last executing test programs: 43m18.001587756s ago: executing program 2 (id=2262): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, r2) lstat(&(0x7f00000037c0)='./file0\x00', 0x0) 43m17.569610512s ago: executing program 2 (id=2268): socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, &(0x7f0000002200)=""/207, 0xcf) iopl(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xd, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x7893bf0db0b4717a, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) 43m16.647734227s ago: executing program 2 (id=2273): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be"], 0x1c}}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 43m14.873315945s ago: executing program 2 (id=2277): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x124f400, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 43m14.398694562s ago: executing program 2 (id=2281): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000140)={"c14a7b741dbde86bb2dbb521a2b07e9566639c2cf78df8255ff0815d223546e2", r3}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000a40)=0xfff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x4, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbc, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 43m11.786533683s ago: executing program 2 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 43m11.493126097s ago: executing program 32 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 38m42.539875781s ago: executing program 5 (id=3111): syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x87, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ptrace(0x10, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x9, 0x48, 0x8e, 0x20, 0x12d1, 0x2f30, 0xf312, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x13, 0x10, 0x80, "", [{{0x9, 0x4, 0x5a, 0x8, 0x0, 0xff, 0x1, 0x78, 0x6}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) 38m38.570315623s ago: executing program 5 (id=3116): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 38m38.11532539s ago: executing program 5 (id=3117): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc8f43, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) 38m34.907459275s ago: executing program 5 (id=3123): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 38m32.654034256s ago: executing program 5 (id=3126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 38m30.480149787s ago: executing program 5 (id=3128): syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x87, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x5, 0x8, 0x33424752, 0x3, 0x3, 0x8, 0xc, 0x2000000, 0x1, 0x9, 0x2, 0x5}}) ptrace(0x10, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x9, 0x48, 0x8e, 0x20, 0x12d1, 0x2f30, 0xf312, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x13, 0x10, 0x80, "", [{{0x9, 0x4, 0x5a, 0x8, 0x0, 0xff, 0x1, 0x78, 0x6}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x9, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000680)={"00eb00", 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', '#\x00', "fc599184", ["8b040000000080000400", "c2a4a110cfc1bac26ef76ef7"]}) 38m15.010023545s ago: executing program 33 (id=3128): syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x87, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x5, 0x8, 0x33424752, 0x3, 0x3, 0x8, 0xc, 0x2000000, 0x1, 0x9, 0x2, 0x5}}) ptrace(0x10, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x9, 0x48, 0x8e, 0x20, 0x12d1, 0x2f30, 0xf312, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x13, 0x10, 0x80, "", [{{0x9, 0x4, 0x5a, 0x8, 0x0, 0xff, 0x1, 0x78, 0x6}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x9, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000680)={"00eb00", 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', '#\x00', "fc599184", ["8b040000000080000400", "c2a4a110cfc1bac26ef76ef7"]}) 6m4.731093107s ago: executing program 1 (id=8559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 6m4.2905858s ago: executing program 1 (id=8561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x0, 0x1, "ad"}, 0x9) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0x2, 0xfffffffe}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000000)=0xfffffffe, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 'lblc\x00', 0x3c, 0x40c, 0x41}, 0x2c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6m2.180462082s ago: executing program 1 (id=8572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) 6m1.642959552s ago: executing program 1 (id=8576): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) socketpair(0xb, 0xa, 0x5, &(0x7f0000000040)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe4) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m1.186309524s ago: executing program 1 (id=8580): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffff1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 6m0.649897264s ago: executing program 1 (id=8583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$nl_route_sched(r1, 0x0, 0xe2eb41f5a4834225) 5m45.045594425s ago: executing program 34 (id=8583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$nl_route_sched(r1, 0x0, 0xe2eb41f5a4834225) 18.678468664s ago: executing program 0 (id=8870): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5277c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x778, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7d8) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, 0x0) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) 17.013295964s ago: executing program 7 (id=8872): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13d", 0xe4, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6", 0x70, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.84695628s ago: executing program 3 (id=8874): kexec_load(0x3, 0x0, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce", 0x94}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.225092131s ago: executing program 6 (id=8877): socket(0x2b, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x10000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x161841, 0xa2) fcntl$setlease(r4, 0x400, 0x1) fcntl$getownex(r4, 0x11, &(0x7f0000000000)={0x0, 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x0, {0x2, 0xff, 0x4}, {0x1}, 0xfd, 0xff}, {0x2, 0x2, {0x1, 0xff}, {}, 0xfe, 0xfd}, {0x3, 0x2, {0x0, 0x0, 0x1}, {0x1, 0xf0}, 0xfc}], 0x54) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}, {{&(0x7f0000000240)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)="e988d2cb98", 0x5}, {&(0x7f0000000580)="e8c616003c5d39d22dffa639490076b603ad65936fba140e02bf3cd2332a66b0c141987b43659078a0e8de0b5a40b50f190837fbdc801c1e17fc3d7960da04240de0549a973a6479083c066edeff27f5a530edf36f3851a02151a217999a868b1b1acd3f3e296e89616142e0", 0x6c}, {&(0x7f0000000800)="f6904fccd27d3447f03bf7f8329ba520010f647daffb08319707dd6c35a53e5d025690e1554e67e18da7f67c6d0764154d7744bec145409dc28e6369b5de54c709e27207f489b33172d1e51d32b569ddaa75aa4ae603c00193b7ff2ac3308c4ef565a0ab509011cd9a605990d734169f69cbd30edea3f48d2ab762d3219792cd06b85a35adc0c01ac0f29db58b0083101b190a4a14cb", 0x96}, {&(0x7f00000008c0)="84f1a5c78558c97ffcc56038bc172ca915fb1abe8d3a43f3184c88e6d29ba0129370c395a5907e750cf49d7949cd93e1879c586fee11b12e09a34482a1cb5a349234f348e2bced3f814849e8207babcfb5cbe0bdc99aac628a383118525a98572a6ce1fc3f", 0x65}, {&(0x7f0000000940)="81508f8d3ffb1bc5872cfb4702479e046d82f310103c005d692916ac668c20949799dc40b45f8f83656992d9d8050353dd9b0e520efd052b44cb708c61ae3ec2f0afc733233b4183a40201a2eff68da73913fcbd07340f5fc70f731922f8a93212d3578bc8c679961896095044ab08c12a2d55b2249248b291eaa581320a39417fb0f29da19cc7f309", 0x89}, {&(0x7f0000000a00)="6d05ba11afd8f0053a57dd94c00fee7ca620d9edd4dc279d3ebb09b5f3fcdd108280335e", 0x24}], 0x6}}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e23, 0x3, @private2}}}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB], 0x1244}}, {{&(0x7f0000002440)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)="24f2a3f8611594ae2a0401ad81f9912dbc164ef9ba275a38fc817ee02447426931bad97b2d46af33ce537044de328b9446d1a1b4a4ee745dd2ed16783ac36bec908ff5d8c4175c64d0a01ef6cc13cf4f1a9bed4eba855ee393ba3013aa43a96d8343be4bcb3f072ae301f5d022840487e7fee2b9dbe96368a7311449d6db16b9a6ee7a280740acbf01faed28911d5bed4c8d166e961440d1dd22b220821b33796749a2bec9a3f4468f1a07f1d067ae72e1a9aa8b29ab0976964ff3c98f56a06582ef8fadf00191d89feebadb8c69d2ce5f49375715b342c74428a94a3efe0393c32e7841551929399c890d376c43469b74aaa79272153b", 0xf7}, {&(0x7f00000025c0)="9e7b00f5173ea103c7f091fc5d09e246a52ac064976f80387c7156f8", 0x1c}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3f8}}], 0x4, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x40) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000080)=0x200000000) prlimit64(r5, 0x3, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, 0x0) 15.475063825s ago: executing program 7 (id=8879): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc0163", 0x3c, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.40638449s ago: executing program 6 (id=8880): syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r3, &(0x7f00000061c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40010000) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000019c0)=""/4067, 0xfe3}], 0x1}, 0x40) listen(0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x57fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 15.369081439s ago: executing program 3 (id=8881): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422", 0x8b, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f", 0x74, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.433563112s ago: executing program 4 (id=8882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.144336781s ago: executing program 0 (id=8883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 13.368211966s ago: executing program 7 (id=8884): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffede, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x24040000) 13.328352828s ago: executing program 3 (id=8885): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce", 0x94}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.235567541s ago: executing program 4 (id=8886): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 11.590569505s ago: executing program 0 (id=8887): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.481902554s ago: executing program 6 (id=8888): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xb, 0xfff3}, {0x2, 0xffff}}, ["", ""]}, 0x24}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x427167f3b73c1d19, 0x7ff, 0xadf, 0x10, 0x0, 0x0, 0x2000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x9fe}, 0x2000, 0x6, 0x8, 0x7}}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="91229708a14b87145f8ad1bbc325c294040c37", 0x13, 0x4040000, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffe00, @mcast2, 0x2}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 10.494741933s ago: executing program 4 (id=8889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x108, 0xfd, r1}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0xc88c4) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @val={0x4, 0x6, {0xd, 0x0, 0xfeff, 0x4}}, @void, @val={0x5, 0x3, {0x1, 0x13, 0x1}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x9}}, @void}, 0x49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 10.363990541s ago: executing program 0 (id=8890): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5277c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x778, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7d8) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x4000084) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) 10.277056318s ago: executing program 7 (id=8891): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000000000087, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7c\\\xb3_\xbc\xa8\x9b\xdb\xc3B\x11q\xad\x1c\xb8\x9dc \xa3T\xfbE>\x8c\x8a\x86\xa3\xff\xf2(&\xc7\xac\x8d\x90\x17vmYD\xd9\xca\xcag', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x9a) 8.224522046s ago: executing program 7 (id=8892): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.806616402s ago: executing program 4 (id=8893): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6", 0x70, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.799827106s ago: executing program 3 (id=8894): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544b", 0x5a, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.377956378s ago: executing program 6 (id=8895): r0 = socket(0x840000000002, 0x3, 0x100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x9735000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) read$FUSE(r1, &(0x7f0000006a40)={0x2020}, 0x2020) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 7.348833317s ago: executing program 4 (id=8896): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 5.721152274s ago: executing program 6 (id=8897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.461427316s ago: executing program 4 (id=8898): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffede, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x24040000) 4.140929217s ago: executing program 3 (id=8899): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000000000087, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7c\\\xb3_\xbc\xa8\x9b\xdb\xc3B\x11q\xad\x1c\xb8\x9dc \xa3T\xfbE>\x8c\x8a\x86\xa3\xff\xf2(&\xc7\xac\x8d\x90\x17vmYD\xd9\xca\xcag', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x9a) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x10, 0x800) fanotify_mark(r9, 0x1, 0x48000031, r8, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r10, 0x0, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r11, 0x5457, 0x0) 1.802021223s ago: executing program 3 (id=8900): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.683831784s ago: executing program 0 (id=8901): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000000000087, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7c\\\xb3_\xbc\xa8\x9b\xdb\xc3B\x11q\xad\x1c\xb8\x9dc \xa3T\xfbE>\x8c\x8a\x86\xa3\xff\xf2(&\xc7\xac\x8d\x90\x17vmYD\xd9\xca\xcag', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x9a) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x10, 0x800) fanotify_mark(r9, 0x1, 0x48000031, r8, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r10, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.503070266s ago: executing program 6 (id=8902): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000000000087, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7c\\\xb3_\xbc\xa8\x9b\xdb\xc3B\x11q\xad\x1c\xb8\x9dc \xa3T\xfbE>\x8c\x8a\x86\xa3\xff\xf2(&\xc7\xac\x8d\x90\x17vmYD\xd9\xca\xcag', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x9a) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x10, 0x800) fanotify_mark(r9, 0x1, 0x48000031, r8, 0x0) 1.458726308s ago: executing program 7 (id=8903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x108, 0xfd, r1}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0xc88c4) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @val={0x4, 0x6, {0xd, 0x0, 0xfeff, 0x4}}, @void, @val={0x5, 0x3, {0x1, 0x13, 0x1}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x9}}, @void}, 0x49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 0s ago: executing program 0 (id=8904): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xb, 0xfff3}, {0x2, 0xffff}}, ["", ""]}, 0x24}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x427167f3b73c1d19, 0x7ff, 0xadf, 0x10, 0x0, 0x0, 0x2000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x9fe}, 0x2000, 0x6, 0x8, 0x7}}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "e8e99487"}]}}, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="91229708a14b87145f8ad1bbc325c294040c37", 0x13, 0x4040000, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffe00, @mcast2, 0x2}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) kernel console output (not intermixed with test programs): rter detected [ 2514.486928][T27157] usb 2-1: qt2_attach - failed to power on unit: -110 [ 2514.487119][T27157] quatech2 2-1:0.0: probe with driver quatech2 failed with error -110 [ 2515.330499][T27157] usb 2-1: USB disconnect, device number 20 [ 2517.327138][T10720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2517.398881][T10720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2517.401270][T10720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2517.436000][T10720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2517.437002][T10720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2519.217519][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880332fa800: