last executing test programs: 6m23.852102695s ago: executing program 32 (id=99): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206070002030109022a00010000000009040000db09"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x26, 0x86d14cded5d0cbad}]}, 0x38}}, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x12120, 0x0, 0x0) close(0x3) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0xd, 0x6}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x4, 0x6, 0x10, 0x81}, 0x30, &(0x7f00000000c0)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xa41, 0x541889451c107695, 0x1, [0xff3ff0, 0x30]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x401, 0xff00, 0x5, [0x3f00, 0xff0000]}]}, 0x2, [{0x41, &(0x7f0000000100)=@string={0x41, 0x3, "2dc6a28fc29299ecdb00521a02c4a8ad44cedb5201d6f47a8a2cde90b9a4ce6d3cf99e033e39a02b5a84b0dc243a8c3e32d706f3abda0ae634cf92a8c02caa"}}, {0x6e, &(0x7f0000000180)=@string={0x6e, 0x3, "d775d95823b51f857a74a2462db901993496b07534ace39674ccfb363d5b0de59e314b036e252ae63da832afd44c8690e934a74129b8df822d158d1f6129972c1579e557919599076d46feae5a6a0dfa05a5a2d13512b17b6f46eeac761ef1bf6d45c6970ad9936fe45afbe0"}}]}) syz_usb_connect(0x2, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0) 5m31.076632858s ago: executing program 33 (id=431): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 4m53.43711506s ago: executing program 34 (id=650): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xd68, 0x18}, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200fc0008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) 4m46.571907223s ago: executing program 35 (id=684): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr={0x54363e44, 0x6}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x5, 0x0, 0x3, 0x7, 0x9, 0xfffffff7}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000000c0)=""/75, &(0x7f0000000140)=0x4b) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x330, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @loopback, 0x8, 0x1}}}, {{@arp={@multicast1, @local, 0xffffff00, 0x2cf53646ea9629c0, 0x6, 0x1, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7f, 0x77, 0x0, 0x8, 0xf1, 0x1, 'bridge0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x25d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @empty, 0x1, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 0xc, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xc, 0x2, 0x3, 0x5a, 0x8, 0x0, 'hsr0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 4m19.463704327s ago: executing program 36 (id=813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @hopopts={{0x18, 0x29, 0x36, {0x1d}}}], 0x58}, 0x24004800) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80006) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3m44.224415642s ago: executing program 37 (id=1014): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x28}, 0x24004800) 2m29.096662849s ago: executing program 0 (id=1093): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 2m28.825413109s ago: executing program 0 (id=1097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f00000002c0)=0x200, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m27.040797826s ago: executing program 0 (id=1109): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000060700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m26.714192496s ago: executing program 0 (id=1113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f00000002c0)=0x200, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m25.365375008s ago: executing program 0 (id=1117): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000001c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4000844, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x66010101}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0x4, 0x9, 0x12, 0x2}, 0x19) io_uring_setup(0x1b5d, &(0x7f00000000c0)={0x0, 0xafa9, 0x20, 0x1, 0x231}) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCINQ(r3, 0x4b32, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x8, 0xa0001) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=r7, @ANYRES32], 0x20) 2m24.968886133s ago: executing program 0 (id=1120): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f00000002c0)=0x200, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m21.095976054s ago: executing program 7 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000120000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000400031080006"], 0xf4}}, 0x0) 2m20.437614189s ago: executing program 7 (id=1144): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0xe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3967, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$pid(0x1, 0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=[0x0], 0x0, 0xd6, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) dup2(0xffffffffffffffff, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) pipe2$9p(&(0x7f0000000200), 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0x8c, 0x83, 0x40, 0x499, 0x4d3f, 0xd22a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x1, 0xff, 0x40, 0xd3, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd, 0x10, 0x63}, {0x6, 0x24, 0x1a, 0x7d, 0x2}}], [{{0x9, 0x5, 0xb, 0x2, 0x7ff, 0x6, 0x2, 0x5}}]}}]}}]}}, 0x0) 2m19.021760445s ago: executing program 7 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) dup2(r1, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xd, 0x1884, 0x1, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}, {{0x1c, 0x1, {0x81, 0xfe, 0x8001, 0x9b, 0x2, 0x4, 0x2, 0xa}}, {0x18, 0x2, [0x200, 0x3, 0x3, 0x1c0, 0x9ec3, 0x80, 0xfff, 0x0, 0x800, 0x9]}}, {{0x1c, 0x1, {0x89, 0x6, 0x80, 0x5, 0x2, 0x7, 0x101, 0x1}}, {0x6, 0x2, [0x404]}}, {{0x1c, 0x1, {0x4, 0xf7, 0x9, 0x7, 0x1, 0x5, 0xe, 0x5}}, {0xe, 0x2, [0x6996, 0x6, 0x1000, 0xb36e, 0x0]}}, {{0x1c, 0x1, {0x4, 0xff, 0x7fff, 0x4, 0x0, 0x7, 0xe8d, 0x2}}, {0x8, 0x2, [0x5f, 0x4]}}, {{0x1c, 0x1, {0x5d, 0x8, 0x8, 0x6, 0x1, 0x4, 0xda, 0x2}}, {0x8, 0x2, [0x9758, 0x400]}}]}]}, 0x118}}, 0x0) 2m18.902186402s ago: executing program 7 (id=1150): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8000) 2m18.496802041s ago: executing program 7 (id=1152): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x2a, 0x1, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00006d4000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000280)="0f01c2b9f00200000f320f20c035000000200f22c067f3420f7034da612e0f01c2410f21230f35416e0f22e766ba2000b006ee", 0x33}], 0x1, 0x3, &(0x7f0000000380)=[@cr4={0x1, 0x20100}], 0x1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x55}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r7, 0x5) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r10, 0x0, 0x0, 0x0) 2m17.677375591s ago: executing program 7 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000080)=0x14) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x28000b00) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0}) 2m17.387624432s ago: executing program 38 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000080)=0x14) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x28000b00) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0}) 2m9.802310594s ago: executing program 39 (id=1120): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f00000002c0)=0x200, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m34.937540189s ago: executing program 9 (id=1383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r5, 0x8, "707b2f7c776e8dbd"}, &(0x7f0000000180)=0x10) 1m33.833404287s ago: executing program 9 (id=1388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @hopopts={{0x18, 0x29, 0x36, {0x1d}}}], 0x40}, 0x24004800) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m33.40680052s ago: executing program 4 (id=1390): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) unshare(0x40900) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xffffffff) fallocate(0xffffffffffffffff, 0x0, 0x737, 0xfffffffffffffff9) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000500)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) io_setup(0xedf, &(0x7f0000001740)=0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/snmp\x00') r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, 0x0, 0x0, 0x1ff, 0x0, 0x2}]) unshare(0x40800) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='7\x00', 0x2) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 1m32.545341811s ago: executing program 4 (id=1392): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x8000000, &(0x7f0000001000/0x4000)=nil) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x2, [{}, {}]}, 0x48) 1m30.953228145s ago: executing program 9 (id=1395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r1 = dup(r0) msgget$private(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e21, @loopback}}}, 0x88) (async, rerun: 64) bind$netlink(r5, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async, rerun: 64) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x2c9ab000) (async) io_setup(0x8, &(0x7f0000004200)) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) fadvise64(r6, 0x5851, 0x0, 0x2) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x278900) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xf0, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) dup(r6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000501ffb0bdd085d9b4ddfb8de650807e644ca350000000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000008500"/96], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x14, '\x00', r4, @tracing=0x2c11c00f1fed7191, r1, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x9, 0x4, 0xfffffff8}, 0x10, r8, r1, 0x2, &(0x7f0000000140)=[r1], &(0x7f0000000180)=[{0x0, 0x4, 0x2, 0x9}, {0x0, 0x4, 0x3, 0x1}], 0x10, 0x9, @void, @value}, 0x94) 1m30.443911155s ago: executing program 9 (id=1397): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) close(r1) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0) (async) 1m30.38116364s ago: executing program 4 (id=1398): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x8000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m30.084806857s ago: executing program 9 (id=1399): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x9a39, 0x80001) chdir(&(0x7f0000000480)='./cgroup\x00') unshare(0x22020400) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r4, 0x8744}], 0x1, 0x0) mkdir(&(0x7f00000001c0)='./cgroup\x00', 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x1, 0x3, 0x2000400000, 0x1, 0x800}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000005c0)=""/22) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x88, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x5000, 0x102}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_MAP={0x24, 0xe, {0x5, 0x9c5, 0x3d1e, 0x4, 0x7, 0x9}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MAP={0x24, 0xe, {0x6, 0x1000, 0x620000, 0x10, 0x1, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) 1m30.084129236s ago: executing program 4 (id=1400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0xffffdffe, 0x1}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="02030000000000"], 0x10}}, 0x90) (async) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="02030000000000"], 0x10}}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x100, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x10, 0x0, r2}, {0x2, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x2, @in6=@mcast1, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x10, 0x100, 0x0, {0x0, 0x4, 0x0, 0xffff, 0x369, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, 0x0, 0x40000) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) (async) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000000)=0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xf0840, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x9, &(0x7f0000000000)) close(0x4) 1m29.726622935s ago: executing program 9 (id=1402): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x10d500) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002c1000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0x101d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 1m29.668658043s ago: executing program 4 (id=1403): r0 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x200000000000000) 1m28.979629569s ago: executing program 40 (id=1402): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x10d500) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002c1000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0x101d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 1m28.957409381s ago: executing program 4 (id=1406): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x34}}, 0x40000) keyctl$revoke(0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r2}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500170025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m28.733551771s ago: executing program 41 (id=1406): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x34}}, 0x40000) keyctl$revoke(0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r2}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500170025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m6.722624469s ago: executing program 6 (id=1507): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m5.529307137s ago: executing program 6 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x7ff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x85, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0x1c) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf256900000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021104003d2d00"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x20050890) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 1m3.836832085s ago: executing program 6 (id=1526): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0x101d0}], 0x1}, 0x5000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 1m3.135571716s ago: executing program 6 (id=1531): r0 = socket$kcm(0x21, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp(0x2, 0x3, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r4, 0x0, 0xd88c1e2e678ec3b7) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x111, 0xe}, {0x18, 0x110, 0xe, "deeec3da"}], 0x28}, 0x0) 1m1.933288439s ago: executing program 6 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x7ff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x85, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0x1c) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 1m1.573480699s ago: executing program 6 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.07524284s ago: executing program 42 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.761315762s ago: executing program 2 (id=1835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106605041086a30000000109022400010000a000090400000503000000f02000000001224500190581034000000200"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa8175ddbd06d58480b05"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8, 0x600000) ioctl$SG_BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x6527, 0xe, 0x0, 0x3, 0x6}) 7.301454344s ago: executing program 8 (id=1841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 6.970625905s ago: executing program 8 (id=1843): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xfff, 0xfffffff9, 0x10001, 0x406cc, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x2, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x8001, &(0x7f00000001c0)={[0xd]}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000006c0)={&(0x7f0000000180)=[{0x7f, 0x3011, 0x0, 0x0}, {0x1, 0x811, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000000000000a004e2000008000ff0200000000000000000000000000010a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2200000008fe80000000000000000000000000003100000000000000000000000000000000000000000000000070b4c000"/275], 0x90) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000600)={0xffffb6a5, {{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x1, 0x5, [{{0xa, 0x4e22, 0xfff, @remote, 0x361b}}, {{0xa, 0x4e21, 0x7, @loopback, 0xd8}}, {{0xa, 0x4e23, 0xda96, @mcast1, 0xfffffff7}}, {{0xa, 0x4e21, 0x7f, @private1, 0x9}}, {{0xa, 0x4e23, 0x7fffffff, @local, 0x1}}]}, 0x310) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000540)={0x0, 0x3, 0x1, "d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000070000000000001907864010100ac1414aa0b0290780300000045000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f0000017f000001e00000020000008def824c22585f39baa5d6e04d5f102a73ed4035e56c3da85ecaee5c3705d783260a036e9bcfc7825b03c5ba63196b7b969628ebc32f68c5fb9270d62dd5d166c90d8507a926361aae74bab965d25d50c12ceeb9e1897bd732a3e79ee6"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.889156797s ago: executing program 8 (id=1854): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001600)=ANY=[@ANYBLOB="bb0243d08d78d6a6fdb718f85dfce7d3db3b5b5b672fd806edff8111b0a71eab64d4eb6e7304ac89dde1f4b980545e941ce4558a6cb9ea131f8716d9bc29a67e09234bcf828e2ad2dd45e81a00ea4fe31e456c3c8b6bf5621e98369cbe0ff113cba5d6c0db6d74f6ec05ee4418b8580b3e1ae806d69107", @ANYRES16=r2, @ANYBLOB="330300000000fbdbdf25150000000c0001800800030007000000"], 0x20}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x8, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000004c0)={0x2, 0x3, 0x800b, 0x4, 0x401, 0x0, 0x2, 0x5, r6}, &(0x7f00000016c0)=0x20) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x4, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="0864920d365f9e7c20e54c9d9996b8bf44d61bc0c885e1c2b40f0800", 0x1c}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1058}, 0x40014) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000000)={r10, 0x9}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000003c0)={r10, @in={{0x2, 0x4e23, @private=0xa010100}}, [0x6, 0xfffffffffffffffc, 0x8, 0x2, 0x9, 0x4, 0x4, 0x0, 0x0, 0xe8, 0x7, 0x235e, 0xfd, 0xa004, 0x4800]}, &(0x7f00000002c0)=0x100) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r11, 0x29, 0x1, 0x3, 0x8, 0x20, @remote, @mcast2, 0x80, 0x1, 0x800, 0x10001}}) close_range(r3, 0xffffffffffffffff, 0x0) 4.604754428s ago: executing program 8 (id=1857): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@newtaction={0x26c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x258, 0x1, [@m_skbmod={0xd8, 0x1f, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x20000000, 0x1, 0x7f}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x29, 0xffffffffffffffff, 0x4a, 0x5}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x17c, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x14d, 0x6, "2d3226d2e3c57ead557080202f648bcdfe78417bc2116e51a2e0cec3ecc283dc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c18c59c8c9e2fcbd90d335bc50b9fe7f8bc3d0041c343f964816c387c2b856c8dc4b06bf7a3fe6e0fb860738eb6bfbd18b07588e329e421012b28551f9c1267b24f31285115c4986075bc929c62ad791236fd2c769aa297fe40da014506d861bfbd51a5e408d3a670759313c72590c4d78459ca7243d0539e14a26d7f08a6523777b2ca84a894c6e3c4b199104af8901d23deade80f32559881a998bc20d0f0298dc81428c0aa7e5972dcc7fba27c09d4142ad6c823285ec0df7b8bc98a646cc17b35da21f7867a6cbbd06867ddcbac392dd433064512a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x26c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="8fb2f75337011a847163602b0cad82d9d3a1e789644ab050a8318dd1483c2ce11d49471b054489531d450383ad9762e595435ccad0791c11e8de2ea6ef8549f327d741d24e8e851d8b", 0x49}, {&(0x7f00000006c0)="e27c527c1ec4879fa38aaa69f891f998cd03f0d27eb881981e8856f4eeb59c6183fead3ff053b57638eeea18724f17815a952162ad9a8b429dd66a80c69bb52c216ec3761c19c30710e7639598d606601d3144f35d348fe39a20761c2e3c28a772c1792d161358c37d6a05", 