last executing test programs: 37m59.00482988s ago: executing program 4 (id=475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = gettid() r5 = fcntl$getown(r3, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000540)={0xfffffffd, 0x3f, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe8b5, 0x8e31}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r10, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x5, 0x0) syz_clone3(&(0x7f00000007c0)={0x21005800, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480), {0x37}, &(0x7f00000004c0)=""/45, 0x2d, &(0x7f0000000600)=""/199, &(0x7f0000000780)=[r4, r5, r6, r7, 0x0, r8, r9], 0x7, {r10}}, 0x58) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xb4, r14, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "8688636905db3c63e4122b5fcfc539874f993cf02bae4492db6e35a4811fd4bf6e2470ea5910ea5ffbca7d668cf2172d03278afbf65535b1639b52903b13580b5cf5f872a615b9fd7b982559949b02aad5f8c0b1f2839a9e67dd281c18caf98a347da22267bd090075de777dab7e3cd11201709e99d5ad61f70b96a6ea967872263c5ca72273f37a4196f41024d76f1282d6fd7e"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc000}, 0x807) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 37m54.604832389s ago: executing program 4 (id=496): personality(0x5400004) syz_io_uring_setup(0x187, &(0x7f0000000200)={0x0, 0xe3f9, 0x40, 0x2}, &(0x7f00000001c0), 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 37m54.397029909s ago: executing program 4 (id=497): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 37m54.333440098s ago: executing program 4 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2a340, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x109}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3, 0xfffd}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f000000f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x271a, 0x0, 0xdddd0000, 0x1000, &(0x7f0000010000/0x1000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c03, r6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) 37m50.92382389s ago: executing program 4 (id=515): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 37m50.652514646s ago: executing program 4 (id=517): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff01, 0x200000000003) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ncm(0xb77b99966a0d499e, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x9, 0x80, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "78f6b2fe"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x6a4, 0x9}, {0x6}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0x1000, [0x0, 0x9, 0x400, 0x5, 0x6]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xe, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x8, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x60, 0x7, 0x1}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xdedce8bbbed189d8, 0x2, 0x0, 0xc, 0x8, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0xc, 0xfff9}]}, 0x1, [{0xf7, &(0x7f0000000280)=ANY=[@ANYBLOB="f70335d5d7ca6a33516071b646cda6f26a091eccaf8c0bac9ab224c4f551a087398a2d26817211cda90f82200f60763268cc3c48a437476750deb1d6366517a51e79c4621a90f0a244a11d807f188367f96b4e2ead78020073ab8359a59d2c19973daf452b8b64f2d8fe753960414324d2905c2686bbe813e50f8cc6e140bdd2d9a59ade69cf95550eb60ba0b0e041092b80401e683521a31ca90df7a3fe5fc3749cc9e6aeae1997d257af43d377a881800ec896a8e182eb165ab8f0206eb0d3ae62ae71e51900ac4270dc636b1d9ce0fe239dff8acacffbd7bcc1770f027881420ae9beaf8dafd99b652848069d80a690ae2f9fe130cd"]}]}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x40045532, &(0x7f0000003f80)=""/4086) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$cdc_ncm(0x5, 0x8c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xd7, 0xa, 0xb, 0x8, 0x3}, 0x41, &(0x7f0000000380)={0x5, 0xf, 0x41, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x6, 0xf, 0x6, [0xff0030, 0xc0c0, 0xffc01e, 0xff00c0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x5, 0xff}, @generic={0xe, 0x10, 0x2, "0559453b193fa329618de4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xcf, 0x7, 0x0, 0x9}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc08}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x60ccc3, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x40000019}) r11 = accept4$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r11, &(0x7f0000000580)={0x4f660a59a39552a4}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 37m50.195320109s ago: executing program 32 (id=517): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff01, 0x200000000003) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ncm(0xb77b99966a0d499e, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x9, 0x80, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "78f6b2fe"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x6a4, 0x9}, {0x6}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0x1000, [0x0, 0x9, 0x400, 0x5, 0x6]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xe, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x8, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x60, 0x7, 0x1}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xdedce8bbbed189d8, 0x2, 0x0, 0xc, 0x8, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0xc, 0xfff9}]}, 0x1, [{0xf7, &(0x7f0000000280)=ANY=[@ANYBLOB="f70335d5d7ca6a33516071b646cda6f26a091eccaf8c0bac9ab224c4f551a087398a2d26817211cda90f82200f60763268cc3c48a437476750deb1d6366517a51e79c4621a90f0a244a11d807f188367f96b4e2ead78020073ab8359a59d2c19973daf452b8b64f2d8fe753960414324d2905c2686bbe813e50f8cc6e140bdd2d9a59ade69cf95550eb60ba0b0e041092b80401e683521a31ca90df7a3fe5fc3749cc9e6aeae1997d257af43d377a881800ec896a8e182eb165ab8f0206eb0d3ae62ae71e51900ac4270dc636b1d9ce0fe239dff8acacffbd7bcc1770f027881420ae9beaf8dafd99b652848069d80a690ae2f9fe130cd"]}]}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x40045532, &(0x7f0000003f80)=""/4086) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$cdc_ncm(0x5, 0x8c, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002020000082505a1a440000102030109027a00020104b00d0904000001020d00000824060001b9e0d305240007000d240f0103000000060003000706241a390a200824078308000001072414090002000c241b00006b00057d00800809058103f7050808200904010000020d00000904010102020d00000905820210000000010000000000000308016c4f884887e80eb9813bc81ce112562aeda21d08b27f81b49833868691d85f8c8098348bf0dd5814ecb69d7ce251434ebe052ad9a2fe46869d8eb596d7582e425d061528fec634f79d6ffd13fb07db85066da5de4e5f530095f5abc84f0cacae329182e9ac807759e42c0ec788c60a81431cb49b740d8eaf97138e"], &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xd7, 0xa, 0xb, 0x8, 0x3}, 0x41, &(0x7f0000000380)={0x5, 0xf, 0x41, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x6, 0xf, 0x6, [0xff0030, 0xc0c0, 0xffc01e, 0xff00c0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x5, 0xff}, @generic={0xe, 0x10, 0x2, "0559453b193fa329618de4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xcf, 0x7, 0x0, 0x9}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc08}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x60ccc3, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x40000019}) r11 = accept4$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r11, &(0x7f0000000580)={0x4f660a59a39552a4}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29m3.659948761s ago: executing program 2 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000a00)=0xb5, 0x46) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000007fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)='O', 0x1}], 0x1}}], 0x1, 0x0) listen(r3, 0x2000002) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 29m1.400226634s ago: executing program 2 (id=2598): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0xe5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0xa, 0x7fffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x40, 0xc86, 0x101, {{0x5, 0x4, 0x3, 0x3b, 0x14, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast2, @loopback}}}}) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x400) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000003100)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000031c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x4040) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xfffffffffffffe3e, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x400c080) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x8000203d}) write$char_usb(r5, &(0x7f0000000000)='\t', 0x1) 28m58.845357353s ago: executing program 2 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000040)=[{0xb, 0x2c, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002000c0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x60}}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000d0a01034329d7ae00c374f6dead8565cea2c29dcb029d2a0000000a0000010910a157c153a3f443988828"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 28m58.14209406s ago: executing program 2 (id=2611): socket$kcm(0x22, 0x2, 0x21) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xd}}}, 0x24}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x20000, 0x0) write$FUSE_INIT(r5, &(0x7f0000002280)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x40000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'pimreg0\x00', 0x0}) r11 = openat$cuse(0xffffff9c, &(0x7f0000002340), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002480)={{{@in6, @in=@private}}, {{@in6=@empty}}}, &(0x7f0000002380)=0xe4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002300), 0x2011000, &(0x7f0000002580)=ANY=[@ANYBLOB='gd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000005,fowner=', @ANYRESDEC=r9, @ANYBLOB=',dont_appraise,dont_measure,euid=', @ANYRES16=r10, @ANYBLOB=',smackfshat=$,seclabel,\x00']) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r12, r5, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r13, 0x0) socket$key(0xf, 0x3, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e"], 0x60}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180080001409b1414aa0500070084000000060004404e2000000c000280080001407f"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 28m57.926864751s ago: executing program 2 (id=2614): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) r2 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(r2) close(0x3) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xc0000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000280)={0x0, 0x3436324d, 0x0, @stepwise}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) 28m57.225129804s ago: executing program 2 (id=2616): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x20) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000ffffffff410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000003b321f6aa719b1c387872bc2b7f3de04e6d3bb20dfc6081d5d5fbbaf1dda16498fe88042b8d6a61f719d39eebe21d46efd8a11d41128ce5beee40e06b37f36e1f7f9254d088e65369bc6ffb06dd7ba3dee5c2ec8b43e358cdda7217b79880b08cbf280eed7c819ebfe418e1fa77579937f8a8e3582bdef56958042bd171fd0c5161403fd47f1"], 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x6) 28m56.611988627s ago: executing program 33 (id=2616): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x20) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000ffffffff410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000003b321f6aa719b1c387872bc2b7f3de04e6d3bb20dfc6081d5d5fbbaf1dda16498fe88042b8d6a61f719d39eebe21d46efd8a11d41128ce5beee40e06b37f36e1f7f9254d088e65369bc6ffb06dd7ba3dee5c2ec8b43e358cdda7217b79880b08cbf280eed7c819ebfe418e1fa77579937f8a8e3582bdef56958042bd171fd0c5161403fd47f1"], 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x6) 9.392990595s ago: executing program 0 (id=8186): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r3 = socket$inet6(0xa, 0x80002, 0x0) unshare(0x22020600) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (fail_nth: 7) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="eb", 0x1}], 0x2}], 0x1, 0x40800) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) syz_emit_ethernet(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2, [0xf7e, 0x6ea, 0xe31, 0xea7]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1685bcd7, 0x0, 0x0, 0x400, 0x0, 0x6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe0, @loopback}, 0x1c) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x62) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) io_setup(0x6e5, &(0x7f0000000640)) signalfd(r6, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000380)}], 0x1, 0x40800) recvmmsg$unix(r6, &(0x7f00000002c0), 0x0, 0x40004102, 0x0) 8.344212535s ago: executing program 0 (id=8188): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x32, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x3234564e, 0x5, 0x98, 0x3, 0x6, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) semget$private(0x0, 0x4000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x40000000, 0x0, 0xfffffff8, 0x0, 0x10001, 0x800000fe], 0x0, 0x0, 0x0}, 0xe0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020600) msgget$private(0x0, 0xef) 4.274071968s ago: executing program 5 (id=8204): unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x28, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x7, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x403, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x1, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x1000, 0xb, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x7, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x1, 0x1000000a, 0xfb08, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x1c000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.054954072s ago: executing program 1 (id=8206): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.949403602s ago: executing program 0 (id=8208): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x25, 0x0, 0x3, 0xfffff034}, {0x6}]}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)="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", 0xfd}, {&(0x7f0000000100)="70d31d77af9d32d9974c8aa3e1d8f880dc4dffbca0eec928692e20d92666c17c6ad85b03ebe7b815e2e96d8d961f05a4d872ce73bbd9f85ff608b31331751556e91c37085d98806eed168cf25cfe96ed5ba4cfcb322963dee87639e0bfb3f4764230e665d9bcbb62c7d96d3f00aeaf40821df0cbb4d422e7ded9fcdd1cebc448a0635c3d0e37f684b791ff7b1638eca85fa12facbc7128c3cd400a0fd9f7354ddecb07633804d5b0267e76b1c8bf77d5ea02b21a93e8c9b6ee2c2436ec27e99952bc8a60b428f706f23bd9a14283c6bb97b15498f9a493b1c2d1f1", 0xdb}, {&(0x7f0000000200)="90e12865728b2d5bc39ec61e2ccd938ac52be51c5f5a0ecae6c7d1ffc5147e8792603a7d6a46ffd9da01f336ad54e7f592b9b727fbb7f021057dcd292762619aa8ed31d6766e0a9cc732c0d7a03934d2f19e6f65b3581016f971a3780690a68561dd97d86004", 0x66}, {&(0x7f0000000280)="65559499f7911255919e23f9", 0xc}, {&(0x7f00000002c0)="c1f6f1bee6cc379efb41427918d16d1f23e669895669064deb282821ce02333b9d216743ef1660c2a6d7099fe740edb647a7fa8599febf6f813ea1b2d39092b0a250d4862667eb7df2a9973dfb0f35aa9dcfdc10fac2c61fc96ae519b39735a6ce28ae02496ad051b82c6e2391188e31bb16776b4ffc870f70fc99e303d0dd62c43abe506b76c3a0e882c3325c674088d2aaf784b4e792b0b323e4a0a75b21f249e5974441de82834b0b6f491baf549df687a1d0d7e5dcf6d2030543605f628570e61edb454616f5758ffc7bfe06be155e99fe40d7471de4a07a02d34bffe34a5201503b2dac9d", 0xe7}, {&(0x7f00000003c0)="5949dec9e662ba91", 0x8}, {&(0x7f0000000400)="a9d41d98d46a8cf4fa3d265e", 0xc}, {&(0x7f0000000440)="d4373293eec565bc9aa8db18c058437c61c7a4301ed88e4135b8c036478d158a637dd0c7c956018325b9eaec51800bd4d1853665667f49d713a31ae5163db0ad99ca73d5c56b5ad8ba3029121e906660798266816b4d4e66092e389989854615f1b975bb960c9acc7f8c53f10896021c4149187f923a4a5eee45edb11899ef74496ce74c57105ff5211107d4e67bccbecb81afaf484824f2df19d8694ba0ea02938ddec8fd92efec03df5ff6a26f640df50a9ef959350e", 0xb7}], 0x8) (async) sysfs$3(0x3) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.944425361s ago: executing program 5 (id=8209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 3.171835959s ago: executing program 6 (id=8212): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x4000) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) 2.951597406s ago: executing program 5 (id=8213): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x5}]}) 2.793142635s ago: executing program 1 (id=8214): socket$inet(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) 2.613159948s ago: executing program 1 (id=8216): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0xffffffffffffffc4, &(0x7f00000000c0)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x60}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x208, 0x0, 