rx timeout, send abort [ 2519.225823][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880332fa800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2519.307724][ T43] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2521.035833][T10720] Bluetooth: hci2: command tx timeout [ 2521.132750][T28152] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 2521.441215][T28141] syz.0.7253 (28141): drop_caches: 2 [ 2522.148256][T28159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2523.078951][T10720] Bluetooth: hci2: command tx timeout [ 2523.676290][T28172] kvm: kvm [28171]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2523.699463][ T1435] bridge_slave_1: left allmulticast mode [ 2523.699511][ T1435] bridge_slave_1: left promiscuous mode [ 2523.699851][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2523.891358][ T1435] bridge_slave_0: left allmulticast mode [ 2523.891405][ T1435] bridge_slave_0: left promiscuous mode [ 2523.891691][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.929633][ T1435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2525.050939][ T1435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2525.115916][ T1435] bond0 (unregistering): Released all slaves [ 2525.159517][T10720] Bluetooth: hci2: command tx timeout [ 2525.577547][T28127] wg1 speed is unknown, defaulting to 1000 [ 2526.028850][ T5720] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2526.106850][ T1435] hsr_slave_0: left promiscuous mode [ 2526.150445][ T1435] hsr_slave_1: left promiscuous mode [ 2526.151677][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2526.178545][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 2526.183148][ T5720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2526.214075][ T5720] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2526.214110][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.214130][ T5720] usb 5-1: Product: syz [ 2526.214144][ T5720] usb 5-1: Manufacturer: syz [ 2526.214179][ T5720] usb 5-1: SerialNumber: syz [ 2526.243056][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2526.243158][ T5720] usb 5-1: config 0 descriptor?? [ 2526.248123][ T5720] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2527.538497][T10720] Bluetooth: hci2: command tx timeout [ 2531.529278][ T5720] usb 5-1: qt2_attach - failed to power on unit: -110 [ 2531.530260][ T5720] quatech2 5-1:0.0: probe with driver quatech2 failed with error -110 [ 2532.753547][T21061] usb 5-1: USB disconnect, device number 76 [ 2533.746981][T28233] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 2534.876537][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2536.161640][ T1435] team0 (unregistering): Port device team_slave_1 removed [ 2537.259354][ T1435] team0 (unregistering): Port device team_slave_0 removed [ 2540.002254][T28127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.002508][T28127] bridge0: port 1(bridge_slave_0) entered disabled state [ 2540.002768][T28127] bridge_slave_0: entered allmulticast mode [ 2540.005928][T28127] bridge_slave_0: entered promiscuous mode [ 2540.009932][T28127] bridge0: port 2(bridge_slave_1) entered blocking state [ 2540.010161][T28127] bridge0: port 2(bridge_slave_1) entered disabled state [ 2540.010402][T28127] bridge_slave_1: entered allmulticast mode [ 2540.013207][T28127] bridge_slave_1: entered promiscuous mode [ 2540.096571][T28127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2540.111589][T28127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2540.187824][T28283] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 2540.295992][T28127] team0: Port device team_slave_0 added [ 2540.298322][T28127] team0: Port device team_slave_1 added [ 2540.401571][T28127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2540.401591][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2540.401620][T28127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2540.403561][T28127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2540.403572][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2540.403587][T28127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2540.532683][T28127] hsr_slave_0: entered promiscuous mode [ 2540.533989][T28127] hsr_slave_1: entered promiscuous mode [ 2540.534882][T28127] debugfs: 'hsr0' already exists in 'hsr' [ 2540.534906][T28127] Cannot create hsr debugfs directory [ 2541.575260][T28299] ALSA: mixer_oss: invalid OSS volume 'V' [ 2541.984162][T28289] syz.0.7281 (28289): drop_caches: 2 [ 2542.397930][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880618b4400: rx timeout, send abort [ 2542.398215][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880618b4400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2544.686030][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d4d800: rx timeout, send abort [ 2544.692569][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079d4d800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2545.329825][T28127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2546.050456][T28127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2546.811661][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069e81800: rx timeout, send abort [ 2546.816669][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069e81800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2547.109544][T28127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2547.135469][T28127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2547.151611][T28127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2547.198085][T28127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2547.209598][T28127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2547.247576][T28127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2547.431247][T28336] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 2547.496912][T28127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2547.545228][T28127] 8021q: adding VLAN 0 to HW filter on device team0 [ 2547.565267][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.566302][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2547.591983][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.592214][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2550.290072][T28358] fuse: Bad value for 'fd' [ 2550.686317][T28127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2552.285405][T28127] veth0_vlan: entered promiscuous mode [ 2552.310058][T28127] veth1_vlan: entered promiscuous mode [ 2552.367187][T28127] veth0_macvtap: entered promiscuous mode [ 2552.378301][T28127] veth1_macvtap: entered promiscuous mode [ 2552.427611][T28127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2552.467432][T28127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2552.525101][ T1435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.525430][ T1435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.525473][ T1435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.525509][ T1435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.997346][T28383] ALSA: mixer_oss: invalid OSS volume 'V' [ 2554.983558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ac06400: rx timeout, send abort [ 2554.987476][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ac06400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2555.571858][T28386] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 2555.966398][T28389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2557.607083][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.607106][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2558.001429][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2558.001455][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2558.460986][T28396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2563.718356][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028a54400: rx timeout, send abort [ 2563.774221][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028a54400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2566.403888][T25710] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 2567.218573][T25710] usb 7-1: Using ep0 maxpacket: 32 [ 2567.222168][T25710] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2567.225389][T25710] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2567.225422][T25710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2567.225444][T25710] usb 7-1: Product: syz [ 2567.225459][T25710] usb 7-1: Manufacturer: syz [ 2567.225474][T25710] usb 7-1: SerialNumber: syz [ 2567.393988][T25710] usb 7-1: config 0 descriptor?? [ 2568.161496][T25710] usb 7-1: can't set config #0, error -71 [ 2568.376941][T25710] usb 7-1: USB disconnect, device number 88 [ 2568.742961][T28450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2571.055257][T22465] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2571.094173][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 2571.094223][ T37] audit: type=1326 audit(1780176997.873:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.094499][ T37] audit: type=1326 audit(1780176997.873:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.094787][ T37] audit: type=1326 audit(1780176997.893:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.095017][ T37] audit: type=1326 audit(1780176997.893:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.095836][ T37] audit: type=1326 audit(1780176997.893:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.097237][ T37] audit: type=1326 audit(1780176997.893:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.097523][ T37] audit: type=1326 audit(1780176997.893:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.097755][ T37] audit: type=1326 audit(1780176997.903:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.097942][ T37] audit: type=1326 audit(1780176997.903:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.098301][ T37] audit: type=1326 audit(1780176997.903:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28455 comm="syz.6.7319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d86ce59 code=0x7ffc0000 [ 2571.881095][T22465] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2571.881126][T22465] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2571.881145][T22465] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2571.881193][T22465] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2571.881217][T22465] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2571.891887][T22465] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2571.891918][T22465] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2571.891937][T22465] usb 5-1: Product: syz [ 2571.891951][T22465] usb 5-1: Manufacturer: syz [ 2571.967242][T22465] cdc_wdm 5-1:1.0: skipping garbage [ 2571.975444][T22465] cdc_wdm 5-1:1.0: skipping garbage [ 2572.014510][T22465] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2572.014533][T22465] cdc_wdm 5-1:1.0: Unknown control protocol [ 2572.247144][T22465] usb 5-1: USB disconnect, device number 77 [ 2572.414154][T28463] syz.0.7318 (28463): drop_caches: 2 [ 2572.900242][T28471] IPv6: NLM_F_CREATE should be specified when creating new route [ 2572.901335][T28471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2572.901375][T28471] IPv6: NLM_F_CREATE should be set when creating new route [ 2574.021249][T28470] kvm: kvm [28469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000001af [ 2574.057521][T28470] kvm: kvm [28469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000003a [ 2574.073536][T28470] kvm: kvm [28469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x16f [ 2574.098274][T28470] kvm: kvm [28469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x41 [ 2576.128310][T28492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2586.820040][T27157] libceph: connect (1)[c::]:6789 error -101 [ 2586.820279][T27157] libceph: mon0 (1)[c::]:6789 connect error [ 2586.954915][T28548] ceph: No mds server is up or the cluster is laggy [ 2594.047775][T28602] ALSA: mixer_oss: invalid OSS volume 'V' [ 2595.808928][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.810587][T28610] syz.6.7356 (28610): drop_caches: 2 [ 2596.355537][T28622] ALSA: mixer_oss: invalid OSS volume 'V' [ 2596.380916][T28627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2596.886227][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7361'. [ 2598.462523][T28641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7362'. [ 2600.043559][T28642] sd 0:0:1:0: device reset [ 2600.098562][T28645] kvm: kvm [28643]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2605.003874][T28674] tipc: Started in network mode [ 2605.003909][T28674] tipc: Node identity 0e28385d8cb5, cluster identity 4711 [ 2605.004119][T28674] tipc: Enabled bearer , priority 0 [ 2605.060334][T28674] tipc: Resetting bearer [ 2605.499125][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7373'. [ 2606.394587][T28670] tipc: Disabling bearer [ 2606.444465][T28687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2606.557987][T28685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2606.558218][T28685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2606.685952][ T5720] tipc: Node number set to 2191341661 [ 2607.651434][T25710] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2607.678923][ T5720] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2607.942455][ T5720] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2607.942488][ T5720] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2607.942583][ T5720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2607.942638][ T5720] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2607.942666][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 2607.942759][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 2608.196420][T25710] usb 5-1: config 0 has no interfaces? [ 2608.205471][ T5720] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2608.205575][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2608.205598][ T5720] usb 2-1: Product: syz [ 2608.205614][ T5720] usb 2-1: Manufacturer: syz [ 2608.213280][T25710] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2608.213314][T25710] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2608.213335][T25710] usb 5-1: Product: syz [ 2608.213350][T25710] usb 5-1: SerialNumber: syz [ 2608.294823][T25710] usb 5-1: config 0 descriptor?? [ 2608.429929][ T5720] cdc_wdm 2-1:1.0: skipping garbage [ 2608.430071][ T5720] cdc_wdm 2-1:1.0: skipping garbage [ 2608.430665][ T5720] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2608.780914][T28698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2608.793811][T28698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2608.832654][ T5720] usb 5-1: USB disconnect, device number 78 [ 2609.207537][T28711] ALSA: mixer_oss: invalid OSS volume 'V' [ 2610.603894][ T4990] usb 2-1: USB disconnect, device number 21 [ 2612.045791][T28729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2619.355695][T28759] ALSA: mixer_oss: invalid OSS volume 'V' [ 2621.059203][ T5720] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2622.891248][ T5720] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2622.891283][ T5720] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2622.891304][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2622.891359][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2622.891387][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2622.897468][ T5720] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2622.897501][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2622.897523][ T5720] usb 4-1: Product: syz [ 2622.897537][ T5720] usb 4-1: Manufacturer: syz [ 2622.944665][ T5720] cdc_wdm 4-1:1.0: skipping garbage [ 2622.944687][ T5720] cdc_wdm 4-1:1.0: skipping garbage [ 2622.953656][ T5720] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2622.953677][ T5720] cdc_wdm 4-1:1.0: Unknown control protocol [ 2622.998652][T25710] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2623.171307][T25710] usb 5-1: config 0 has no interfaces? [ 2623.173635][T25710] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2623.173667][T25710] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2623.173688][T25710] usb 5-1: Product: syz [ 2623.173705][T25710] usb 5-1: SerialNumber: syz [ 2623.189389][T25710] usb 5-1: config 0 descriptor?? [ 2623.342143][T28774] fuse: Invalid rootmode [ 