0x6b}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.545409831s ago: executing program 2 (id=1858): r0 = syz_io_uring_setup(0x419, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff14}, 0x0, 0x3a32eb15c0079da3, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@connbytes={{0x38}, {[], 0x3}}, @common=@inet=@socket1={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 4.339384674s ago: executing program 8 (id=1861): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b0001000000000904000001071d0200c8bbefb6"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x200, 0x1, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/138, 0x8a, 0x0, &(0x7f0000000e40)=""/222, 0xde}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="4000ab80dc0ca70cf500", @ANYRES32=r4, @ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24010) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x22, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 4.033233568s ago: executing program 5 (id=1862): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) set_mempolicy(0x4000, &(0x7f00000002c0)=0x200, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.918112605s ago: executing program 2 (id=1863): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x8, 0xa0001) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[], 0x20) 3.737310734s ago: executing program 1 (id=1865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='pimreg1\x00', 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x680000, 0xa5) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x2, {0xc86, 0x400, 0x4, 0x8, 0x1ff, 0x7fffffffffffffff, 0x7, 0x8334, 0x10000}}, 0x43) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shutdown(r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x47, 0x76, 0xb8, 0x8, 0x979, 0x270, 0xa817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xb6, 0x2a}}]}}]}}, 0x0) 3.445359723s ago: executing program 2 (id=1867): unshare(0x2000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000006400128009000100766c616e00000000540002800600010000000003400003800c00010007000000750700000c00010005000000030000000c000100f90d00009a0000000c00110006000000020000000c000100ffffffff020000000600050088a8000008000500", @ANYRES32=r2], 0xa0}}, 0x8000) 2.689365176s ago: executing program 2 (id=1869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 2.689054719s ago: executing program 3 (id=1870): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xd68, 0x18}, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 2.389312509s ago: executing program 5 (id=1871): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000680)={0x2, 0x0, {&(0x7f0000000540)=""/99, 0x63, &(0x7f00000005c0)=""/130, 0x3, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0xeeef0000, 0xb8, &(0x7f00000003c0)=""/184}, {0x80a0000, 0x6, &(0x7f00000001c0)=""/6}, {0x0, 0x0, &(0x7f0000000200)}, {0x4000, 0x36, &(0x7f0000000280)=""/54}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 2.383362807s ago: executing program 3 (id=1872): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000"], 0xf4}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030527bd7000000000000000ffe4", @ANYRES32=0x0, @ANYBLOB="0000000000090000140012800b0001006d6163736563000057fe028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) 2.15604995s ago: executing program 2 (id=1873): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x630, 0x5, 0x0, 0xbe}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x9, 0x6, 0x1, 0xdf, 0xe0}, 0xc4, &(0x7f00000005c0)={0x5, 0xf, 0xc4, 0x3, [@generic={0x1f, 0x10, 0xa, "a75c6b8f2f560a68c61b4241e7b01b6494a18232fdb3644cd00e7eec"}, @generic={0x96, 0x10, 0xb, "7f19e702150764ca56fb19f269b678cb842c6bafb0e29b192c4bd0376b8167bfb07014f046d9d97b2ac86595b06080f5f8c3d804d142787dd1c4782d5c47cdb85f037d80ff8723f27200a7bc95772bae4ddec7c7123d840ef12e58bf40498c29a5c6543981fcf069c788823c7b83397d52e0a31ba9baff6a3baa46a961e763c26c37d74b27928790904a23b747e90fd87e52c7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x1, 0x9}]}, 0x9, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x26, &(0x7f0000000800)=@string={0x26, 0x3, "609d0eb7b2075474c678c6fd03a18060dade3d4c88926a67632314042ce3a7c703cca388"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40f}}, {0x69, &(0x7f0000000880)=@string={0x69, 0x3, "c17f4872c061455834c52c127c893e7121375cc884b6ed0387d62b9d825c3f77a7d95b484fc5e4239da94f346bc09922a3fd488199784cc28e0d59e4505b3f532c0d18486ef8bee2f1de861c39f87701144d0d6952b90c24f7f79e37495ed32635b1e1fe62a64f"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1409}}]}) io_uring_enter(0xffffffffffffffff, 0xe3e, 0xe7f2, 0x2, &(0x7f0000000080)={[0x3]}, 0x8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xcc, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x12, 0xc0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3069, 0x3}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x1, "fb"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0xbe, "33fd1b"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x4, 0x0, "60f70937"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x2, "a44f090047"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x101, 0xe2, "eb476b0680af"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x2, 0x1, 0x9, 0x6, 0xc2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0x81, "764854dd2a938197d0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xa, 0x1, 0x0, {0x7, 0x25, 0x1, 0x80, 0x7, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0xf2, 0xf0, "0f119a7278a2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x0, 0xe, {0x7, 0x25, 0x1, 0x2, 0xc, 0xfff7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x5, 0xfe, 0x1, 0x8, 0x3a}, 0x156, &(0x7f0000000340)={0x5, 0xf, 0x156, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6ba913a337f0cede, 0x1, 0x2, 0x3ff, 0x4}, @generic={0x44, 0x10, 0x1, "1141fdc753a60ed68803c8097aff74377598b784612ebfb9d043fd28beabb26e8e2c80244afea4bda6372849752fa1e0ae01d12facfe26a587fe7dd391c1827655"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x1, 0x1}, @generic={0xfb, 0x10, 0x2, "311362591825b9cd6c5b2ffdb183d0a595117e3d9415a9558110a2cd61d3975fa7f9d90e2aa8ec0ead36f3ee99add64948e2be3314b753fe3a96b0f55e7bc225fd8913de9bcdc611045892073435898a8af3ff4b21ef3ca218663c7672716ab468ba921a30866cf2d60445f7d5e5b42901831d7c3a8115201cb7475b747354e7f61d1038550848b22df0f2854ff064a6a5fd3a01ce651dd212767ac7c52f9141b84cafdb5e4d15bbda681e2458cdedb676e00f5cc37a638c13a4f35d5f7340cb9de87a020de8afb0164c18a5a918b9af17cd98f236c99962eb05de5cf64c7b6e8f464cad76b2840983be892fc3e8fb609eba40814a306527"}]}, 0x2, [{0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="10032a78ee8ed45aac00000000fa00"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0d}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @remote, 0x80000000}, 0x1c) sendto$inet6(r3, &(0x7f0000000a40)="e7", 0x1, 0x20004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x22, 0x4, 0xfd, 0x5, 0x0, 0x3, 0x8, 0x20, 0xfb, 0x7d, 0x82, 0x0, 0x9, 0xf7}, 0xe) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x4e}], 0x1, 0x10123, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.798625193s ago: executing program 1 (id=1874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900fffffff500000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a0300000000000000000002000000090001"], 0x98}}, 0x0) 1.797385596s ago: executing program 5 (id=1875): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x18, 0x2, 0x1, "bc3e099e006605ba895b6a00523a89ee8e00", 0x4745504d}) r0 = syz_io_uring_setup(0x233, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000200), &(0x7f0000000280), 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/98) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.617486005s ago: executing program 3 (id=1876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 1.45520643s ago: executing program 5 (id=1877): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x8, 0xa0001) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[], 0x20) 1.403892912s ago: executing program 1 (id=1878): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)="8fc51ea43bc38fdc672ff8a38c366bb16b506f6b0a9054452a7000", 0x1b}], 0x1}}], 0x1, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000380)=@generic={0x1, 0xfffffffffffffff7, 0x1}) r3 = getpid() capset(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000001c0)={0x9, 0x5, 0x8002, 0x0, 0x0, 0x7}) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x101, 0xc}, {0x6d53, 0x40000000}]}, 0x14, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffb, 0x10040) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 1.257506877s ago: executing program 3 (id=1879): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.032643982s ago: executing program 3 (id=1880): r0 = fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000001040)=""/4086, 0xff6}, {&(0x7f0000003680)=""/4128, 0x1020}, {&(0x7f0000000140)=""/191, 0xbf}], 0x4}, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86517aa0a04a0748ca164387641ab6c4e6b4877c4aaf68187bae53dca2ba35bda6a876c1d00480068a608649e754148a3c624af4b576abf6f00a705259a3651a3f66037bbd4227d726be70e45097686e1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4001010) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) 818.053828ms ago: executing program 1 (id=1881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) unshare(0x40900) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xffffffff) fallocate(0xffffffffffffffff, 0x0, 0x737, 0xfffffffffffffff9) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000500)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) io_setup(0xedf, &(0x7f0000001740)=0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/snmp\x00') r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, 0x0, 0x0, 0x1ff, 0x0, 0x2}]) unshare(0x40800) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='7\x00', 0x2) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00000000000000000f761200ffffe0000012fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9f2e505b0c0a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386c020000000000000017fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b653d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b5295e93496a6fdf5af8122257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087aec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d44dee62c4fc1007bc5b0ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7"], 0x0) 655.328204ms ago: executing program 3 (id=1882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x60004050}, 0x4009) 461.440874ms ago: executing program 5 (id=1883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 272.746611ms ago: executing program 1 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000004000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 127.39023ms ago: executing program 8 (id=1885): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0x101d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}, 0x500}], 0x2, 0x0, 0x0) 895.917µs ago: executing program 1 (id=1886): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x1, 0x2, 0x8, 0xff, 0x94, 0x9, 0x3, 0x1000, [{0x4, 0xffffffff, 0x5, 0x35b}, {0x6, 0x7fffffff, 0x5, 0x92d}, {0x6, 0x5, 0x8, 0x6}, {0x9, 0x5, 0x4, 0x5}, {0x9, 0x800, 0xbf2e, 0x2}, {0x7f59, 0x8, 0x18000, 0x8}, {0x9, 0x1, 0x4018, 0xe0}, {0x476a, 0x4, 0x5}]}}]}}]}, 0xc4}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf2ff000000000000) 0s ago: executing program 5 (id=1887): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x350, 0x268, 0xd8, 0xffffffff, 0x340, 0xd8, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @dev, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cc28fe4a71ed0258ba5390ec8eacbc009fcee2e25fcc301910f5137dd8b1"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x406503, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x20, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @pid=r3}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) kernel console output (not intermixed with test programs): 410.109082][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.130126][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.166006][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 410.176388][T11970] veth1_macvtap: left promiscuous mode [ 410.182129][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 410.200442][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.234413][ T5889] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.258178][ T5889] usb 2-1: can't read configurations, error -61 [ 410.278824][ T5889] usb usb2-port1: attempt power cycle [ 410.370628][T11973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1415'. [ 410.408641][T11973] netlink: 'syz.8.1415': attribute type 7 has an invalid length. [ 410.437810][T11973] netlink: 'syz.8.1415': attribute type 8 has an invalid length. [ 410.471859][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.485999][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1415'. [ 410.518492][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.518979][T11973] team0: entered promiscuous mode [ 410.525605][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.525640][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.525669][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.558850][T11973] team_slave_0: entered promiscuous mode [ 410.577638][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.579106][T11973] team_slave_1: entered promiscuous mode [ 410.598729][ T5906] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 410.629553][ T5906] cypress 0003:04B4:0001.0008: hidraw0: USB HID v10.03 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 410.632195][T11973] bond0: entered promiscuous mode [ 410.667774][ T5889] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 410.730320][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 410.738702][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.751347][ T5889] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.764594][ T5889] usb 2-1: can't read configurations, error -61 [ 410.773599][ T5892] usb 6-1: USB disconnect, device number 25 [ 410.794085][T11973] bond_slave_0: entered promiscuous mode [ 410.823740][T11973] bond_slave_1: entered promiscuous mode [ 410.851674][T11973] gretap0: entered promiscuous mode [ 410.883985][T11973] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 410.919526][T11973] Cannot create hsr debugfs directory [ 410.928523][ T5889] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 410.950218][T11973] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 410.979238][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 410.992164][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.052130][ T5889] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 411.071683][ T5889] usb 2-1: can't read configurations, error -61 [ 411.094013][ T5889] usb usb2-port1: unable to enumerate USB device [ 411.211259][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1484'. [ 411.275474][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1483'. [ 411.477187][T11986] FAULT_INJECTION: forcing a failure. [ 411.477187][T11986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.500606][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.6.1485 Not tainted 6.14.0-rc1-syzkaller #0 [ 411.500636][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 411.500649][T11986] Call Trace: [ 411.500656][T11986] [ 411.500665][T11986] dump_stack_lvl+0x241/0x360 [ 411.500696][T11986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.500719][T11986] ? __pfx__printk+0x10/0x10 [ 411.500755][T11986] ? __pfx_lock_release+0x10/0x10 [ 411.500793][T11986] should_fail_ex+0x40a/0x550 [ 411.500822][T11986] _copy_to_iter+0x1f8/0x1c50 [ 411.500854][T11986] ? __virt_addr_valid+0x183/0x530 [ 411.500886][T11986] ? __pfx_lock_release+0x10/0x10 [ 411.500924][T11986] ? __might_fault+0xaa/0x120 [ 411.500952][T11986] ? __might_fault+0xc6/0x120 [ 411.500981][T11986] ? _copy_to_iter+0x267/0x1c50 [ 411.501011][T11986] ? __pfx__copy_to_iter+0x10/0x10 [ 411.501045][T11986] ? __virt_addr_valid+0x183/0x530 [ 411.501076][T11986] ? __virt_addr_valid+0x183/0x530 [ 411.501105][T11986] ? __virt_addr_valid+0x45f/0x530 [ 411.501138][T11986] ? __check_object_size+0x47a/0x730 [ 411.501165][T11986] __skb_datagram_iter+0x107/0x900 [ 411.501189][T11986] ? __virt_addr_valid+0x183/0x530 [ 411.501219][T11986] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 411.501244][T11986] ? __check_object_size+0x47a/0x730 [ 411.501269][T11986] __skb_datagram_iter+0x6e4/0x900 [ 411.501294][T11986] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 411.501325][T11986] skb_copy_datagram_iter+0xd1/0x250 [ 411.501353][T11986] tipc_recvmsg+0x7ec/0x13c0 [ 411.501399][T11986] ? __pfx_tipc_recvmsg+0x10/0x10 [ 411.501439][T11986] ? __pfx___might_resched+0x10/0x10 [ 411.501463][T11986] ? aa_sock_msg_perm+0x91/0x160 [ 411.501493][T11986] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 411.501525][T11986] ? __pfx_tipc_recvmsg+0x10/0x10 [ 411.501557][T11986] sock_recvmsg+0x22f/0x280 [ 411.501588][T11986] ____sys_recvmsg+0x1c6/0x480 [ 411.501618][T11986] ? __pfx_____sys_recvmsg+0x10/0x10 [ 411.501663][T11986] do_recvmmsg+0x426/0xab0 [ 411.501698][T11986] ? __pfx_do_recvmmsg+0x10/0x10 [ 411.501739][T11986] ? ksys_write+0x22a/0x2b0 [ 411.501768][T11986] ? __pfx_lock_release+0x10/0x10 [ 411.501805][T11986] ? sb_end_write+0xe9/0x1c0 [ 411.501828][T11986] ? vfs_write+0x7fa/0xd10 [ 411.501853][T11986] ? __mutex_unlock_slowpath+0x227/0x800 [ 411.501884][T11986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.501917][T11986] ? __fget_files+0x2a/0x410 [ 411.501947][T11986] __x64_sys_recvmmsg+0x199/0x250 [ 411.501968][T11986] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 411.501988][T11986] ? do_syscall_64+0x100/0x230 [ 411.502015][T11986] ? do_syscall_64+0xb6/0x230 [ 411.502040][T11986] do_syscall_64+0xf3/0x230 [ 411.502063][T11986] ? clear_bhb_loop+0x35/0x90 [ 411.502091][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.502114][T11986] RIP: 0033:0x7f8c3c18cda9 [ 411.502130][T11986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.502144][T11986] RSP: 002b:00007f8c3d0a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.502163][T11986] RAX: ffffffffffffffda RBX: 00007f8c3c3a6080 RCX: 00007f8c3c18cda9 [ 411.502176][T11986] RDX: 0000000000000002 RSI: 00000000200043c0 RDI: 0000000000000003 [ 411.502188][T11986] RBP: 00007f8c3d0a3090 R08: 0000000000000000 R09: 0000000000000000 [ 411.502199][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.502210][T11986] R13: 0000000000000001 R14: 00007f8c3c3a6080 R15: 00007f8c3c4cfa18 [ 411.502233][T11986] [ 412.242031][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1490'. [ 412.808725][ T5892] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 412.882612][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 412.980444][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.011822][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.069377][ T5892] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.398475][ T5889] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 413.418927][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.426966][ T5892] usb 2-1: SerialNumber: syz [ 413.676208][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.691213][ T5889] usb 6-1: config 255 has an invalid interface number: 119 but max is 0 [ 413.700789][ T5889] usb 6-1: config 255 has no interface number 0 [ 413.714385][ T5889] usb 6-1: config 255 interface 119 has no altsetting 0 [ 413.763754][ T5889] usb 