305.907809][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.017209][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.137806][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.247112][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.357198][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.467156][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.577522][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.687148][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2306.798813][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2310.897217][T10925] net_ratelimit: 36 callbacks suppressed [ 2310.897241][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.017074][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.127138][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.237104][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.347195][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.457217][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.577162][T10933] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.697161][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.817100][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2311.927041][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2315.967164][T10929] net_ratelimit: 35 callbacks suppressed [ 2315.967185][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.097502][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.207198][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.317385][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.427204][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.537138][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.647244][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.757184][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.867177][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2316.977173][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2320.998216][ T1993] net_ratelimit: 35 callbacks suppressed [ 2320.998237][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.117399][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.227100][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.337079][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.447105][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.557472][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.667160][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.777156][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.887103][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2321.997205][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.017206][ T1151] net_ratelimit: 35 callbacks suppressed [ 2326.017228][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.137440][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.249250][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.358341][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.466917][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.588078][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.697201][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.808149][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2326.918057][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2327.038011][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.058081][ T1151] net_ratelimit: 35 callbacks suppressed [ 2331.058103][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.177625][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.287188][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.397293][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.507270][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.617925][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.727127][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.848159][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2331.957294][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2332.067136][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.107042][T10935] net_ratelimit: 35 callbacks suppressed [ 2336.107064][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.227142][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.337141][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.447082][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.560277][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.677175][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.787219][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2336.897093][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2337.007147][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2337.117586][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.217328][ T1151] net_ratelimit: 36 callbacks suppressed [ 2341.217350][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.337079][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.447173][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.558099][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.677165][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.787213][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2341.897050][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2342.017786][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2342.127024][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2342.238435][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2344.800818][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.807277][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.257560][T10925] net_ratelimit: 35 callbacks suppressed [ 2346.257583][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.377419][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.487225][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.597324][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.707050][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.827205][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2346.947072][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2347.067134][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2347.177023][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2347.297117][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.318794][T10925] net_ratelimit: 35 callbacks suppressed [ 2351.318818][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.437251][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.547087][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.657293][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.767057][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.877122][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2351.987119][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2352.097053][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2352.207119][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2352.317283][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.407280][T10925] net_ratelimit: 36 callbacks suppressed [ 2356.407302][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.527152][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.637260][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.757110][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.867058][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2356.977142][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2357.087142][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2357.197311][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2357.307053][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2357.427136][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2361.518510][T10929] net_ratelimit: 35 callbacks suppressed [ 2361.518531][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2361.647129][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2361.757228][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2361.867026][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2361.977190][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.086971][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.197115][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.307572][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.417183][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.537134][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2362.727389][ T31] INFO: task kworker/0:6:9589 blocked for more than 143 seconds. [ 2362.735151][ T31] Not tainted syzkaller #0 [ 2362.740180][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2362.748973][ T31] task:kworker/0:6 state:D stack:20744 pid:9589 tgid:9589 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2362.761157][ T31] Workqueue: usb_hub_wq hub_event [ 2362.766212][ T31] Call Trace: [ 2362.769673][ T31] [ 2362.772628][ T31] __schedule+0x1798/0x4cc0 [ 2362.777268][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2362.782671][ T31] ? __pfx___schedule+0x10/0x10 [ 2362.787738][ T31] ? schedule+0x91/0x360 [ 2362.792087][ T31] schedule+0x165/0x360 [ 2362.796260][ T31] usb_kill_urb+0x1be/0x2d0 [ 2362.801247][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2362.806360][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2362.812647][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2362.818751][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2362.824334][ T31] ? usb_alloc_urb+0x46/0x150 [ 2362.829150][ T31] usb_control_msg+0x232/0x3e0 [ 2362.833941][ T31] hub_port_init+0xbf9/0x2800 [ 2362.838966][ T31] hub_event+0x2532/0x4a20 [ 2362.843441][ T31] ? __pfx_hub_event+0x10/0x10 [ 2362.848323][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2362.854082][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2362.859349][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2362.865081][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2362.870914][ T31] process_scheduled_works+0xae1/0x17b0 [ 2362.876490][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2362.885528][ T31] worker_thread+0x8a0/0xda0 [ 2362.890246][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2362.896578][ T31] ? __kthread_parkme+0x7b/0x200 [ 2362.901571][ T31] kthread+0x711/0x8a0 [ 2362.905672][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2362.910998][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.915613][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2362.921826][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2362.927152][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.931752][ T31] ret_from_fork+0x4bc/0x870 [ 2362.936369][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2362.941526][ T31] ? __switch_to_asm+0x39/0x70 [ 2362.946298][ T31] ? __switch_to_asm+0x33/0x70 [ 2362.951184][ T31] ? __pfx_kthread+0x10/0x10 [ 2362.955965][ T31] ret_from_fork_asm+0x1a/0x30 [ 2362.961248][ T31] [ 2362.964595][ T31] [ 2362.964595][ T31] Showing all locks held in the system: [ 2362.972456][ T31] 1 lock held by khungtaskd/31: [ 2362.977345][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2362.987348][ T31] 2 locks held by getty/5586: [ 2362.992030][ T31] #0: ffff88814d08e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2363.001828][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2363.012015][ T31] 5 locks held by kworker/0:6/9589: [ 2363.017361][ T31] #0: ffff88823be1a148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2363.029857][ T31] #1: ffffc9001a187ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2363.042157][ T31] #2: ffff88823be86198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2363.051138][ T31] #3: ffff888028eec518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2363.061551][ T31] #4: ffff888027918768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2363.071435][ T31] [ 2363.073771][ T31] ============================================= [ 2363.073771][ T31] [ 2363.082795][ T31] NMI backtrace for cpu 0 [ 2363.082811][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2363.082833][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2363.082845][ T31] Call Trace: [ 2363.082853][ T31] [ 2363.082861][ T31] dump_stack_lvl+0x189/0x250 [ 2363.082895][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2363.082921][ T31] ? __pfx__printk+0x10/0x10 [ 2363.082952][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2363.082975][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2363.082997][ T31] ? __pfx__printk+0x10/0x10 [ 2363.083021][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2363.083053][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2363.083077][ T31] watchdog+0xf60/0xfa0 [ 2363.083102][ T31] ? watchdog+0x1e2/0xfa0 [ 2363.083126][ T31] kthread+0x711/0x8a0 [ 2363.083155][ T31] ? __pfx_watchdog+0x10/0x10 [ 2363.083173][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.083199][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2363.083222][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2363.083244][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.083270][ T31] ret_from_fork+0x4bc/0x870 [ 2363.083291][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2363.083317][ T31] ? __switch_to_asm+0x39/0x70 [ 2363.083333][ T31] ? __switch_to_asm+0x33/0x70 [ 2363.083349][ T31] ? __pfx_kthread+0x10/0x10 [ 2363.083374][ T31] ret_from_fork_asm+0x1a/0x30 [ 2363.083404][ T31] [ 2363.083412][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2363.230379][ C1] NMI backtrace for cpu 1 [ 2363.230404][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2363.230424][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2363.230436][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2363.230464][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2363.230480][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2363.230497][ C1] RAX: 1c0d7131ef2e4e00 RBX: ffffffff81967b97 RCX: 1c0d7131ef2e4e00 [ 2363.230512][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bf5d RDI: ffffffff8bbf05e0 [ 2363.230525][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 2363.230539][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd470 [ 2363.230559][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003950b58 [ 2363.230572][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 2363.230587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2363.230599][ C1] CR2: 0000557601577660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2363.230615][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2363.230628][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2363.230641][ C1] Call Trace: [ 2363.230656][ C1] [ 2363.230663][ C1] default_idle+0x13/0x20 [ 2363.230687][ C1] default_idle_call+0x73/0xb0 [ 2363.230713][ C1] do_idle+0x1e7/0x510 [ 2363.230734][ C1] ? __pfx_do_idle+0x10/0x10 [ 2363.230760][ C1] cpu_startup_entry+0x44/0x60 [ 2363.230779][ C1] start_secondary+0x101/0x110 [ 2363.230805][ C1] common_startup_64+0x13e/0x147 [ 2363.230836][ C1] [ 2366.537118][T10929] net_ratelimit: 34 callbacks suppressed [ 2366.537139][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2366.657176][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2366.767135][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2366.877369][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2366.997419][ T1993] bond3: (slave bridge0): failed to get link speed/duplex [ 2367.117530][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2367.227095][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2367.337157][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2367.457134][T10925] bond3: (slave bridge0): failed to get link speed/duplex [ 2367.567255][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2371.637264][T10929] net_ratelimit: 35 callbacks suppressed [ 2371.637287][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2371.767721][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2371.877191][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2371.987123][ T1151] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.097012][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.207206][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.328481][T10935] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.437146][ T145] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.547082][T10929] bond3: (slave bridge0): failed to get link speed/duplex [ 2372.657928][ T145] bond3: (slave bridge0): failed to get link speed/duplex