2623.996965][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 4 bytes [ 2624.002855][T28772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.003836][T28772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.550189][T22465] usb 5-1: USB disconnect, device number 79 [ 2625.782387][ T5627] usb 4-1: USB disconnect, device number 104 [ 2625.939400][T28783] fuse: Unknown parameter 'gid00000000000000000000' [ 2628.790789][T28796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2632.138676][T28803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2634.312241][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7409'. [ 2637.798108][T28833] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2637.798150][T28833] overlayfs: failed to set xattr on upper [ 2637.798159][T28833] overlayfs: ...falling back to redirect_dir=nofollow. [ 2637.798169][T28833] overlayfs: ...falling back to index=off. [ 2637.798178][T28833] overlayfs: ...falling back to uuid=null. [ 2638.256666][T28837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2638.407748][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7415'. [ 2642.440853][T28862] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2644.719056][T18487] Bluetooth: hci2: command 0x0406 tx timeout [ 2646.453179][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7430'. [ 2646.533579][T28897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2646.603519][T28897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2650.509101][T28920] syz.4.7422 (28920): drop_caches: 2 [ 2654.231699][ T5829] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2654.898480][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7441'. [ 2654.900006][T28950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.900813][T28950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.988680][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 2654.990706][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.990734][ T5829] usb 4-1: config 0 has no interfaces? [ 2654.990766][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2654.990789][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.994275][ T5829] usb 4-1: config 0 descriptor?? [ 2655.455088][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7443'. [ 2655.519624][T28958] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.519892][T28958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2656.009466][ T5746] usb 4-1: USB disconnect, device number 105 [ 2657.335399][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2665.327528][T29007] netlink: 'syz.4.7457': attribute type 6 has an invalid length. [ 2665.929883][T21061] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2666.088568][T21061] usb 5-1: Using ep0 maxpacket: 32 [ 2666.097918][T21061] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.097949][T21061] usb 5-1: config 0 has no interfaces? [ 2666.097984][T21061] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2666.098009][T21061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.114139][T21061] usb 5-1: config 0 descriptor?? [ 2666.308688][T25710] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2666.397791][T29031] syz.6.7465 (29031): drop_caches: 2 [ 2666.471428][T25710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2666.471482][T25710] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2666.471499][T25710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.475848][T25710] usb 4-1: config 0 descriptor?? [ 2666.476852][T29024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2666.975647][T25710] usbhid 4-1:0.0: can't add hid device: -71 [ 2666.975743][T25710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2667.110486][T25710] usb 4-1: USB disconnect, device number 106 [ 2668.036253][T25710] usb 5-1: USB disconnect, device number 80 [ 2673.146033][T29093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2673.198623][T25710] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2673.360665][T25710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2673.360719][T25710] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2673.360743][T25710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.401002][T25710] usb 2-1: config 0 descriptor?? [ 2673.402386][T29083] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2673.836001][T25710] hid (null): unknown global tag 0xe [ 2673.836272][T25710] hid (null): unknown global tag 0x43 [ 2673.971545][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.971575][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973667][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973696][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973711][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973726][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973740][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973755][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973769][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.973783][T25710] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 2673.974075][T25710] asus 0003:0B05:1ABE.0009: unexpected long global item [ 2673.974654][T25710] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22 [ 2673.974716][T25710] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22 [ 2674.110313][T25710] usb 2-1: USB disconnect, device number 22 [ 2675.175759][T29106] input: syz1 as /devices/virtual/input/input78 [ 2676.903888][T29124] syz.4.7492 (29124): drop_caches: 2 [ 2676.987931][T29119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2676.988303][T29119] bridge0: port 2(bridge_slave_1) entered listening state [ 2677.004822][T29119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.005023][T29119] bridge0: port 1(bridge_slave_0) entered listening state [ 2681.233276][T29154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2683.248148][T29157] syz.6.7503 (29157) used greatest stack depth: 17152 bytes left [ 2684.231041][T29187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2686.584250][T29203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2690.998900][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7523'. [ 2700.638608][ T4990] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2700.792693][ T4990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2700.792724][ T4990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2700.795344][ T4990] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2700.795498][ T4990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2700.795519][ T4990] usb 4-1: SerialNumber: syz [ 2701.073680][ T4990] usb 4-1: 0:2 : does not exist [ 2701.641120][ T4990] usb 4-1: USB disconnect, device number 107 [ 2702.104732][T29328] udevd[29328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2702.755039][T29344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7560'. [ 2703.083485][ T1185] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2703.083826][ T1185] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2703.083870][ T1185] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2703.083908][ T1185] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2706.608507][ T5829] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 2706.799162][ T5829] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2706.799197][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2706.816305][ T5829] usb 7-1: config 0 descriptor?? [ 2706.859262][ T5829] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2707.158601][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 2707.158810][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 2708.092075][ T5829] usb 7-1: USB disconnect, device number 89 [ 2713.794352][T29443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7595'. [ 2714.109029][T29443] bridge_slave_1: default FDB implementation only supports local addresses [ 2718.683526][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2719.278999][T29504] netlink: 'syz.4.7610': attribute type 1 has an invalid length. [ 2719.344836][T29506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7610'. [ 2719.463344][T29504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2721.947102][T29528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7618'. [ 2722.548558][ T5829] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2722.726762][ T5829] usb 2-1: config 0 has no interfaces? [ 2722.728611][ T5829] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2722.728640][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2722.728659][ T5829] usb 2-1: Product: syz [ 2722.728672][ T5829] usb 2-1: SerialNumber: syz [ 2722.746921][ T5829] usb 2-1: config 0 descriptor?? [ 2722.985989][T29529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2722.986750][T29529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2723.038549][T27157] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 2723.071653][T21061] usb 2-1: USB disconnect, device number 23 [ 2723.191363][T27157] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2723.191384][T27157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2723.196587][T27157] usb 7-1: config 0 descriptor?? [ 2723.210891][ T5829] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2723.254982][T27157] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2723.401306][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2723.405917][ T5829] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2723.405950][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.405971][ T5829] usb 4-1: Product: syz [ 2723.405986][ T5829] usb 4-1: Manufacturer: syz [ 2723.406001][ T5829] usb 4-1: SerialNumber: syz [ 2724.243943][T27157] usb 7-1: USB disconnect, device number 90 [ 2724.894947][ T5829] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2725.073639][ T5829] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2725.393148][ T5829] usb 4-1: USB disconnect, device number 108 [ 2725.723054][T29562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7629'. [ 2725.819145][T29328] udevd[29328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2726.025555][T29569] bridge_slave_1: default FDB implementation only supports local addresses [ 2728.478550][T22465] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2728.632699][T22465] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2728.632721][T22465] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2728.632734][T22465] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2728.632766][T22465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2728.632779][T22465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2728.632792][T22465] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2728.632818][T22465] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2728.633705][T22465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.731269][T22465] usb 4-1: config 0 descriptor?? [ 2729.208667][T22465] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2730.361176][T25710] usb 4-1: USB disconnect, device number 109 [ 2730.524854][T25710] usblp0: removed [ 2731.604605][T22465] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2731.653154][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7644'. [ 2731.772379][T22465] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2731.815480][T22465] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2731.815516][T22465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.815538][T22465] usb 2-1: Product: syz [ 2731.815553][T22465] usb 2-1: Manufacturer: syz [ 2731.815569][T22465] usb 2-1: SerialNumber: syz [ 2731.862430][T29617] bridge_slave_1: default FDB implementation only supports local addresses [ 2732.009029][T29621] syzkaller0: entered promiscuous mode [ 2732.009060][T29621] syzkaller0: entered allmulticast mode [ 2732.442576][T22465] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2732.486576][T22465] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2732.546921][T22465] usb 2-1: USB disconnect, device number 24 [ 2732.712770][T29328] udevd[29328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2733.998514][T22465] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2734.167013][T22465] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2734.167039][T22465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.177461][T22465] usb 4-1: config 0 descriptor?? [ 2734.215497][T22465] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2734.937243][T22465] usb 4-1: USB disconnect, device number 110 [ 2737.238678][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2737.238706][ C0] bridge0: topology change detected, propagating [ 2737.242786][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2737.242812][ C0] bridge0: topology change detected, propagating [ 2738.768689][ T4990] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2738.923688][ T4990] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2738.923722][ T4990] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2738.923744][ T4990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2738.923810][ T4990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2738.923835][ T4990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2738.923858][ T4990] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2738.923902][ T4990] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2738.923936][ T4990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.938251][ T4990] usb 2-1: config 0 descriptor?? [ 2739.136200][T29736] netlink: 'syz.3.7682': attribute type 1 has an invalid length. [ 2739.317331][ T4990] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2739.711117][T25710] usb 2-1: USB disconnect, device number 25 [ 2739.835944][T29744] netlink: 'syz.6.7683': attribute type 1 has an invalid length. [ 2739.872331][T25710] usblp0: removed [ 2739.922377][T29736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2740.016307][T29744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2743.479519][T21061] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2743.663856][T21061] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2743.663890][T21061] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2743.663913][T21061] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2743.664264][T21061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2743.664291][T21061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2743.664314][T21061] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2743.664360][T21061] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2743.664385][T21061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.868652][T21061] usb 4-1: config 0 descriptor?? [ 2744.108132][T21061] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2744.468546][T15922] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 2744.623763][T15922] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2744.625300][T15922] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2744.625329][T15922] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2744.625388][T15922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2744.625412][T15922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2744.625436][T15922] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2744.625482][T15922] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2744.625507][T15922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.657439][T15922] usb 5-1: config 0 descriptor?? [ 2744.936096][T15922] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2745.210324][T29797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2745.211024][T29797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.709009][T21061] usb 5-1: USB disconnect, device number 81 [ 2745.760394][T21061] usblp1: removed [ 2747.195851][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7701'. [ 2748.589133][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2748.745079][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2748.745113][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.797938][ T9] usb 2-1: config 0 descriptor?? [ 2748.839400][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2749.700642][ T9] usb 2-1: USB disconnect, device number 26 [ 2752.088656][ T9] usb 7-1: new low-speed USB device number 91 using dummy_hcd [ 2752.260044][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2752.261835][ T9] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2752.303736][ T9] usb 7-1: string descriptor 0 read error: -22 [ 2752.303914][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=b2.43 [ 