6-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 413.773417][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=179, SerialNumber=3 [ 413.784171][ T5892] usb 2-1: 0:2 : does not exist [ 413.793000][ T5889] usb 6-1: Product: syz [ 413.797194][ T5889] usb 6-1: Manufacturer: syz [ 413.811536][ T5892] usb 2-1: USB disconnect, device number 70 [ 413.820688][ T5889] usb 6-1: SerialNumber: syz [ 413.922001][T12051] FAULT_INJECTION: forcing a failure. [ 413.922001][T12051] name failslab, interval 1, probability 0, space 0, times 0 [ 414.064997][T10969] udevd[10969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.118655][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.6.1501 Not tainted 6.14.0-rc1-syzkaller #0 [ 414.118683][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 414.118694][T12051] Call Trace: [ 414.118700][T12051] [ 414.118707][T12051] dump_stack_lvl+0x241/0x360 [ 414.118728][T12051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.118750][T12051] ? __pfx__printk+0x10/0x10 [ 414.118776][T12051] ? kmem_cache_alloc_noprof+0x48/0x380 [ 414.118795][T12051] ? __pfx___might_resched+0x10/0x10 [ 414.118817][T12051] should_fail_ex+0x40a/0x550 [ 414.118838][T12051] should_failslab+0xac/0x100 [ 414.118854][T12051] ? security_file_alloc+0x32/0x310 [ 414.118872][T12051] kmem_cache_alloc_noprof+0x70/0x380 [ 414.118892][T12051] security_file_alloc+0x32/0x310 [ 414.118911][T12051] init_file+0x91/0x280 [ 414.118930][T12051] alloc_empty_file+0xb8/0x1d0 [ 414.118947][T12051] alloc_file_pseudo+0x1fc/0x2e0 [ 414.118964][T12051] ? rcu_is_watching+0x15/0xb0 [ 414.118983][T12051] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 414.119001][T12051] ? security_inode_alloc+0xd2/0x310 [ 414.119031][T12051] sock_alloc_file+0xb8/0x280 [ 414.119052][T12051] do_accept+0x36f/0x6d0 [ 414.119076][T12051] ? __pfx_do_accept+0x10/0x10 [ 414.119112][T12051] __sys_accept4+0x11f/0x1d0 [ 414.119135][T12051] ? __pfx___sys_accept4+0x10/0x10 [ 414.119156][T12051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.119179][T12051] ? do_syscall_64+0x100/0x230 [ 414.119204][T12051] __x64_sys_accept4+0x9a/0xb0 [ 414.119227][T12051] do_syscall_64+0xf3/0x230 [ 414.119248][T12051] ? clear_bhb_loop+0x35/0x90 [ 414.119272][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.119299][T12051] RIP: 0033:0x7f8c3c18cda9 [ 414.119313][T12051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.119326][T12051] RSP: 002b:00007f8c3d0c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 414.119342][T12051] RAX: ffffffffffffffda RBX: 00007f8c3c3a5fa0 RCX: 00007f8c3c18cda9 [ 414.119353][T12051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 414.119363][T12051] RBP: 00007f8c3d0c4090 R08: 0000000000000000 R09: 0000000000000000 [ 414.119373][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.119382][T12051] R13: 0000000000000000 R14: 00007f8c3c3a5fa0 R15: 00007f8c3c4cfa18 [ 414.119402][T12051] [ 414.658426][ T1218] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 414.838774][ T1218] usb 9-1: Using ep0 maxpacket: 8 [ 414.865256][ T1218] usb 9-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 414.900558][ T1218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.963776][ T1218] usb 9-1: config 0 descriptor?? [ 415.184379][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.194469][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.253136][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.309335][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.309534][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.318665][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.419648][ T5892] usb 9-1: USB disconnect, device number 9 [ 415.512100][ T29] audit: type=1326 audit(1738601577.078:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 415.571950][ T29] audit: type=1326 audit(1738601577.078:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 415.777891][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1507'. [ 415.808153][ T29] audit: type=1326 audit(1738601577.108:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 415.838148][ T29] audit: type=1326 audit(1738601577.108:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 415.869735][ T29] audit: type=1326 audit(1738601577.108:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 415.896037][T12087] netlink: 'syz.6.1507': attribute type 7 has an invalid length. [ 415.907232][T12087] netlink: 'syz.6.1507': attribute type 8 has an invalid length. [ 415.915865][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'. [ 415.972949][T12087] team0: entered promiscuous mode [ 415.978099][T12087] team_slave_0: entered promiscuous mode [ 415.978231][ T29] audit: type=1326 audit(1738601577.108:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 416.114270][T12087] team_slave_1: entered promiscuous mode [ 416.138505][ T29] audit: type=1326 audit(1738601577.108:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 416.248079][ T29] audit: type=1326 audit(1738601577.118:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 416.262342][T12087] bond0: entered promiscuous mode [ 416.286377][T12092] netlink: 'syz.1.1508': attribute type 11 has an invalid length. [ 416.337576][T12087] bond_slave_0: entered promiscuous mode [ 416.363852][ T29] audit: type=1326 audit(1738601577.168:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 416.367766][T12087] bond_slave_1: entered promiscuous mode [ 416.406048][T12087] gretap0: entered promiscuous mode [ 416.500421][T12087] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 416.513986][ T29] audit: type=1326 audit(1738601577.168:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3c18cda9 code=0x7ffc0000 [ 416.590376][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1510'. [ 416.601550][T12087] Cannot create hsr debugfs directory [ 416.643422][T12087] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 417.045556][ T5889] rndis_host 6-1:255.119: invalid descriptor buffer length [ 417.072614][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.083660][ T5889] usb 6-1: bad CDC descriptors [ 417.100629][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.114582][ T5889] cdc_acm 6-1:255.119: invalid descriptor buffer length [ 417.166492][ T5889] usb 6-1: USB disconnect, device number 26 [ 417.250344][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.298696][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 417.480137][ T25] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 417.516234][ T25] usb 9-1: config 0 has no interface number 0 [ 417.530772][T12126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.548232][ T25] usb 9-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 417.577392][ T25] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 417.617501][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.641111][ T25] usb 9-1: config 0 descriptor?? [ 417.668045][ T25] keyspan 9-1:0.136: Keyspan 2 port adapter converter detected [ 417.704173][ T25] keyspan 9-1:0.136: found no endpoint descriptor for endpoint 1 [ 417.733133][ T25] keyspan 9-1:0.136: found no endpoint descriptor for endpoint 84 [ 417.778629][ T25] keyspan 9-1:0.136: found no endpoint descriptor for endpoint 2 [ 417.817210][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 417.843988][ T25] keyspan 9-1:0.136: found no endpoint descriptor for endpoint 88 [ 417.898613][ T25] keyspan 9-1:0.136: found no endpoint descriptor for endpoint 6 [ 417.938126][ T25] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 417.982099][ T25] usb 9-1: USB disconnect, device number 10 [ 418.032482][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 418.063310][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 418.087617][ T25] keyspan 9-1:0.136: device disconnected [ 418.568627][ T25] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 418.703723][T12153] ALSA: seq fatal error: cannot create timer (-19) [ 418.772161][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.803501][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.851243][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.904258][ T25] usb 2-1: config 0 descriptor?? [ 418.923286][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 418.973237][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1527'. [ 419.011679][T12168] netlink: 'syz.8.1527': attribute type 7 has an invalid length. [ 419.039359][T12168] netlink: 'syz.8.1527': attribute type 8 has an invalid length. [ 419.063127][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1527'. [ 419.325993][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 419.369534][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 419.405893][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 419.440484][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 419.474428][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 419.509255][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 419.539960][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 419.569252][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 419.587997][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 419.609256][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 419.620896][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 419.628971][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 419.636410][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 419.670749][ T25] pwc: recv_control_msg error -32 req 02 val 2800 [ 419.698024][ T25] pwc: recv_control_msg error -32 req 04 val 1100 [ 419.717083][ T25] pwc: Registered as video103. [ 419.736637][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 419.925299][ T1218] usb 2-1: USB disconnect, device number 71 [ 420.188448][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1534'. [ 420.230538][T12203] veth1_macvtap: left promiscuous mode [ 420.420709][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1535'. [ 420.495864][T12211] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 420.898400][ T1218] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 420.928618][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.072345][ T1218] usb 2-1: device descriptor read/64, error -71 [ 421.113150][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.208525][ T5906] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 421.262764][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.298472][T11964] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 421.319194][ T1218] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 421.383827][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.401684][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 421.419219][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 421.448468][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 421.459800][ T1218] usb 2-1: device descriptor read/64, error -71 [ 421.486463][T11964] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.500584][ T5906] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 421.517333][T11964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.531570][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.551750][T11964] usb 6-1: config 0 descriptor?? [ 421.556924][ T5906] usb 9-1: Product: syz [ 421.570084][ T1218] usb usb2-port1: attempt power cycle [ 421.582703][ T5906] usb 9-1: Manufacturer: syz [ 421.589118][T11964] cp210x 6-1:0.0: cp210x converter detected [ 421.610035][ T5906] usb 9-1: SerialNumber: syz [ 421.629167][ T5906] usb 9-1: config 0 descriptor?? [ 421.652524][ T5906] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 421.701560][ T5906] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 421.740514][ T35] bridge_slave_1: left allmulticast mode [ 421.746248][ T35] bridge_slave_1: left promiscuous mode [ 421.779466][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.809769][ T35] bridge_slave_0: left allmulticast mode [ 421.815498][ T35] bridge_slave_0: left promiscuous mode [ 421.830648][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.929991][ T1218] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 421.967047][T11964] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 421.982753][ T1218] usb 2-1: device descriptor read/8, error -71 [ 421.997261][T11964] usb 6-1: cp210x converter now attached to ttyUSB0 [ 422.050119][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.065753][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.075253][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.092823][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.103264][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.118541][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.238536][ T1218] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 422.252677][ T5906] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 422.298683][ T5906] em28xx 9-1:0.0: Config register raw data: 0xb6 [ 422.305105][ T5906] em28xx 9-1:0.0: I2S Audio (3 sample rate(s)) [ 422.327960][ T1218] usb 2-1: device descriptor read/8, error -71 [ 422.348704][ T5906] em28xx 9-1:0.0: No AC97 audio processor [ 422.371382][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 422.449932][ T1218] usb usb2-port1: unable to enumerate USB device [ 422.543596][ T35] gretap0 (unregistering): left promiscuous mode [ 422.855631][ T35] bond0 (unregistering): left promiscuous mode [ 422.856785][T11964] usb 6-1: USB disconnect, device number 27 [ 422.863288][ T35] bond_slave_0: left promiscuous mode [ 422.881106][ T35] bond_slave_1: left promiscuous mode [ 422.903360][T11964] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 422.922561][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.957844][T11964] cp210x 6-1:0.0: device disconnected [ 422.957930][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.993129][ T35] bond0 (unregistering): Released all slaves [ 423.027461][T12252] ip6gretap0: entered promiscuous mode [ 423.051343][T12252] ip6gretap0: left promiscuous mode [ 423.172845][ T25] usb 9-1: USB disconnect, device number 11 [ 423.405064][T12271] FAULT_INJECTION: forcing a failure. [ 423.405064][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.458435][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.8.1547 Not tainted 6.14.0-rc1-syzkaller #0 [ 423.458467][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 423.458480][T12271] Call Trace: [ 423.458489][T12271] [ 423.458498][T12271] dump_stack_lvl+0x241/0x360 [ 423.458529][T12271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.458552][T12271] ? __pfx__printk+0x10/0x10 [ 423.458586][T12271] ? __pfx_lock_release+0x10/0x10 [ 423.458624][T12271] should_fail_ex+0x40a/0x550 [ 423.458653][T12271] _copy_to_iter+0x1f8/0x1c50 [ 423.458684][T12271] ? __virt_addr_valid+0x183/0x530 [ 423.458717][T12271] ? __pfx_lock_release+0x10/0x10 [ 423.458746][T12271] ? __might_fault+0xaa/0x120 [ 423.458775][T12271] ? __might_fault+0xc6/0x120 [ 423.458811][T12271] ? _copy_to_iter+0x267/0x1c50 [ 423.458843][T12271] ? __pfx__copy_to_iter+0x10/0x10 [ 423.458878][T12271] ? __virt_addr_valid+0x183/0x530 [ 423.458909][T12271] ? __virt_addr_valid+0x183/0x530 [ 423.458939][T12271] ? __virt_addr_valid+0x45f/0x530 [ 423.458973][T12271] ? __check_object_size+0x47a/0x730 [ 423.459001][T12271] __skb_datagram_iter+0x107/0x900 [ 423.459027][T12271] ? __virt_addr_valid+0x183/0x530 [ 423.459057][T12271] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 423.459083][T12271] ? __check_object_size+0x47a/0x730 [ 423.459108][T12271] __skb_datagram_iter+0x6e4/0x900 [ 423.459134][T12271] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 423.459167][T12271] skb_copy_datagram_iter+0xd1/0x250 [ 423.459203][T12271] tipc_recvmsg+0x7ec/0x13c0 [ 423.459251][T12271] ? __pfx_tipc_recvmsg+0x10/0x10 [ 423.459290][T12271] ? __pfx___might_resched+0x10/0x10 [ 423.459316][T12271] ? aa_sock_msg_perm+0x91/0x160 [ 423.459347][T12271] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 423.459380][T12271] ? __pfx_tipc_recvmsg+0x10/0x10 [ 423.459413][T12271] sock_recvmsg+0x22f/0x280 [ 423.459444][T12271] ____sys_recvmsg+0x1c6/0x480 [ 423.459477][T12271] ? __pfx_____sys_recvmsg+0x10/0x10 [ 423.459523][T12271] do_recvmmsg+0x426/0xab0 [ 423.459558][T12271] ? __pfx_do_recvmmsg+0x10/0x10 [ 423.459603][T12271] ? ksys_write+0x22a/0x2b0 [ 423.459632][T12271] ? __pfx_lock_release+0x10/0x10 [ 423.459668][T12271] ? sb_end_write+0xe9/0x1c0 [ 423.459693][T12271] ? vfs_write+0x7fa/0xd10 [ 423.459725][T12271] ? __mutex_unlock_slowpath+0x227/0x800 [ 423.459765][T12271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.459794][T12271] ? __fget_files+0x2a/0x410 [ 423.459833][T12271] __x64_sys_recvmmsg+0x199/0x250 [ 423.459857][T12271] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 423.459883][T12271] ? do_syscall_64+0x100/0x230 [ 423.459916][T12271] ? do_syscall_64+0xb6/0x230 [ 423.459949][T12271] do_syscall_64+0xf3/0x230 [ 423.459978][T12271] ? clear_bhb_loop+0x35/0x90 [ 423.460011][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.460040][T12271] RIP: 0033:0x7f9c66d8cda9 [ 423.460059][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.460078][T12271] RSP: 002b:00007f9c67bf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 423.460102][T12271] RAX: ffffffffffffffda RBX: 00007f9c66fa6080 RCX: 00007f9c66d8cda9 [ 423.460118][T12271] RDX: 0000000000000002 RSI: 00000000200043c0 RDI: 0000000000000003 [ 423.460132][T12271] RBP: 00007f9c67bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 423.460146][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.460159][T12271] R13: 0000000000000001 R14: 00007f9c66fa6080 R15: 00007f9c670cfa18 [ 423.460207][T12271] [ 424.159380][ T5844] Bluetooth: hci2: command tx timeout [ 424.224803][ T35] team0: left promiscuous mode [ 424.258818][ T35] team_slave_0: left promiscuous mode [ 424.264920][ T35] team_slave_1: left promiscuous mode [ 424.288419][ T1218] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 424.316926][ T35] hsr_slave_0: left promiscuous mode [ 424.339187][ T35] hsr_slave_1: left promiscuous mode [ 424.347325][T12297] FAULT_INJECTION: forcing a failure. [ 424.347325][T12297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.364377][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.376348][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.385493][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.8.1551 Not tainted 6.14.0-rc1-syzkaller #0 [ 424.385521][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 424.385534][T12297] Call Trace: [ 424.385542][T12297] [ 424.385552][T12297] dump_stack_lvl+0x241/0x360 [ 424.385582][T12297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.385605][T12297] ? __pfx__printk+0x10/0x10 [ 424.385646][T12297] ? snprintf+0xda/0x120 [ 424.385672][T12297] should_fail_ex+0x40a/0x550 [ 424.385703][T12297] _copy_to_user+0x31/0xb0 [ 424.385728][T12297] simple_read_from_buffer+0xca/0x150 [ 424.385766][T12297] proc_fail_nth_read+0x1e9/0x250 [ 424.385804][T12297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.385842][T12297] ? rw_verify_area+0x243/0x630 [ 424.385870][T12297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.385905][T12297] vfs_read+0x1f8/0xb40 [ 424.385934][T12297] ? fdget_pos+0x254/0x320 [ 424.385959][T12297] ? __pfx___mutex_lock+0x10/0x10 [ 424.385989][T12297] ? __pfx_vfs_read+0x10/0x10 [ 424.386014][T12297] ? do_sys_openat2+0x17a/0x1d0 [ 424.386041][T12297] ? __fget_files+0x2a/0x410 [ 424.386066][T12297] ? __fget_files+0x395/0x410 [ 424.386097][T12297] ? __fget_files+0x2a/0x410 [ 424.386133][T12297] ksys_read+0x18f/0x2b0 [ 424.386165][T12297] ? __pfx_ksys_read+0x10/0x10 [ 424.386194][T12297] ? do_syscall_64+0x100/0x230 [ 424.386228][T12297] ? do_syscall_64+0xb6/0x230 [ 