0x9}]}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20051090}, 0x8880) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) preadv(r14, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) 2.477322829s ago: executing program 6 (id=8217): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r6, 0x3a}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="16", 0x1}], 0x1}, 0x80) (fail_nth: 5) 2.131537676s ago: executing program 0 (id=8218): r0 = syz_open_dev$video(&(0x7f0000000140), 0x7, 0x100) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x6, 0x30314742, 0x2, @discrete={0xa, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000001400010000000000fcdbdf2564010102000000000000000000000000ac14141c000000000000000000000005000000000007000000008020000000"], 0x5c}}, 0x4004040) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) io_setup(0x81, &(0x7f0000001440)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="44e40b521609f1341814b4f8", 0xc}, {&(0x7f00000002c0)}], 0x2) 1.984478581s ago: executing program 6 (id=8221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000800)='./file1\x00', 0x6000, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000bb00)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)="e0738af596b75f5b749d883bbeb3c08d1abad2089df5dab19b2af3cbdfe49f8e6f21a9419f29de9e88b711ede900b290c5d72cb52a023004991a8dcad25bdf7cf23bb3a8372a17d5152c226c63ed17d9b313712563432a0af50b7a4d70a12dd614b223247b12ed964cbf2db80d3355719aa516ba6293649112ebd4233297e913271f16bf65fbde843725b65cf9f73bd8526d0bbc6a391ffd", 0x98}, {&(0x7f0000000180)="47fe8bfb5903e3b4d0604a2bcda8db0d8e523e504b98200adbca5b81f1729c4f67401048f0ef7c145eb6676e7166f1cebc929f9377f1eb2bc9e5311bab", 0x3d}, {&(0x7f0000000400)="8d7dc454af616294d26d2882c9019132ff9b271b29971013fafe68553e5145c6086d168d8c280c03cfc4623411b7e9e9b44c85a68f61590f23299b5bb6460fd8a0d0a8", 0x43}, {&(0x7f0000008340)="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", 0x1000}, {&(0x7f0000000600)="9508f8a855a93aef3367f7d1cdcf3dd7a93b58c70741a7040c26ac8358d61b0f63303f72946ad3d8bc059b9e71cce65a101c6792a1a51c27bd1dd75e2e25931e8c2aad43309a0fa3e0e67748990762527e6113cf79d50398304faba1684a511c7e81c0dc8b9a7f56f646725e063e56cf44e4e898edb88520b2ca4e82c435904d37a3bcc77eb75f41c0b6cb3e77412a443d56079f0a890d79961b8a1c3463a3b06244bc4c072f554682c0", 0xaa}, {&(0x7f00000002c0)="55e1a1f02d7b4b8df54ad1ba81892b9dc4fd21166888962e9a5c47da189c354cc99db3f124b0c845d9a5", 0x2a}, {&(0x7f00000006c0)="2c1ad4af0f191b4f7af46b97c1e0cf5b3743cd0a0b1e5ffe94a73669aecf672eeb2f3d31f09743cf922b7c9440775159fa19fb4cec7e8dd25802ca1f687dfebc92e65a83755535ed965404b028287c6706e1ac3a533c829f64b007c9f5714eb9ecea82eba4efb38e1b0322ef9e0fd6f4089dc304f858bb9497e47a58cf1899bc3bba02d58a174f4e36080a525ecf0a26c8440ab0494bcf294c27d9b00dab4ab2c8b72588bfaace5cd3d2cf2fd5d74d4174ecbde36e80fe", 0xb7}, {&(0x7f0000000780)="c03b2dab23d87876a2a98fa3bc0f2056a7194c7531f5bd7d4289e543e5b70aa4bc46491c8471e92607081b23d2e7c2943eb50aab89c779101c4435b2e8048d4a8fdddedee5a3754c9f79de206df5fa66ef6f9213ce2f65cb4c5495", 0x5b}], 0x8, &(0x7f00000009c0)=[@cred={{0x18, 0x1, 0x2, {r2, r3}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1, r1]}}], 0x60, 0x804}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)="b838711c858081ed340c4b6e3c15aee8f85783cd0867ef39b52f30a9d71484688ee4c85163f9b18a11e05ff1156900502d784673f92e17dd23a71de35818188de9473521a709e942cad25579115a09be00f86f6707026fe010a470306049712d0cec92aeef65a73713a45f54ad8790f20b5d01bab54b7f6297e5e3d1295621248bc204bc278be49705d8f3c0be9c745846bf00a348349d95abdbfb15397ff2f1858949215358d10f574ac7028140fd4dd9316336220361b86b97c654372650f8c316537d48c425347443a14ba7a9c327ff526250603aacd1856b", 0xda}, {&(0x7f0000000b40)="b87736c4418176f8307f6c7488fefe45bfcd08356f18534a36c7f6a0100936ea786dcf43cb80cf6173769ae02f84049949b75e799627cf023e1f61da2c1bfcf582bd54cb890e83f64421f65b018610826b91c73f2ec5947be7105002836f166cbfe584698999bd1fcdfb7303af87a873dd0353891aac5c0ced7e8729f29322065df2ad9eafb7e46423533d267ad4c4d2d73517ccf4bff924877f984accbf03177dfbdddad8f823e5c6a9fbfae63740", 0xaf}, {&(0x7f0000000c00)="b590d962b9f06c935779e9db34b9cbd4915da5e13f87fd92d24669ac62168128facfd21f6d41747aeacdd0175c0282dd6f1553ef05b8ba7621454def84b4ba712efaa308521d41317417e03acca881d788ab52ba83bdc2e43f162dcffe5a3b673fb748ebb9cccaa97ba7bb6a0a4350829ba8135b0accda9c8f85", 0x7a}, {&(0x7f0000000d00)="7437fe4c6841ec94d0a5410ae2c1c17f04c8325eccbc1f92638dafcc9fa62fecd0d935ac7395cb9821fe39831449b527014de174422c0918c55011037a9ad60565b118ea3e67e2495743dca340023a72832fb7bb8cfb3632dd8edab3947460", 0x5f}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="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", 0xfb}, {&(0x7f0000000ec0)="f26de08d3ed7061e4f4d9f639dcbfbd4d7bc144090fa8ad0bde8307273ce734fa20e394763af25f8591be487757e1e7ef3326866261f7390f7bbc08133b5675e4dce771b25bb0c9b217b3e848155ffc4cb540ed08bfb26a4c84f16af17f4bfaf37dd0cb1f23076e8e08628b9", 0x6c}], 0x7, 0x0, 0x0, 0x4031}}, {{&(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001000)="2b363adbd03866c098c404bc72a01919c35d17d39891c2075bc4b08790455f50c1592aca10c44b12cf9681284510bf390a64e1b95ac54fdc4ad071248035a52c7561b7046c25cb405d56b2af9606857762d7ff9f3262a341baeca79d0fbd3b94a6bcfaf15d744ee7c552fcfd344240dab45777292ef4c752014ff596acb5fc6db3701c914e94365b20518f115dc8239d296b4d22336eb4411e836fb3daaeece31f25e61ef2e8a13be6154946fd7501bc0682cfc0ae2a2bb2246efa8d674ed1e1fdc650b9de5ca9", 0xc7}, {&(0x7f0000001100)="26365e9ebf96c2a377a97d7e0e9737fe3a8cc0203ed733d836de7855ccdb862dae6f54131bf568cecde32cdd83e247dbc285ae64ca4e4dea73af858746af873b3118c5a579cf23181800c06a0f2f8e6b9db7e56e77a36a", 0x57}], 0x2, &(0x7f00000012c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {0x0, r3}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x24008004}}, {{&(0x7f0000001400)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001480)="479f180017f1b78c785befa2d2894035a60df2516f2fb04dd747ca8762cdda3a2991c2339fa52f4b708d9b7a8f277ba4d884a00b860bd244b6169b1258526fb43c54fd0e8aff1bbae44674e8f2950a", 0x4f}, {&(0x7f0000001500)="b7f0e602b38fbe3c390b4606efb511015306ee4641e654055091a15a357231cd8221a5953a385e8f7268ac48f3c4afc1868546bc5425f8acd7d83c27494bb1106377eeae981dffd5df5d069e497c9b58451f384e81755e60dbfc3cdd923f5a4fc4aa820c447908a5d3faa73b1b24ef4816b2e7cf12096a2dd1f99273335c362430a239de9d9050fc6e33da932014c66bd179f5b58a6bcebed8513aac402c110231b893c090", 0xa5}, {&(0x7f000000b280)="24c7640248debcfcf9c344e775424fc4bf575238f2a52db14809148daadc4ec26b6b6cb2e0bfabb2c12a9c3b2c079558d0e513be9661f6be2118cb44a21bae7b6422c5839342ba9305a8a49ddf13be70ea72b796d1e73a61c83788c3f598548372056c45fb44c7c190644cff02daa695aa06b1ca353da0db10c7a6b1dd33a27ef419263fc98dcd2261edc388", 0x8c}, {&(0x7f000000b340)="0b6795b39a62a45226294ef9f4290a97c2019814f389fb7083634894c429a39fca8aa3ae58385c5e1300fd623b7fbba5dbe28124cf5cb8e8ad7da1281f201d4a1850efa0e74891fd06547e80a5c42cb07e91730f7e062928148ab3b142e72636aa16d1692ffc3e3c946ed4549e26986cd9a79b803a37387331fb82977c2b66f90f92523b10d1193c323a8ed5778ff6e24f0bd42b11aa3b48fec5a1cae5c6a4412d65eef8796302131120231f8b6c884465b535d485703d01f9fc0ff3fefb315095d37d32b691d77f0e50fce9f7312eb35d16c4aceae619865262e0293f4f6ef34325448fad7ba152b9130094fd4cda", 0xef}], 0x4, &(0x7f000000b440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x24, 0x8005}}, {{&(0x7f000000b480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b600)=[{&(0x7f000000b500)="f56d83db59428e866bce223763577facbd80fc3794acf752838c9b3bd4cbbdd98757ce9b59c9b73a8c8b78624a5fe7fc16071c70b2ac989682b3a722d51485f948d6e379127a918737db7d8fdbf6340ccc0a3a8e5734c16152e5215de880f924b4489d485e6ee15f78a0fe80687516a0af613f81198d296de58b15d9a9f63a471cb7efe114b2824032b190cf84c136bd755c387f7b954ed478d194e35e3981f372b469fc9f9014cace5c776ed41c9e305faf91f7706c265413e4af3bc004e232f2", 0xc1}], 0x1, &(0x7f000000b780)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r4}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18}}], 0x60, 0x81}}, {{&(0x7f000000b800)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f000000ba80)=[{&(0x7f000000b880)="af7039f7e2616a86a644695e47f5b1a02bef9081ae1b1ce11dfa62d80d2e3d1fd3d143fae52bf09df1c1b992dee041163515189df116d5c682b3a1a849c791ec418aeca51e4b336c7b62a7d28d970246a515ba6c8acf2fe33c7faaf7805df65f275dc160486f03aef972765aa4c80893455d2937ba6c159831be754776d4a57f581fc847f0fe5dda3d05dfa8e779ccb9d43499897fa574be18db9ee595c841ea33b6093ace8ff4bfdb491a6290c9031da2bd24d4d058b354343f7a5f3532115e5d39f67bc32e4063f753fc0929553c83d1026c5a85", 0xd5}, {&(0x7f000000b980)="4c30cc3db3bd33ce520ec3eb2bf3c8e01a25677a283803e68f8c36087a72cc09", 0x20}, {&(0x7f000000b9c0)="f79027596bb0bc6b8000f7d1ffe726809cd40c4f553a5a1c0d25fe5b4078623b0127b9b71f23102901dc7f96836528b54434d5fbd121417a5bddd29deca204bf1b73b26007fd150b40fc13998b95db65ff5e78521f6685fba613269bcc6dd6efce456a79def579e15b000b66ee19ece5b5359e52d3f109fa23c5040044ce01762d993a0917b064338adefd096681a5ff7f66c6fdb55a4b7dde8d", 0x9a}], 0x3, &(0x7f000000bac0), 0x0, 0xc000}}], 0x6, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) close(0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r11, 0x0, 0x0) dup2(r11, r6) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) open$dir(&(0x7f0000000940)='./file0\x00', 0x20000, 0x10) close_range(r5, 0xffffffffffffffff, 0x2) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/249) 1.949023922s ago: executing program 3 (id=8222): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x100000}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0xbe5d, 0x4, 0x2, 0x40288}, &(0x7f0000000340), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) io_uring_enter(r0, 0x154e, 0xffffffff, 0x1, 0x0, 0x0) 1.8926213s ago: executing program 1 (id=8223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 1.835873209s ago: executing program 1 (id=8224): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) syz_clone3(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) openat$cgroup_int(r4, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.835229569s ago: executing program 3 (id=8225): ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x8, "b5ed0423753b6a03af25124a57ce9ad88d2556119a9a3d48e0cc1f7d25e249d7", 0x2, 0x1}) (async) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x8, "b5ed0423753b6a03af25124a57ce9ad88d2556119a9a3d48e0cc1f7d25e249d7", 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) (async) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) close(0x3) (async) close(0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r5, 0x0, 0x0) write$sndseq(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) close_range(r7, 0xffffffffffffffff, 0x0) 1.753198848s ago: executing program 5 (id=8226): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (fail_nth: 5) 782.875438ms ago: executing program 1 (id=8227): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000280)=[{0x1a00, 0xc001, 0x0, 0x0}, {0x1000, 0x8001, 0x13, &(0x7f0000000000)="2a86333fa21e41d55562889632e9ff526a2172"}, {0x4, 0x0, 0x0, 0x0}], 0x3}) 753.986118ms ago: executing program 0 (id=8228): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) syz_clone3(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) openat$cgroup_int(r3, &(0x7f00000001c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 713.711533ms ago: executing program 6 (id=8229): syz_emit_ethernet(0xda, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0xe0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x7, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea10a2140a72"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x20, 0x0, 0xfffffffe, 0x0]}]}}}}}}}, 0x0) 597.113909ms ago: executing program 5 (id=8230): unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x28, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x7, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x403, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x1, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x1000, 0xb, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x7, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x1, 0x1000000a, 0xfb08, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x1c000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 434.069095ms ago: executing program 6 (id=8231): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000006e9"], 0xa) 375.299937ms ago: executing program 3 (id=8232): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000440)='macvtap\x00', &(0x7f0000000480)='./file0\x00', r1) 304.002607ms ago: executing program 6 (id=8233): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xe4, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3dc, 0x0, 0x3f4, 0xe4, 0x2fc, 0x2fc, 0x2fc, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x16d, 0x3}}}, {{@uncond, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @remote, 0xff000000, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'ipvlan0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x428) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="eb", 0x90}], 0x2}], 0x1, 0x40800) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16], 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000000c0)) r8 = socket(0x27, 0x3, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20004001) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e12f7000800060000a00e64210a42951699"], 0x44}}, 0x0) 303.36063ms ago: executing program 3 (id=8234): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x100000}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0xbe5d, 0x4, 0x2, 0x40288}, &(0x7f0000000340), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) io_uring_enter(r0, 0x154e, 0xffffffff, 0x1, 0x0, 0x0) 201.280131ms ago: executing program 3 (id=8235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 122.830411ms ago: executing program 5 (id=8236): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x5}]}) 59.924036ms ago: executing program 3 (id=8237): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@mcast2, @remote, @private2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010020000009040000020764c200"], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @random="7b5b1bc410c8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 0s ago: executing program 0 (id=8238): mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x81031, 0xffffffffffffffff, 0x10000000) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f0000000500)=[{0x0, 0x100000}, {&(0x7f00000005c0)="d4c4403459", 0x5}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="15581bf6749e29c8d9a98e9927e0cfe179cce3b316746f", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r2, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e24, 0x7, @loopback}, 0x1c) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000280)={0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x80000042, 0xf5, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x1}}, 0x10) socket$kcm(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) unshare(0x24060400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 2328.348481][T18224] usb 7-1: device descriptor read/8, error -71 [ 2328.404082][ T5930] usb 2-1: USB disconnect, device number 72 [ 2328.474259][T18224] usb usb7-port1: unable to enumerate USB device [ 2328.989945][T18224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2329.113693][ T5904] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 2329.258098][ T3096] syz.0.7747 (3096): drop_caches: 2 [ 2329.271368][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 2329.323753][T18224] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2329.403644][ T5904] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 2329.495803][T18224] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2329.514254][T18224] usb 2-1: not running at top speed; connect to a high speed hub [ 2329.529495][T18224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.553797][T18224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 2329.555419][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 2329.566615][T18224] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2329.574249][ T5904] usb usb4-port1: attempt power cycle [ 2329.584297][T18224] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2329.594781][T18224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.602797][T18224] usb 2-1: Product: syz [ 2329.607296][T18224] usb 2-1: Manufacturer: syz [ 2329.611893][T18224] usb 2-1: SerialNumber: syz [ 2329.910234][T18224] usb 2-1: USB disconnect, device number 73 [ 2329.933810][ T5904] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 