2752.303941][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.544594][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 2752.544901][ T9] ttusb-dec 7-1:8.0: probe with driver ttusb-dec failed with error -22 [ 2753.109973][ T4990] usb 7-1: USB disconnect, device number 91 [ 2753.760302][T29862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.766838][T29862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.946652][T29862] io-wq is not configured for unbound workers [ 2755.408606][T29871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7719'. [ 2755.468476][T21061] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 2755.625258][T21061] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2755.625280][T21061] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2755.625293][T21061] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2755.625335][T21061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2755.625348][T21061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2755.625361][T21061] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2755.625389][T21061] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2755.625404][T21061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2755.732087][T21061] usb 7-1: config 0 descriptor?? [ 2756.055482][T21061] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 92 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2756.593993][T21061] usb 7-1: USB disconnect, device number 92 [ 2756.650080][T21061] usblp1: removed [ 2757.238863][ T5829] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 2757.480306][ T5829] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2757.480464][ T5829] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2757.480489][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2757.480562][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2757.480588][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2757.480612][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2757.480659][ T5829] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2757.480683][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.586654][ T5829] usb 2-1: config 0 descriptor?? [ 2757.825582][ T5829] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2759.574338][T29914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7731'. [ 2761.374051][T15922] IPVS: starting estimator thread 0... [ 2761.458589][T29932] IPVS: using max 8 ests per chain, 19200 per kthread [ 2761.607302][T29938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7738'. [ 2761.974513][T29947] bridge_slave_1: default FDB implementation only supports local addresses [ 2762.190940][T29953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7743'. [ 2762.343242][T29956] netlink: 'syz.0.7744': attribute type 1 has an invalid length. [ 2762.397603][T29959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7744'. [ 2762.445746][T29956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2765.508174][T29990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7756'. [ 2772.323231][T30056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2772.324650][T30056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2772.394434][ T5829] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2772.468513][T22465] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 2772.569130][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 2772.571903][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2772.571934][ T5829] usb 5-1: config 0 has no interfaces? [ 2772.571957][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2772.571972][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.602756][ T5829] usb 5-1: config 0 descriptor?? [ 2772.631190][T22465] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2772.631222][T22465] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2772.631244][T22465] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2772.631317][T22465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2772.631339][T22465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2772.631362][T22465] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2772.631403][T22465] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2772.631427][T22465] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.744190][T22465] usb 7-1: config 0 descriptor?? [ 2773.803287][ T5627] usb 5-1: USB disconnect, device number 82 [ 2777.946161][T22465] usblp 7-1:0.0: usblp2: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2780.122877][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2782.001790][T30123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2782.122095][T30123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2783.016430][ T5720] IPVS: starting estimator thread 0... [ 2783.103927][T30136] IPVS: using max 9 ests per chain, 21600 per kthread [ 2788.170732][T30174] netlink: 'syz.6.7809': attribute type 1 has an invalid length. [ 2788.233332][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7809'. [ 2788.397730][T30174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2792.203256][T30214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2792.203953][T30214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2793.708603][T22465] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2793.858539][T22465] usb 5-1: Using ep0 maxpacket: 32 [ 2793.865392][T22465] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2793.865427][T22465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.865449][T22465] usb 5-1: Product: syz [ 2793.865464][T22465] usb 5-1: Manufacturer: syz [ 2793.865479][T22465] usb 5-1: SerialNumber: syz [ 2793.918034][T22465] usb 5-1: config 0 descriptor?? [ 2793.932310][T22465] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2794.082830][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2794.577634][T22465] gspca_ov534_9: reg_w failed -110 [ 2794.998575][T22465] gspca_ov534_9: Unknown sensor 0000 [ 2794.998703][T22465] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2797.199148][T30252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.203338][T30252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.317465][ T5627] usb 5-1: USB disconnect, device number 83 [ 2797.698932][T30261] fuse: Bad value for 'fd' [ 2798.476024][T30275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7839'. [ 2799.983715][T30281] fuse: Bad value for 'group_id' [ 2799.983739][T30281] fuse: Bad value for 'group_id' [ 2800.015100][T30283] netlink: 'syz.4.7844': attribute type 1 has an invalid length. [ 2800.076166][T30288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7844'. [ 2800.101217][T30283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2800.149750][T30283] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7844'. [ 2801.189202][T30302] fuse: Bad value for 'fd' [ 2803.126950][T30334] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7858'. [ 2807.596403][T15922] IPVS: starting estimator thread 0... [ 2807.710322][T30393] IPVS: using max 14 ests per chain, 33600 per kthread [ 2807.743321][T30396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2807.759415][T30396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.345523][T30434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.346209][T30434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2814.616833][T30494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2814.617589][T30494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.010753][T30550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.011606][T30550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.275138][T30553] binder: 30552:30553 ioctl c0306201 200000000280 returned -14 [ 2818.537197][T18487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2818.616433][T18487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2818.643902][T18487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2818.654934][T18487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2818.655793][T18487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2819.731525][T18484] syz_tun (unregistering): left allmulticast mode [ 2820.483405][T30591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7952'. [ 2820.508806][T13380] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.598862][T30556] wg1 speed is unknown, defaulting to 1000 [ 2820.933439][T10720] Bluetooth: hci3: command tx timeout [ 2822.622837][T13380] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.008545][T10720] Bluetooth: hci3: command tx timeout [ 2823.378022][T13380] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.078715][T10720] Bluetooth: hci3: command tx timeout [ 2825.316578][T13380] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.544070][T30556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.547470][T30556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2825.547687][T30556] bridge_slave_0: entered allmulticast mode [ 2825.577727][T30556] bridge_slave_0: entered promiscuous mode [ 2825.603561][T30556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.603680][T30556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2825.604180][T30556] bridge_slave_1: entered allmulticast mode [ 2825.612050][T30556] bridge_slave_1: entered promiscuous mode [ 2825.906006][T30556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2825.931521][T30556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2826.035686][T30556] team0: Port device team_slave_0 added [ 2826.106591][T30556] team0: Port device team_slave_1 added [ 2827.158634][T10720] Bluetooth: hci3: command tx timeout [ 2827.494934][T30556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2827.494954][T30556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2827.494985][T30556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2827.564697][T30556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2827.564718][T30556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2827.564747][T30556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2828.380175][T30556] hsr_slave_0: entered promiscuous mode [ 2828.381772][T30556] hsr_slave_1: entered promiscuous mode [ 2828.383050][T30556] debugfs: 'hsr0' already exists in 'hsr' [ 2828.383093][T30556] Cannot create hsr debugfs directory [ 2828.708527][ T5746] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2828.863903][ T5746] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2828.863957][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2828.863984][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2828.864007][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2828.878730][ T5746] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2828.878761][ T5746] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2828.878781][ T5746] usb 5-1: Manufacturer: syz [ 2828.884629][ T5746] usb 5-1: config 0 descriptor?? [ 2829.063113][T13380] bridge_slave_1: left allmulticast mode [ 2829.063152][T13380] bridge_slave_1: left promiscuous mode [ 2829.063445][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 2829.268797][T13380] bridge_slave_0: left allmulticast mode [ 2829.268838][T13380] bridge_slave_0: left promiscuous mode [ 2829.270472][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 2829.365667][ T5746] hid_parser_main: 35 callbacks suppressed [ 2829.366893][ T5746] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 2829.503832][ T5746] appleir 0003:05AC:8243.000A: hiddev3,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2830.475091][T30718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2831.059191][T13380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2831.140171][T13380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2831.184330][T13380] bond0 (unregistering): Released all slaves [ 2831.200831][T13380] bond1 (unregistering): Released all slaves [ 2831.218994][T13380] bond2 (unregistering): Released all slaves [ 2831.287606][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2831.545705][T30723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.546072][T30723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.763823][T13380] tipc: Left network mode [ 2833.113268][T22465] usb 5-1: USB disconnect, device number 84 [ 2835.574775][T30767] fuse: Unknown parameter 'use00000000000000000000' [ 2836.202733][T30775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.226435][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2836.250776][T30775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2836.479212][T30774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2837.908587][T30793] No buffer was provided with the request [ 2837.912510][T30793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2837.913209][T30793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2837.955939][T30795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8002'. [ 2839.952084][T13380] hsr_slave_0: left promiscuous mode [ 2840.107220][T13380] hsr_slave_1: left promiscuous mode [ 2840.116115][T13380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2840.116148][T13380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2840.172263][T13380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2840.172284][T13380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2840.649772][T13380] batadv_slave_1: left promiscuous mode [ 2840.649962][T13380] veth1_macvtap: left promiscuous mode [ 2840.650025][T13380] veth0_macvtap: left promiscuous mode [ 2840.650240][T13380] veth1_vlan: left promiscuous mode [ 2840.650354][T13380] veth0_vlan: left promiscuous mode [ 2841.562893][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2843.224403][T30873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8012'. [ 2843.730092][T13380] team0 (unregistering): Port device team_slave_1 removed [ 2843.789484][T13380] team0 (unregistering): Port device team_slave_0 removed [ 2844.814170][T30889] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8015'. [ 2844.905057][T30892] No buffer was provided with the request [ 2844.921119][T30892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2844.921820][T30892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.113024][T30556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2845.160683][T30556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2845.162113][T30556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2845.343166][T30556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2845.344690][T30556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2845.383712][T30556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2845.385127][T30556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2845.548260][T30556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2846.400394][T13380] IPVS: stop unused estimator thread 0... [ 2846.461789][T30556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2846.521573][T30556] 8021q: adding VLAN 0 to HW filter on device team0 [ 2846.544611][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2846.546296][T14388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2846.563151][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2846.563523][T14388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2847.104937][T30929] syz_tun: left allmulticast mode [ 2847.671064][T30938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2847.671785][T30938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2848.193326][T30949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2848.193965][T30949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2848.383323][T30556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2848.534604][T30949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2848.627641][T30951] netlink: 'syz.6.8030': attribute type 12 has an invalid length. [ 2848.743246][T30556] veth0_vlan: entered promiscuous mode [ 2848.806978][T30556] veth1_vlan: entered promiscuous mode [ 2849.079244][T30556] veth0_macvtap: entered promiscuous mode [ 2849.087764][T30556] veth1_macvtap: entered promiscuous mode [ 2849.133363][T30556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2849.149872][T30556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2849.158113][T28099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.167456][T28099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.168016][T28099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.168054][T28099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.377147][T30962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8034'. [ 