424.386260][T12297] do_syscall_64+0xf3/0x230 [ 424.386290][T12297] ? clear_bhb_loop+0x35/0x90 [ 424.386324][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.386353][T12297] RIP: 0033:0x7f9c66d8b7bc [ 424.386372][T12297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 424.386391][T12297] RSP: 002b:00007f9c67c15030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.386414][T12297] RAX: ffffffffffffffda RBX: 00007f9c66fa5fa0 RCX: 00007f9c66d8b7bc [ 424.386430][T12297] RDX: 000000000000000f RSI: 00007f9c67c150a0 RDI: 0000000000000004 [ 424.386444][T12297] RBP: 00007f9c67c15090 R08: 0000000000000000 R09: 0000000000000000 [ 424.386458][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.386471][T12297] R13: 0000000000000000 R14: 00007f9c66fa5fa0 R15: 00007f9c670cfa18 [ 424.386503][T12297] [ 424.386728][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.641363][T12301] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 424.655911][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.668461][ T1218] usb 6-1: Using ep0 maxpacket: 32 [ 424.692537][ T1218] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 424.710647][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.734297][ T1218] usb 6-1: Product: syz [ 424.747670][ T35] veth1_macvtap: left promiscuous mode [ 424.753285][ T1218] usb 6-1: Manufacturer: syz [ 424.757936][ T1218] usb 6-1: SerialNumber: syz [ 424.777816][ T1218] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 424.785102][ T35] veth0_macvtap: left promiscuous mode [ 424.791724][ T35] veth1_vlan: left promiscuous mode [ 424.797164][ T35] veth0_vlan: left promiscuous mode [ 425.179834][ T5889] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 425.184567][ T1218] gspca_stk1135: reg_w 0x0 err -71 [ 425.212466][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.239192][ T1218] gspca_stk1135: Sensor write failed [ 425.244583][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.379073][ T5889] usb 9-1: config 0 has an invalid interface number: 122 but max is 0 [ 425.397099][ T5889] usb 9-1: config 0 has no interface number 0 [ 425.398434][ T1218] gspca_stk1135: Sensor write failed [ 425.414010][ T5889] usb 9-1: config 0 interface 122 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 425.436198][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.461181][ T1218] gspca_stk1135: Sensor read failed [ 425.464639][ T5889] usb 9-1: config 0 interface 122 altsetting 0 endpoint 0x84 has invalid maxpacket 792, setting to 64 [ 425.466599][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.537761][ T1218] gspca_stk1135: Sensor read failed [ 425.538267][ T5889] usb 9-1: New USB device found, idVendor=0ace, idProduct=b215, bcdDevice=6f.a6 [ 425.560047][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 425.576197][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.597843][ T5889] usb 9-1: Product: syz [ 425.602681][ T5889] usb 9-1: Manufacturer: syz [ 425.609897][ T5889] usb 9-1: SerialNumber: syz [ 425.615748][ T1218] gspca_stk1135: Detected sensor type unknown (0x0) [ 425.617319][ T5889] usb 9-1: config 0 descriptor?? [ 425.658710][T12309] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 425.666351][T12309] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 425.668431][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.715354][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.758394][ T1218] gspca_stk1135: Sensor read failed [ 425.767425][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.827774][ T1218] gspca_stk1135: Sensor read failed [ 425.828276][T12322] x_tables: duplicate underflow at hook 2 [ 425.870032][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.876430][ T1218] gspca_stk1135: Sensor write failed [ 425.915947][ T1218] gspca_stk1135: serial bus timeout: status=0x00 [ 425.938538][ T1218] gspca_stk1135: Sensor write failed [ 425.948904][ T1218] stk1135 6-1:64.0: probe with driver stk1135 failed with error -71 [ 426.062622][ T1218] usb 6-1: USB disconnect, device number 28 [ 426.180038][ T5889] usb 9-1: USB disconnect, device number 12 [ 426.242499][ T5844] Bluetooth: hci2: command tx timeout [ 426.917867][T12341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.050454][ T35] team0 (unregistering): Port device team_slave_1 removed [ 427.203086][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1560'. [ 427.223102][ T35] team0 (unregistering): Port device team_slave_0 removed [ 427.875546][T12345] ip6gretap0: entered promiscuous mode [ 427.931041][T12345] ip6gretap0: left promiscuous mode [ 428.319700][T12248] chnl_net:caif_netlink_parms(): no params data found [ 428.327647][ T5844] Bluetooth: hci2: command tx timeout [ 428.494597][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1563'. [ 428.722864][T12376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.807592][T12377] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1568'. [ 428.828723][ T1218] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 429.154440][ T1218] usb 2-1: Using ep0 maxpacket: 16 [ 429.199143][ T1218] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 429.239854][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.298775][ T1218] usb 2-1: Product: syz [ 429.298779][T12248] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.298930][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.333822][ T1218] usb 2-1: Manufacturer: syz [ 429.353848][ T1218] usb 2-1: SerialNumber: syz [ 429.377768][ T1218] usb 2-1: config 0 descriptor?? [ 429.394472][T12248] bridge_slave_0: entered allmulticast mode [ 429.425246][T12248] bridge_slave_0: entered promiscuous mode [ 429.505209][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.548640][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.583027][T12248] bridge_slave_1: entered allmulticast mode [ 429.619784][T12248] bridge_slave_1: entered promiscuous mode [ 429.728183][T12248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.765673][T12248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.816105][ T1218] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 429.860892][ T1218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.888847][ T1218] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 429.899760][T12248] team0: Port device team_slave_0 added [ 429.917799][ T1218] usb 2-1: media controller created [ 429.936786][T12248] team0: Port device team_slave_1 added [ 429.996741][ T1218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.023954][T12248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.038724][ T5889] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 430.052218][ T1218] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 430.058762][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.090320][ T1218] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 430.168535][T12248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.201320][T12248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.208668][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 430.210956][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.241350][ T5889] usb 9-1: no configurations [ 430.246021][ T5889] usb 9-1: can't read configurations, error -22 [ 430.266685][T11964] usb 2-1: USB disconnect, device number 76 [ 430.308418][T12248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.329380][T11964] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 430.398634][ T5844] Bluetooth: hci2: command tx timeout [ 430.408679][ T5889] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 430.446422][T12248] hsr_slave_0: entered promiscuous mode [ 430.467986][T12248] hsr_slave_1: entered promiscuous mode [ 430.506069][T12248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.519959][T12248] Cannot create hsr debugfs directory [ 430.578672][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 430.595976][ T5889] usb 9-1: no configurations [ 430.602873][ T5889] usb 9-1: can't read configurations, error -22 [ 430.619676][ T5889] usb usb9-port1: attempt power cycle [ 430.872686][T12248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.978597][ T5889] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 431.009316][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 431.031723][ T5889] usb 9-1: no configurations [ 431.036400][ T5889] usb 9-1: can't read configurations, error -22 [ 431.111521][T12248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.125360][T12430] FAULT_INJECTION: forcing a failure. [ 431.125360][T12430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.155196][T12430] CPU: 1 UID: 0 PID: 12430 Comm: syz.1.1577 Not tainted 6.14.0-rc1-syzkaller #0 [ 431.155226][T12430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 431.155238][T12430] Call Trace: [ 431.155246][T12430] [ 431.155255][T12430] dump_stack_lvl+0x241/0x360 [ 431.155284][T12430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.155306][T12430] ? __pfx__printk+0x10/0x10 [ 431.155346][T12430] ? snprintf+0xda/0x120 [ 431.155371][T12430] should_fail_ex+0x40a/0x550 [ 431.155402][T12430] _copy_to_user+0x31/0xb0 [ 431.155427][T12430] simple_read_from_buffer+0xca/0x150 [ 431.155475][T12430] proc_fail_nth_read+0x1e9/0x250 [ 431.155512][T12430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.155549][T12430] ? rw_verify_area+0x243/0x630 [ 431.155577][T12430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.155613][T12430] vfs_read+0x1f8/0xb40 [ 431.155643][T12430] ? fdget_pos+0x254/0x320 [ 431.155668][T12430] ? __pfx___mutex_lock+0x10/0x10 [ 431.155697][T12430] ? __pfx_vfs_read+0x10/0x10 [ 431.155722][T12430] ? do_sys_openat2+0x17a/0x1d0 [ 431.155748][T12430] ? __fget_files+0x2a/0x410 [ 431.155772][T12430] ? __fget_files+0x395/0x410 [ 431.155793][T12430] ? __fget_files+0x2a/0x410 [ 431.155825][T12430] ksys_read+0x18f/0x2b0 [ 431.155856][T12430] ? __pfx_ksys_read+0x10/0x10 [ 431.155886][T12430] ? do_syscall_64+0x100/0x230 [ 431.155920][T12430] ? do_syscall_64+0xb6/0x230 [ 431.155952][T12430] do_syscall_64+0xf3/0x230 [ 431.155981][T12430] ? clear_bhb_loop+0x35/0x90 [ 431.156015][T12430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.156045][T12430] RIP: 0033:0x7fe1f178b7bc [ 431.156064][T12430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 431.156083][T12430] RSP: 002b:00007fe1f2530030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.156108][T12430] RAX: ffffffffffffffda RBX: 00007fe1f19a5fa0 RCX: 00007fe1f178b7bc [ 431.156124][T12430] RDX: 000000000000000f RSI: 00007fe1f25300a0 RDI: 0000000000000003 [ 431.156138][T12430] RBP: 00007fe1f2530090 R08: 0000000000000000 R09: 0000000000000000 [ 431.156152][T12430] R10: 00000000000003ff R11: 0000000000000246 R12: 0000000000000001 [ 431.156165][T12430] R13: 0000000000000000 R14: 00007fe1f19a5fa0 R15: 00007fe1f1acfa18 [ 431.156195][T12430] [ 431.426024][ T5889] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 431.464527][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 431.489310][ T5889] usb 9-1: no configurations [ 431.493977][ T5889] usb 9-1: can't read configurations, error -22 [ 431.501881][ T5889] usb usb9-port1: unable to enumerate USB device [ 431.543519][T12248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.576768][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 431.689352][T12248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.838631][ T5906] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 431.944717][T12248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.978034][T12248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.997864][T12248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.999620][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 432.013210][T12248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.027789][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.048544][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8464, setting to 1024 [ 432.099281][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.118360][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.128106][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.144160][T12248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.154222][ T5889] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 432.154555][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.172722][ T5906] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.181446][ T5906] usb 2-1: Manufacturer: syz [ 432.197003][ T5906] usb 2-1: config 0 descriptor?? [ 432.225561][T12248] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.258120][ T1548] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.265336][ T1548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.295960][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.303176][ T6396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.328501][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 432.343959][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.373021][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.405487][ T5889] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 432.427915][T12248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.459415][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.526025][ T5889] usb 6-1: config 0 descriptor?? [ 432.570368][T12455] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 432.584033][T12455] bond0: (slave wlan1): Opening slave failed [ 432.953499][ T5889] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 433.006600][T12463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.094814][T12248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.350195][ T5889] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 163: -32 [ 433.360738][ T5889] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 firmware info: -32 [ 433.370539][ T5889] playstation 0003:054C:05C4.0009: Failed to get firmware info from DualShock4 [ 433.382788][ T5889] playstation 0003:054C:05C4.0009: HW/FW version data in sysfs will be invalid. [ 433.397312][ T5889] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0009/input/input31 [ 433.484208][ T5889] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0009/input/input32 [ 433.509654][ T5889] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0009/input/input33 [ 433.583224][ T5889] playstation 0003:054C:05C4.0009: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 433.642992][ T5889] usb 6-1: USB disconnect, device number 29 [ 433.721712][T12248] veth0_vlan: entered promiscuous mode [ 433.785060][T12248] veth1_vlan: entered promiscuous mode [ 434.065186][T12248] veth0_macvtap: entered promiscuous mode [ 434.222281][T12248] veth1_macvtap: entered promiscuous mode [ 434.307282][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.408618][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.457884][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.537171][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.628478][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.655303][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.696665][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.724029][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.730870][ T1218] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 434.773991][T12248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.838194][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.848424][ T5906] rc_core: IR keymap rc-hauppauge not found [ 434.854879][ T5906] Registered IR keymap rc-empty [ 434.865627][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 434.898504][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 434.918462][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.939515][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 434.953772][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.970082][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 434.982594][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.999606][ T1218] usb 9-1: config index 0 descriptor too short (expected 32820, got 52) [ 435.008102][ T1218] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.019736][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.161266][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.172099][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.182222][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.206962][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.219647][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.230441][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 435.254515][T12504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1589'. [ 435.268495][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.278273][T12505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'. [ 435.398654][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.409202][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.425788][ T1218] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.435725][T12248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.446807][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.462409][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.475767][T12248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.486018][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.495508][T12248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.508573][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.517903][ T1218] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 435.529266][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.538036][ T1218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.622699][T12504] vlan2: entered promiscuous mode [ 435.628058][T12504] vlan2: entered allmulticast mode [ 435.633372][T12504] team0: entered allmulticast mode [ 435.639142][T12504] team_slave_0: entered allmulticast mode [ 435.650166][T12504] team_slave_1: entered allmulticast mode [ 435.660063][ T1218] usb 9-1: Product: syz [ 435.678567][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.689174][T12248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.699883][ T1218] usb 9-1: Manufacturer: syz [ 435.713428][ T1218] usb 9-1: SerialNumber: syz [ 435.727828][T12248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.737369][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.765665][ T1218] usb 9-1: config 0 descriptor?? [ 435.839344][T12248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.849251][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 435.867367][T12248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.886136][ T1218] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.906276][ T5906] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 435.927502][ T5906] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 435.937815][T12510] usb usb8: usbfs: process 12510 (syz.5.1590) did not claim interface 0 before use [ 436.008067][ T5906] usb 2-1: USB disconnect, device number 77 [ 436.103250][ T1218] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 436.254966][ T1218] usb 9-1: USB disconnect, device number 17 [ 436.414103][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.452573][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.477816][T12464] udevd[12464]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.568241][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.634508][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.929635][T12528] loop4: detected capacity change from 0 to 7 [ 436.979776][T12528] Dev loop4: unable to read RDB block 7 [ 436.985447][T12528] loop4: unable to read partition table [ 437.003427][T12528] loop4: partition table beyond EOD, truncated [ 437.028621][T12528] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 