2329.949411][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2330.043046][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 2330.054032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.109533][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.185176][ T5904] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 2330.204883][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 2330.210583][ T5904] usb usb4-port1: unable to enumerate USB device [ 2330.533245][ T3122] tipc: Enabled bearer , priority 0 [ 2330.540935][ T3122] syzkaller0: entered promiscuous mode [ 2330.623599][ T3122] syzkaller0: entered allmulticast mode [ 2330.880358][ T3127] netlink: 'syz.6.7754': attribute type 1 has an invalid length. [ 2330.888290][ T3127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7754'. [ 2331.084258][T18224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.101415][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7754'. [ 2331.160251][ T3121] tipc: Resetting bearer [ 2331.548329][ T3121] tipc: Disabling bearer [ 2331.833697][T18224] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2331.894711][ T3137] tipc: Enabled bearer , priority 0 [ 2331.914401][ T3137] syzkaller0: entered promiscuous mode [ 2331.922469][ T3137] syzkaller0: entered allmulticast mode [ 2331.947796][ T3137] FAULT_INJECTION: forcing a failure. [ 2331.947796][ T3137] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.960499][ T3137] CPU: 1 UID: 0 PID: 3137 Comm: syz.5.7757 Tainted: G L syzkaller #0 PREEMPT(full) [ 2331.960518][ T3137] Tainted: [L]=SOFTLOCKUP [ 2331.960522][ T3137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2331.960529][ T3137] Call Trace: [ 2331.960535][ T3137] [ 2331.960540][ T3137] dump_stack_lvl+0xe8/0x150 [ 2331.960559][ T3137] should_fail_ex+0x412/0x560 [ 2331.960574][ T3137] should_failslab+0xa8/0x100 [ 2331.960589][ T3137] __kmalloc_cache_noprof+0x88/0x660 [ 2331.960601][ T3137] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 2331.960611][ T3137] ? nsim_fib_event_nb+0x190/0x1210 [ 2331.960627][ T3137] nsim_fib_event_nb+0x190/0x1210 [ 2331.960645][ T3137] notifier_call_chain+0x1be/0x400 [ 2331.960664][ T3137] ? atomic_notifier_call_chain+0x26/0x180 [ 2331.960681][ T3137] atomic_notifier_call_chain+0xda/0x180 [ 2331.960697][ T3137] call_fib_notifiers+0x31/0x60 [ 2331.960713][ T3137] fib6_del+0xf7e/0x15a0 [ 2331.960728][ T3137] ? fib6_del+0x1181/0x15a0 [ 2331.960748][ T3137] ? __pfx_fib6_del+0x10/0x10 [ 2331.960762][ T3137] ? is_bpf_text_address+0x292/0x2b0 [ 2331.960773][ T3137] ? is_bpf_text_address+0x26/0x2b0 [ 2331.960789][ T3137] fib6_clean_node+0x29c/0x580 [ 2331.960805][ T3137] ? __pfx_fib6_clean_node+0x10/0x10 [ 2331.960819][ T3137] ? stack_trace_save+0xa9/0x100 [ 2331.960830][ T3137] ? __pfx_stack_trace_save+0x10/0x10 [ 2331.960840][ T3137] ? kfree+0x1c1/0x630 [ 2331.960858][ T3137] fib6_walk_continue+0x67b/0x910 [ 2331.960877][ T3137] __fib6_clean_all+0x35b/0x5a0 [ 2331.960892][ T3137] ? __fib6_clean_all+0xbd/0x5a0 [ 2331.960905][ T3137] ? __pfx_fib6_ifdown+0x10/0x10 [ 2331.960920][ T3137] ? __pfx___fib6_clean_all+0x10/0x10 [ 2331.960935][ T3137] ? __pfx_fib6_clean_node+0x10/0x10 [ 2331.960948][ T3137] ? __pfx_fib6_ifdown+0x10/0x10 [ 2331.960962][ T3137] ? do_raw_spin_lock+0x12b/0x2f0 [ 2331.960974][ T3137] ? __mutex_trylock_common+0x158/0x260 [ 2331.960992][ T3137] rt6_disable_ip+0x128/0x730 [ 2331.961007][ T3137] ? rcu_is_watching+0x15/0xb0 [ 2331.961022][ T3137] ? trace_contention_end+0x3d/0x150 [ 2331.961038][ T3137] ? __pfx_rt6_disable_ip+0x10/0x10 [ 2331.961057][ T3137] addrconf_ifdown+0x161/0x1a40 [ 2331.961070][ T3137] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2331.961090][ T3137] ? tls_dev_event+0x745/0xf00 [ 2331.961105][ T3137] ? __pfx_addrconf_ifdown+0x10/0x10 [ 2331.961124][ T3137] addrconf_notify+0x1bc/0x1050 [ 2331.961141][ T3137] notifier_call_chain+0x1be/0x400 [ 2331.961160][ T3137] netif_set_mtu_ext+0x5aa/0x800 [ 2331.961175][ T3137] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 2331.961186][ T3137] ? __do_fast_syscall_32+0x20d/0x640 [ 2331.961200][ T3137] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 2331.961215][ T3137] ? __mutex_trylock_common+0x158/0x260 [ 2331.961239][ T3137] netif_set_mtu+0xd7/0x1b0 [ 2331.961255][ T3137] ? __pfx_netif_set_mtu+0x10/0x10 [ 2331.961276][ T3137] ? __dev_get_by_name+0xe5/0x140 [ 2331.961289][ T3137] dev_set_mtu+0x126/0x260 [ 2331.961305][ T3137] dev_ioctl+0x7b4/0x1150 [ 2331.961320][ T3137] sock_do_ioctl+0x23e/0x320 [ 2331.961332][ T3137] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2331.961348][ T3137] ? unix_ioctl+0x203/0x720 [ 2331.961357][ T3137] ? unix_compat_ioctl+0x15/0x30 [ 2331.961369][ T3137] compat_sock_ioctl+0xba6/0xcb0 [ 2331.961383][ T3137] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2331.961395][ T3137] ? __fget_files+0x3a0/0x420 [ 2331.961409][ T3137] ? __fget_files+0x2a/0x420 [ 2331.961425][ T3137] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2331.961441][ T3137] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2331.961458][ T3137] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2331.961472][ T3137] ? __fget_files+0x3a0/0x420 [ 2331.961489][ T3137] ? fput+0xa0/0xd0 [ 2331.961503][ T3137] ? ksys_write+0x242/0x270 [ 2331.961519][ T3137] __do_fast_syscall_32+0x20d/0x640 [ 2331.961531][ T3137] ? do_fast_syscall_32+0x33/0x70 [ 2331.961540][ T3137] ? asm_int80_emulation+0x1a/0x20 [ 2331.961550][ T3137] ? do_int80_emulation+0x274/0x4d0 [ 2331.961559][ T3137] ? trace_irq_disable+0x3b/0x150 [ 2331.961576][ T3137] do_fast_syscall_32+0x33/0x70 [ 2331.961586][ T3137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2331.961599][ T3137] RIP: 0023:0xf70aef6c [ 2331.961609][ T3137] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2331.961618][ T3137] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2331.961631][ T3137] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008922 [ 2331.961638][ T3137] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2331.961645][ T3137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2331.961651][ T3137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2331.961658][ T3137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2331.961672][ T3137] [ 2332.066663][T18224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2332.106659][ T3137] tipc: Resetting bearer [ 2332.109955][T27971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.457292][T18224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2332.462352][ T3136] tipc: Resetting bearer [ 2332.467147][T18224] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2332.467243][T18224] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2332.494904][T18224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.562270][T18224] usb 2-1: config 0 descriptor?? [ 2332.607163][ T3136] tipc: Disabling bearer [ 2332.883957][ T5930] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 2333.013238][T18224] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2333.036575][ T5930] usb 7-1: device descriptor read/64, error -71 [ 2333.144030][T18224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.152198][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.165929][T29225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.191917][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.200516][T21750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.313688][ T5930] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 2333.639449][ T5930] usb 7-1: device descriptor read/64, error -71 [ 2333.696527][ C0] plantronics 0003:047F:FFFF.0045: hid_field_extract() called with n (132) > 32! (syz.3.7765) [ 2333.754233][ T5930] usb usb7-port1: attempt power cycle [ 2333.896250][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7767'. [ 2333.910766][T18224] usb 2-1: USB disconnect, device number 74 [ 2333.985463][ T3175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7766'. [ 2334.153867][ T5930] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 2334.234422][T27971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.249309][ T5930] usb 7-1: device descriptor read/8, error -71 [ 2334.513686][ T5930] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 2334.534277][ T5930] usb 7-1: device descriptor read/8, error -71 [ 2334.624117][ T5904] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 2334.644024][ T5930] usb usb7-port1: unable to enumerate USB device [ 2334.671943][ T3186] netlink: 'syz.1.7770': attribute type 1 has an invalid length. [ 2334.686428][ T3186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7770'. [ 2334.773617][ T5904] usb 6-1: Invalid ep0 maxpacket: 16 [ 2334.803419][ T3188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7770'. [ 2334.904518][ T5904] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 2335.073725][ T5904] usb 6-1: Invalid ep0 maxpacket: 16 [ 2335.083394][ T5904] usb usb6-port1: attempt power cycle [ 2335.304861][T24224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.383958][ T3194] sctp: [Deprecated]: syz.0.7772 (pid 3194) Use of int in maxseg socket option. [ 2335.383958][ T3194] Use struct sctp_assoc_value instead [ 2335.433691][ T5904] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 2335.467880][ T5904] usb 6-1: Invalid ep0 maxpacket: 16 [ 2335.567041][ T3198] syzkaller0: entered promiscuous mode [ 2335.572622][ T3198] syzkaller0: entered allmulticast mode [ 2335.603682][ T5904] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 2335.625541][ T5904] usb 6-1: Invalid ep0 maxpacket: 16 [ 2335.631066][ T5904] usb usb6-port1: unable to enumerate USB device [ 2335.856131][T23443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2335.867684][T23443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2335.876450][T23443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2335.884669][T23443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2335.894372][T23443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2335.913893][T18224] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2336.076905][T18224] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2336.093695][T18224] usb 2-1: not running at top speed; connect to a high speed hub [ 2336.111570][T18224] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 2336.125744][T18224] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 2336.134953][T18224] usb 2-1: config 17 has no interface number 0 [ 2336.145690][T18224] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2336.169390][T18224] usb 2-1: config 17 interface 8 has no altsetting 0 [ 2336.178922][T18224] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 2336.188450][T18224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.197286][T18224] usb 2-1: Product: syz [ 2336.201688][T18224] usb 2-1: Manufacturer: syz [ 2336.207381][T18224] usb 2-1: SerialNumber: syz [ 2336.256660][ T3206] chnl_net:caif_netlink_parms(): no params data found [ 2336.265314][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.390049][ T1162] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.420764][ T3206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2336.428203][ T3206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2336.440630][ T3206] bridge_slave_0: entered allmulticast mode [ 2336.449220][T18224] usb 2-1: selecting invalid altsetting 0 [ 2336.463292][ T3206] bridge_slave_0: entered promiscuous mode [ 2336.507053][T18224] usb 2-1: USB disconnect, device number 75 [ 2336.517315][ T1162] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.571547][ T3206] bridge0: port 2(bridge_slave_1) entered blocking state [ 2336.583603][ T3206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2336.591230][ T3206] bridge_slave_1: entered allmulticast mode [ 2336.598673][ T3206] bridge_slave_1: entered promiscuous mode [ 2336.650362][ T1162] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.668477][ T3206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2336.682894][ T3206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2336.715785][ T3206] team0: Port device team_slave_0 added [ 2336.738629][ T1162] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.760373][ T3206] team0: Port device team_slave_1 added [ 2336.787205][ T3206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2336.795030][ T3206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2336.823061][ T3206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2336.835996][ T3206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2336.843092][ T3206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2336.884501][ T3206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2336.965948][ T3206] hsr_slave_0: entered promiscuous mode [ 2336.973158][ T3206] hsr_slave_1: entered promiscuous mode [ 2336.980022][ T3206] debugfs: 'hsr0' already exists in 'hsr' [ 2336.987136][ T3206] Cannot create hsr debugfs directory [ 2337.188859][ T1162] bridge_slave_1: left allmulticast mode [ 2337.198134][ T1162] bridge_slave_1: left promiscuous mode [ 2337.207330][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 2337.223252][ T1162] bridge_slave_0: left promiscuous mode [ 2337.230126][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 2337.393425][ T1162] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2337.406294][ T1162] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2337.772961][ T1162] bond0 (unregistering): Released all slaves [ 2337.893233][ T3224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7778'. [ 2337.953871][T23443] Bluetooth: hci2: command tx timeout [ 2338.314169][ T1162] : left promiscuous mode [ 2338.571853][ T1162] tipc: Left network mode [ 2338.962054][ T3206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2338.982541][ T3247] snd_dummy snd_dummy.0: control 2:65278:67371008:syz0:-259 is already present [ 2339.019201][ T3206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2339.040105][ T3206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2339.055195][ T3206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2339.337970][ T3206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2339.417264][ T3206] 8021q: adding VLAN 0 to HW filter on device team0 [ 2339.445674][T16221] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.452791][T16221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2339.477453][T16221] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.484610][T16221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2339.837599][ T3206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2340.023725][T23443] Bluetooth: hci2: command tx timeout [ 2340.184290][ T3279] netlink: 'syz.3.7784': attribute type 1 has an invalid length. [ 2340.222120][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7784'. [ 2340.269651][ T3206] veth0_vlan: entered promiscuous mode [ 2340.322466][ T3206] veth1_vlan: entered promiscuous mode [ 2340.412608][ T3286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7785'. [ 2340.557819][ T3206] veth0_macvtap: entered promiscuous mode [ 2340.604956][ T3206] veth1_macvtap: entered promiscuous mode [ 2340.662389][ T3206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2340.690146][ T3206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2341.243039][T29225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.263841][T29225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.307894][T29225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.612338][T29225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.733681][T21750] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2341.842537][T29225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.854810][T29225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.901653][T21750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2341.921098][T21750] usb 4-1: not running at top speed; connect to a high speed hub [ 2341.950980][T21750] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 2341.970242][T21750] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 2341.994214][T21750] usb 4-1: config 17 has no interface number 0 [ 2342.004043][T21750] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2342.026163][T21750] usb 4-1: config 17 interface 8 has no altsetting 0 [ 2342.050630][T21750] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 2342.060225][T21750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.076609][T21750] usb 4-1: Product: syz [ 2342.092898][T21750] usb 4-1: Manufacturer: syz [ 2342.099177][T21750] usb 4-1: SerialNumber: syz [ 2342.104067][T23443] Bluetooth: hci2: command tx timeout [ 