2850.333073][T30972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2850.333861][T30972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2850.476669][T28099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2850.476694][T28099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2850.624889][T14388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2850.624915][T14388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2850.810234][T30977] sg_write: data in/out 217088/136 bytes for SCSI command 0x0-- guessing data in; [ 2850.810234][T30977] program syz.1.8037 not setting count and/or reply_len properly [ 2851.165710][T30985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.179370][T30985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.276002][T30985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2851.296476][T30985] netlink: 'syz.1.8040': attribute type 12 has an invalid length. [ 2851.775484][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8047'. [ 2851.777611][T30997] No buffer was provided with the request [ 2851.803261][T30997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.803873][T30997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2853.058578][T31018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8052'. [ 2856.277587][T31062] No buffer was provided with the request [ 2856.287680][T31062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2856.302230][T31062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2857.534068][T31081] No buffer was provided with the request [ 2857.536040][T31081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2857.536729][T31081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2857.812714][T31086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8074'. [ 2858.218817][T31095] No buffer was provided with the request [ 2858.226734][T31095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.248126][T31095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2858.672790][T31100] No buffer was provided with the request [ 2858.676178][T31100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.678252][T31100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2859.957666][T31124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8090'. [ 2861.271003][ T4990] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2861.420731][ T4990] usb 5-1: Using ep0 maxpacket: 16 [ 2861.425978][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2861.447144][ T4990] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2861.447179][ T4990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.447201][ T4990] usb 5-1: Product: syz [ 2861.447217][ T4990] usb 5-1: Manufacturer: syz [ 2861.447232][ T4990] usb 5-1: SerialNumber: syz [ 2861.497892][ T4990] usb 5-1: config 0 descriptor?? [ 2861.524022][ T4990] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2861.524100][ T4990] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2861.963644][T31160] tun0: tun_chr_ioctl cmd 1074025675 [ 2861.963671][T31160] tun0: persist enabled [ 2861.964055][T31160] tun0: tun_chr_ioctl cmd 1074025675 [ 2861.964074][T31160] tun0: persist disabled [ 2861.966187][T31160] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8101'. [ 2862.134173][ T4990] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2862.787365][ T4990] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2862.787400][ T4990] em28xx 5-1:0.0: board has no eeprom [ 2862.969389][ T4990] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2862.969411][ T4990] em28xx 5-1:0.0: dvb set to bulk mode. [ 2862.969737][T28442] em28xx 5-1:0.0: Binding DVB extension [ 2863.024706][ T4990] usb 5-1: USB disconnect, device number 85 [ 2863.030215][ T4990] em28xx 5-1:0.0: Disconnecting em28xx [ 2863.233147][T28442] em28xx 5-1:0.0: Registering input extension [ 2863.284563][ T4990] em28xx 5-1:0.0: Closing input extension [ 2863.416259][T31179] No buffer was provided with the request [ 2863.431863][T31179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.435788][T31179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.678989][T31184] No buffer was provided with the request [ 2863.755837][T31184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.756661][T31184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2864.107150][ T4990] em28xx 5-1:0.0: Freeing device [ 2866.450302][T31234] No buffer was provided with the request [ 2866.453143][T31234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.456070][T31234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.476645][T31231] tun0: tun_chr_ioctl cmd 1074025675 [ 2866.476668][T31231] tun0: persist enabled [ 2866.477342][T31231] tun0: tun_chr_ioctl cmd 1074025675 [ 2866.477359][T31231] tun0: persist disabled [ 2866.486687][T31231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8127'. [ 2866.602096][T31231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.612041][T31231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2867.210278][T31246] No buffer was provided with the request [ 2867.458662][ T5829] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2867.642768][ T5829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2867.642803][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2867.675281][ T5829] usb 5-1: config 0 descriptor?? [ 2867.788366][T31258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2867.789655][T31258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2868.007424][ T5829] ath6kl: Failed to submit usb control message: -71 [ 2868.007483][ T5829] ath6kl: unable to send the bmi data to the device: -71 [ 2868.007499][ T5829] ath6kl: Unable to send get target info: -71 [ 2868.131520][ T5829] ath6kl: Failed to init ath6kl core: -71 [ 2868.133530][ T5829] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2868.166904][ T5829] usb 5-1: USB disconnect, device number 86 [ 2870.115857][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8147'. [ 2870.505872][T31295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2870.506888][T31295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2870.698604][T22465] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2870.862167][T22465] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2870.862200][T22465] usb 5-1: config 0 has no interfaces? [ 2870.862235][T22465] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2870.862259][T22465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.911649][T22465] usb 5-1: config 0 descriptor?? [ 2870.957059][T31298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8151'. [ 2871.278538][T22465] usb 5-1: USB disconnect, device number 87 [ 2874.540795][T31345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2874.543437][T31345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2874.582955][T31345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2874.585014][T31345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2874.774152][T31347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8166'. [ 2874.950919][T31350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2874.956428][T31350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2875.861054][T31360] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in; [ 2875.861054][T31360] program syz.3.8173 not setting count and/or reply_len properly [ 2876.465181][T31376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.465866][T31376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2876.771632][T31380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.772310][T31380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2876.779241][T31380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.779964][T31380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2877.319954][T31386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2877.322353][T31386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2877.541057][T31390] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 2877.648518][T28442] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2877.843024][T28442] usb 5-1: Using ep0 maxpacket: 32 [ 2877.938056][T28442] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2877.938093][T28442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2877.938115][T28442] usb 5-1: Product: syz [ 2877.938131][T28442] usb 5-1: Manufacturer: syz [ 2877.938147][T28442] usb 5-1: SerialNumber: syz [ 2878.000777][T28442] usb 5-1: config 0 descriptor?? [ 2878.034797][T28442] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2878.143659][T31396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8188'. [ 2878.538993][T28442] gspca_ov534_9: reg_w failed -110 [ 2878.938420][T28442] gspca_ov534_9: Unknown sensor 0000 [ 2878.938529][T28442] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2879.213768][T31410] fuse: Unknown parameter 'grou00000000000000000000' [ 2879.743190][T31425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.743864][T31425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.290295][T31429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.291103][T31429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.514733][T21061] usb 5-1: USB disconnect, device number 88 [ 2880.883273][T31436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.884096][T31436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2881.688920][T21061] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2881.862389][T21061] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2881.862412][T21061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.862424][T21061] usb 5-1: Product: syz [ 2881.862432][T21061] usb 5-1: Manufacturer: syz [ 2881.862441][T21061] usb 5-1: SerialNumber: syz [ 2881.940817][T21061] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2882.948724][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8206'. [ 2883.339924][T31454] fuse: Unknown parameter 'grou00000000000000000000' [ 2883.385150][ T5829] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2884.641991][T31464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2884.642783][T31464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2884.796214][ T5829] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2885.076937][ T5829] ath9k_htc: Failed to initialize the device [ 2885.880336][ T5829] usb 5-1: ath9k_htc: USB layer deinitialized [ 2886.403591][T22465] usb 5-1: USB disconnect, device number 89 [ 2887.518641][T15922] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2887.668488][T15922] usb 5-1: Using ep0 maxpacket: 16 [ 2887.671932][T15922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2887.674318][T15922] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2887.674338][T15922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2887.674350][T15922] usb 5-1: Product: syz [ 2887.674358][T15922] usb 5-1: Manufacturer: syz [ 2887.674367][T15922] usb 5-1: SerialNumber: syz [ 2887.741196][T15922] usb 5-1: config 0 descriptor?? [ 2887.784004][T15922] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2887.784042][T15922] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2888.361465][T15922] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2888.785641][T15922] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2888.785678][T15922] em28xx 5-1:0.0: board has no eeprom [ 2888.890043][T15922] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2888.890077][T15922] em28xx 5-1:0.0: dvb set to bulk mode. [ 2888.890908][ T4990] em28xx 5-1:0.0: Binding DVB extension [ 2888.991442][T15922] usb 5-1: USB disconnect, device number 90 [ 2888.994542][T15922] em28xx 5-1:0.0: Disconnecting em28xx [ 2889.054258][ T4990] em28xx 5-1:0.0: Registering input extension [ 2889.054423][T15922] em28xx 5-1:0.0: Closing input extension [ 2889.217171][T15922] em28xx 5-1:0.0: Freeing device [ 2890.656794][T31511] No buffer was provided with the request [ 2890.673434][T31511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2890.674201][T31511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2890.785761][T31515] input: syz1 as /devices/virtual/input/input84 [ 2892.523303][T31527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8232'. [ 2893.854833][T31546] input: syz1 as /devices/virtual/input/input85 [ 2893.944832][T31548] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8241'. [ 2893.979913][T31550] No buffer was provided with the request [ 2894.046976][T31552] No buffer was provided with the request [ 2894.054680][T31552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2894.056229][T31552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2894.248495][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2894.410838][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2894.410860][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2894.416556][ T9] usb 5-1: config 0 descriptor?? [ 2894.580890][ T5829] IPVS: starting estimator thread 0... [ 2894.670128][T31565] IPVS: using max 8 ests per chain, 19200 per kthread [ 2894.813385][ T9] ath6kl: Failed to submit usb control message: -71 [ 2894.813445][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 2894.813461][ T9] ath6kl: Unable to send get target info: -71 [ 2894.814452][ T9] ath6kl: Failed to init ath6kl core: -71 [ 2894.817414][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2894.865009][ T9] usb 5-1: USB disconnect, device number 91 [ 2895.275870][T31575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.276793][T31575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.497424][T31580] tun0: tun_chr_ioctl cmd 1074025675 [ 2895.497441][T31580] tun0: persist enabled [ 2895.497713][T31580] tun0: tun_chr_ioctl cmd 1074025675 [ 2895.497725][T31580] tun0: persist disabled [ 2895.522227][T31580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8253'. [ 2895.635350][T31580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.638071][T31580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.712949][T31587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8255'. [ 2897.920870][T31617] No buffer was provided with the request [ 2898.013102][T31619] No buffer was provided with the request [ 2898.014631][T31619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.015029][T31619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2898.143280][T31621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8267'. [ 2898.344311][T31623] No buffer was provided with the request [ 2898.355721][T31623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.365174][T31623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2901.989028][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8279'. [ 2902.053174][T31656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8279'. [ 2903.442893][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2907.810537][T31708] No buffer was provided with the request [ 2908.501130][T31719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.504210][T31719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2911.197698][T31752] syz_tun: left allmulticast mode [ 2913.699096][ T5829] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2913.855233][ T5829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2913.855264][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2913.855277][ T5829] usb 5-1: Product: syz [ 2913.855302][ T5829] usb 5-1: Manufacturer: syz [ 2913.855317][ T5829] usb 5-1: SerialNumber: syz [ 2913.924888][ T5829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2913.975462][T25710] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2914.078197][T31794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.091965][T31794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2915.558594][T25710] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2915.628930][T25710] ath9k_htc: Failed to initialize the device [ 2915.691617][T25710] usb 5-1: ath9k_htc: USB layer deinitialized [ 2915.907443][T31812] No buffer was provided with the request [ 2915.919135][T31812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2915.922214][T31812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2916.688048][ T5746] usb 5-1: USB disconnect, device number 92 [ 2918.665138][T31834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2918.665898][T31834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2918.771300][T31834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2918.800817][T31834] netlink: 'syz.1.8342': attribute type 12 has an invalid length. [ 2919.302470][T31842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8346'. [ 2919.356990][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8346'. [ 2919.758647][ T5746] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2919.908517][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 2919.930341][ T5746] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2919.930376][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.930398][ T5746] usb 5-1: Product: syz [ 2919.930414][ T5746] usb 5-1: Manufacturer: syz [ 2919.930429][ T5746] usb 5-1: SerialNumber: syz [ 2919.980370][ T5746] usb 5-1: config 0 descriptor?? [ 2920.056499][ T5746] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2920.604592][ T5746] gspca_ov534_9: reg_w failed -110 [ 2921.038884][ T5746] gspca_ov534_9: Unknown sensor 0000 [ 2921.039943][ T5746] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2922.027133][T31878] No buffer was provided with the request [ 2922.043806][T31878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2922.044428][T31878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2922.109155][T31879] tun0: tun_chr_ioctl cmd 1074025675 [ 2922.109183][T31879] tun0: persist enabled [ 2922.123777][T31875] tun0: tun_chr_ioctl cmd 1074025675 [ 2922.123799][T31875] tun0: persist disabled [ 2922.259901][T31875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2922.261845][T31875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2922.821699][T21061] usb 5-1: USB disconnect, device number 93 [ 2923.418465][T21061] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2923.592547][T31894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8361'. [ 2923.615781][T21061] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2923.615817][T21061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2923.615839][T21061] usb 5-1: Product: syz [ 2923.615853][T21061] usb 5-1: Manufacturer: syz [ 2923.615868][T21061] usb 5-1: SerialNumber: syz [ 2923.666914][T21061] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2923.674408][T31895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8361'. [ 2923.926449][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2925.026816][T31908] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8365'. [ 2925.248584][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2925.323379][ T9] ath9k_htc: Failed to initialize the device [ 2925.446296][T31910] No buffer was provided with the request [ 2925.534107][T31910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2925.534483][T31910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2925.655762][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 2927.041967][T31922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2927.043204][T31922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2929.982431][T31844] Set syz1 is full, maxelem 65536 reached [ 2930.181246][ T9] usb 5-1: USB disconnect, device number 94 [ 2940.230855][T10720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 2940.230887][T10720] CPU: 0 UID: 0 PID: 10720 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2940.230916][T10720] Tainted: [L]=SOFTLOCKUP [ 2940.230922][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2940.230934][T10720] Workqueue: hci0 hci_rx_work [ 2940.230965][T10720] Call Trace: [ 2940.230972][T10720] [ 2940.230982][T10720] dump_stack_lvl+0xe8/0x150 [ 2940.231009][T10720] sysfs_create_dir_ns+0x271/0x2a0 [ 2940.231037][T10720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2940.231061][T10720] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2940.231090][T10720] ? rt_spin_unlock+0x160/0x200 [ 2940.231114][T10720] kobject_add_internal+0x631/0xd10 [ 2940.231141][T10720] kobject_add+0x163/0x240 [ 2940.231163][T10720] ? __pfx_kobject_add+0x10/0x10 [ 2940.231187][T10720] ? get_device_parent+0x370/0x3a0 [ 2940.231208][T10720] device_add+0x408/0xbb0 [ 2940.231248][T10720] hci_conn_add_sysfs+0xd5/0x210 [ 2940.231277][T10720] le_conn_complete_evt+0x10e6/0x16b0 [ 2940.231304][T10720] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2940.231324][T10720] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2940.231350][T10720] ? lockdep_hardirqs_on+0x7a/0x110 [ 2940.231376][T10720] ? skb_pull_data+0xfb/0x200 [ 2940.231399][T10720] hci_le_conn_complete_evt+0x187/0x470 [ 2940.231424][T10720] hci_event_packet+0x659/0xef0 [ 2940.231453][T10720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2940.231473][T10720] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2940.231489][T10720] ? __pfx_hci_event_packet+0x10/0x10 [ 2940.231512][T10720] ? rt_spin_unlock+0x14f/0x200 [ 2940.231540][T10720] ? hci_send_to_monitor+0xe2/0x590 [ 2940.231563][T10720] hci_rx_work+0x3ee/0x1040 [ 2940.231593][T10720] ? process_scheduled_works+0xa70/0x1860 [ 2940.231613][T10720] process_scheduled_works+0xb5d/0x1860 [ 2940.231663][T10720] ? __pfx_process_scheduled_works+0x10/0x10 [ 2940.231687][T10720] ? assign_work+0x3d5/0x5e0 [ 2940.231709][T10720] worker_thread+0xa53/0xfc0 [ 2940.231751][T10720] kthread+0x388/0x470 [ 2940.231773][T10720] ? __pfx_worker_thread+0x10/0x10 [ 2940.231789][T10720] ? __pfx_kthread+0x10/0x10 [ 2940.231812][T10720] ret_from_fork+0x514/0xb70 [ 2940.231833][T10720] ? __pfx_ret_from_fork+0x10/0x10 [ 2940.231851][T10720] ? __switch_to+0xc79/0x1410 [ 2940.231878][T10720] ? __pfx_kthread+0x10/0x10 [ 2940.231901][T10720] ret_from_fork_asm+0x1a/0x30 [ 2940.231936][T10720] [ 2940.232857][T10720] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2940.232915][T10720] Bluetooth: hci0: failed to register connection device [ 2940.500977][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 2940.998696][T10720] Bluetooth: hci3: command 0x0406 tx timeout [ 2943.527383][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8405'. [ 2943.538685][T32040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8405'. [ 2943.695602][T32043] fuse: Invalid rootmode [ 2947.318543][T18487] Bluetooth: hci0: command 0x0406 tx timeout [ 2949.184850][T32107] fuse: Invalid rootmode [ 2950.832355][T32126] No buffer was provided with the request [ 2950.833880][T32126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.854987][T32126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.947005][T32128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8434'. [ 2950.999762][T32131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8434'. [ 2951.414371][T18487] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2953.027211][T32158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8444'. [ 2954.363347][T18487] Bluetooth: hci4: command 0x0c1a tx timeout [ 2955.161602][T32176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8450'. [ 2955.255506][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8450'. [ 2956.563134][T32196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2956.563845][T32196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2959.178710][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8464'. [ 2959.241048][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8464'. [ 2959.702541][T32238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2959.703189][T32238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2959.775021][T32238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2959.828639][T32238] netlink: 'syz.3.8470': attribute type 12 has an invalid length. [ 2960.065640][T21061] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2961.075193][T21061] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2961.075226][T21061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2961.075248][T21061] usb 5-1: Product: syz [ 2961.075263][T21061] usb 5-1: Manufacturer: syz [ 2961.075278][T21061] usb 5-1: SerialNumber: syz [ 2961.136390][T21061] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2961.181008][ T5720] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2962.280980][ T5720] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2962.371283][ T5720] ath9k_htc: Failed to initialize the device [ 2962.486742][ T5720] usb 5-1: ath9k_htc: USB layer deinitialized [ 2962.944369][T32266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2962.944975][T32266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.146614][T32270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8479'. [ 2963.198959][T32272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8479'. [ 2963.596042][T10720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 2963.596075][T10720] CPU: 1 UID: 0 PID: 10720 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2963.596108][T10720] Tainted: [L]=SOFTLOCKUP [ 2963.596117][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2963.596132][T10720] Workqueue: hci3 hci_rx_work [ 2963.596170][T10720] Call Trace: [ 2963.596179][T10720] [ 2963.596190][T10720] dump_stack_lvl+0xe8/0x150 [ 2963.596220][T10720] sysfs_create_dir_ns+0x271/0x2a0 [ 2963.596255][T10720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2963.596285][T10720] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2963.596330][T10720] ? rt_spin_unlock+0x160/0x200 [ 2963.596361][T10720] kobject_add_internal+0x631/0xd10 [ 2963.596397][T10720] kobject_add+0x163/0x240 [ 2963.596425][T10720] ? __pfx_kobject_add+0x10/0x10 [ 2963.596457][T10720] ? get_device_parent+0x370/0x3a0 [ 2963.596486][T10720] device_add+0x408/0xbb0 [ 2963.596527][T10720] hci_conn_add_sysfs+0xd5/0x210 [ 2963.596562][T10720] le_conn_complete_evt+0x10e6/0x16b0 [ 2963.596598][T10720] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2963.596624][T10720] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2963.596658][T10720] ? lockdep_hardirqs_on+0x7a/0x110 [ 2963.596694][T10720] ? skb_pull_data+0xfb/0x200 [ 2963.596724][T10720] hci_le_conn_complete_evt+0x187/0x470 [ 2963.596756][T10720] hci_event_packet+0x659/0xef0 [ 2963.596805][T10720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2963.596832][T10720] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2963.596854][T10720] ? __pfx_hci_event_packet+0x10/0x10 [ 2963.596885][T10720] ? rt_spin_unlock+0x14f/0x200 [ 2963.596922][T10720] ? hci_send_to_monitor+0xe2/0x590 [ 2963.596952][T10720] hci_rx_work+0x3ee/0x1040 [ 2963.596993][T10720] ? process_scheduled_works+0xa70/0x1860 [ 2963.597022][T10720] process_scheduled_works+0xb5d/0x1860 [ 2963.597083][T10720] ? __pfx_process_scheduled_works+0x10/0x10 [ 2963.597116][T10720] ? assign_work+0x3d5/0x5e0 [ 2963.597148][T10720] worker_thread+0xa53/0xfc0 [ 2963.597222][T10720] kthread+0x388/0x470 [ 2963.597251][T10720] ? __pfx_worker_thread+0x10/0x10 [ 2963.597274][T10720] ? __pfx_kthread+0x10/0x10 [ 2963.597306][T10720] ret_from_fork+0x514/0xb70 [ 2963.597337][T10720] ? __pfx_ret_from_fork+0x10/0x10 [ 2963.597364][T10720] ? __switch_to+0xc79/0x1410 [ 2963.597401][T10720] ? __pfx_kthread+0x10/0x10 [ 2963.597431][T10720] ret_from_fork_asm+0x1a/0x30 [ 2963.597480][T10720] [ 2963.600371][T10720] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2963.600424][T10720] Bluetooth: hci3: failed to register connection device [ 2964.052533][T32281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2964.058829][T32281] netlink: 'syz.6.8483': attribute type 12 has an invalid length. [ 2965.210112][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2965.708193][ T4990] usb 5-1: USB disconnect, device number 95 [ 2966.164365][T32307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2966.165072][T32307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.410663][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8494'. [ 2966.465967][T32313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8494'. [ 2967.091709][T32324] No buffer was provided with the request [ 2967.093973][T32324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.094993][T32324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.440378][T10720] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2967.503178][T32331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.503877][T32331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.982002][T32339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.983273][T32339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2969.031342][T32355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8509'. [ 2969.108013][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8509'. [ 2969.881560][T10720] Bluetooth: hci3: command 0x0406 tx timeout [ 2970.244951][T18487] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2970.947100][T32370] No buffer was provided with the request [ 2970.949824][T32370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2970.950441][T32370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2971.373291][T18487] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2971.384808][T32381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2971.385396][T32381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.833931][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8521'. [ 2972.899670][T32397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8521'. [ 2973.168399][ T4990] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2973.299545][ T4990] usb 5-1: device descriptor read/64, error -71 [ 2973.540076][ T4990] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2973.668751][ T4990] usb 5-1: device descriptor read/64, error -71 [ 2973.757586][T32412] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8527'. [ 2973.779942][ T4990] usb usb5-port1: attempt power cycle [ 2974.000997][T32416] No buffer was provided with the request [ 2974.002211][T32416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.002870][T32416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.119474][ T4990] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2974.141132][ T4990] usb 5-1: device descriptor read/8, error -71 [ 2974.355339][T18487] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2974.355361][T18487] CPU: 0 UID: 0 PID: 18487 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2974.355380][T18487] Tainted: [L]=SOFTLOCKUP [ 2974.355385][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2974.355393][T18487] Workqueue: hci2 hci_rx_work [ 2974.355416][T18487] Call Trace: [ 2974.355421][T18487] [ 2974.355427][T18487] dump_stack_lvl+0xe8/0x150 [ 2974.355446][T18487] sysfs_create_dir_ns+0x271/0x2a0 [ 2974.355463][T18487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2974.355480][T18487] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2974.355500][T18487] ? rt_spin_unlock+0x160/0x200 [ 2974.355516][T18487] kobject_add_internal+0x631/0xd10 [ 2974.355534][T18487] kobject_add+0x163/0x240 [ 2974.355551][T18487] ? __pfx_kobject_add+0x10/0x10 [ 2974.355567][T18487] ? get_device_parent+0x370/0x3a0 [ 2974.355582][T18487] device_add+0x408/0xbb0 [ 2974.355602][T18487] hci_conn_add_sysfs+0xd5/0x210 [ 2974.355620][T18487] le_conn_complete_evt+0x10e6/0x16b0 [ 2974.355644][T18487] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2974.355659][T18487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2974.355675][T18487] ? lockdep_hardirqs_on+0x7a/0x110 [ 2974.355692][T18487] ? skb_pull_data+0xfb/0x200 [ 2974.355708][T18487] hci_le_conn_complete_evt+0x187/0x470 [ 2974.355725][T18487] hci_event_packet+0x659/0xef0 [ 2974.355744][T18487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2974.355757][T18487] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2974.355769][T18487] ? __pfx_hci_event_packet+0x10/0x10 [ 2974.355783][T18487] ? rt_spin_unlock+0x14f/0x200 [ 2974.355802][T18487] ? hci_send_to_monitor+0xe2/0x590 [ 2974.355817][T18487] hci_rx_work+0x3ee/0x1040 [ 2974.355836][T18487] ? process_scheduled_works+0xa70/0x1860 [ 2974.355851][T18487] process_scheduled_works+0xb5d/0x1860 [ 2974.355882][T18487] ? __pfx_process_scheduled_works+0x10/0x10 [ 2974.355907][T18487] ? assign_work+0x3d5/0x5e0 [ 2974.355927][T18487] worker_thread+0xa53/0xfc0 [ 2974.355957][T18487] kthread+0x388/0x470 [ 2974.355971][T18487] ? __pfx_worker_thread+0x10/0x10 [ 2974.355983][T18487] ? __pfx_kthread+0x10/0x10 [ 2974.356000][T18487] ret_from_fork+0x514/0xb70 [ 2974.356017][T18487] ? __pfx_ret_from_fork+0x10/0x10 [ 2974.356030][T18487] ? __switch_to+0xc79/0x1410 [ 2974.356050][T18487] ? __pfx_kthread+0x10/0x10 [ 2974.356066][T18487] ret_from_fork_asm+0x1a/0x30 [ 2974.356091][T18487] [ 2974.356130][T18487] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2974.356156][T18487] Bluetooth: hci2: failed to register connection device [ 2974.388387][ T4990] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2974.468537][ T4990] usb 5-1: device descriptor read/8, error -71 [ 2974.520244][T32427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.520887][T32427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.608476][ T4990] usb usb5-port1: unable to enumerate USB device [ 2974.877098][T32429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.877774][T32429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.105978][T32435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 2975.159783][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 2976.083054][T32446] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8539'. [ 2976.210431][T32448] tun0: tun_chr_ioctl cmd 1074025675 [ 2976.210456][T32448] tun0: persist enabled [ 2976.210921][T32448] tun0: tun_chr_ioctl cmd 1074025675 [ 2976.210940][T32448] tun0: persist disabled [ 2976.213960][T32448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8540'. [ 2976.629677][T32457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2976.632676][T32457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.688576][T18487] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2979.636219][T32474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2979.637838][T32474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2980.301111][T32488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8552'. [ 2980.479855][T32493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2980.480697][T32493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2981.319044][T18487] Bluetooth: hci2: command 0x0406 tx timeout [ 2981.526709][T32507] No buffer was provided with the request [ 2982.557339][T32519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2982.572192][T32519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2982.602528][T32521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8565'. [ 2984.551110][T32553] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8577'. [ 2984.628562][ T4990] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2984.796807][ T4990] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2984.796829][ T4990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.796846][ T4990] usb 5-1: Product: syz [ 2984.796854][ T4990] usb 5-1: Manufacturer: syz [ 2984.796863][ T4990] usb 5-1: SerialNumber: syz [ 2984.880563][ T4990] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2985.223825][T15922] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2985.527656][T32568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8582'. [ 2985.802709][T32576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8584'. [ 2985.909438][T32575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8584'. [ 2986.279142][T15922] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2986.482750][T15922] ath9k_htc: Failed to initialize the device [ 2986.698145][T15922] usb 5-1: ath9k_htc: USB layer deinitialized [ 2987.592556][T18487] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2988.313790][T32599] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8591'. [ 2990.265636][T25710] usb 5-1: USB disconnect, device number 100 [ 2990.275670][T32612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2990.276520][T32612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.439015][ T9] IPVS: starting estimator thread 0... [ 2990.528601][T32621] IPVS: using max 6 ests per chain, 14400 per kthread [ 2991.034036][T32626] Bluetooth: MGMT ver 1.23 [ 2993.736867][T32647] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8604'. [ 2998.223560][T18487] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 2998.223593][T18487] CPU: 1 UID: 0 PID: 18487 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2998.223626][T18487] Tainted: [L]=SOFTLOCKUP [ 2998.223635][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2998.223651][T18487] Workqueue: hci5 hci_rx_work [ 2998.223689][T18487] Call Trace: [ 2998.223697][T18487] [ 2998.223707][T18487] dump_stack_lvl+0xe8/0x150 [ 2998.223738][T18487] sysfs_create_dir_ns+0x271/0x2a0 [ 2998.223774][T18487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2998.223806][T18487] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2998.223847][T18487] ? rt_spin_unlock+0x160/0x200 [ 2998.223894][T18487] kobject_add_internal+0x631/0xd10 [ 2998.223929][T18487] kobject_add+0x163/0x240 [ 2998.223959][T18487] ? __pfx_kobject_add+0x10/0x10 [ 2998.223992][T18487] ? get_device_parent+0x370/0x3a0 [ 2998.224021][T18487] device_add+0x408/0xbb0 [ 2998.224061][T18487] hci_conn_add_sysfs+0xd5/0x210 [ 2998.224096][T18487] le_conn_complete_evt+0x10e6/0x16b0 [ 2998.224134][T18487] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2998.224161][T18487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2998.224194][T18487] ? lockdep_hardirqs_on+0x7a/0x110 [ 2998.224230][T18487] ? skb_pull_data+0xfb/0x200 [ 2998.224260][T18487] hci_le_conn_complete_evt+0x187/0x470 [ 2998.224293][T18487] hci_event_packet+0x659/0xef0 [ 2998.224333][T18487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2998.224357][T18487] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2998.224378][T18487] ? __pfx_hci_event_packet+0x10/0x10 [ 2998.224409][T18487] ? rt_spin_unlock+0x14f/0x200 [ 2998.224455][T18487] ? hci_send_to_monitor+0xe2/0x590 [ 2998.224486][T18487] hci_rx_work+0x3ee/0x1040 [ 2998.224527][T18487] ? process_scheduled_works+0xa70/0x1860 [ 2998.224554][T18487] process_scheduled_works+0xb5d/0x1860 [ 2998.224617][T18487] ? __pfx_process_scheduled_works+0x10/0x10 [ 2998.224649][T18487] ? assign_work+0x3d5/0x5e0 [ 2998.224680][T18487] worker_thread+0xa53/0xfc0 [ 2998.224731][T18487] kthread+0x388/0x470 [ 2998.224759][T18487] ? __pfx_worker_thread+0x10/0x10 [ 2998.224779][T18487] ? __pfx_kthread+0x10/0x10 [ 2998.224802][T18487] ret_from_fork+0x514/0xb70 [ 2998.224830][T18487] ? __pfx_ret_from_fork+0x10/0x10 [ 2998.224852][T18487] ? __switch_to+0xc79/0x1410 [ 2998.224886][T18487] ? __pfx_kthread+0x10/0x10 [ 2998.224914][T18487] ret_from_fork_asm+0x1a/0x30 [ 2998.224958][T18487] [ 2998.225019][T18487] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2998.225064][T18487] Bluetooth: hci5: failed to register connection device [ 2998.632958][T32676] wg1 speed is unknown, defaulting to 1000 [ 2999.777989][T32686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8615'. [ 3001.163859][T15922] usb 2-1: USB disconnect, device number 27 [ 3001.222091][T15922] usblp1: removed [ 3001.382958][T32695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3001.387004][T32695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.266416][T10720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3002.287915][T10720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3002.303392][T10720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3002.350648][T10720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3002.387697][T10720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3003.703942][T32725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3003.824536][T32723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3003.825251][T32723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.680860][T10720] Bluetooth: hci1: command tx timeout [ 3005.496369][T32025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3005.496412][T32025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3005.673283][T32701] wg1 speed is unknown, defaulting to 1000 [ 3005.709256][T32733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8626'. [ 3006.217884][T32025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3006.217924][T32025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3006.759045][T10720] Bluetooth: hci1: command tx timeout [ 3006.820212][T32735] wg1 speed is unknown, defaulting to 1000 [ 3007.085323][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8628'. [ 3007.538005][T32025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.538050][T32025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3008.462647][T32025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.462689][T32025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 3008.840996][T10720] Bluetooth: hci1: command tx timeout [ 3009.641268][T32701] bridge0: port 1(bridge_slave_0) entered blocking state [ 3009.641670][T32701] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.641966][T32701] bridge_slave_0: entered allmulticast mode [ 3009.656792][T32701] bridge_slave_0: entered promiscuous mode [ 3009.680640][T32701] bridge0: port 2(bridge_slave_1) entered blocking state [ 3009.684046][T32701] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.693482][T32701] bridge_slave_1: entered allmulticast mode [ 3009.710918][T32701] bridge_slave_1: entered promiscuous mode [ 3009.735437][T32767] fuse: Bad value for 'fd' [ 3009.893354][T32701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3009.897933][T32701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3009.982318][T32701] team0: Port device team_slave_0 added [ 3009.986706][T32701] team0: Port device team_slave_1 added [ 3010.131864][ T308] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8636'. [ 3010.385632][T32701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3010.385655][T32701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3010.385686][T32701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3010.969708][T10720] Bluetooth: hci1: command tx timeout [ 3011.013822][T32025] bridge_slave_1: left allmulticast mode [ 3011.013856][T32025] bridge_slave_1: left promiscuous mode [ 3011.014147][T32025] bridge0: port 2(bridge_slave_1) entered disabled state [ 3011.880259][T32025] bridge_slave_0: left allmulticast mode [ 3011.880288][T32025] bridge_slave_0: left promiscuous mode [ 3011.880500][T32025] bridge0: port 1(bridge_slave_0) entered disabled state [ 3014.299391][T32025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3014.387730][T32025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.402715][T32025] bond0 (unregistering): Released all slaves [ 3014.413052][T32025] bond1 (unregistering): Released all slaves [ 3014.465043][T32701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3014.465057][T32701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3014.465073][T32701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3014.465498][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8639'. [ 3014.539167][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3014.545451][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8643'. [ 3014.889484][T32701] hsr_slave_0: entered promiscuous mode [ 3014.891255][T32701] hsr_slave_1: entered promiscuous mode [ 3014.892404][T32701] debugfs: 'hsr0' already exists in 'hsr' [ 3014.892431][T32701] Cannot create hsr debugfs directory [ 3016.543109][ T358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8646'. [ 3017.461305][ T373] fuse: Unknown parameter '0x0000000000000004' [ 3019.317721][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3019.749301][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3019.751944][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.851485][T32701] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3020.914273][T32701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3021.167440][T32701] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3021.274013][T32701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3021.288990][T32701] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3021.331779][T32701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3021.334644][T32701] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3021.574285][T32701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3022.009152][T32025] hsr_slave_0: left promiscuous mode [ 3022.052859][T32025] hsr_slave_1: left promiscuous mode [ 3022.053581][T32025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3022.053600][T32025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3022.085368][ T423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8659'. [ 3022.100290][T32025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3022.100319][T32025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3022.395154][T32025] batadv_slave_1: left promiscuous mode [ 3022.401441][T32025] veth1_macvtap: left promiscuous mode [ 3022.401560][T32025] veth0_macvtap: left promiscuous mode [ 3022.401932][T32025] veth1_vlan: left promiscuous mode [ 3022.402065][T32025] veth0_vlan: left promiscuous mode [ 3024.371850][ T432] fuse: Unknown parameter '0x0000000000000004' [ 3025.831518][ T440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8665'. [ 3025.885284][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3026.129054][T32025] team0 (unregistering): Port device team_slave_1 removed [ 3026.189719][T32025] team0 (unregistering): Port device team_slave_0 removed [ 3027.457847][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3027.473949][ T434] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8663'. [ 3027.820586][T32701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3027.936472][T32701] 8021q: adding VLAN 0 to HW filter on device team0 [ 3027.974754][T14391] bridge0: port 1(bridge_slave_0) entered blocking state [ 3027.974969][T14391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3028.017967][T14391] bridge0: port 2(bridge_slave_1) entered blocking state [ 3028.018112][T14391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3029.417122][ T492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8672'. [ 3030.469125][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3030.616565][T32701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3032.022535][T32025] IPVS: stop unused estimator thread 0... [ 3032.405137][ T514] wg1 speed is unknown, defaulting to 1000 [ 3035.754377][T32701] veth0_vlan: entered promiscuous mode [ 3035.820353][T32701] veth1_vlan: entered promiscuous mode [ 3036.025479][T32701] veth0_macvtap: entered promiscuous mode [ 3036.058824][T32701] veth1_macvtap: entered promiscuous mode [ 3036.104021][T32701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3036.160994][T32701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3036.230327][T18022] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.232776][T18022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.233071][T18022] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.233370][T18022] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.666011][ T542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8679'. [ 3037.225149][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3037.225173][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3037.402348][ T546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3037.403042][ T546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.698137][T28099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3037.698161][T28099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3038.458633][ T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3038.459356][ T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.128054][ T588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8691'. [ 3044.596495][T10720] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 3045.377267][ T628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8702'. [ 3045.377301][ T628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8702'. [ 3045.946143][ T635] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8700'. [ 3047.139847][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8702'. [ 3047.356652][ T630] wg1 speed is unknown, defaulting to 1000 [ 3048.998987][ T659] wg1 speed is unknown, defaulting to 1000 [ 3053.292340][ T655] Set syz1 is full, maxelem 65536 reached [ 3087.331688][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3125.238352][T18487] Bluetooth: hci1: command 0x0406 tx timeout [ 3148.782041][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3210.224732][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.642270][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.844499][ T754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8709'. [ 3271.844529][ T754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8709'. [ 3272.376181][ T756] wg1 speed is unknown, defaulting to 1000 [ 3273.367919][ T753] kAFS: unable to lookup cell 'ÿ' [ 3273.430616][ T744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8709'. [ 3273.438323][ T5746] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 3273.588288][ T5746] usb 8-1: Using ep0 maxpacket: 16 [ 3273.591175][ T5746] usb 8-1: unable to get BOS descriptor or descriptor too short [ 3273.592373][ T5746] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 3273.597656][ T5746] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 