437.572756][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 437.610941][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.627625][T12556] netlink: 'syz.2.1602': attribute type 21 has an invalid length. [ 437.639554][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.828660][ T5892] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 437.879203][T12569] FAULT_INJECTION: forcing a failure. [ 437.879203][T12569] name failslab, interval 1, probability 0, space 0, times 0 [ 437.886602][T12571] netlink: 'syz.1.1607': attribute type 4 has an invalid length. [ 437.919623][T12569] CPU: 1 UID: 0 PID: 12569 Comm: syz.8.1605 Not tainted 6.14.0-rc1-syzkaller #0 [ 437.919654][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 437.919668][T12569] Call Trace: [ 437.919676][T12569] [ 437.919693][T12569] dump_stack_lvl+0x241/0x360 [ 437.919743][T12569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.919767][T12569] ? __pfx__printk+0x10/0x10 [ 437.919804][T12569] ? __kmalloc_cache_noprof+0x48/0x390 [ 437.919831][T12569] ? __pfx___might_resched+0x10/0x10 [ 437.919863][T12569] should_fail_ex+0x40a/0x550 [ 437.919893][T12569] should_failslab+0xac/0x100 [ 437.919917][T12569] __kmalloc_cache_noprof+0x70/0x390 [ 437.919940][T12569] ? tcf_block_get_ext+0x145/0x1670 [ 437.919979][T12569] tcf_block_get_ext+0x145/0x1670 [ 437.920015][T12569] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 437.920041][T12569] ? __asan_memset+0x23/0x50 [ 437.920066][T12569] ? qdisc_alloc+0x7bd/0xa80 [ 437.920085][T12569] ? tc_modify_qdisc+0xbbb/0x1f10 [ 437.920114][T12569] ? netlink_rcv_skb+0x1e3/0x430 [ 437.920144][T12569] ? netlink_unicast+0x7f6/0x990 [ 437.920180][T12569] tcf_block_get+0xf8/0x150 [ 437.920216][T12569] ? __pfx_tcf_block_get+0x10/0x10 [ 437.920248][T12569] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 437.920295][T12569] sfb_init+0x31/0xa0 [ 437.920314][T12569] ? __pfx_sfb_init+0x10/0x10 [ 437.920334][T12569] qdisc_create+0x9d4/0x11a0 [ 437.920374][T12569] ? __pfx_qdisc_create+0x10/0x10 [ 437.920413][T12569] tc_modify_qdisc+0xbbb/0x1f10 [ 437.920459][T12569] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 437.920514][T12569] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 437.920544][T12569] rtnetlink_rcv_msg+0x73f/0xcf0 [ 437.920569][T12569] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 437.920599][T12569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.920633][T12569] ? ref_tracker_free+0x643/0x7e0 [ 437.920666][T12569] netlink_rcv_skb+0x1e3/0x430 [ 437.920708][T12569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.920735][T12569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.920793][T12569] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.920817][T12569] netlink_unicast+0x7f6/0x990 [ 437.920858][T12569] ? __pfx_netlink_unicast+0x10/0x10 [ 437.920887][T12569] ? __virt_addr_valid+0x45f/0x530 [ 437.920919][T12569] ? __phys_addr_symbol+0x2f/0x70 [ 437.920950][T12569] ? __check_object_size+0x47a/0x730 [ 437.920976][T12569] netlink_sendmsg+0x8e4/0xcb0 [ 437.921010][T12569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.921037][T12569] ? aa_sock_msg_perm+0x91/0x160 [ 437.921073][T12569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.921092][T12569] __sock_sendmsg+0x221/0x270 [ 437.921123][T12569] ____sys_sendmsg+0x52a/0x7e0 [ 437.921155][T12569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.921175][T12569] ? __fget_files+0x2a/0x410 [ 437.921201][T12569] ? __fget_files+0x2a/0x410 [ 437.921234][T12569] __sys_sendmmsg+0x36a/0x720 [ 437.921269][T12569] ? __pfx___sys_sendmmsg+0x10/0x10 [ 437.921305][T12569] ? __pfx_lock_release+0x10/0x10 [ 437.921332][T12569] ? kstrtouint_from_user+0x128/0x190 [ 437.921389][T12569] ? ksys_write+0x22a/0x2b0 [ 437.921418][T12569] ? __pfx_lock_release+0x10/0x10 [ 437.921454][T12569] ? sb_end_write+0xe9/0x1c0 [ 437.921479][T12569] ? vfs_write+0x7fa/0xd10 [ 437.921510][T12569] ? __mutex_unlock_slowpath+0x227/0x800 [ 437.921571][T12569] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.921604][T12569] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.921635][T12569] ? do_syscall_64+0x100/0x230 [ 437.921669][T12569] __x64_sys_sendmmsg+0xa0/0xb0 [ 437.921704][T12569] do_syscall_64+0xf3/0x230 [ 437.921733][T12569] ? clear_bhb_loop+0x35/0x90 [ 437.921768][T12569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.921797][T12569] RIP: 0033:0x7f9c66d8cda9 [ 437.921817][T12569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.921836][T12569] RSP: 002b:00007f9c67c15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.921859][T12569] RAX: ffffffffffffffda RBX: 00007f9c66fa5fa0 RCX: 00007f9c66d8cda9 [ 437.921876][T12569] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 437.921891][T12569] RBP: 00007f9c67c15090 R08: 0000000000000000 R09: 0000000000000000 [ 437.921905][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.921918][T12569] R13: 0000000000000000 R14: 00007f9c66fa5fa0 R15: 00007f9c670cfa18 [ 437.921950][T12569] [ 437.955015][T12571] netlink: 'syz.1.1607': attribute type 4 has an invalid length. [ 438.388269][T12580] netlink: 'syz.2.1609': attribute type 10 has an invalid length. [ 438.472803][T12580] team0: Cannot enslave team device to itself [ 438.656879][T12591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1613'. [ 438.747513][T12591] syz_tun: entered promiscuous mode [ 438.830000][T12591] macsec1: entered allmulticast mode [ 438.835463][T12591] syz_tun: entered allmulticast mode [ 438.928509][T12591] syz_tun: left allmulticast mode [ 438.950365][T12591] syz_tun: left promiscuous mode [ 439.126125][ T5892] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 439.180859][T12614] FAULT_INJECTION: forcing a failure. [ 439.180859][T12614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.206577][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.5.1617 Not tainted 6.14.0-rc1-syzkaller #0 [ 439.206608][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 439.206622][T12614] Call Trace: [ 439.206630][T12614] [ 439.206639][T12614] dump_stack_lvl+0x241/0x360 [ 439.206670][T12614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.206694][T12614] ? __pfx__printk+0x10/0x10 [ 439.206741][T12614] should_fail_ex+0x40a/0x550 [ 439.206771][T12614] prepare_alloc_pages+0x1da/0x5b0 [ 439.206811][T12614] __alloc_frozen_pages_noprof+0x16f/0x710 [ 439.206847][T12614] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 439.206900][T12614] alloc_pages_mpol+0x311/0x660 [ 439.206929][T12614] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 439.206963][T12614] vma_alloc_folio_noprof+0x12b/0x260 [ 439.206989][T12614] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 439.207015][T12614] ? do_raw_spin_unlock+0x13c/0x8b0 [ 439.207046][T12614] folio_prealloc+0x2e/0x170 [ 439.207077][T12614] do_wp_page+0x1253/0x49b0 [ 439.207119][T12614] ? __pfx_do_wp_page+0x10/0x10 [ 439.207146][T12614] ? __pfx_validate_chain+0x10/0x10 [ 439.207171][T12614] ? __pfx_lock_acquire+0x10/0x10 [ 439.207199][T12614] ? rcu_is_watching+0x15/0xb0 [ 439.207224][T12614] ? do_raw_spin_lock+0x14f/0x370 [ 439.207249][T12614] ? __pfx____pte_offset_map+0x10/0x10 [ 439.207292][T12614] __handle_mm_fault+0x24d5/0x70f0 [ 439.207319][T12614] ? mark_lock+0x9a/0x360 [ 439.207386][T12614] ? __pfx___handle_mm_fault+0x10/0x10 [ 439.207423][T12614] ? mt_find+0x2a9/0x920 [ 439.207454][T12614] ? __pfx_lock_release+0x10/0x10 [ 439.207495][T12614] ? mt_find+0x2a9/0x920 [ 439.207525][T12614] ? mt_find+0x6c8/0x920 [ 439.207555][T12614] ? mt_find+0x2a9/0x920 [ 439.207590][T12614] ? __pfx_mt_find+0x10/0x10 [ 439.207640][T12614] ? find_vma+0xf9/0x170 [ 439.207666][T12614] ? __pfx_find_vma+0x10/0x10 [ 439.207691][T12614] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.207724][T12614] handle_mm_fault+0x3e5/0x8d0 [ 439.207762][T12614] exc_page_fault+0x2b9/0x8b0 [ 439.207798][T12614] asm_exc_page_fault+0x26/0x30 [ 439.207828][T12614] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 439.207851][T12614] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 439.207869][T12614] RSP: 0018:ffffc900034973f8 EFLAGS: 00050202 [ 439.207889][T12614] RAX: ffffffff84e62701 RBX: 0000000020009504 RCX: 0000000000000254 [ 439.207906][T12614] RDX: 0000000000000000 RSI: ffff88804ab60bf4 RDI: 000000002000a000 [ 439.207921][T12614] RBP: ffffc90003497578 R08: ffff88804ab60e47 R09: 1ffff1100956c1c8 [ 439.207937][T12614] R10: dffffc0000000000 R11: ffffed100956c1c9 R12: 1ffff92000692fa3 [ 439.207954][T12614] R13: ffffc90003497d18 R14: 0000000000000d50 R15: ffff88804ab600f8 [ 439.207978][T12614] ? _copy_to_iter+0x221/0x1c50 [ 439.208019][T12614] _copy_to_iter+0x267/0x1c50 [ 439.208052][T12614] ? __virt_addr_valid+0x183/0x530 [ 439.208085][T12614] ? __pfx_lock_release+0x10/0x10 [ 439.208112][T12614] ? __might_fault+0xaa/0x120 [ 439.208137][T12614] ? __might_fault+0xc6/0x120 [ 439.208166][T12614] ? _copy_to_iter+0x267/0x1c50 [ 439.208196][T12614] ? __pfx__copy_to_iter+0x10/0x10 [ 439.208231][T12614] ? __virt_addr_valid+0x183/0x530 [ 439.208261][T12614] ? __virt_addr_valid+0x183/0x530 [ 439.208294][T12614] ? __virt_addr_valid+0x45f/0x530 [ 439.208338][T12614] ? __check_object_size+0x47a/0x730 [ 439.208366][T12614] __skb_datagram_iter+0x107/0x900 [ 439.208391][T12614] ? __virt_addr_valid+0x183/0x530 [ 439.208421][T12614] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 439.208446][T12614] ? __check_object_size+0x47a/0x730 [ 439.208469][T12614] __skb_datagram_iter+0x6e4/0x900 [ 439.208494][T12614] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 439.208529][T12614] skb_copy_datagram_iter+0xd1/0x250 [ 439.208558][T12614] tipc_recvmsg+0x7ec/0x13c0 [ 439.208606][T12614] ? __pfx_tipc_recvmsg+0x10/0x10 [ 439.208647][T12614] ? __pfx___might_resched+0x10/0x10 [ 439.208673][T12614] ? aa_sock_msg_perm+0x91/0x160 [ 439.208704][T12614] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 439.208737][T12614] ? __pfx_tipc_recvmsg+0x10/0x10 [ 439.208769][T12614] sock_recvmsg+0x22f/0x280 [ 439.208802][T12614] ____sys_recvmsg+0x1c6/0x480 [ 439.208835][T12614] ? __pfx_____sys_recvmsg+0x10/0x10 [ 439.208883][T12614] do_recvmmsg+0x426/0xab0 [ 439.208919][T12614] ? __pfx_do_recvmmsg+0x10/0x10 [ 439.208965][T12614] ? ksys_write+0x22a/0x2b0 [ 439.208994][T12614] ? __pfx_lock_release+0x10/0x10 [ 439.209031][T12614] ? sb_end_write+0xe9/0x1c0 [ 439.209056][T12614] ? vfs_write+0x7fa/0xd10 [ 439.209087][T12614] ? __mutex_unlock_slowpath+0x227/0x800 [ 439.209127][T12614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.209156][T12614] ? __fget_files+0x2a/0x410 [ 439.209196][T12614] __x64_sys_recvmmsg+0x199/0x250 [ 439.209223][T12614] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 439.209248][T12614] ? do_syscall_64+0x100/0x230 [ 439.209281][T12614] ? do_syscall_64+0xb6/0x230 [ 439.209313][T12614] do_syscall_64+0xf3/0x230 [ 439.209351][T12614] ? clear_bhb_loop+0x35/0x90 [ 439.209385][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.209414][T12614] RIP: 0033:0x7f0fec78cda9 [ 439.209433][T12614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.209451][T12614] RSP: 002b:00007f0fea5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.209473][T12614] RAX: ffffffffffffffda RBX: 00007f0fec9a6080 RCX: 00007f0fec78cda9 [ 439.209488][T12614] RDX: 0000000000000002 RSI: 00000000200043c0 RDI: 0000000000000003 [ 439.209502][T12614] RBP: 00007f0fea5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 439.209514][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.209526][T12614] R13: 0000000000000001 R14: 00007f0fec9a6080 R15: 00007f0fecacfa18 [ 439.209559][T12614] [ 439.478616][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 439.586745][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 439.802416][T12619] tty tty1: ldisc open failed (-12), clearing slot 0 [ 439.803780][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.822497][ T5892] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 439.822531][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.822556][ T5892] usb 2-1: Product: syz [ 439.822575][ T5892] usb 2-1: Manufacturer: syz [ 439.822594][ T5892] usb 2-1: SerialNumber: syz [ 439.824683][ T5892] usb 2-1: config 0 descriptor?? [ 439.826590][ T5892] usb 2-1: bad CDC descriptors [ 439.912090][ T5892] usb 2-1: unsupported MDLM descriptors [ 440.088010][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 440.163920][ T3714] usb 2-1: USB disconnect, device number 78 [ 440.240532][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247095][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.379345][T12646] Invalid logical block size (3) [ 440.896935][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.909254][T12663] fuse: Bad value for 'fd' [ 440.918702][ T3714] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 441.078727][ T3714] usb 3-1: device descriptor read/64, error -71 [ 441.139110][T12668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'. [ 441.154456][T12668] netlink: 'syz.3.1629': attribute type 7 has an invalid length. [ 441.163172][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 441.163555][T12668] netlink: 'syz.3.1629': attribute type 8 has an invalid length. [ 441.181247][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 441.216351][T12668] team0: entered promiscuous mode [ 441.241962][T12668] team_slave_0: entered promiscuous mode [ 441.268187][T12668] team_slave_1: entered promiscuous mode [ 441.295196][T12668] bond0: entered promiscuous mode [ 441.328443][ T3714] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 441.336768][T12668] bond_slave_0: entered promiscuous mode [ 441.363152][T12668] bond_slave_1: entered promiscuous mode [ 441.374745][T12668] gretap0: entered promiscuous mode [ 441.381441][T12668] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 441.389199][T12668] Cannot create hsr debugfs directory [ 441.402812][T12668] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 441.498502][ T3714] usb 3-1: device descriptor read/64, error -71 [ 441.618872][ T3714] usb usb3-port1: attempt power cycle [ 441.769402][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1636'. [ 441.778919][ T5889] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 441.969008][ T3714] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 441.976907][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 441.986320][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 441.998730][ T5906] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 442.018231][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.030565][ T3714] usb 3-1: device descriptor read/8, error -71 [ 442.063113][ T5889] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.077143][ T5889] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.105841][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.115972][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.124383][ T5889] usb 2-1: Product: syz [ 442.129066][ T5889] usb 2-1: Manufacturer: syz [ 442.133795][ T5889] usb 2-1: SerialNumber: syz [ 442.178477][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 442.187311][ T5906] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 442.225569][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.256631][ T5906] usb 6-1: Product: syz [ 442.262257][ T5906] usb 6-1: Manufacturer: syz [ 442.275489][ T5906] usb 6-1: SerialNumber: syz [ 442.296351][ T5906] usb 6-1: config 0 descriptor?? [ 442.310551][ T3714] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 442.325108][ T5906] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 442.348564][ T3714] usb 3-1: device descriptor read/8, error -71 [ 442.385276][ T5889] usb 2-1: unit 1 not found! [ 442.439117][ T5889] usb 2-1: USB disconnect, device number 79 [ 442.481065][ T3714] usb usb3-port1: unable to enumerate USB device [ 442.524493][ T5906] usb 6-1: USB disconnect, device number 31 [ 442.674896][T10969] udevd[10969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.660919][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1648'. [ 443.749834][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1649'. [ 443.763979][T12766] ip6gretap0: entered promiscuous mode [ 443.809867][T12766] ip6gretap0: left promiscuous mode [ 443.867115][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 444.118718][T12782] loop4: detected capacity change from 0 to 7 [ 444.144598][T12782] Dev loop4: unable to read RDB block 7 [ 444.152323][T12782] loop4: unable to read partition table [ 444.160184][T12782] loop4: partition table beyond EOD, truncated [ 444.166828][T12782] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 444.202585][T12786] netlink: 'syz.1.1655': attribute type 30 has an invalid length. [ 444.218602][ T5906] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 444.399250][ T5906] usb 9-1: device descriptor read/64, error -71 [ 444.662305][ T5906] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 444.818452][ T5906] usb 9-1: device descriptor read/64, error -71 [ 444.928840][ T5906] usb usb9-port1: attempt power cycle [ 445.278707][ T5906] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 445.311502][ T5906] usb 9-1: device descriptor read/8, error -71 [ 445.521414][T12829] netlink: 'syz.1.1664': attribute type 4 has an invalid length. [ 445.551169][ T5906] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 445.589189][ T5906] usb 9-1: device descriptor read/8, error -71 [ 445.605323][T12829] netlink: 'syz.1.1664': attribute type 4 has an invalid length. [ 445.713173][ T5906] usb usb9-port1: unable to enumerate USB device [ 446.259385][ T5889] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 446.443709][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.464192][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 446.508864][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.555762][ T5889] usb 6-1: config 0 descriptor?? [ 447.009245][ T5889] logitech 0003:046D:C287.000A: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 447.061729][ T5889] logitech 0003:046D:C287.000A: no inputs found [ 447.206767][ T1218] usb 6-1: USB disconnect, device number 32 [ 447.488483][ T5906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 447.660322][ T5906] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 447.690688][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.731774][ T5906] usb 2-1: config 0 descriptor?? [ 447.752744][ T5906] cp210x 2-1:0.0: cp210x converter detected [ 447.952044][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.979525][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.042951][ T5906] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 448.068097][ T5906] cp210x 2-1:0.0: querying part number failed [ 448.103477][ T5906] usb 2-1: cp210x converter now attached to ttyUSB0 [ 448.698784][ T3714] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 448.712703][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1687'. [ 448.722006][T12939] netlink: 'syz.3.1687': attribute type 7 has an invalid length. [ 448.737989][T12939] netlink: 'syz.3.1687': attribute type 8 has an invalid length. [ 448.768602][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 448.894121][ T3714] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 448.921252][ T3714] usb 6-1: config 0 has an invalid interface number: 174 but max is 0 [ 448.958884][ T3714] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 448.988346][ T3714] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 449.007778][ T3714] usb 6-1: config 0 has no interface number 0 [ 449.028134][ T3714] usb 6-1: config 0 has no interface number 1 [ 449.034900][ T3714] usb 6-1: config 0 interface 185 