2342.111597][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2342.123699][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.283691][T24224] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 2342.353473][T21750] usb 4-1: selecting invalid altsetting 0 [ 2342.438615][T21750] usb 4-1: USB disconnect, device number 93 [ 2342.456460][T24224] usb 6-1: Invalid ep0 maxpacket: 16 [ 2342.612011][T24224] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 2342.793620][T24224] usb 6-1: Invalid ep0 maxpacket: 16 [ 2342.799314][T24224] usb usb6-port1: attempt power cycle [ 2343.164486][T24224] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 2343.294067][T24224] usb 6-1: Invalid ep0 maxpacket: 16 [ 2343.427554][T24224] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 2343.504456][T24224] usb 6-1: Invalid ep0 maxpacket: 16 [ 2343.510820][T24224] usb usb6-port1: unable to enumerate USB device [ 2343.609338][ T3321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7796'. [ 2343.686731][ T3323] netlink: 'syz.6.7797': attribute type 1 has an invalid length. [ 2343.694709][ T3323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7797'. [ 2344.452761][T23443] Bluetooth: hci2: command tx timeout [ 2344.828154][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.843724][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.871729][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7799'. [ 2345.507364][T26242] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2345.724097][T26242] usb 7-1: Using ep0 maxpacket: 32 [ 2345.731178][T26242] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.743345][T26242] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2345.778766][T26242] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2345.877297][T26242] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2345.922064][T26242] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2345.931546][T26242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.950253][T26242] usb 7-1: Product: syz [ 2345.960570][T26242] usb 7-1: Manufacturer: syz [ 2345.972948][T26242] usb 7-1: SerialNumber: syz [ 2345.994590][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2346.007231][T26242] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input99 [ 2346.063094][ T3343] bond1: option ad_select: invalid value (34) [ 2346.093393][ T3343] bond1 (unregistering): Released all slaves [ 2346.233769][T26242] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2346.250993][T26242] (id 0x00) [ 2346.357201][T26242] rc_core: IR keymap rc-imon-pad not found [ 2346.363131][T26242] Registered IR keymap rc-empty [ 2346.378096][T26242] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2346.388623][T26242] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2346.435571][ T3339] openvswitch: netlink: Multiple metadata blocks provided [ 2346.481305][ T3353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7804'. [ 2346.615192][T26242] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 2346.658441][T26242] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input100 [ 2346.676916][T26242] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:37> initialized [ 2346.783684][T21750] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2346.935148][T21750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.949458][T21750] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2346.960779][T21750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.980347][T21750] usb 2-1: config 0 descriptor?? [ 2346.992833][T21750] pwc: Askey VC010 type 2 USB webcam detected. [ 2347.406186][T21750] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2347.413389][T21750] pwc: recv_control_msg error -32 req 02 val 2700 [ 2347.420951][T21750] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2347.630194][T21750] pwc: recv_control_msg error -32 req 04 val 1300 [ 2347.637722][T21750] pwc: recv_control_msg error -32 req 04 val 1400 [ 2347.646737][T21750] pwc: recv_control_msg error -32 req 02 val 2000 [ 2347.660751][T21750] pwc: recv_control_msg error -32 req 02 val 2100 [ 2347.667917][T21750] pwc: recv_control_msg error -32 req 04 val 1500 [ 2347.685941][T21750] pwc: recv_control_msg error -32 req 02 val 2500 [ 2347.698761][T21750] pwc: recv_control_msg error -32 req 02 val 2400 [ 2347.915246][T21750] pwc: recv_control_msg error -71 req 02 val 2900 [ 2347.926859][T21750] pwc: recv_control_msg error -71 req 02 val 2800 [ 2347.943367][T21750] pwc: recv_control_msg error -71 req 04 val 1100 [ 2347.950650][T21750] pwc: recv_control_msg error -71 req 04 val 1200 [ 2347.958377][T21750] pwc: Registered as video103. [ 2347.968399][T21750] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 2348.036715][T21750] usb 2-1: USB disconnect, device number 76 [ 2348.692990][ T5930] usb 7-1: USB disconnect, device number 37 [ 2350.200946][ T3392] syzkaller0: entered promiscuous mode [ 2350.211080][ T3392] syzkaller0: entered allmulticast mode [ 2350.515210][ T5930] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 2350.684694][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2350.806078][ T3415] netlink: 'syz.3.7815': attribute type 4 has an invalid length. [ 2350.911612][ T5930] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 2351.167034][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2351.174197][ T5930] usb usb2-port1: attempt power cycle [ 2351.603658][ T5930] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 2351.634436][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2351.763730][ T5930] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 2351.796981][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2351.802599][ T5930] usb usb2-port1: unable to enumerate USB device [ 2354.343818][T21750] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 2354.394489][ T5930] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2354.496100][ T3443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7823'. [ 2354.516751][T21750] usb 2-1: Invalid ep0 maxpacket: 16 [ 2354.553637][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 2354.564749][ T5930] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.583912][ T5930] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2354.613630][ T5930] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2354.633763][ T5930] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2354.653883][T21750] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 2354.681427][ T5930] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2354.690600][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.698683][ T5930] usb 6-1: Product: syz [ 2354.702895][ T5930] usb 6-1: Manufacturer: syz [ 2354.713020][ T5930] usb 6-1: SerialNumber: syz [ 2354.725885][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2354.735014][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input102 [ 2354.803685][T21750] usb 2-1: Invalid ep0 maxpacket: 16 [ 2354.809365][T21750] usb usb2-port1: attempt power cycle [ 2355.031020][ T1162] dummy0: left promiscuous mode [ 2355.040812][ T1162] hsr_slave_0: left promiscuous mode [ 2355.043698][ T5930] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2355.054916][ T1162] hsr_slave_1: left promiscuous mode [ 2355.068507][ T5930] (id 0x00) [ 2355.076872][ T1162] veth1_macvtap: left promiscuous mode [ 2355.084547][ T1162] veth0_macvtap: left promiscuous mode [ 2355.090108][ T1162] veth1_vlan: left promiscuous mode [ 2355.099982][ T1162] veth0_vlan: left promiscuous mode [ 2355.153760][T21750] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 2355.161567][ T5930] rc_core: IR keymap rc-imon-pad not found [ 2355.169322][ T5930] Registered IR keymap rc-empty [ 2355.177802][ T5930] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2355.189703][T21750] usb 2-1: Invalid ep0 maxpacket: 16 [ 2355.197917][ T5930] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2355.213691][ T1162] pim6reg (unregistering): left allmulticast mode [ 2355.222010][ T3436] openvswitch: netlink: Multiple metadata blocks provided [ 2355.323681][T21750] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 2355.349453][T21750] usb 2-1: Invalid ep0 maxpacket: 16 [ 2355.359670][T21750] usb usb2-port1: unable to enumerate USB device [ 2355.487965][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 2355.501985][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 2355.540552][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 2355.585528][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input103 [ 2355.611407][ T5930] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:20> initialized [ 2356.064776][ T1162] IPVS: stop unused estimator thread 0... [ 2357.860774][ T5825] usb 6-1: USB disconnect, device number 20 [ 2357.914036][T24224] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2358.083619][T24224] usb 2-1: Using ep0 maxpacket: 8 [ 2358.156381][T24224] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2358.181965][T24224] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2358.203813][T24224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2358.215197][T24224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2358.225364][T24224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 2358.255777][T24224] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2358.266216][T24224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2358.276247][T24224] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 2358.299235][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7831'. [ 2358.681229][T24224] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2358.704319][T24224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.713788][T24224] usb 2-1: Product: syz [ 2358.720741][T24224] usb 2-1: Manufacturer: syz [ 2358.730854][T24224] usb 2-1: SerialNumber: syz [ 2358.833385][T24224] usb 2-1: config 0 descriptor?? [ 2358.841836][ T3467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2358.859842][T24224] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2358.988486][ T3480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7832'. [ 2359.110034][T24224] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2359.159604][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2359.588055][ T3489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7834'. [ 2359.776098][ T3490] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 2360.819741][T24224] usb 2-1: USB disconnect, device number 85 [ 2360.999856][ T3509] netlink: 'syz.1.7838': attribute type 1 has an invalid length. [ 2361.009019][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7838'. [ 2362.454485][ T3520] FAULT_INJECTION: forcing a failure. [ 2362.454485][ T3520] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.467778][ T3520] CPU: 1 UID: 0 PID: 3520 Comm: syz.3.7841 Tainted: G L syzkaller #0 PREEMPT(full) [ 2362.467806][ T3520] Tainted: [L]=SOFTLOCKUP [ 2362.467813][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2362.467824][ T3520] Call Trace: [ 2362.467832][ T3520] [ 2362.467840][ T3520] dump_stack_lvl+0xe8/0x150 [ 2362.467873][ T3520] should_fail_ex+0x412/0x560 [ 2362.467898][ T3520] should_failslab+0xa8/0x100 [ 2362.467919][ T3520] ? skb_clone+0x212/0x3a0 [ 2362.467946][ T3520] kmem_cache_alloc_noprof+0x87/0x650 [ 2362.467981][ T3520] skb_clone+0x212/0x3a0 [ 2362.468009][ T3520] __netlink_deliver_tap+0x404/0x850 [ 2362.468041][ T3520] ? netlink_deliver_tap+0x2e/0x1b0 [ 2362.468064][ T3520] netlink_deliver_tap+0x19c/0x1b0 [ 2362.468086][ T3520] netlink_sendskb+0x68/0x140 [ 2362.468107][ T3520] netlink_unicast+0x3a3/0x9b0 [ 2362.468133][ T3520] ? __pfx_netlink_unicast+0x10/0x10 [ 2362.468160][ T3520] netlink_rcv_skb+0x2b6/0x4b0 [ 2362.468182][ T3520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2362.468208][ T3520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2362.468245][ T3520] ? down_read+0x272/0x2e0 [ 2362.468264][ T3520] ? genl_rcv+0xd/0x40 [ 2362.468290][ T3520] genl_rcv+0x28/0x40 [ 2362.468315][ T3520] netlink_unicast+0x80f/0x9b0 [ 2362.468344][ T3520] ? __pfx_netlink_unicast+0x10/0x10 [ 2362.468374][ T3520] ? netlink_sendmsg+0x650/0xb40 [ 2362.468396][ T3520] ? skb_put+0x11b/0x210 [ 2362.468423][ T3520] netlink_sendmsg+0x813/0xb40 [ 2362.468453][ T3520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2362.468478][ T3520] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2362.468502][ T3520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2362.468523][ T3520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2362.468544][ T3520] ____sys_sendmsg+0xa68/0xad0 [ 2362.468580][ T3520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2362.468609][ T3520] ? kstrtoull+0x12f/0x1d0 [ 2362.468637][ T3520] ___sys_sendmsg+0x2a5/0x360 [ 2362.468668][ T3520] ? __pfx____sys_sendmsg+0x10/0x10 [ 2362.468697][ T3520] ? get_pid_task+0x20/0x1f0 [ 2362.468715][ T3520] ? get_pid_task+0x20/0x1f0 [ 2362.468735][ T3520] ? get_pid_task+0x20/0x1f0 [ 2362.468778][ T3520] ? __fget_files+0x2a/0x420 [ 2362.468803][ T3520] ? __fget_files+0x3a0/0x420 [ 2362.468837][ T3520] __sys_sendmsg+0x183/0x260 [ 2362.468866][ T3520] ? __pfx___sys_sendmsg+0x10/0x10 [ 2362.468912][ T3520] __do_fast_syscall_32+0x20d/0x640 [ 2362.468933][ T3520] ? do_fast_syscall_32+0x33/0x70 [ 2362.468951][ T3520] ? asm_int80_emulation+0x1a/0x20 [ 2362.468969][ T3520] ? do_int80_emulation+0x274/0x4d0 [ 2362.468987][ T3520] ? trace_irq_disable+0x3b/0x150 [ 2362.469017][ T3520] do_fast_syscall_32+0x33/0x70 [ 2362.469036][ T3520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2362.469059][ T3520] RIP: 0023:0xf702ef6c [ 2362.469077][ T3520] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2362.469093][ T3520] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2362.469113][ T3520] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800004c0 [ 2362.469127][ T3520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2362.469138][ T3520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2362.469147][ T3520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2362.469158][ T3520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2362.469185][ T3520] [ 2363.035035][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7840'. [ 2363.978494][ T3541] fuse: Unknown parameter 'fd¹0x0000000000000003' [ 2365.068317][ T3555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7850'. [ 2366.282649][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7851'. [ 2366.353650][T21750] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2366.433306][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7856'. [ 2366.443744][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7856'. [ 2366.544193][T21750] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2366.553382][T21750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.562198][T21750] usb 4-1: Product: syz [ 2366.567858][T21750] usb 4-1: Manufacturer: syz [ 2366.573052][T21750] usb 4-1: SerialNumber: syz [ 2366.579396][T21750] usb 4-1: config 0 descriptor?? [ 2366.796786][ T9] usb 4-1: USB disconnect, device number 94 [ 2367.972229][ T3589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2369.889335][T27556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2369.921328][T27556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2369.963777][T27556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2370.007165][T27556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2370.025025][T27556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2370.027535][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7869'. [ 2370.042645][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7869'. [ 2370.169222][ T3614] dummy0: left allmulticast mode [ 2370.174335][ T3614] dummy0: left promiscuous mode [ 2370.179390][ T3614] bridge0: port 3(dummy0) entered disabled state [ 2370.189033][ T3614] batman_adv: batadv0: Adding interface: dummy0 [ 2370.195747][ T3614] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2370.225761][ T3614] batman_adv: batadv0: Interface activated: dummy0 [ 2370.602210][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.691941][ T3628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7870'. [ 2370.850375][ T3615] chnl_net:caif_netlink_parms(): no params data found [ 2370.982318][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7871'. [ 2371.209439][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.476008][ T3644] vivid-002: disconnect [ 2371.481048][ T3643] vivid-002: reconnect [ 2372.004086][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.061752][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2372.077296][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 