3273.597678][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3273.597691][ T5746] usb 8-1: Product: syz [ 3273.597699][ T5746] usb 8-1: Manufacturer: syz [ 3273.597708][ T5746] usb 8-1: SerialNumber: syz [ 3274.297886][ T765] wg1 speed is unknown, defaulting to 1000 [ 3274.942540][ T5746] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 3274.943144][ T5746] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3275.821867][ T5746] usb 8-1: USB disconnect, device number 2 [ 3276.187612][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3276.714876][ T795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8721'. [ 3276.821537][T10720] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 3277.292694][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3277.296611][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3277.486141][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3277.495524][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3278.264557][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3278.265185][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3278.612224][ T836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8739'. [ 3278.983267][ T842] wg1 speed is unknown, defaulting to 1000 [ 3279.672449][ T851] kAFS: unable to lookup cell 'ÿ' [ 3280.113728][ T859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3280.114178][ T859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3282.101598][T10720] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 3282.449032][ T872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3283.442207][ T887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8753'. [ 3283.454301][ T884] wg1 speed is unknown, defaulting to 1000 [ 3283.733840][ T895] kAFS: unable to lookup cell 'ÿ' [ 3284.099317][ T898] wg1 speed is unknown, defaulting to 1000 [ 3285.864623][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3285.865456][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3288.148689][T10720] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 3288.301008][ T922] wg1 speed is unknown, defaulting to 1000 [ 3288.387285][ T936] kAFS: unable to lookup cell 'ÿ' [ 3290.220370][ T963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8769'. [ 3296.932774][ T996] kAFS: unable to lookup cell 'ÿ' [ 3297.038822][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3297.039485][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3297.854167][ T999] wg1 speed is unknown, defaulting to 1000 [ 3299.593681][ T1011] wg1 speed is unknown, defaulting to 1000 [ 3300.682849][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8781'. [ 3302.958353][T27157] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 3303.108390][T27157] usb 8-1: Using ep0 maxpacket: 32 [ 3303.114239][T27157] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 3303.114273][T27157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.114295][T27157] usb 8-1: Product: syz [ 3303.114309][T27157] usb 8-1: Manufacturer: syz [ 3303.114325][T27157] usb 8-1: SerialNumber: syz [ 3303.131454][T27157] usb 8-1: config 0 descriptor?? [ 3303.142037][T27157] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 3303.749891][ T1066] netlink: 'syz.0.8793': attribute type 4 has an invalid length. [ 3303.893942][ T1070] wg1 speed is unknown, defaulting to 1000 [ 3305.920181][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3305.921167][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3306.005558][ T1089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3306.006641][ T1089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3306.477738][T27157] gspca_stk1135: reg_w 0x353 err -71 [ 3306.478784][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478799][T27157] gspca_stk1135: Sensor write failed [ 3306.478826][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478836][T27157] gspca_stk1135: Sensor write failed [ 3306.478861][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478872][T27157] gspca_stk1135: Sensor read failed [ 3306.478900][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478910][T27157] gspca_stk1135: Sensor read failed [ 3306.478917][T27157] gspca_stk1135: Detected sensor type unknown (0x0) [ 3306.478949][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478959][T27157] gspca_stk1135: Sensor read failed [ 3306.478983][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.478992][T27157] gspca_stk1135: Sensor read failed [ 3306.479020][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.479027][T27157] gspca_stk1135: Sensor write failed [ 3306.479053][T27157] gspca_stk1135: serial bus timeout: status=0x00 [ 3306.479062][T27157] gspca_stk1135: Sensor write failed [ 3306.479153][T27157] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 3306.512235][T27157] usb 8-1: USB disconnect, device number 3 [ 3306.832794][ T1100] kAFS: unable to lookup cell 'ÿ' [ 3307.244861][ T1104] wg1 speed is unknown, defaulting to 1000 [ 3308.574456][ T1108] wg1 speed is unknown, defaulting to 1000 [ 3309.690489][ T1123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3309.694121][ T1123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3310.128795][ T1125] wg1 speed is unknown, defaulting to 1000 [ 3310.314212][ T1114] wg1 speed is unknown, defaulting to 1000 [ 3311.332818][ T1130] kAFS: unable to lookup cell 'ÿ' [ 3311.472571][ T1134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3311.475494][ T1134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3311.744791][ T1138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3311.755197][ T1138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3312.574494][ T1142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3312.576546][ T1142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3312.907364][T10720] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 3313.734863][ T1157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.735893][ T1157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.894570][ T1163] kAFS: unable to lookup cell 'ÿ' [ 3314.087463][T28390] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 3314.109200][ T1167] kAFS: unable to lookup cell 'ÿ' [ 3314.239068][T28390] usb 8-1: Using ep0 maxpacket: 16 [ 3314.242389][T28390] usb 8-1: unable to get BOS descriptor or descriptor too short [ 3314.243876][T28390] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 3314.247190][T28390] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 3314.247221][T28390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.247240][T28390] usb 8-1: Product: syz [ 3314.247248][T28390] usb 8-1: Manufacturer: syz [ 3314.247264][T28390] usb 8-1: SerialNumber: syz [ 3314.683953][T28390] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 3314.684392][T28390] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3314.796342][T28390] usb 8-1: 2:1 : can't get High Capability descriptor [ 3315.027307][ T1170] netlink: 'syz.3.8824': attribute type 4 has an invalid length. [ 3315.405038][T28390] usb 8-1: USB disconnect, device number 4 [ 3315.593308][ T774] udevd[774]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3317.265326][ T1193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8830'. [ 3317.265356][ T1193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8830'. [ 3317.329863][ T1194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8830'. [ 3317.808803][ T1208] kAFS: unable to lookup cell 'ÿ' [ 3317.975901][T10720] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 3318.316901][ T1216] kAFS: unable to lookup cell 'ÿ' [ 3318.974229][ T1226] kAFS: unable to lookup cell 'ÿ' [ 3319.420366][ T1231] kAFS: unable to lookup cell 'ÿ' [ 3320.213788][T10720] Bluetooth: hci5: unexpected event for opcode 0x4889 [ 3322.070530][ T5627] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 3322.218452][ T5627] usb 8-1: Using ep0 maxpacket: 16 [ 3322.220699][T10720] Bluetooth: hci5: unexpected event for opcode 0x4889 [ 3322.222494][ T5627] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3322.222516][ T5627] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3322.222543][ T5627] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3322.222557][ T5627] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3322.306844][ T5627] usb 8-1: config 0 descriptor?? [ 3322.513693][T10720] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 3322.948313][ T5627] usbhid 8-1:0.0: can't add hid device: -71 [ 3322.948445][ T5627] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3323.083282][ T5627] usb 8-1: USB disconnect, device number 5 [ 3323.692752][ T1267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3323.696473][ T1267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3323.718932][ T1264] kAFS: unable to lookup cell 'ÿ' [ 3325.760782][T10720] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 3329.150776][ T1325] kAFS: unable to lookup cell 'ÿ' [ 3329.196945][ T1329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8873'. [ 3329.196966][ T1329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8873'. [ 3329.274006][ T1331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8873'. [ 3329.293082][T10720] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 3329.924242][ T1347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8877'. [ 3329.924274][ T1347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8877'. [ 3329.985243][ T1348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8877'. [ 3334.128785][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 3335.447535][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3335.459426][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3335.592055][ T1389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3337.563640][ T1397] kAFS: unable to lookup cell 'ÿ' [ 3338.229758][T10720] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 3340.668812][ T1411] virtio-fs: tag not found [ 3341.726930][ T1415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3347.608433][T27157] ------------[ cut here ]------------ [ 3347.608450][T27157] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 3347.608467][T27157] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:6/27157 [ 3347.608516][T27157] Modules linked in: [ 3347.608541][T27157] CPU: 1 UID: 0 PID: 27157 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3347.608569][T27157] Tainted: [L]=SOFTLOCKUP [ 3347.608576][T27157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3347.608590][T27157] Workqueue: events drm_fb_helper_damage_work [ 3347.608613][T27157] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 3347.608646][T27157] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 3347.608664][T27157] RSP: 0018:ffffc90003ce78c0 EFLAGS: 00010246 [ 3347.608683][T27157] RAX: 1ffff11004b38200 RBX: ffffffff8f936870 RCX: 0000000000000000 [ 3347.608699][T27157] RDX: ffffffff8bc05fe0 RSI: ffffffff8bc22700 RDI: ffffffff8f936870 [ 3347.608715][T27157] RBP: ffffc90003ce79a8 R08: 0000000000000000 R09: 0000000000000000 [ 3347.608729][T27157] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: ffffffff8bc22700 [ 3347.608745][T27157] R13: ffff8880259c1000 R14: 0000000000000000 R15: ffffffff8bc05fe0 [ 3347.608761][T27157] FS: 0000000000000000(0000) GS:ffff888126286000(0000) knlGS:0000000000000000 [ 3347.608779][T27157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3347.608794][T27157] CR2: 00007eff6d855fc0 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 3347.608815][T27157] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 3347.608829][T27157] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3347.608844][T27157] Call Trace: [ 3347.608854][T27157] [ 3347.608869][T27157] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 3347.608902][T27157] ? rt_spin_unlock+0x14f/0x200 [ 3347.608929][T27157] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3347.608958][T27157] ? rt_spin_unlock+0x160/0x200 [ 3347.608988][T27157] ? drm_vblank_get+0x147/0x260 [ 3347.609024][T27157] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 3347.609058][T27157] drm_fb_helper_damage_work+0x131/0x6f0 [ 3347.609084][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.609114][T27157] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 3347.609144][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.609166][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.609192][T27157] process_scheduled_works+0xb5d/0x1860 [ 3347.609264][T27157] ? __pfx_process_scheduled_works+0x10/0x10 [ 3347.609296][T27157] ? assign_work+0x3d5/0x5e0 [ 3347.609327][T27157] worker_thread+0xa53/0xfc0 [ 3347.609385][T27157] kthread+0x388/0x470 [ 3347.609414][T27157] ? __pfx_worker_thread+0x10/0x10 [ 3347.609436][T27157] ? __pfx_kthread+0x10/0x10 [ 3347.609467][T27157] ret_from_fork+0x514/0xb70 [ 3347.609496][T27157] ? __pfx_ret_from_fork+0x10/0x10 [ 3347.609521][T27157] ? __switch_to+0xc79/0x1410 [ 3347.609558][T27157] ? __pfx_kthread+0x10/0x10 [ 3347.609589][T27157] ret_from_fork_asm+0x1a/0x30 [ 3347.609636][T27157] [ 3347.609649][T27157] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3347.609667][T27157] CPU: 1 UID: 0 PID: 27157 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3347.609695][T27157] Tainted: [L]=SOFTLOCKUP [ 3347.609703][T27157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3347.609716][T27157] Workqueue: events drm_fb_helper_damage_work [ 3347.609737][T27157] Call Trace: [ 3347.609746][T27157] [ 3347.609754][T27157] vpanic+0x56c/0xa60 [ 3347.609782][T27157] ? __pfx__printk+0x10/0x10 [ 3347.609812][T27157] ? __pfx_vpanic+0x10/0x10 [ 3347.609836][T27157] ? is_bpf_text_address+0x292/0x2b0 [ 3347.609865][T27157] ? is_bpf_text_address+0x26/0x2b0 [ 3347.609902][T27157] panic+0xc5/0xd0 [ 3347.609927][T27157] ? __pfx_panic+0x10/0x10 [ 3347.609961][T27157] ? ret_from_fork_asm+0x1a/0x30 [ 3347.609994][T27157] __warn+0x315/0x4c0 [ 3347.610018][T27157] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 3347.610060][T27157] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 3347.610093][T27157] __report_bug+0x29a/0x540 [ 3347.610132][T27157] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 3347.610166][T27157] ? __pfx___report_bug+0x10/0x10 [ 3347.610232][T27157] report_bug_entry+0x19a/0x290 [ 3347.610263][T27157] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 3347.610294][T27157] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 3347.610326][T27157] handle_bug+0xce/0x200 [ 3347.610351][T27157] exc_invalid_op+0x1a/0x50 [ 3347.610375][T27157] asm_exc_invalid_op+0x1a/0x20 [ 3347.610397][T27157] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 3347.610431][T27157] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 3347.610450][T27157] RSP: 0018:ffffc90003ce78c0 EFLAGS: 00010246 [ 3347.610468][T27157] RAX: 1ffff11004b38200 RBX: ffffffff8f936870 RCX: 0000000000000000 [ 3347.610484][T27157] RDX: ffffffff8bc05fe0 RSI: ffffffff8bc22700 RDI: ffffffff8f936870 [ 3347.610500][T27157] RBP: ffffc90003ce79a8 R08: 0000000000000000 R09: 0000000000000000 [ 3347.610515][T27157] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: ffffffff8bc22700 [ 3347.610531][T27157] R13: ffff8880259c1000 R14: 0000000000000000 R15: ffffffff8bc05fe0 [ 3347.610570][T27157] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 3347.610603][T27157] ? rt_spin_unlock+0x14f/0x200 [ 3347.610629][T27157] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3347.610659][T27157] ? rt_spin_unlock+0x160/0x200 [ 3347.610689][T27157] ? drm_vblank_get+0x147/0x260 [ 3347.610725][T27157] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 3347.610757][T27157] drm_fb_helper_damage_work+0x131/0x6f0 [ 3347.610784][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.610813][T27157] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 3347.610842][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.610865][T27157] ? process_scheduled_works+0xa70/0x1860 [ 3347.610890][T27157] process_scheduled_works+0xb5d/0x1860 [ 3347.610951][T27157] ? __pfx_process_scheduled_works+0x10/0x10 [ 3347.610980][T27157] ? assign_work+0x3d5/0x5e0 [ 3347.611010][T27157] worker_thread+0xa53/0xfc0 [ 3347.611068][T27157] kthread+0x388/0x470 [ 3347.611097][T27157] ? __pfx_worker_thread+0x10/0x10 [ 3347.611119][T27157] ? __pfx_kthread+0x10/0x10 [ 3347.611150][T27157] ret_from_fork+0x514/0xb70 [ 3347.611179][T27157] ? __pfx_ret_from_fork+0x10/0x10 [ 3347.611212][T27157] ? __switch_to+0xc79/0x1410 [ 3347.611248][T27157] ? __pfx_kthread+0x10/0x10 [ 3347.611279][T27157] ret_from_fork_asm+0x1a/0x30 [ 3347.611327][T27157] [ 3347.612692][T27157] Kernel Offset: disabled