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 449.094337][ T3714] usb 6-1: config 0 interface 185 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 449.159169][ T3714] usb 6-1: too many endpoints for config 0 interface 174 altsetting 60: 117, using maximum allowed: 30 [ 449.187715][ T3714] usb 6-1: config 0 interface 174 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 449.216279][ T3714] usb 6-1: config 0 interface 174 altsetting 60 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 449.255543][ T3714] usb 6-1: config 0 interface 174 altsetting 60 endpoint 0x6 has invalid wMaxPacketSize 0 [ 449.288552][ T3714] usb 6-1: config 0 interface 174 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 449.317092][ T3714] usb 6-1: config 0 interface 174 altsetting 60 endpoint 0x8 has invalid maxpacket 72, setting to 64 [ 449.342422][ T3714] usb 6-1: config 0 interface 174 altsetting 60 endpoint 0xC has an invalid bInterval 48, changing to 7 [ 449.375502][ T3714] usb 6-1: config 0 interface 174 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 449.393514][ T3714] usb 6-1: config 0 interface 174 altsetting 60 has 9 endpoint descriptors, different from the interface descriptor's value: 117 [ 449.423367][ T3714] usb 6-1: config 0 interface 185 has no altsetting 0 [ 449.439703][ T3714] usb 6-1: config 0 interface 174 has no altsetting 0 [ 449.457876][ T3714] usb 6-1: New USB device found, idVendor=2001, idProduct=3c17, bcdDevice=90.15 [ 449.467554][ T3714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.478113][ T3714] usb 6-1: Product: syz [ 449.502465][ T3714] usb 6-1: Manufacturer: ᠁ [ 449.511432][ T3714] usb 6-1: SerialNumber: syz [ 449.540264][ T3714] usb 6-1: config 0 descriptor?? [ 449.627660][T12962] netlink: 'syz.8.1692': attribute type 21 has an invalid length. [ 449.899767][T12966] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.931069][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.950374][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.960379][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.971805][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.981999][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 449.993526][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 450.003843][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1694'. [ 450.259419][ T5892] usb 2-1: USB disconnect, device number 80 [ 450.315343][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.337731][ T5892] cp210x 2-1:0.0: device disconnected [ 450.350144][ T3714] usb 6-1: USB disconnect, device number 33 [ 450.755892][T12985] FAULT_INJECTION: forcing a failure. [ 450.755892][T12985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.812236][T12985] CPU: 0 UID: 0 PID: 12985 Comm: syz.5.1697 Not tainted 6.14.0-rc1-syzkaller #0 [ 450.812267][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.812280][T12985] Call Trace: [ 450.812288][T12985] [ 450.812297][T12985] dump_stack_lvl+0x241/0x360 [ 450.812329][T12985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.812353][T12985] ? __pfx__printk+0x10/0x10 [ 450.812392][T12985] ? snprintf+0xda/0x120 [ 450.812418][T12985] should_fail_ex+0x40a/0x550 [ 450.812449][T12985] _copy_to_user+0x31/0xb0 [ 450.812473][T12985] simple_read_from_buffer+0xca/0x150 [ 450.812511][T12985] proc_fail_nth_read+0x1e9/0x250 [ 450.812548][T12985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.812585][T12985] ? rw_verify_area+0x243/0x630 [ 450.812613][T12985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.812650][T12985] vfs_read+0x1f8/0xb40 [ 450.812679][T12985] ? fdget_pos+0x254/0x320 [ 450.812704][T12985] ? __pfx___mutex_lock+0x10/0x10 [ 450.812733][T12985] ? __pfx_vfs_read+0x10/0x10 [ 450.812759][T12985] ? do_sys_openat2+0x17a/0x1d0 [ 450.812786][T12985] ? __fget_files+0x2a/0x410 [ 450.812812][T12985] ? __fget_files+0x395/0x410 [ 450.812833][T12985] ? __fget_files+0x2a/0x410 [ 450.812866][T12985] ksys_read+0x18f/0x2b0 [ 450.812898][T12985] ? __pfx_ksys_read+0x10/0x10 [ 450.812927][T12985] ? do_syscall_64+0x100/0x230 [ 450.812960][T12985] ? do_syscall_64+0xb6/0x230 [ 450.813001][T12985] do_syscall_64+0xf3/0x230 [ 450.813032][T12985] ? clear_bhb_loop+0x35/0x90 [ 450.813066][T12985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.813096][T12985] RIP: 0033:0x7f0fec78b7bc [ 450.813116][T12985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.813134][T12985] RSP: 002b:00007f0fea5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.813158][T12985] RAX: ffffffffffffffda RBX: 00007f0fec9a5fa0 RCX: 00007f0fec78b7bc [ 450.813174][T12985] RDX: 000000000000000f RSI: 00007f0fea5f60a0 RDI: 0000000000000007 [ 450.813189][T12985] RBP: 00007f0fea5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.813203][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.813217][T12985] R13: 0000000000000000 R14: 00007f0fec9a5fa0 R15: 00007f0fecacfa18 [ 450.813249][T12985] [ 451.080269][T12992] program syz.1.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.371245][ T5906] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 451.542473][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.571767][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.603714][ T5906] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.613393][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.663850][ T5906] usb 2-1: SerialNumber: syz [ 451.691324][T13021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.896857][ T5906] usb 2-1: 0:2 : does not exist [ 451.913387][ T5906] usb 2-1: unit 5: unexpected type 0x09 [ 451.949217][ T5906] usb 2-1: USB disconnect, device number 81 [ 452.169324][T10969] udevd[10969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.824163][T13043] tipc: Started in network mode [ 452.840041][T13043] tipc: Node identity 5fffff0000000000002ee1, cluster identity 4711 [ 453.566382][T13073] veth0_to_team: entered promiscuous mode [ 453.600073][T13073] veth0_to_team: entered allmulticast mode [ 453.618561][ T1218] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 453.637435][T13075] netlink: 'syz.2.1716': attribute type 21 has an invalid length. [ 453.763183][ T1218] usb 6-1: device descriptor read/64, error -71 [ 453.881316][T13091] __nla_validate_parse: 60 callbacks suppressed [ 453.881338][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 454.028529][ T1218] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 454.190689][ T1218] usb 6-1: device descriptor read/64, error -71 [ 454.319156][ T1218] usb usb6-port1: attempt power cycle [ 454.418240][T13111] netlink: 'syz.2.1725': attribute type 21 has an invalid length. [ 454.435713][T13111] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1725'. [ 454.462069][T13111] netlink: 'syz.2.1725': attribute type 4 has an invalid length. [ 454.495966][T13111] netlink: 'syz.2.1725': attribute type 5 has an invalid length. [ 454.512255][T13111] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1725'. [ 454.531602][ T5892] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 454.668613][ T1218] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 454.683050][ T5892] usb 9-1: device descriptor read/64, error -71 [ 454.689133][ T1218] usb 6-1: device descriptor read/8, error -71 [ 454.928458][ T1218] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 454.958957][ T5892] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 454.978965][ T1218] usb 6-1: device descriptor read/8, error -71 [ 455.000257][T13137] netlink: 'syz.1.1729': attribute type 4 has an invalid length. [ 455.030000][T13137] netlink: 'syz.1.1729': attribute type 4 has an invalid length. [ 455.099323][ T1218] usb usb6-port1: unable to enumerate USB device [ 455.118586][ T5892] usb 9-1: device descriptor read/64, error -71 [ 455.231153][ T5892] usb usb9-port1: attempt power cycle [ 455.588617][ T5892] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 455.588664][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 455.628627][ T5892] usb 9-1: device descriptor read/8, error -71 [ 455.783006][ T9] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 455.793023][ T9] usb 3-1: config 0 has no interface number 0 [ 455.799516][ T9] usb 3-1: config 0 interface 190 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.821394][ T9] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 455.854006][ T9] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 1487, setting to 1024 [ 455.879280][ T5892] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 455.879671][ T9] usb 3-1: config 0 interface 190 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 455.914855][ T9] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 455.931006][ T5892] usb 9-1: device descriptor read/8, error -71 [ 455.940244][ T9] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 455.976544][ T9] usb 3-1: config 0 interface 190 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 455.999998][ T9] usb 3-1: config 0 interface 190 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 456.023522][ T9] usb 3-1: config 0 interface 190 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 456.039064][ T5892] usb usb9-port1: unable to enumerate USB device [ 456.049934][ T9] usb 3-1: config 0 interface 190 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 456.078741][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=d0.86 [ 456.090431][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.105665][ T9] usb 3-1: Product: syz [ 456.114876][ T9] usb 3-1: Manufacturer: syz [ 456.125270][ T9] usb 3-1: SerialNumber: syz [ 456.142476][ T9] usb 3-1: config 0 descriptor?? [ 456.154429][T13156] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 456.484309][ T9] usb 3-1: USB disconnect, device number 45 [ 456.720459][T10969] udevd[10969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.838890][ T5925] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 457.008530][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 457.021856][ T5925] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 457.048224][ T5925] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.076887][ T5925] usb 6-1: config 1 interface 0 has no altsetting 0 [ 457.107551][ T5925] usb 6-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 457.132367][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.154710][ T5925] usb 6-1: Product: syz [ 457.167138][ T5925] usb 6-1: Manufacturer: х [ 457.181110][ T5925] usb 6-1: SerialNumber: syz [ 457.465542][ T5925] usbhid 6-1:1.0: can't add hid device: -71 [ 457.478483][ T5925] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 457.537225][ T5925] usb 6-1: USB disconnect, device number 38 [ 457.799541][ T5892] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 457.978512][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 457.996233][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.042021][ T5892] usb 3-1: config 249 has an invalid interface number: 99 but max is 0 [ 458.089481][ T5892] usb 3-1: config 249 has an invalid interface number: 8 but max is 0 [ 458.097731][ T5892] usb 3-1: config 249 has an invalid descriptor of length 51, skipping remainder of the config [ 458.170633][ T5892] usb 3-1: config 249 has 2 interfaces, different from the descriptor's value: 1 [ 458.190149][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1744'. [ 458.210017][ T5892] usb 3-1: config 249 has no interface number 0 [ 458.216356][ T5892] usb 3-1: config 249 has no interface number 1 [ 458.224396][T13241] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 458.249213][T13241] bridge0: port 3(batadv1) entered blocking state [ 458.258564][ T5892] usb 3-1: config 249 interface 99 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.266395][T13241] bridge0: port 3(batadv1) entered disabled state [ 458.278411][ T5892] usb 3-1: too many endpoints for config 249 interface 8 altsetting 6: 50, using maximum allowed: 30 [ 458.278460][ T5892] usb 3-1: config 249 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 50 [ 458.278490][ T5892] usb 3-1: config 249 interface 99 has no altsetting 0 [ 458.324224][T13241] batadv1: entered allmulticast mode [ 458.337789][T13241] batadv1: entered promiscuous mode [ 458.359361][T13241] bridge0: port 3(batadv1) entered blocking state [ 458.366373][T13241] bridge0: port 3(batadv1) entered forwarding state [ 458.367377][ T5892] usb 3-1: config 249 interface 8 has no altsetting 0 [ 458.402846][ T5892] usb 3-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=82.ef [ 458.413175][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.426982][ T5892] usb 3-1: Product: syz [ 458.436908][ T5892] usb 3-1: Manufacturer: syz [ 458.446377][ T5892] usb 3-1: SerialNumber: syz [ 458.720895][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.734020][ T5892] snd-usb-audio 3-1:249.99: probe with driver snd-usb-audio failed with error -2 [ 458.736964][ T3497] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 458.753776][ T3497] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 458.759043][ T5892] hub 3-1:249.8: bad descriptor, ignoring hub [ 458.809779][ T5892] hub 3-1:249.8: probe with driver hub failed with error -5 [ 458.834155][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.893711][ T5892] snd-usb-audio 3-1:249.8: probe with driver snd-usb-audio failed with error -2 [ 458.943001][T13265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.964203][ T5892] usb 3-1: USB disconnect, device number 46 [ 459.170103][T10969] udevd[10969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:249.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.208151][T13273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.449700][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1750'. [ 459.488438][T13276] netlink: 'syz.2.1750': attribute type 7 has an invalid length. [ 459.542914][T13276] netlink: 'syz.2.1750': attribute type 8 has an invalid length. [ 459.713551][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 459.760515][T13276] team0: entered promiscuous mode [ 459.811904][T13276] team_slave_0: entered promiscuous mode [ 459.817968][T13276] team_slave_1: entered promiscuous mode [ 459.889972][T13276] bond0: entered promiscuous mode [ 459.904422][T13276] bond_slave_0: entered promiscuous mode [ 459.954868][T13276] bond_slave_1: entered promiscuous mode [ 460.034695][T13276] gretap0: entered promiscuous mode [ 460.076831][T13276] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 460.123593][T13276] Cannot create hsr debugfs directory [ 460.167918][T13303] FAULT_INJECTION: forcing a failure. [ 460.167918][T13303] name failslab, interval 1, probability 0, space 0, times 0 [ 460.200213][T13276] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 460.257447][T13276] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 460.287131][T13303] CPU: 1 UID: 0 PID: 13303 Comm: syz.3.1757 Not tainted 6.14.0-rc1-syzkaller #0 [ 460.287162][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 460.287176][T13303] Call Trace: [ 460.287184][T13303] [ 460.287194][T13303] dump_stack_lvl+0x241/0x360 [ 460.287224][T13303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.287248][T13303] ? __pfx__printk+0x10/0x10 [ 460.287285][T13303] ? __kmalloc_noprof+0xb5/0x4c0 [ 460.287308][T13303] ? __pfx___might_resched+0x10/0x10 [ 460.287337][T13303] should_fail_ex+0x40a/0x550 [ 460.287366][T13303] should_failslab+0xac/0x100 [ 460.287389][T13303] __kmalloc_noprof+0xdd/0x4c0 [ 460.287411][T13303] ? nfnl_acct_new+0x338/0x9c0 [ 460.287442][T13303] nfnl_acct_new+0x338/0x9c0 [ 460.287468][T13303] ? nfnetlink_rcv_msg+0xa5c/0x1180 [ 460.287497][T13303] ? __pfx_nfnl_acct_new+0x10/0x10 [ 460.287535][T13303] ? nfnetlink_rcv_msg+0x225/0x1180 [ 460.287560][T13303] nfnetlink_rcv_msg+0xbec/0x1180 [ 460.287584][T13303] ? nfnetlink_rcv_msg+0x225/0x1180 [ 460.287632][T13303] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.287656][T13303] ? stack_trace_save+0x118/0x1d0 [ 460.287716][T13303] ? dev_hard_start_xmit+0x27a/0x7d0 [ 460.287736][T13303] ? __dev_queue_xmit+0x1b73/0x3f50 [ 460.287756][T13303] ? __netlink_deliver_tap+0x56b/0x7f0 [ 460.287775][T13303] ? netlink_deliver_tap+0x19d/0x1b0 [ 460.287793][T13303] ? netlink_unicast+0x7c4/0x990 [ 460.287820][T13303] ? netlink_sendmsg+0x8e4/0xcb0 [ 460.287838][T13303] ? __sock_sendmsg+0x221/0x270 [ 460.287860][T13303] ? ____sys_sendmsg+0x52a/0x7e0 [ 460.287878][T13303] ? __sys_sendmsg+0x269/0x350 [ 460.287914][T13303] netlink_rcv_skb+0x1e3/0x430 [ 460.287948][T13303] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.287975][T13303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.288023][T13303] ? apparmor_capable+0x13b/0x1b0 [ 460.288048][T13303] ? bpf_lsm_capable+0x9/0x10 [ 460.288072][T13303] ? security_capable+0x7e/0x2d0 [ 460.288115][T13303] nfnetlink_rcv+0x297/0x2ab0 [ 460.288147][T13303] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 460.288182][T13303] ? __dev_queue_xmit+0x2f4/0x3f50 [ 460.288206][T13303] ? __dev_queue_xmit+0x1775/0x3f50 [ 460.288227][T13303] ? kasan_save_track+0x51/0x80 [ 460.288261][T13303] ? ____sys_sendmsg+0x52a/0x7e0 [ 460.288284][T13303] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 460.288307][T13303] ? __dev_queue_xmit+0x2f4/0x3f50 [ 460.288332][T13303] ? __pfx___dev_queue_xmit+0x10/0x10 [ 460.288369][T13303] ? ref_tracker_free+0x643/0x7e0 [ 460.288394][T13303] ? __asan_memcpy+0x40/0x70 [ 460.288420][T13303] ? __pfx_ref_tracker_free+0x10/0x10 [ 460.288460][T13303] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.288478][T13303] ? skb_clone+0x240/0x390 [ 460.288499][T13303] ? __pfx_lock_release+0x10/0x10 [ 460.288528][T13303] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 460.288559][T13303] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.288582][T13303] netlink_unicast+0x7f6/0x990 [ 460.288621][T13303] ? __pfx_netlink_unicast+0x10/0x10 [ 460.288649][T13303] ? __virt_addr_valid+0x45f/0x530 [ 460.288681][T13303] ? __phys_addr_symbol+0x2f/0x70 [ 460.288711][T13303] ? __check_object_size+0x47a/0x730 [ 460.288737][T13303] netlink_sendmsg+0x8e4/0xcb0 [ 460.288771][T13303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.288796][T13303] ? aa_sock_msg_perm+0x91/0x160 [ 460.288830][T13303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.288866][T13303] __sock_sendmsg+0x221/0x270 [ 460.288898][T13303] ____sys_sendmsg+0x52a/0x7e0 [ 460.288929][T13303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.288949][T13303] ? __fget_files+0x2a/0x410 [ 460.288976][T13303] ? __fget_files+0x2a/0x410 [ 460.289009][T13303] __sys_sendmsg+0x269/0x350 [ 460.289036][T13303] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.289069][T13303] ? do_sys_openat2+0x17a/0x1d0 [ 460.289126][T13303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.289156][T13303] ? do_syscall_64+0x100/0x230 [ 460.289189][T13303] ? do_syscall_64+0xb6/0x230 [ 460.289221][T13303] do_syscall_64+0xf3/0x230 [ 460.289248][T13303] ? clear_bhb_loop+0x35/0x90 [ 460.289282][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.289310][T13303] RIP: 0033:0x7f11c9d8cda9 [ 460.289330][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.289348][T13303] RSP: 002b:00007f11cac83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.289371][T13303] RAX: ffffffffffffffda RBX: 00007f11c9fa5fa0 RCX: 00007f11c9d8cda9 [ 460.289388][T13303] RDX: 0000000000000004 RSI: 0000000020000200 RDI: 0000000000000003 [ 460.289402][T13303] RBP: 00007f11cac83090 R08: 0000000000000000 R09: 0000000000000000 [ 460.289415][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.289428][T13303] R13: 0000000000000000 R14: 00007f11c9fa5fa0 R15: 00007f11ca0cfa18 [ 460.289459][T13303] [ 