2372.084954][ T3615] bridge_slave_0: entered allmulticast mode [ 2372.092082][ T3615] bridge_slave_0: entered promiscuous mode [ 2372.103830][T23443] Bluetooth: hci0: command tx timeout [ 2372.133384][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.152099][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2372.160726][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 2372.206035][ T3615] bridge_slave_1: entered allmulticast mode [ 2372.254480][ T3657] binder: 3656:3657 ioctl c0306201 800001c0 returned -14 [ 2372.256971][ T3615] bridge_slave_1: entered promiscuous mode [ 2372.354662][ T3615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2372.367103][ T3657] netlink: 'syz.5.7879': attribute type 8 has an invalid length. [ 2372.477330][ T3657] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7879'. [ 2372.504827][ T3615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2372.647816][ T3615] team0: Port device team_slave_0 added [ 2372.660827][ T3615] team0: Port device team_slave_1 added [ 2372.822670][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2372.849139][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2372.889654][ T3615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2372.935032][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2372.942198][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2372.987037][ T3615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2373.048365][ T12] dummy0: left allmulticast mode [ 2373.053359][ T12] dummy0: left promiscuous mode [ 2373.059729][ T12] bridge0: port 1(dummy0) entered disabled state [ 2373.074496][ T12] bridge_slave_1: left allmulticast mode [ 2373.080355][ T12] bridge_slave_1: left promiscuous mode [ 2373.087523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.433683][ T9] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 2373.594077][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 2373.613804][ T5930] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2373.793830][ T9] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 2373.873118][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 2373.878419][ T12] tipc: Left network mode [ 2373.889274][ T3615] hsr_slave_0: entered promiscuous mode [ 2373.897493][ T3615] hsr_slave_1: entered promiscuous mode [ 2373.904614][ T3615] debugfs: 'hsr0' already exists in 'hsr' [ 2373.915034][ T3615] Cannot create hsr debugfs directory [ 2373.935538][ T5930] usb 7-1: config 0 has no interfaces? [ 2373.961951][ T5930] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2373.982750][ T5930] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2373.991020][ T5930] usb 7-1: Manufacturer: syz [ 2374.032443][ T5930] usb 7-1: config 0 descriptor?? [ 2374.044183][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 2374.049961][ T9] usb usb6-port1: attempt power cycle [ 2374.183712][T23443] Bluetooth: hci0: command tx timeout [ 2374.393703][ T9] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 2374.424846][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 2374.519359][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.542777][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.565734][ T9] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 2374.604867][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 2374.613307][ T9] usb usb6-port1: unable to enumerate USB device [ 2374.830113][ T3615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2374.852410][ T3615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2374.880117][ T3615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2374.903038][ T3615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2375.127979][ T3615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2375.196818][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7882'. [ 2375.210471][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7882'. [ 2375.240581][ T3615] 8021q: adding VLAN 0 to HW filter on device team0 [ 2375.283601][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2375.290898][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2375.326111][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 2375.333303][ T3264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2375.538333][ T3615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2375.713099][ T3615] veth0_vlan: entered promiscuous mode [ 2375.731877][ T3615] veth1_vlan: entered promiscuous mode [ 2375.827456][ T3615] veth0_macvtap: entered promiscuous mode [ 2375.862721][ T3615] veth1_macvtap: entered promiscuous mode [ 2375.892649][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2375.932991][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2375.961789][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.970962][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.980595][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.993910][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2376.155275][T24224] usb 7-1: USB disconnect, device number 38 [ 2376.264074][T23443] Bluetooth: hci0: command tx timeout [ 2376.526965][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7887'. [ 2376.566009][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7887'. [ 2376.566919][ T3264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2376.595265][ T3264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2376.788602][T16221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2376.797859][T16221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2377.121076][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7893'. [ 2377.252355][ T3747] netlink: 'syz.3.7866': attribute type 1 has an invalid length. [ 2377.345766][ T3747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2377.651423][ T12] hsr_slave_0: left promiscuous mode [ 2377.666583][ T12] hsr_slave_1: left promiscuous mode [ 2377.672774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2377.684323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2377.693460][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2377.701099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2377.744751][ T12] veth1_macvtap: left promiscuous mode [ 2377.750686][ T12] veth0_macvtap: left promiscuous mode [ 2377.756897][ T12] veth1_vlan: left promiscuous mode [ 2377.762648][ T12] veth0_vlan: left promiscuous mode [ 2377.767830][ T3444] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 2377.828005][ T3758] can: request_module (can-proto-0) failed. [ 2377.903699][ T3444] usb 7-1: device descriptor read/64, error -71 [ 2378.185884][ T3444] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 2378.289175][ T3768] netlink: 'syz.1.7898': attribute type 4 has an invalid length. [ 2378.336466][ T3444] usb 7-1: device descriptor read/64, error -71 [ 2378.340133][ T3774] netlink: 'syz.1.7898': attribute type 4 has an invalid length. [ 2378.355613][T23443] Bluetooth: hci0: command tx timeout [ 2378.384619][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2378.401405][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2378.455257][ T3444] usb usb7-port1: attempt power cycle [ 2378.791897][ T3777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7899'. [ 2378.820040][ T3777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7899'. [ 2378.843668][ T3444] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 2378.861800][ T3765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7896'. [ 2378.872554][ T3444] usb 7-1: device descriptor read/8, error -71 [ 2379.183674][ T3444] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 2379.207159][ T3444] usb 7-1: device descriptor read/8, error -71 [ 2379.338530][ T3444] usb usb7-port1: unable to enumerate USB device [ 2379.366064][ T3787] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7902'. [ 2379.640465][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7906'. [ 2379.718771][ T3801] netlink: 'syz.1.7907': attribute type 2 has an invalid length. [ 2379.730159][ T3802] netlink: 'syz.1.7907': attribute type 2 has an invalid length. [ 2379.779977][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7908'. [ 2379.789251][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7908'. [ 2380.145320][ T3813] netlink: 'syz.5.7901': attribute type 4 has an invalid length. [ 2380.157126][ T3818] can: request_module (can-proto-0) failed. [ 2381.047478][ T3832] netlink: 'syz.1.7915': attribute type 1 has an invalid length. [ 2382.371138][ T3847] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 2383.598905][ T3854] __nla_validate_parse: 3 callbacks suppressed [ 2383.598926][ T3854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7928'. [ 2383.842730][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7919'. [ 2384.353646][ T5825] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 2384.483740][ T5825] usb 7-1: device descriptor read/64, error -71 [ 2384.743745][ T5825] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 2384.808787][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7926'. [ 2384.883601][ T5825] usb 7-1: device descriptor read/64, error -71 [ 2385.054882][ T5825] usb usb7-port1: attempt power cycle [ 2385.443620][ T5825] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 2385.474616][ T5825] usb 7-1: device descriptor read/8, error -71 [ 2385.813615][ T5825] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 2385.869834][ T5825] usb 7-1: device descriptor read/8, error -71 [ 2386.003820][ T5825] usb usb7-port1: unable to enumerate USB device [ 2386.711613][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7934'. [ 2387.175307][ T3914] netlink: 'syz.1.7935': attribute type 3 has an invalid length. [ 2387.429259][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 2387.429279][ T29] audit: type=1326 audit(1771876562.147:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.1.7935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 2387.474232][ T3912] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7937'. [ 2387.511163][ T29] audit: type=1326 audit(1771876562.147:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.1.7935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 2387.545026][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7937'. [ 2387.567506][ T29] audit: type=1326 audit(1771876562.147:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.1.7935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 2387.625009][ T29] audit: type=1326 audit(1771876562.147:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.1.7935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85f6c code=0x7ffc0000 [ 2388.305053][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 2388.770663][ T3929] netlink: 'syz.6.7941': attribute type 1 has an invalid length. [ 2388.789252][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7941'. [ 2388.914283][ T3931] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7941'. [ 2390.793678][ T3444] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 2390.954269][ T3444] usb 4-1: device descriptor read/64, error -71 [ 2391.203672][ T3444] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 2391.353667][ T3444] usb 4-1: device descriptor read/64, error -71 [ 2391.506322][ T3444] usb usb4-port1: attempt power cycle [ 2391.733815][ T5930] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2391.893759][ T3444] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 2391.913673][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 2391.919534][ T3444] usb 4-1: device descriptor read/8, error -71 [ 2391.927495][ T5930] usb 7-1: config 0 has no interfaces? [ 2391.954811][ T5930] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2391.965322][ T5930] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2391.974469][ T5930] usb 7-1: Manufacturer: syz [ 2391.997832][ T5930] usb 7-1: config 0 descriptor?? [ 2392.163645][ T3444] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2392.184874][ T3444] usb 4-1: device descriptor read/8, error -71 [ 2392.241088][T27971] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2392.298517][ T3444] usb usb4-port1: unable to enumerate USB device [ 2392.493922][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.502509][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.605000][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7954'. [ 2393.355869][T27971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2393.365835][T27971] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2393.375002][T27971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.387402][T27971] usb 6-1: config 0 descriptor?? [ 2393.408594][T27971] usbhid 6-1:0.0: can't add hid device: -22 [ 2393.416501][T27971] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 2394.001710][ T3995] netlink: 'syz.0.7957': attribute type 1 has an invalid length. [ 2394.022997][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7957'. [ 2394.165866][ T3997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7957'. [ 2394.364190][T27971] usb 7-1: USB disconnect, device number 47 [ 2395.799086][ T3444] usb 6-1: USB disconnect, device number 25 [ 2396.669333][ T4017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2397.444083][T24224] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 2397.822016][T24224] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2397.831866][T24224] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2397.840243][T24224] usb 2-1: can't read configurations, error -71 [ 2398.194485][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7967'. [ 2398.207033][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7967'. [ 2398.856934][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7970'. [ 2399.416489][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7969'. [ 2399.905142][ T4067] netlink: 'syz.3.7977': attribute type 1 has an invalid length. [ 2399.913017][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7977'. [ 2400.310322][ T4068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7977'. [ 2400.879243][ T4079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7979'. [ 2401.158053][ T4081] syz.3.7980 (4081): drop_caches: 2 [ 2401.298483][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7979'. [ 2402.433880][ T3444] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2402.613725][ T3444] usb 2-1: Using ep0 maxpacket: 16 [ 2402.751996][ T3444] usb 2-1: config 0 has no interfaces? [ 2402.773423][ T3444] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2402.805320][ T3444] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2402.813400][ T3444] usb 2-1: Manufacturer: syz [ 2402.862438][ T3444] usb 2-1: config 0 descriptor?? [ 2403.049936][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7988'. [ 2403.090419][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7988'. [ 2403.210612][ T4093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2403.227712][ T4093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2403.583614][ T3444] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2403.743651][ T3444] usb 4-1: Using ep0 maxpacket: 32 [ 2403.762747][ T3444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2403.773011][ T3444] usb 4-1: config 16 has an invalid interface number: 177 but max is 0 [ 2403.784064][ T3444] usb 4-1: config 16 has no interface number 0 [ 2403.790316][ T3444] usb 4-1: config 16 interface 177 has no altsetting 0 [ 2403.800801][ T3444] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d7.89 [ 2403.810845][ T3444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.819094][ T3444] usb 4-1: Product: syz [ 2403.823409][ T3444] usb 4-1: Manufacturer: syz [ 2403.828076][ T3444] usb 4-1: SerialNumber: syz [ 2403.998046][ T4124] netlink: 'syz.6.7991': attribute type 1 has an invalid length. [ 2404.033739][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7991'. [ 2404.049415][ T3444] usb 4-1: USB disconnect, device number 99 [ 2404.223532][ T4126] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7991'. [ 2404.723807][ T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 2404.879696][ T9] usb 6-1: device descriptor read/64, error -71 [ 2404.969618][ T4134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7995'. [ 2404.982645][T21750] usb 2-1: USB disconnect, device number 88 [ 2405.083227][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7995'. [ 2405.160138][ T9] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2405.293790][ T9] usb 6-1: device descriptor read/64, error -71 [ 2405.383048][ T4143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7997'. [ 2405.504793][ T9] usb usb6-port1: attempt power cycle [ 2405.934990][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2406.094366][ T9] usb 6-1: device descriptor read/8, error -71 [ 2406.298174][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.307258][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.456721][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2406.714147][ T9] usb 6-1: device descriptor read/8, error -71 [ 2406.753616][ T5904] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2406.856542][ T9] usb usb6-port1: unable to enumerate USB device [ 2407.012076][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2407.045510][ T5904] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2407.070765][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.104109][ T5904] usb 4-1: config 0 descriptor?? [ 2407.132536][ T5904] usbhid 4-1:0.0: can't add hid device: -22 [ 2407.142017][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2407.761492][ T4157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8002'. [ 2407.781211][ T4157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8002'. [ 2408.288956][ T4170] netlink: 'syz.5.8008': attribute type 1 has an invalid length. [ 2408.301960][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8008'. [ 2408.499512][ T4177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8017'. [ 2408.933789][ T5930] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2409.095853][ T9] usb 4-1: USB disconnect, device number 100 [ 2409.123698][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 2409.177104][ T5930] usb 7-1: config 0 has no interfaces? [ 2409.195998][ T5930] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2409.213844][ T5930] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2409.245020][ T5930] usb 7-1: Manufacturer: syz [ 2409.267317][ T5930] usb 7-1: config 0 descriptor?? [ 2409.394961][ T4182] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8008'. [ 2409.567681][ T4179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.579052][ T4179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2410.327517][ T9] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 2410.484957][ T9] usb 4-1: device descriptor read/64, error -71 [ 2410.724020][ T9] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 2410.873690][ T9] usb 4-1: device descriptor read/64, error -71 [ 2410.994341][ T9] usb usb4-port1: attempt power cycle [ 2411.357396][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2411.357783][ T5904] usb 7-1: USB disconnect, device number 48 [ 2411.385769][ T9] usb 4-1: device descriptor read/8, error -71 [ 2411.466331][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8020'. [ 2411.480868][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8021'. [ 2411.489992][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8021'. [ 2411.565533][ T4216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8022'. [ 2411.584264][ T4216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8022'. [ 2411.644458][ T9] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2411.674564][ T9] usb 4-1: device descriptor read/8, error -71 [ 2411.725741][ T4226] netlink: 'syz.0.8024': attribute type 1 has an invalid length. [ 2411.736207][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8024'. [ 2411.784062][ T9] usb usb4-port1: unable to enumerate USB device [ 2411.939945][ T4229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8024'. [ 2413.028160][ T4252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8031'. [ 2413.087973][ T3444] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2413.349681][ T3444] usb 2-1: Using ep0 maxpacket: 16 [ 2413.377743][ T3444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2413.519195][ T3444] usb 2-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 2413.532386][ T3444] usb 2-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2413.613758][ T3444] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2413.689314][ T3444] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 2413.699290][ T3444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.713739][ T3444] usb 2-1: Product: syz [ 2413.730437][ T3444] usb 2-1: Manufacturer: syz [ 2413.736752][ T3444] usb 2-1: SerialNumber: syz [ 2413.836393][ T5825] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2414.009337][ T3444] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2414.038114][ T3444] usb 2-1: USB disconnect, device number 89 [ 2414.054555][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 2414.096235][ T5825] usb 4-1: config 0 has no interfaces? [ 2414.112887][ T5825] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2414.125035][ T5825] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2414.140188][ T5825] usb 4-1: Manufacturer: syz [ 2414.156240][ T5825] usb 4-1: config 0 descriptor?? [ 2414.443638][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2414.457207][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.065884][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8036'. [ 2416.261284][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8046'. [ 2416.441131][ T5825] usb 4-1: USB disconnect, device number 105 [ 2416.557795][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8037'. [ 2416.567013][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8037'. [ 2417.819137][ T4298] netlink: 'syz.3.8039': attribute type 1 has an invalid length. [ 2417.827666][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8039'. [ 2417.997772][ T4300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8039'. [ 2418.983930][ T5930] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2419.093773][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8047'. [ 2419.137392][ T5930] usb 4-1: device descriptor read/64, error -71 [ 2419.264281][ T4324] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8049'. [ 2419.483677][ T5930] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 2419.483943][ T5825] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2419.624467][ T5930] usb 4-1: device descriptor read/64, error -71 [ 2419.655010][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2419.665418][ T5825] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2419.674851][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.684839][ T5825] usb 7-1: config 0 descriptor?? [ 2419.692447][ T5825] pwc: Askey VC010 type 2 USB webcam detected. [ 2419.754840][ T5930] usb usb4-port1: attempt power cycle [ 2419.803116][ T4328] FAULT_INJECTION: forcing a failure. [ 2419.803116][ T4328] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.821878][ T4328] CPU: 0 UID: 0 PID: 4328 Comm: syz.0.8050 Tainted: G L syzkaller #0 PREEMPT(full) [ 2419.821909][ T4328] Tainted: [L]=SOFTLOCKUP [ 2419.821917][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2419.821929][ T4328] Call Trace: [ 2419.821937][ T4328] [ 2419.821946][ T4328] dump_stack_lvl+0xe8/0x150 [ 2419.821977][ T4328] should_fail_ex+0x412/0x560 [ 2419.822007][ T4328] should_failslab+0xa8/0x100 [ 2419.822032][ T4328] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2419.822062][ T4328] ? __alloc_skb+0x186/0x7d0 [ 2419.822085][ T4328] ? __alloc_skb+0x1d0/0x7d0 [ 2419.822106][ T4328] ? __local_bh_enable_ip+0xd0/0x130 [ 2419.822135][ T4328] __alloc_skb+0x1d0/0x7d0 [ 2419.822162][ T4328] netlink_sendmsg+0x5d4/0xb40 [ 2419.822193][ T4328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2419.822219][ T4328] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2419.822242][ T4328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2419.822264][ T4328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2419.822286][ T4328] ____sys_sendmsg+0xa68/0xad0 [ 2419.822319][ T4328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2419.822350][ T4328] ? kstrtoull+0x12f/0x1d0 [ 2419.822376][ T4328] ___sys_sendmsg+0x2a5/0x360 [ 2419.822407][ T4328] ? __pfx____sys_sendmsg+0x10/0x10 [ 2419.822435][ T4328] ? get_pid_task+0x20/0x1f0 [ 2419.822459][ T4328] ? get_pid_task+0x20/0x1f0 [ 2419.822474][ T4328] ? get_pid_task+0x20/0x1f0 [ 2419.822514][ T4328] ? __fget_files+0x2a/0x420 [ 2419.822539][ T4328] ? __fget_files+0x3a0/0x420 [ 2419.822573][ T4328] __sys_sendmsg+0x183/0x260 [ 2419.822601][ T4328] ? __pfx___sys_sendmsg+0x10/0x10 [ 2419.822646][ T4328] __do_fast_syscall_32+0x20d/0x640 [ 2419.822667][ T4328] ? do_fast_syscall_32+0x33/0x70 [ 2419.822684][ T4328] ? asm_int80_emulation+0x1a/0x20 [ 2419.822702][ T4328] ? do_int80_emulation+0x274/0x4d0 [ 2419.822724][ T4328] do_fast_syscall_32+0x33/0x70 [ 2419.822742][ T4328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2419.822764][ T4328] RIP: 0023:0xf7f98f6c [ 2419.822782][ T4328] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2419.822799][ T4328] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2419.822819][ T4328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2419.822833][ T4328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2419.822843][ T4328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2419.822853][ T4328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2419.822864][ T4328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2419.822889][ T4328] [ 2420.113650][ T5930] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 2420.254350][ T5930] usb 4-1: device descriptor read/8, error -71 [ 2420.346401][ T5825] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2420.356220][ T5825] pwc: recv_control_msg error -32 req 02 val 2700 [ 2420.364077][ T5825] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2420.372852][ T5825] pwc: recv_control_msg error -32 req 04 val 1000 [ 2420.380072][ T5825] pwc: recv_control_msg error -32 req 04 val 1300 [ 2420.388643][ T5825] pwc: recv_control_msg error -32 req 04 val 1400 [ 2420.395725][ T5825] pwc: recv_control_msg error -32 req 02 val 2000 [ 2420.403460][ T5825] pwc: recv_control_msg error -32 req 02 val 2100 [ 2420.411266][ T5825] pwc: recv_control_msg error -32 req 04 val 1500 [ 2420.419028][ T5825] pwc: recv_control_msg error -32 req 02 val 2500 [ 2420.433629][ T5825] pwc: recv_control_msg error -32 req 02 val 2400 [ 2420.519342][ T5930] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2420.544333][ T5930] usb 4-1: device descriptor read/8, error -71 [ 2420.565422][ T4340] netlink: 'syz.5.8054': attribute type 1 has an invalid length. [ 2420.573619][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8054'. [ 2420.655202][ T5930] usb usb4-port1: unable to enumerate USB device [ 2420.734826][ T5825] pwc: recv_control_msg error -71 req 02 val 2900 [ 2420.751437][ T5825] pwc: recv_control_msg error -71 req 02 val 2800 [ 2420.758667][ T5825] pwc: recv_control_msg error -71 req 04 val 1100 [ 2420.772679][ T5825] pwc: recv_control_msg error -71 req 04 val 1200 [ 2420.824016][ T5825] pwc: Registered as video103. [ 2420.872611][ T5825] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input104 [ 2420.934104][ T5825] usb 7-1: USB disconnect, device number 49 [ 2421.653056][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8057'. [ 2422.114005][ T4366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8059'. [ 2423.275524][ T9] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 2423.476562][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.502890][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2423.601380][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.650911][ T9] usb 7-1: config 0 descriptor?? [ 2423.664346][ T9] usbhid 7-1:0.0: can't add hid device: -22 [ 2423.680259][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 2423.956328][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8062'. [ 2424.255477][ T4385] FAULT_INJECTION: forcing a failure. [ 2424.255477][ T4385] name failslab, interval 1, probability 0, space 0, times 0 [ 2424.270384][ T4385] CPU: 1 UID: 0 PID: 4385 Comm: syz.1.8065 Tainted: G L syzkaller #0 PREEMPT(full) [ 2424.270406][ T4385] Tainted: [L]=SOFTLOCKUP [ 2424.270410][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2424.270416][ T4385] Call Trace: [ 2424.270422][ T4385] [ 2424.270426][ T4385] dump_stack_lvl+0xe8/0x150 [ 2424.270445][ T4385] should_fail_ex+0x412/0x560 [ 2424.270459][ T4385] ? proc_alloc_inode+0x2a/0xc0 [ 2424.270475][ T4385] should_failslab+0xa8/0x100 [ 2424.270489][ T4385] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 2424.270510][ T4385] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2424.270523][ T4385] proc_alloc_inode+0x2a/0xc0 [ 2424.270538][ T4385] alloc_inode+0x6a/0x1b0 [ 2424.270552][ T4385] new_inode+0x22/0x170 [ 2424.270568][ T4385] proc_get_inode+0x22/0x6a0 [ 2424.270585][ T4385] proc_lookup_de+0x251/0x340 [ 2424.270611][ T4385] __lookup_slow+0x2b7/0x410 [ 2424.270638][ T4385] ? __pfx___lookup_slow+0x10/0x10 [ 2424.270673][ T4385] ? down_read+0x272/0x2e0 [ 2424.270692][ T4385] lookup_slow+0x53/0x70 [ 2424.270708][ T4385] link_path_walk+0xd1e/0x18d0 [ 2424.270732][ T4385] path_openat+0x2c3/0x3860 [ 2424.270742][ T4385] ? arch_stack_walk+0xfb/0x150 [ 2424.270765][ T4385] ? __pfx_stack_trace_save+0x10/0x10 [ 2424.270778][ T4385] ? stack_depot_save_flags+0x33/0x810 [ 2424.270795][ T4385] ? __pfx_path_openat+0x10/0x10 [ 2424.270804][ T4385] ? __ia32_compat_sys_openat+0x131/0x160 [ 2424.270819][ T4385] ? __do_fast_syscall_32+0x20d/0x640 [ 2424.270836][ T4385] ? do_fast_syscall_32+0x33/0x70 [ 2424.270845][ T4385] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2424.270862][ T4385] ? __lock_acquire+0x6b5/0x2cf0 [ 2424.270879][ T4385] do_file_open+0x23e/0x4a0 [ 2424.270892][ T4385] ? __pfx_do_file_open+0x10/0x10 [ 2424.270913][ T4385] ? _raw_spin_unlock+0x28/0x50 [ 2424.270926][ T4385] ? alloc_fd+0x64b/0x6c0 [ 2424.270945][ T4385] do_sys_openat2+0x113/0x200 [ 2424.270959][ T4385] ? __fget_files+0x3a0/0x420 [ 2424.270974][ T4385] ? __pfx_do_sys_openat2+0x10/0x10 [ 2424.270989][ T4385] ? fput+0xa0/0xd0 [ 2424.271003][ T4385] ? ksys_write+0x242/0x270 [ 2424.271016][ T4385] __ia32_compat_sys_openat+0x131/0x160 [ 2424.271033][ T4385] __do_fast_syscall_32+0x20d/0x640 [ 2424.271043][ T4385] ? do_fast_syscall_32+0x33/0x70 [ 2424.271053][ T4385] ? asm_int80_emulation+0x1a/0x20 [ 2424.271062][ T4385] ? do_int80_emulation+0x274/0x4d0 [ 2424.271072][ T4385] ? trace_irq_disable+0x3b/0x150 [ 2424.271091][ T4385] do_fast_syscall_32+0x33/0x70 [ 2424.271101][ T4385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2424.271113][ T4385] RIP: 0023:0xf7f85f6c [ 2424.271124][ T4385] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2424.271133][ T4385] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2424.271145][ T4385] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002600 [ 2424.271152][ T4385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2424.271158][ T4385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2424.271164][ T4385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2424.271170][ T4385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2424.271185][ T4385] [ 2424.839998][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8070'. [ 2424.851272][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8070'. [ 2424.968798][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8073'. [ 2425.038473][ T4399] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2425.081562][ T4399] macvlan2: entered promiscuous mode [ 2425.087032][ T4399] macvlan2: entered allmulticast mode [ 2425.093222][ T4399] bond1: entered promiscuous mode [ 2425.159355][ T4399] bridge1: entered promiscuous mode [ 2425.167462][ T4399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2425.177271][ T4399] bond1: left promiscuous mode [ 2425.182722][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8072'. [ 2425.195850][ T4399] bridge1: left promiscuous mode [ 2425.214427][ T4402] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8072'. [ 2425.224013][ T4402] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8072'. [ 2425.375197][ T4405] netlink: 'syz.3.8074': attribute type 1 has an invalid length. [ 2425.384195][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8074'. [ 2425.509466][ T4407] macsec1: entered promiscuous mode [ 2425.514991][ T4407] macsec1: entered allmulticast mode [ 2425.820058][ T5930] usb 7-1: USB disconnect, device number 50 [ 2426.332365][ T4416] netlink: 'syz.1.8088': attribute type 1 has an invalid length. [ 2426.685116][ T4430] __nla_validate_parse: 1 callbacks suppressed [ 2426.685143][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8081'. [ 