460.341625][T13309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.014371][T13320] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 461.689057][ T5894] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 461.818534][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 461.868480][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 461.880060][ T5894] usb 6-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 461.897514][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.107497][ T5894] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 462.116970][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.129417][ T5894] usb 6-1: Product: syz [ 462.133643][ T5894] usb 6-1: Manufacturer: syz [ 462.147420][ T5894] usb 6-1: SerialNumber: syz [ 462.187595][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.198704][ T5894] usb 6-1: config 0 descriptor?? [ 462.222385][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.258396][ T9] usb 3-1: Product: syz [ 462.262642][ T9] usb 3-1: Manufacturer: syz [ 462.292458][ T9] usb 3-1: SerialNumber: syz [ 462.319882][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.361466][ T5894] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.522155][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1765'. [ 462.753743][T13357] bond2: entered promiscuous mode [ 462.786801][ T5892] usb 3-1: USB disconnect, device number 47 [ 462.799462][T13357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.308534][ T5889] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 463.458519][ T5889] usb 9-1: device descriptor read/64, error -71 [ 463.518614][ T5894] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 463.530266][ T5894] ath9k_htc: Failed to initialize the device [ 463.550756][ T5892] usb 3-1: ath9k_htc: USB layer deinitialized [ 463.728661][ T5889] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 463.762064][T13393] tipc: Failed to remove unknown binding: 66,1,1/0:982664586/982664588 [ 463.858476][T13393] tipc: Failed to remove unknown binding: 66,1,1/0:982664586/982664588 [ 463.920490][ T5889] usb 9-1: device descriptor read/64, error -71 [ 464.070490][ T5889] usb usb9-port1: attempt power cycle [ 464.078700][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 464.308452][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 464.316268][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.327784][ T5892] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 464.347381][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.375446][ T5892] usb 3-1: config 0 descriptor?? [ 464.423638][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1780'. [ 464.463065][ T5889] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 464.500146][ T5889] usb 9-1: device descriptor read/8, error -71 [ 464.751317][ T5889] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 464.799894][ T5889] usb 9-1: device descriptor read/8, error -71 [ 464.824994][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: unknown main item tag 0x0 [ 464.864477][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: unknown main item tag 0x0 [ 464.912514][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: unknown main item tag 0x0 [ 464.931579][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: unknown main item tag 0x0 [ 464.959454][ T5889] usb usb9-port1: unable to enumerate USB device [ 464.977379][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: unknown main item tag 0x0 [ 465.020477][ T5892] aquacomputer_d5next 0003:0C70:F003.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 465.208428][ T5892] usb 3-1: USB disconnect, device number 48 [ 465.698489][ T5892] usb 6-1: USB disconnect, device number 39 [ 466.026418][T13441] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1786'. [ 466.546048][T13455] netlink: 'syz.2.1790': attribute type 16 has an invalid length. [ 467.378439][ T5906] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 467.460858][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1799'. [ 467.628617][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 467.673507][ T5906] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 467.689398][ T5892] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 467.715050][ T5906] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 467.760297][ T5925] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 467.789132][ T5906] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.801103][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.812666][ T5906] usb 9-1: Product: syz [ 467.818076][ T5906] usb 9-1: Manufacturer: syz [ 467.843247][ T5906] usb 9-1: SerialNumber: syz [ 467.858488][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 467.881074][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.933929][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 467.946460][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 467.955024][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 467.969232][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.984636][ T5892] usb 3-1: SerialNumber: syz [ 467.995196][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8464, setting to 1024 [ 467.998593][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1802'. [ 468.017352][ T5892] usb 3-1: config 0 descriptor?? [ 468.025662][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.046525][ T5892] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 468.060206][ T5892] usb 3-1: No valid video chain found. [ 468.068533][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.110484][T13497] vlan2: entered promiscuous mode [ 468.130282][T13497] vlan2: entered allmulticast mode [ 468.138151][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.156666][T13497] team0: entered allmulticast mode [ 468.164716][T13497] team_slave_0: entered allmulticast mode [ 468.177592][T13497] team_slave_1: entered allmulticast mode [ 468.202176][ T5925] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 468.238968][ T5925] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.289414][ T5925] usb 2-1: Manufacturer: syz [ 468.297709][T13482] xt_TCPMSS: Only works on TCP SYN packets [ 468.334267][ T5925] usb 2-1: config 0 descriptor?? [ 468.345441][ T3714] usb 3-1: USB disconnect, device number 49 [ 468.358255][T13501] Invalid logical block size (3) [ 468.847542][T13507] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 469.105419][T13507] bond0: (slave wlan1): Opening slave failed [ 469.469418][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1806'. [ 469.812641][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 469.984246][T13519] batman_adv: batadv0: Adding interface: macsec1 [ 470.073944][T13519] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.414573][T13519] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 470.588485][ T5925] rc_core: IR keymap rc-hauppauge not found [ 470.618406][ T5925] Registered IR keymap rc-empty [ 470.658621][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 470.721717][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 470.778055][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1810'. [ 470.792402][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 470.846379][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 470.919373][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 470.926013][ T5906] cdc_ncm 9-1:1.0: bind() failure [ 470.963231][ T5906] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 470.980522][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.018545][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.050683][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.058715][ T5906] cdc_ncm 9-1:1.1: bind() failure [ 471.085797][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1813'. [ 471.118618][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.130271][ T5906] usb 9-1: USB disconnect, device number 31 [ 471.156481][T13537] vlan2: entered promiscuous mode [ 471.178477][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.178487][T13537] vlan2: entered allmulticast mode [ 471.184348][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1812'. [ 471.238535][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.247686][T13540] netlink: 'syz.8.1812': attribute type 21 has an invalid length. [ 471.280100][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.328946][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.373925][ T5925] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.439340][ T5925] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 471.474729][ T5925] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 471.518973][ T5925] usb 2-1: USB disconnect, device number 82 [ 471.647423][T13558] usb usb8: usbfs: process 13558 (syz.2.1817) did not claim interface 0 before use [ 471.678614][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 471.841502][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1819'. [ 471.868469][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 471.875526][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.918555][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.967738][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 471.999164][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.020451][ T9] usb 6-1: config 0 descriptor?? [ 472.393480][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1822'. [ 472.428104][T13580] vlan2: entered promiscuous mode [ 472.445401][T13580] vlan2: entered allmulticast mode [ 472.455801][ T9] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 472.477579][T13580] team0: entered allmulticast mode [ 472.483785][T13580] team_slave_0: entered allmulticast mode [ 472.494133][T13580] team_slave_1: entered allmulticast mode [ 472.819454][T13595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.914551][ T3714] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 472.930271][ T5925] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 473.039510][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 473.089399][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 473.209589][T13603] netlink: 'syz.3.1827': attribute type 21 has an invalid length. [ 473.279089][ T3714] usb 3-1: Using ep0 maxpacket: 32 [ 473.284835][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 473.292215][ T3714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 473.314316][ T3714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 473.329088][ T5925] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.358960][ T5925] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.398771][ T3714] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 473.423507][ T3714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.432719][ T5925] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 473.458548][ T3714] usb 3-1: Product: syz [ 473.462799][ T3714] usb 3-1: Manufacturer: syz [ 473.467468][ T3714] usb 3-1: SerialNumber: syz [ 473.478471][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.509393][ T5925] usb 9-1: config 0 descriptor?? [ 473.540623][ T3714] usb 3-1: config 0 descriptor?? [ 473.572106][ T3714] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 473.785523][T13589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.830099][T13589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.886469][ T1548] usb 3-1: Failed to submit usb control message: -71 [ 473.886745][ T3714] usb 3-1: USB disconnect, device number 50 [ 473.928788][ T1548] usb 3-1: unable to send the bmi data to the device: -71 [ 473.935983][ T1548] usb 3-1: unable to get target info from device [ 473.976906][ T1548] usb 3-1: could not get target info (-71) [ 473.998841][ T1548] usb 3-1: could not probe fw (-71) [ 474.206592][ T5925] usbhid 9-1:0.0: can't add hid device: -71 [ 474.215300][ T5925] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 474.251880][ T5925] usb 9-1: USB disconnect, device number 32 [ 474.690400][ T9] usb 6-1: USB disconnect, device number 40 [ 474.893335][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1838'. [ 474.917655][T13652] vlan3: entered promiscuous mode [ 474.933808][T13652] vlan3: entered allmulticast mode [ 474.958559][ T5906] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 475.034358][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 475.077404][T13656] netlink: 'syz.1.1839': attribute type 21 has an invalid length. [ 475.140004][ T5906] usb 3-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 475.175110][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 475.231118][ T5906] usb 3-1: New USB device found, idVendor=0566, idProduct=1004, bcdDevice=a3.86 [ 475.288622][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.322788][ T5906] usb 3-1: config 0 descriptor?? [ 475.328234][T13665] FAULT_INJECTION: forcing a failure. [ 475.328234][T13665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.342348][ T5906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 475.350772][T13665] CPU: 1 UID: 0 PID: 13665 Comm: syz.1.1842 Not tainted 6.14.0-rc1-syzkaller #0 [ 475.350799][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.350813][T13665] Call Trace: [ 475.350821][T13665] [ 475.350830][T13665] dump_stack_lvl+0x241/0x360 [ 475.350862][T13665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.350884][T13665] ? __pfx__printk+0x10/0x10 [ 475.350919][T13665] ? __pfx_lock_release+0x10/0x10 [ 475.350956][T13665] should_fail_ex+0x40a/0x550 [ 475.350987][T13665] _copy_from_user+0x2d/0xb0 [ 475.351011][T13665] __sys_bpf+0x1a4/0x810 [ 475.351051][T13665] ? __pfx___sys_bpf+0x10/0x10 [ 475.351089][T13665] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.351121][T13665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.351153][T13665] ? do_syscall_64+0x100/0x230 [ 475.351188][T13665] __x64_sys_bpf+0x7c/0x90 [ 475.351211][T13665] do_syscall_64+0xf3/0x230 [ 475.351241][T13665] ? clear_bhb_loop+0x35/0x90 [ 475.351274][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.351303][T13665] RIP: 0033:0x7fe1f178cda9 [ 475.351323][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.351340][T13665] RSP: 002b:00007fe1f2530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.351364][T13665] RAX: ffffffffffffffda RBX: 00007fe1f19a5fa0 RCX: 00007fe1f178cda9 [ 475.351380][T13665] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000008 [ 475.351393][T13665] RBP: 00007fe1f2530090 R08: 0000000000000000 R09: 0000000000000000 [ 475.351407][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.351420][T13665] R13: 0000000000000000 R14: 00007fe1f19a5fa0 R15: 00007fe1f1acfa18 [ 475.351449][T13665] [ 475.829420][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 476.010112][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.041312][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.071607][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.109504][ T9] usb 9-1: config 0 descriptor?? [ 476.132963][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 476.546579][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 476.554630][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 476.563067][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 476.571422][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 476.579679][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 476.587282][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 476.595824][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 476.615616][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 476.629108][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 476.636691][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 476.645437][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 476.653024][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 476.861732][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 476.870652][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 476.883164][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.893034][ T9] pwc: Registered as video103. [ 476.913900][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 476.980305][ T9] usb 9-1: USB disconnect, device number 33 [ 477.599684][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1855'. [ 477.814721][ T5894] usb 3-1: USB disconnect, device number 51 [ 477.882086][T13732] netlink: 'syz.5.1856': attribute type 4 has an invalid length. [ 477.943357][T13732] netlink: 'syz.5.1856': attribute type 4 has an invalid length. [ 478.080967][T13740] FAULT_INJECTION: forcing a failure. [ 478.080967][T13740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.116870][T13740] CPU: 0 UID: 0 PID: 13740 Comm: syz.1.1859 Not tainted 6.14.0-rc1-syzkaller #0 [ 478.116901][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 478.116915][T13740] Call Trace: [ 478.116923][T13740] [ 478.116932][T13740] dump_stack_lvl+0x241/0x360 [ 478.116964][T13740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.116987][T13740] ? __pfx__printk+0x10/0x10 [ 478.117028][T13740] ? snprintf+0xda/0x120 [ 478.117054][T13740] should_fail_ex+0x40a/0x550 [ 478.117084][T13740] _copy_to_user+0x31/0xb0 [ 478.117110][T13740] simple_read_from_buffer+0xca/0x150 [ 478.117148][T13740] proc_fail_nth_read+0x1e9/0x250 [ 478.117186][T13740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.117224][T13740] ? rw_verify_area+0x243/0x630 [ 478.117252][T13740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.117288][T13740] vfs_read+0x1f8/0xb40 [ 478.117318][T13740] ? fdget_pos+0x254/0x320 [ 478.117343][T13740] ? __pfx___mutex_lock+0x10/0x10 [ 478.117373][T13740] ? __pfx_vfs_read+0x10/0x10 [ 478.117405][T13740] ? __fget_files+0x2a/0x410 [ 478.117430][T13740] ? __fget_files+0x395/0x410 [ 478.117452][T13740] ? __fget_files+0x2a/0x410 [ 478.117496][T13740] ksys_read+0x18f/0x2b0 [ 478.117527][T13740] ? __pfx_ksys_read+0x10/0x10 [ 478.117555][T13740] ? do_syscall_64+0x100/0x230 [ 478.117587][T13740] ? do_syscall_64+0xb6/0x230 [ 478.117619][T13740] do_syscall_64+0xf3/0x230 [ 478.117647][T13740] ? clear_bhb_loop+0x35/0x90 [ 478.117680][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.117717][T13740] RIP: 0033:0x7fe1f178b7bc [ 478.117735][T13740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.117753][T13740] RSP: 002b:00007fe1f2530030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.117776][T13740] RAX: ffffffffffffffda RBX: 00007fe1f19a5fa0 RCX: 00007fe1f178b7bc [ 478.117792][T13740] RDX: 000000000000000f RSI: 00007fe1f25300a0 RDI: 0000000000000015 [ 478.117805][T13740] RBP: 00007fe1f2530090 R08: 0000000000000000 R09: 0000000000000000 [ 478.117819][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.117832][T13740] R13: 0000000000000000 R14: 00007fe1f19a5fa0 R15: 00007fe1f1acfa18 [ 478.117863][T13740] [ 478.745160][ T5894] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 478.780548][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 478.780570][ T29] audit: type=1326 audit(1738601640.338:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 478.897704][T13761] loop4: detected capacity change from 0 to 7 [ 478.908438][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 478.908538][ T29] audit: type=1326 audit(1738601640.348:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 478.920634][ T5894] usb 9-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 478.958649][T13761] Dev loop4: unable to read RDB block 7 [ 478.974688][T13761] loop4: unable to read partition table [ 478.984752][ T29] audit: type=1326 audit(1738601640.348:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.008110][T13761] loop4: partition table beyond EOD, truncated [ 479.008378][ T5894] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.028543][T13761] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 