2426.739107][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8081'. [ 2426.963303][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8083'. [ 2426.990616][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8083'. [ 2427.618675][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8086'. [ 2428.049038][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8089'. [ 2428.084560][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8089'. [ 2428.523609][ T5930] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 2428.678264][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2428.814112][ T5930] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 2428.963598][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2428.971177][ T5930] usb usb2-port1: attempt power cycle [ 2429.032687][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8096'. [ 2429.333602][ T5930] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 2429.354915][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2429.362157][ T4464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8095'. [ 2429.483795][ T5904] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2429.491297][ T4477] netlink: 'syz.6.8099': attribute type 1 has an invalid length. [ 2429.491452][ T5930] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 2429.511126][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8099'. [ 2429.532190][ T5930] usb 2-1: Invalid ep0 maxpacket: 16 [ 2429.584248][ T5930] usb usb2-port1: unable to enumerate USB device [ 2429.652585][ T4479] macsec1: entered promiscuous mode [ 2429.657964][ T4479] macsec1: entered allmulticast mode [ 2429.703297][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2429.729367][ T5904] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2429.738864][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.748850][ T5904] usb 6-1: config 0 descriptor?? [ 2429.778683][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 2430.394368][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2430.408817][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 2430.423798][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2430.492290][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 2430.503667][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 2430.514716][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 2430.524310][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 2430.531611][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 2430.538844][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 2430.551145][ T5904] pwc: recv_control_msg error -32 req 02 val 2500 [ 2430.558299][ T5904] pwc: recv_control_msg error -32 req 02 val 2400 [ 2431.705608][ T5904] pwc: recv_control_msg error -71 req 02 val 2900 [ 2431.715226][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 2431.723143][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 2431.731091][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 2431.739362][ T5904] pwc: Registered as video103. [ 2431.792734][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input105 [ 2431.811781][ T5904] usb 6-1: USB disconnect, device number 30 [ 2431.935944][ T4506] __nla_validate_parse: 6 callbacks suppressed [ 2431.935957][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 2431.952523][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 2432.284044][ T5825] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2432.435155][ T5825] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 2432.443351][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2432.455378][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2432.466034][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2432.481033][ T5825] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2432.490525][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.508499][ T5825] usb 7-1: config 0 descriptor?? [ 2432.803791][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8110'. [ 2433.727760][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8107'. [ 2433.872545][ T4522] netlink: 'syz.1.8112': attribute type 1 has an invalid length. [ 2433.881090][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8112'. [ 2435.154423][ T5825] usbhid 7-1:0.0: can't add hid device: -71 [ 2435.160498][ T5825] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2435.248262][ T5825] usb 7-1: USB disconnect, device number 51 [ 2435.863762][ T5930] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2436.024709][ T5930] usb 4-1: device descriptor read/64, error -71 [ 2436.283638][ T5930] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2436.424186][ T5930] usb 4-1: device descriptor read/64, error -71 [ 2436.480256][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8120'. [ 2436.533951][ T5930] usb usb4-port1: attempt power cycle [ 2436.873605][ T5930] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 2436.894062][ T5930] usb 4-1: device descriptor read/8, error -71 [ 2437.133570][ T5930] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 2437.154337][ T5930] usb 4-1: device descriptor read/8, error -71 [ 2437.264024][ T5930] usb usb4-port1: unable to enumerate USB device [ 2438.582689][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8123'. [ 2438.595472][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8123'. [ 2438.733914][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8121'. [ 2438.785474][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8121'. [ 2439.413765][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8125'. [ 2439.564975][ T4571] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8125'. [ 2439.575309][ T4571] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8125'. [ 2439.855919][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8138'. [ 2439.867691][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8138'. [ 2440.783630][ T5825] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2440.945356][ T5825] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 2440.955011][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2440.966480][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.977044][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2440.990781][ T5825] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2441.000232][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.023670][ T5825] usb 6-1: config 0 descriptor?? [ 2441.062846][ T4612] netlink: 'syz.3.8133': attribute type 1 has an invalid length. [ 2441.071732][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8133'. [ 2442.393661][T21750] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 2442.524560][T21750] usb 4-1: device descriptor read/64, error -71 [ 2442.780570][T21750] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 2442.913748][T21750] usb 4-1: device descriptor read/64, error -71 [ 2442.992061][ T4628] bridge0: entered promiscuous mode [ 2443.023843][T21750] usb usb4-port1: attempt power cycle [ 2443.483634][T21750] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 2443.505524][T21750] usb 4-1: device descriptor read/8, error -71 [ 2443.701685][ T5825] usbhid 6-1:0.0: can't add hid device: -71 [ 2443.707818][ T5825] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2443.719006][ T5825] usb 6-1: USB disconnect, device number 31 [ 2443.745762][T21750] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 2443.791541][T21750] usb 4-1: device descriptor read/8, error -71 [ 2443.905969][T21750] usb usb4-port1: unable to enumerate USB device [ 2444.017024][T29225] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.273732][ T5825] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2444.325060][ T4646] __nla_validate_parse: 5 callbacks suppressed [ 2444.325073][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8146'. [ 2444.425368][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.436062][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2444.451488][ T5825] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2444.461292][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.470941][ T5825] usb 6-1: Product: syz [ 2444.475774][ T5825] usb 6-1: Manufacturer: syz [ 2444.480500][ T5825] usb 6-1: SerialNumber: syz [ 2444.483618][T21750] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2444.496000][ T5825] usb 6-1: config 0 descriptor?? [ 2444.646056][T21750] usb 7-1: config 0 has an invalid interface number: 74 but max is 0 [ 2444.655887][T21750] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.667887][T21750] usb 7-1: config 0 has no interface number 0 [ 2444.675746][T21750] usb 7-1: config 0 interface 74 has no altsetting 0 [ 2444.683052][T21750] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2444.692879][T21750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.704865][T21750] usb 7-1: config 0 descriptor?? [ 2444.731155][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.740183][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.756419][T21750] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2445.105826][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8145'. [ 2445.127145][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.136554][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.159725][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.169363][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.193066][ T4658] team0: Device gtp0 is of different type [ 2445.341519][ T5825] usb 6-1: ucan: probing device on interface #0 [ 2445.352562][ T5825] usb 6-1: ucan: invalid EP count (0) [ 2445.366367][ T5825] usb 6-1: ucan: probe failed; try to update the device firmware [ 2445.399592][ T5825] usb 6-1: USB disconnect, device number 32 [ 2445.784625][T29225] usb 7-1: Failed to submit usb control message: -110 [ 2445.792139][T29225] usb 7-1: unable to send the bmi data to the device: -110 [ 2445.799440][T29225] usb 7-1: unable to get target info from device [ 2445.805842][T29225] usb 7-1: could not get target info (-110) [ 2445.811746][T29225] usb 7-1: could not probe fw (-110) [ 2446.046692][ T29] audit: type=1326 audit(1771876620.877:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.074717][ T29] audit: type=1326 audit(1771876620.877:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.101445][ T29] audit: type=1326 audit(1771876620.897:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.131092][ T29] audit: type=1326 audit(1771876620.897:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.158568][ T29] audit: type=1326 audit(1771876620.897:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.183626][ T29] audit: type=1326 audit(1771876620.897:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.214107][ T29] audit: type=1326 audit(1771876620.897:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.236512][ T5825] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2446.249434][ T29] audit: type=1326 audit(1771876620.897:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.273984][ T29] audit: type=1326 audit(1771876620.957:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e5b6b code=0x7ffc0000 [ 2446.296391][ T29] audit: type=1326 audit(1771876620.957:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.5.8148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2446.373816][ T5825] usb 4-1: device descriptor read/64, error -71 [ 2446.384207][ T5930] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2446.533584][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 2446.545084][ T5930] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 2446.554204][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.562182][ T5930] usb 6-1: Product: syz [ 2446.566405][ T5930] usb 6-1: Manufacturer: syz [ 2446.571373][ T5930] usb 6-1: SerialNumber: syz [ 2446.623828][ T5825] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2446.763564][ T5825] usb 4-1: device descriptor read/64, error -71 [ 2446.873881][ T5825] usb usb4-port1: attempt power cycle [ 2446.893799][ T5930] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 2446.907243][ T5930] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 2446.924521][ T5930] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2446.949078][ T5930] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2447.005357][ T4663] 8021q: VLANs not supported on sit0 [ 2447.243752][ T5825] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 2447.270226][ T5930] usb 7-1: USB disconnect, device number 52 [ 2447.287783][ T5825] usb 4-1: device descriptor read/8, error -71 [ 2447.435892][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.584089][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2447.595413][ T5825] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 2447.735874][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8155'. [ 2447.744995][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8155'. [ 2447.757562][ T5825] usb 4-1: device descriptor read/8, error -71 [ 2447.827669][ T4694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8152'. [ 2447.860252][ T3444] usb 6-1: USB disconnect, device number 33 [ 2447.894580][ T3444] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2447.894926][ T5825] usb usb4-port1: unable to enumerate USB device [ 2447.912119][ T3444] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2447.931992][ T3444] visor 6-1:1.0: device disconnected [ 2448.227577][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8157'. [ 2449.115045][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.378156][ T4725] netlink: 'syz.5.8163': attribute type 1 has an invalid length. [ 2449.387235][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8163'. [ 2449.433906][ T5825] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2449.493379][ T9] IPVS: starting estimator thread 0... [ 2449.604091][ T4729] IPVS: using max 35 ests per chain, 84000 per kthread [ 2449.618980][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.743155][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2449.784319][ T5825] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2449.794011][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.802309][ T5825] usb 4-1: Product: syz [ 2449.806840][ T5825] usb 4-1: Manufacturer: syz [ 2449.816704][ T5825] usb 4-1: SerialNumber: syz [ 2449.834084][ T5825] usb 4-1: config 0 descriptor?? [ 2449.995371][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8163'. [ 2450.070246][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2450.079855][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2450.609787][ T4737] netlink: 'syz.1.8164': attribute type 1 has an invalid length. [ 2450.617919][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8164'. [ 2450.638152][ T5825] usb 4-1: ucan: probing device on interface #0 [ 2450.649118][ T5825] usb 4-1: ucan: invalid EP count (0) [ 2450.656089][ T5825] usb 4-1: ucan: probe failed; try to update the device firmware [ 2450.677255][ T5825] usb 4-1: USB disconnect, device number 122 [ 2451.730436][T27556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2451.740165][T27556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2451.749951][T27556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2451.759132][T27556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2451.813847][T27556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2451.853710][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8169'. [ 2452.139560][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 2452.143611][ T9] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 2452.240928][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.248808][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 2452.258461][ T4751] bridge_slave_0: entered allmulticast mode [ 2452.276647][ T4751] bridge_slave_0: entered promiscuous mode [ 2452.285053][ T9] usb 7-1: device descriptor read/64, error -71 [ 2452.295426][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.309458][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.318064][ T4751] bridge_slave_1: entered allmulticast mode [ 2452.331029][ T4751] bridge_slave_1: entered promiscuous mode [ 2452.400948][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.464639][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2452.477709][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2452.525518][ T4751] team0: Port device team_slave_0 added [ 2452.535961][ T4751] team0: Port device team_slave_1 added [ 2452.593989][ T9] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 