479.058226][ T29] audit: type=1326 audit(1738601640.378:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.114130][ T5894] usb 9-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 479.123668][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 479.134252][T13764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1867'. [ 479.137438][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.155247][T13764] vlan2: entered promiscuous mode [ 479.168163][ T5894] usb 9-1: Product: syz [ 479.168365][ T29] audit: type=1326 audit(1738601640.398:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.175112][T13764] vlan2: entered allmulticast mode [ 479.219803][ T5894] usb 9-1: Manufacturer: syz [ 479.224636][ T5894] usb 9-1: SerialNumber: syz [ 479.258014][ T29] audit: type=1326 audit(1738601640.398:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.282949][ T5894] usb 9-1: config 0 descriptor?? [ 479.298407][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 479.326796][ T29] audit: type=1326 audit(1738601640.398:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.360618][ T29] audit: type=1326 audit(1738601640.398:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.384055][ T29] audit: type=1326 audit(1738601640.398:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.410549][ T29] audit: type=1326 audit(1738601640.398:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1f178cda9 code=0x7ffc0000 [ 479.447782][ T9] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 479.466207][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.477702][ T9] usb 2-1: Product: syz [ 479.519443][ T9] usb 2-1: Manufacturer: syz [ 479.524119][ T9] usb 2-1: SerialNumber: syz [ 479.581545][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1861'. [ 479.599656][T13748] bond1: entered promiscuous mode [ 479.605314][T13748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.633653][ T9] usb 2-1: config 0 descriptor?? [ 479.696265][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 479.713446][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 479.730668][ T9] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 479.915911][ T9] usb 2-1: USB disconnect, device number 83 [ 480.437848][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 480.678712][ T5889] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 480.814670][T13800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 480.870235][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.889981][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.907961][ T5889] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 480.919522][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.942579][ T5889] usb 3-1: config 0 descriptor?? [ 481.247756][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.285879][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.522118][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.543279][T13827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 481.554258][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.583642][T13825] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 481.843405][T13794] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 481.934138][T13794] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 482.122212][ T9] usb 9-1: USB disconnect, device number 34 [ 482.126531][ T5889] hid-led 0003:1D34:000A.000D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 482.206811][ T5889] hid-led 0003:1D34:000A.000D: Dream Cheeky Webmail Notifier initialized [ 482.324307][ T9] usb 3-1: USB disconnect, device number 52 [ 482.478886][ T30] INFO: task syz.0.1120:10421 blocked for more than 143 seconds. [ 482.508853][ T30] Not tainted 6.14.0-rc1-syzkaller #0 [ 482.525108][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.551296][ T30] task:syz.0.1120 state:D stack:23960 pid:10421 tgid:10420 ppid:5855 task_flags:0x400040 flags:0x00004006 [ 482.565573][ T30] Call Trace: [ 482.569084][ T30] [ 482.572144][ T30] __schedule+0x190e/0x4c90 [ 482.583759][ T30] ? __pfx___schedule+0x10/0x10 [ 482.592521][ T30] ? __pfx_lock_release+0x10/0x10 [ 482.611365][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.623342][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.648566][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 482.654056][ T30] ? schedule+0x90/0x320 [ 482.664486][ T30] schedule+0x14b/0x320 [ 482.674696][ T30] ? down_read+0x6a5/0xa40 [ 482.684676][ T30] schedule_preempt_disabled+0x13/0x30 [ 482.694826][ T30] down_read+0x705/0xa40 [ 482.704970][ T30] ? __pfx_down_read+0x10/0x10 [ 482.712339][ T30] ? folio_mapping+0x17f/0x250 [ 482.718609][ T30] rmap_walk_file+0x69c/0x780 [ 482.723614][ T30] migrate_pages+0xd34/0x34a0 [ 482.728564][ T30] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 482.735426][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 482.744217][ T30] ? __se_sys_mbind+0x145f/0x1980 [ 482.752901][ T30] ? __pfx_lock_release+0x10/0x10 [ 482.762513][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 482.778349][ T30] ? mas_next_slot+0xdc6/0xea0 [ 482.783442][ T30] ? __pfx_up_write+0x10/0x10 [ 482.788493][ T30] __se_sys_mbind+0x14b8/0x1980 [ 482.798919][ T30] ? __pfx___se_sys_mbind+0x10/0x10 [ 482.808006][ T30] ? do_futex+0x33b/0x560 [ 482.812485][ T30] ? __pfx_do_futex+0x10/0x10 [ 482.817430][ T30] ? do_set_mempolicy+0x2de/0x380 [ 482.822614][ T30] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 482.848371][ T30] ? syscall_user_dispatch+0x4e/0x90 [ 482.854193][ T30] ? __x64_sys_mbind+0x21/0xf0 [ 482.861265][ T30] do_syscall_64+0xf3/0x230 [ 482.865848][ T30] ? clear_bhb_loop+0x35/0x90 [ 482.870746][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.876691][ T30] RIP: 0033:0x7f69a058cda9 [ 482.881510][ T30] RSP: 002b:00007f69a13e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 482.890182][ T30] RAX: ffffffffffffffda RBX: 00007f69a07a5fa0 RCX: 00007f69a058cda9 [ 482.898403][ T30] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 482.906429][ T30] RBP: 00007f69a060e2a0 R08: 0000000000000040 R09: 0000000000000002 [ 482.914753][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.922824][ T30] R13: 0000000000000000 R14: 00007f69a07a5fa0 R15: 00007f69a08cfa18 [ 482.931065][ T30] [ 482.934631][ T30] INFO: task syz.0.1120:10444 blocked for more than 143 seconds. [ 483.000604][ T30] Not tainted 6.14.0-rc1-syzkaller #0 [ 483.009812][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.028342][ T30] task:syz.0.1120 state:D stack:26680 pid:10444 tgid:10420 ppid:5855 task_flags:0x400040 flags:0x00000004 [ 483.044955][ T30] Call Trace: [ 483.048694][ T30] [ 483.051680][ T30] __schedule+0x190e/0x4c90 [ 483.056252][ T30] ? __pfx___schedule+0x10/0x10 [ 483.061809][ T30] ? __blk_flush_plug+0x449/0x500 [ 483.066896][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.072799][ T30] ? __blk_flush_plug+0x449/0x500 [ 483.077899][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.084469][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 483.090208][ T30] ? schedule+0x90/0x320 [ 483.094506][ T30] schedule+0x14b/0x320 [ 483.099202][ T30] io_schedule+0x8d/0x110 [ 483.103594][ T30] ? folio_wait_bit_common+0x850/0xee0 [ 483.114266][ T30] folio_wait_bit_common+0x839/0xee0 [ 483.138384][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 483.144295][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 483.158356][ T30] ? up_write+0x1a9/0x590 [ 483.162793][ T30] __filemap_get_folio+0x14e/0xae0 [ 483.167959][ T30] ? down_write+0x18c/0x220 [ 483.180658][ T30] hugetlbfs_zero_partial_page+0xb0/0x590 [ 483.186478][ T30] hugetlbfs_fallocate+0xbd2/0x11a0 [ 483.192334][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 483.198067][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 483.204547][ T30] vfs_fallocate+0x623/0x7a0 [ 483.211055][ T30] ? __pfx_vfs_fallocate+0x10/0x10 [ 483.218188][ T30] do_madvise+0x23c9/0x4d90 [ 483.223334][ T30] ? __pfx_do_madvise+0x10/0x10 [ 483.228251][ T30] ? mark_lock+0x9a/0x360 [ 483.241260][ T30] ? mark_lock+0x9a/0x360 [ 483.245657][ T30] ? __lock_acquire+0x1397/0x2100 [ 483.263204][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 483.276112][ T30] ? vma_end_read+0x18/0x170 [ 483.286469][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 483.299844][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.305930][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.325242][ T30] ? exc_page_fault+0x590/0x8b0 [ 483.335190][ T30] __x64_sys_madvise+0xa6/0xc0 [ 483.347245][ T30] do_syscall_64+0xf3/0x230 [ 483.352299][ T30] ? clear_bhb_loop+0x35/0x90 [ 483.357044][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.376998][ T30] RIP: 0033:0x7f69a058cda9 [ 483.386569][ T30] RSP: 002b:00007f69a139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 483.398500][ T30] RAX: ffffffffffffffda RBX: 00007f69a07a6160 RCX: 00007f69a058cda9 [ 483.406541][ T30] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000000020000000 [ 483.432046][ T30] RBP: 00007f69a060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 483.457843][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.474724][ T30] R13: 0000000000000001 R14: 00007f69a07a6160 R15: 00007f69a08cfa18 [ 483.498514][ T30] [ 483.519958][ T30] [ 483.519958][ T30] Showing all locks held in the system: [ 483.527808][ T30] 1 lock held by khungtaskd/30: [ 483.556712][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 483.568496][ T30] 2 locks held by getty/5596: [ 483.573218][ T30] #0: ffff8880354f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 483.594370][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 483.608496][ T30] 2 locks held by kworker/u8:9/6395: [ 483.625223][ T30] #0: ffff8880b863e918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 483.646184][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 483.672665][ T30] 1 lock held by syz.0.1120/10421: [ 483.677849][ T30] #0: ffff888028946788 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: rmap_walk_file+0x69c/0x780 [ 483.698507][ T30] 3 locks held by syz.0.1120/10444: [ 483.703778][ T30] #0: ffff888021eee420 (sb_writers#15){.+.+}-{0:0}, at: vfs_fallocate+0x59d/0x7a0 [ 483.727438][ T30] #1: ffff8880289464b8 (&sb->s_type->i_mutex_key#19){+.+.}-{4:4}, at: hugetlbfs_fallocate+0x408/0x11a0 [ 483.749014][ T30] #2: ffff888028946788 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: hugetlbfs_fallocate+0x4ce/0x11a0 [ 483.772765][ T30] 2 locks held by dhcpcd-run-hook/13874: [ 483.788367][ T30] #0: ffff8880b873e918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 483.808524][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 483.828345][ T30] 2 locks held by dhcpcd-run-hook/13878: [ 483.834078][ T30] #0: ffff8880b873e918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 483.868462][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 483.888419][ T30] [ 483.890824][ T30] ============================================= [ 483.890824][ T30] [ 483.910741][ T30] NMI backtrace for cpu 0 [ 483.910759][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller #0 [ 483.910783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 483.910796][ T30] Call Trace: [ 483.910805][ T30] [ 483.910814][ T30] dump_stack_lvl+0x241/0x360 [ 483.910844][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.910867][ T30] ? __pfx__printk+0x10/0x10 [ 483.910912][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 483.910941][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 483.910963][ T30] ? _printk+0xd5/0x120 [ 483.910994][ T30] ? __pfx__printk+0x10/0x10 [ 483.911026][ T30] ? __wake_up_klogd+0xcc/0x110 [ 483.911060][ T30] ? __pfx__printk+0x10/0x10 [ 483.911093][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 483.911122][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 483.911150][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 483.911178][ T30] watchdog+0x1058/0x10a0 [ 483.911208][ T30] ? watchdog+0x1ea/0x10a0 [ 483.911241][ T30] ? __pfx_watchdog+0x10/0x10 [ 483.911269][ T30] kthread+0x7a9/0x920 [ 483.911297][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911329][ T30] ? __pfx_watchdog+0x10/0x10 [ 483.911357][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911385][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911417][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911444][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.911468][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 483.911495][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911526][ T30] ret_from_fork+0x4b/0x80 [ 483.911552][ T30] ? __pfx_kthread+0x10/0x10 [ 483.911589][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.911628][ T30] [ 483.911637][ T30] Sending NMI from CPU 0 to CPUs 1: [ 484.081310][ C1] NMI backtrace for cpu 1 [ 484.081327][ C1] CPU: 1 UID: 0 PID: 13886 Comm: rm Not tainted 6.14.0-rc1-syzkaller #0 [ 484.081346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.081358][ C1] RIP: 0010:validate_chain+0x4/0x5920 [ 484.081382][ C1] Code: 1b 90 e8 bf 82 8a 00 48 89 d9 e9 54 ff ff ff e8 72 47 5a 0a 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 [ 484.081397][ C1] RSP: 0018:ffffc90004746e68 EFLAGS: 00000086 [ 484.081414][ C1] RAX: 1ffffffff2796ce5 RBX: ffffffff93cb6728 RCX: 00f56df79a320748 [ 484.081428][ C1] RDX: 0000000000000000 RSI: ffff888021746518 RDI: ffff888021745a00 [ 484.081440][ C1] RBP: 00f56df79a320748 R08: ffffffff942f98f7 R09: 1ffffffff285f31e [ 484.081454][ C1] R10: dffffc0000000000 R11: fffffbfff285f31f R12: ffff888021745a00 [ 484.081467][ C1] R13: ffff888021745a00 R14: 1ffff110042e8ca7 R15: 0000000000000000 [ 484.081480][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 484.081495][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.081507][ C1] CR2: 00007ffc62d74ff8 CR3: 0000000024cb8000 CR4: 00000000003526f0 [ 484.081523][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.081534][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.081545][ C1] Call Trace: [ 484.081552][ C1] [ 484.081559][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 484.081580][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 484.081604][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 484.081630][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 484.081651][ C1] ? nmi_handle+0x14f/0x5a0 [ 484.081677][ C1] ? nmi_handle+0x2a/0x5a0 [ 484.081702][ C1] ? validate_chain+0x4/0x5920 [ 484.081718][ C1] ? default_do_nmi+0x63/0x160 [ 484.081735][ C1] ? exc_nmi+0x123/0x1f0 [ 484.081752][ C1] ? end_repeat_nmi+0xf/0x53 [ 484.081781][ C1] ? validate_chain+0x4/0x5920 [ 484.081797][ C1] ? validate_chain+0x4/0x5920 [ 484.081814][ C1] ? validate_chain+0x4/0x5920 [ 484.081829][ C1] [ 484.081835][ C1] [ 484.081841][ C1] __lock_acquire+0x1397/0x2100 [ 484.081875][ C1] lock_acquire+0x1ed/0x550 [ 484.081897][ C1] ? validate_mm+0x2c8/0x590 [ 484.081926][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 484.081950][ C1] ? __pfx___might_resched+0x10/0x10 [ 484.081971][ C1] ? mt_validate+0x4992/0x4b30 [ 484.082008][ C1] down_read+0xb1/0xa40 [ 484.082032][ C1] ? validate_mm+0x2c8/0x590 [ 484.082058][ C1] ? mas_next_slot+0xdc6/0xea0 [ 484.082080][ C1] ? __pfx_down_read+0x10/0x10 [ 484.082108][ C1] ? mas_find+0x950/0xbb0 [ 484.082131][ C1] validate_mm+0x2c8/0x590 [ 484.082159][ C1] ? __pfx_validate_mm+0x10/0x10 [ 484.082186][ C1] ? __pfx_uprobe_mmap+0x10/0x10 [ 484.082209][ C1] ? vma_complete+0xad8/0xb50 [ 484.082237][ C1] __split_vma+0xabd/0xc50 [ 484.082256][ C1] ? mas_next_node+0xb99/0xe00 [ 484.082276][ C1] ? __pfx___split_vma+0x10/0x10 [ 484.082300][ C1] vms_gather_munmap_vmas+0x2e6/0x1600 [ 484.082328][ C1] ? mas_find+0x950/0xbb0 [ 484.082352][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 484.082375][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 484.082405][ C1] ? mas_find+0x8c0/0xbb0 [ 484.082429][ C1] mmap_region+0xa32/0x2f80 [ 484.082450][ C1] ? validate_chain+0x11e/0x5920 [ 484.082473][ C1] ? __pfx_mmap_region+0x10/0x10 [ 484.082494][ C1] ? mark_lock+0x9a/0x360 [ 484.082533][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 484.082565][ C1] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 484.082589][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 484.082618][ C1] ? cap_mmap_addr+0xaa/0xf0 [ 484.082640][ C1] ? bpf_lsm_mmap_addr+0x9/0x10 [ 484.082659][ C1] ? security_mmap_addr+0x6f/0x250 [ 484.082680][ C1] ? shmem_mapping+0xd/0x50 [ 484.082702][ C1] do_mmap+0xecc/0x13a0 [ 484.082723][ C1] ? ima_file_mmap+0x17e/0x220 [ 484.082748][ C1] ? __pfx_do_mmap+0x10/0x10 [ 484.082767][ C1] ? down_write_killable+0x19e/0x260 [ 484.082793][ C1] ? vm_mmap_pgoff+0x182/0x430 [ 484.082815][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 484.082840][ C1] ? common_file_perm+0x1a6/0x210 [ 484.082867][ C1] vm_mmap_pgoff+0x214/0x430 [ 484.082892][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 484.082915][ C1] ? __fget_files+0x2a/0x410 [ 484.082933][ C1] ? __fget_files+0x395/0x410 [ 484.082950][ C1] ? __fget_files+0x2a/0x410 [ 484.082969][ C1] ksys_mmap_pgoff+0x4eb/0x720 [ 484.082990][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 484.083022][ C1] do_syscall_64+0xf3/0x230 [ 484.083045][ C1] ? clear_bhb_loop+0x35/0x90 [ 484.083071][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.083095][ C1] RIP: 0033:0x7ff829ad1b74 [ 484.083109][ C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 484.083123][ C1] RSP: 002b:00007ffc62d74e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 484.083140][ C1] RAX: ffffffffffffffda RBX: 00007ffc62d74ed8 RCX: 00007ff829ad1b74 [ 484.083154][ C1] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 00007ff829aaa000 [ 484.083165][ C1] RBP: 00007ffc62d75190 R08: 0000000000000003 R09: 00000000000be000 [ 484.083177][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ff829aae0c0 [ 484.083188][ C1] R13: 00007ffc62d75218 R14: 00000000000be138 R15: 0000000000000000 [ 484.083205][ C1] [ 484.623661][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 484.630556][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller #0 [ 484.639702][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.649788][ T30] Call Trace: [ 484.653122][ T30] [ 484.656075][ T30] dump_stack_lvl+0x241/0x360 [ 484.660789][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.666025][ T30] ? __pfx__printk+0x10/0x10 [ 484.670651][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.676688][ T30] ? vscnprintf+0x5d/0x90 [ 484.681047][ T30] panic+0x349/0x880 [ 484.684977][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 484.691158][ T30] ? __pfx_panic+0x10/0x10 [ 484.695597][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 484.700989][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 484.707153][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 484.713319][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 484.719485][ T30] watchdog+0x1097/0x10a0 [ 484.723916][ T30] ? watchdog+0x1ea/0x10a0 [ 484.728355][ T30] ? __pfx_watchdog+0x10/0x10 [ 484.733090][ T30] kthread+0x7a9/0x920 [ 484.737176][ T30] ? __pfx_kthread+0x10/0x10 [ 484.741875][ T30] ? __pfx_watchdog+0x10/0x10 [ 484.746568][ T30] ? __pfx_kthread+0x10/0x10 [ 484.751197][ T30] ? __pfx_kthread+0x10/0x10 [ 484.755811][ T30] ? __pfx_kthread+0x10/0x10 [ 484.760420][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.765634][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 484.770845][ T30] ? __pfx_kthread+0x10/0x10 [ 484.775450][ T30] ret_from_fork+0x4b/0x80 [ 484.779882][ T30] ? __pfx_kthread+0x10/0x10 [ 484.784489][ T30] ret_from_fork_asm+0x1a/0x30 [ 484.789274][ T30] [ 484.792613][ T30] Kernel Offset: disabled [ 484.796961][ T30] Rebooting in 86400 seconds..