2452.622670][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2452.630177][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2452.656573][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2452.694206][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.710088][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2452.720477][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2452.733634][ T9] usb 7-1: device descriptor read/64, error -71 [ 2452.749728][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2452.795380][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.841521][ T4751] hsr_slave_0: entered promiscuous mode [ 2452.848144][ T4751] hsr_slave_1: entered promiscuous mode [ 2452.857662][ T9] usb usb7-port1: attempt power cycle [ 2452.858121][ T4751] debugfs: 'hsr0' already exists in 'hsr' [ 2452.883665][ T4751] Cannot create hsr debugfs directory [ 2452.908326][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.983731][ T5930] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2453.123776][ T5930] usb 6-1: device descriptor read/64, error -71 [ 2453.209077][ T13] bridge_slave_1: left allmulticast mode [ 2453.244695][ T9] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 2453.263212][ T13] bridge_slave_1: left promiscuous mode [ 2453.272697][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.283047][ T9] usb 7-1: device descriptor read/8, error -71 [ 2453.293847][ T13] bridge_slave_0: left allmulticast mode [ 2453.301811][ T13] bridge_slave_0: left promiscuous mode [ 2453.335903][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.386953][ T5930] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2453.546309][ T9] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 2453.625394][ T9] usb 7-1: device descriptor read/8, error -71 [ 2453.626028][ T5930] usb 6-1: device descriptor read/64, error -71 [ 2453.741413][ T9] usb usb7-port1: unable to enumerate USB device [ 2453.754114][ T5930] usb usb6-port1: attempt power cycle [ 2453.863739][T27556] Bluetooth: hci1: command tx timeout [ 2454.143843][ T5930] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2454.174143][ T5930] usb 6-1: device descriptor read/8, error -71 [ 2454.217630][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2454.235159][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2454.261782][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 2454.272874][ T13] bond0 (unregistering): Released all slaves [ 2454.429384][ T5930] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2454.494678][ T5930] usb 6-1: device descriptor read/8, error -71 [ 2454.606144][ T5930] usb usb6-port1: unable to enumerate USB device [ 2455.117503][ T4751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2455.144196][ T4751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2455.210714][ T4751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2455.235488][ T4751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2455.407703][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.455785][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 2455.470070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2455.477676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2455.510885][T29225] bridge0: port 2(bridge_slave_1) entered blocking state [ 2455.518083][T29225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2455.668659][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2455.769118][ T4751] veth0_vlan: entered promiscuous mode [ 2455.810792][ T4751] veth1_vlan: entered promiscuous mode [ 2455.874334][ T4751] veth0_macvtap: entered promiscuous mode [ 2455.916038][ T4751] veth1_macvtap: entered promiscuous mode [ 2455.943866][T27556] Bluetooth: hci1: command tx timeout [ 2455.984982][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2456.032077][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2456.048924][ T4829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8185'. [ 2456.051790][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2456.089832][T29225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.143166][T29225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.163877][ T5930] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2456.190731][T29225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.201851][T29225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.323625][T24224] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2456.404215][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.426912][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2456.477601][ T5930] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2456.488063][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.509993][T24224] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.521848][ T5930] usb 4-1: Product: syz [ 2456.529265][ T5930] usb 4-1: Manufacturer: syz [ 2456.540252][ T5930] usb 4-1: SerialNumber: syz [ 2456.546596][T24224] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2456.560678][ T5930] usb 4-1: config 0 descriptor?? [ 2456.591899][T24224] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2456.603567][T24224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.611689][T24224] usb 7-1: Product: syz [ 2456.616684][T24224] usb 7-1: Manufacturer: syz [ 2456.621313][T24224] usb 7-1: SerialNumber: syz [ 2456.632218][T24224] usb 7-1: config 0 descriptor?? [ 2456.649180][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.670360][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.835362][ T5930] usb 4-1: ucan: probing device on interface #0 [ 2456.841666][ T5930] usb 4-1: ucan: invalid EP count (0) [ 2456.851901][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.865945][ T5930] usb 4-1: ucan: probe failed; try to update the device firmware [ 2456.903271][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.905836][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2456.919401][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.931306][ T5930] usb 4-1: USB disconnect, device number 123 [ 2457.037855][T24224] usb 7-1: ucan: probing device on interface #0 [ 2457.056566][T24224] usb 7-1: ucan: invalid EP count (0) [ 2457.061984][T24224] usb 7-1: ucan: probe failed; try to update the device firmware [ 2457.090957][T24224] usb 7-1: USB disconnect, device number 57 [ 2457.660741][ T5825] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2457.700030][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8182'. [ 2457.723601][T24224] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 2457.842908][ T5825] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 2457.852122][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2457.863171][ T5825] usb 2-1: config 0 has no interface number 0 [ 2457.869974][ T5825] usb 2-1: config 0 interface 74 has no altsetting 0 [ 2457.880376][ T5825] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2457.890069][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.901852][T24224] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2457.928368][ T5825] usb 2-1: config 0 descriptor?? [ 2457.940057][T24224] usb 4-1: config 0 has no interface number 0 [ 2457.947653][T24224] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2457.957505][ T4885] FAULT_INJECTION: forcing a failure. [ 2457.957505][ T4885] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.963760][T24224] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2457.984204][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.0.8186 Tainted: G L syzkaller #0 PREEMPT(full) [ 2457.984235][ T4885] Tainted: [L]=SOFTLOCKUP [ 2457.984243][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2457.984255][ T4885] Call Trace: [ 2457.984262][ T4885] [ 2457.984270][ T4885] dump_stack_lvl+0xe8/0x150 [ 2457.984302][ T4885] should_fail_ex+0x412/0x560 [ 2457.984329][ T4885] should_failslab+0xa8/0x100 [ 2457.984354][ T4885] __kmalloc_noprof+0xe8/0x760 [ 2457.984374][ T4885] ? ___neigh_create+0x6d5/0x2280 [ 2457.984402][ T4885] ___neigh_create+0x6d5/0x2280 [ 2457.984431][ T4885] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 2457.984460][ T4885] ? __local_bh_enable_ip+0xd0/0x130 [ 2457.984492][ T4885] ip6_finish_output2+0x729/0x13e0 [ 2457.984527][ T4885] ? ip6_output+0x126/0x550 [ 2457.984550][ T4885] ip6_output+0x340/0x550 [ 2457.984577][ T4885] ? ip6_mr_output+0x1f3/0x11c0 [ 2457.984601][ T4885] ip6_mr_output+0x549/0x11c0 [ 2457.984626][ T4885] ? __pfx_ip6t_do_table+0x10/0x10 [ 2457.984657][ T4885] ? ip6_mr_output+0x1f3/0x11c0 [ 2457.984681][ T4885] ? __pfx_ip6_mr_output+0x10/0x10 [ 2457.984711][ T4885] ? __ip6_local_out+0x15c/0x940 [ 2457.984736][ T4885] ? __ip6_local_out+0x8f8/0x940 [ 2457.984756][ T4885] ? __ip6_local_out+0x15c/0x940 [ 2457.984790][ T4885] ? skb_dst+0x4f/0xd0 [ 2457.984811][ T4885] ? dst_output+0x17b/0x1c0 [ 2457.984830][ T4885] ? ip6_send_skb+0x10f/0x390 [ 2457.984855][ T4885] ip6_send_skb+0x1d5/0x390 [ 2457.984883][ T4885] udp_v6_send_skb+0xc17/0x1860 [ 2457.984917][ T4885] udpv6_sendmsg+0x1d3d/0x2560 [ 2457.984946][ T4885] ? do_user_addr_fault+0xc6f/0x1340 [ 2457.984967][ T4885] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2457.984997][ T4885] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 2457.985014][ T4885] ? lockdep_hardirqs_on+0x7a/0x110 [ 2457.985081][ T4885] ? inet_send_prepare+0x5c/0x270 [ 2457.985109][ T4885] ? inet6_sendmsg+0xe4/0x120 [ 2457.985130][ T4885] ____sys_sendmsg+0x62c/0xad0 [ 2457.985161][ T4885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2457.985204][ T4885] ___sys_sendmsg+0x2a5/0x360 [ 2457.985233][ T4885] ? __pfx____sys_sendmsg+0x10/0x10 [ 2457.985263][ T4885] ? kstrtoull+0x12f/0x1d0 [ 2457.985293][ T4885] ? get_pid_task+0x20/0x1f0 [ 2457.985336][ T4885] __sys_sendmmsg+0x2e7/0x4e0 [ 2457.985366][ T4885] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2457.985420][ T4885] ? ksys_write+0x1fc/0x270 [ 2457.985446][ T4885] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2457.985473][ T4885] __do_fast_syscall_32+0x20d/0x640 [ 2457.985491][ T4885] ? do_fast_syscall_32+0x33/0x70 [ 2457.985507][ T4885] ? asm_int80_emulation+0x1a/0x20 [ 2457.985526][ T4885] ? do_int80_emulation+0x274/0x4d0 [ 2457.985543][ T4885] ? trace_irq_disable+0x3b/0x150 [ 2457.985571][ T4885] do_fast_syscall_32+0x33/0x70 [ 2457.985588][ T4885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2457.985609][ T4885] RIP: 0023:0xf7f98f6c [ 2457.985626][ T4885] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2457.985644][ T4885] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2457.985664][ T4885] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080003cc0 [ 2457.985676][ T4885] RDX: 0000000000000172 RSI: 0000000004001c00 RDI: 0000000000000000 [ 2457.985686][ T4885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2457.985696][ T4885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2457.985707][ T4885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2457.985732][ T4885] [ 2457.995564][T24224] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2458.029812][T23443] Bluetooth: hci1: command tx timeout [ 2458.031842][T24224] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2458.184922][ T5930] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2458.333652][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 2458.340922][ T5825] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2458.359792][ T5930] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.434955][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8165'. [ 2458.457751][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2458.483926][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2458.512907][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2458.522378][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2458.552532][T24224] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2458.562402][ T4891] team0: Device gtp0 is of different type [ 2458.593000][ T5930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2458.606343][T24224] usb 4-1: Product: syz [ 2458.607600][ T5930] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2458.610582][T24224] usb 4-1: SerialNumber: syz [ 2458.620938][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.632608][ T5930] usb 7-1: Product: syz [ 2458.636541][T24224] usb 4-1: config 0 descriptor?? [ 2458.641804][ T5930] usb 7-1: Manufacturer: syz [ 2458.666918][ T5930] usb 7-1: SerialNumber: syz [ 2458.679035][T24224] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 2458.707541][T24224] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input106 [ 2459.061553][ T4884] syz.6.8187 (4884): drop_caches: 2 [ 2459.068934][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2459.111177][ T5930] usb 7-1: 0:2 : does not exist [ 2459.126310][ T5930] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2459.394103][ T3264] usb 2-1: Failed to submit usb control message: -110 [ 2459.410945][ T3264] usb 2-1: unable to send the bmi data to the device: -110 [ 2459.419717][ T3264] usb 2-1: unable to get target info from device [ 2459.431336][ T5930] usb 7-1: USB disconnect, device number 58 [ 2459.437184][ T3264] usb 2-1: could not get target info (-110) [ 2459.546479][ T3264] usb 2-1: could not probe fw (-110) [ 2459.561235][T23443] Bluetooth: hci2: command 0x0406 tx timeout [ 2460.103985][T27556] Bluetooth: hci1: command tx timeout [ 2460.524182][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2460.524372][ T5825] usb 4-1: USB disconnect, device number 124 [ 2460.531179][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2460.550683][ T5825] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2460.726223][ T13] hsr_slave_0: left promiscuous mode [ 2460.732511][ T13] hsr_slave_1: left promiscuous mode [ 2460.741658][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2460.757115][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2460.796039][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2460.809002][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2460.854216][T18224] usb 2-1: USB disconnect, device number 94 [ 2460.854998][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 2460.881046][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 2460.893947][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8196'. [ 2460.960174][ T13] veth1_macvtap: left promiscuous mode [ 2460.977906][ T13] veth0_macvtap: left promiscuous mode [ 2460.999504][ T13] veth1_vlan: left promiscuous mode [ 2461.013685][ T13] veth0_vlan: left promiscuous mode [ 2461.423803][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2461.440717][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2461.991646][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8202'. [ 2462.013678][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8202'. [ 2462.116763][ T13] IPVS: stop unused estimator thread 0... [ 2462.256400][ T4946] FAULT_INJECTION: forcing a failure. [ 2462.256400][ T4946] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.269370][ T4946] CPU: 0 UID: 0 PID: 4946 Comm: syz.1.8203 Tainted: G L syzkaller #0 PREEMPT(full) [ 2462.269409][ T4946] Tainted: [L]=SOFTLOCKUP [ 2462.269417][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2462.269429][ T4946] Call Trace: [ 2462.269437][ T4946] [ 2462.269445][ T4946] dump_stack_lvl+0xe8/0x150 [ 2462.269478][ T4946] should_fail_ex+0x412/0x560 [ 2462.269505][ T4946] should_failslab+0xa8/0x100 [ 2462.269530][ T4946] __kmalloc_cache_noprof+0x88/0x660 [ 2462.269551][ T4946] ? xfrm_policy_alloc+0x78/0x2b0 [ 2462.269582][ T4946] xfrm_policy_alloc+0x78/0x2b0 [ 2462.269608][ T4946] xfrm_compile_policy+0x242/0x3c0 [ 2462.269638][ T4946] xfrm_user_policy+0x5a9/0x960 [ 2462.269654][ T4946] ? xfrm_user_policy+0x3cc/0x960 [ 2462.269672][ T4946] ? __pfx_xfrm_user_policy+0x10/0x10 [ 2462.269687][ T4946] ? apparmor_capable+0x126/0x170 [ 2462.269710][ T4946] ? bpf_lsm_capable+0x9/0x20 [ 2462.269729][ T4946] ? security_capable+0x7e/0x2c0 [ 2462.269751][ T4946] do_ipv6_setsockopt+0x1622/0x31c0 [ 2462.269779][ T4946] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2462.269800][ T4946] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2462.269819][ T4946] ? get_pid_task+0x20/0x1f0 [ 2462.269833][ T4946] ? get_pid_task+0x20/0x1f0 [ 2462.269845][ T4946] ? get_pid_task+0x20/0x1f0 [ 2462.269866][ T4946] ? __lock_acquire+0x6b5/0x2cf0 [ 2462.269898][ T4946] ? aa_sk_perm+0x6d5/0x900 [ 2462.269920][ T4946] ? __pfx_aa_sk_perm+0x10/0x10 [ 2462.269937][ T4946] ? aa_sock_opt_perm+0xff/0x1a0 [ 2462.269957][ T4946] ipv6_setsockopt+0x59/0x170 [ 2462.269977][ T4946] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2462.269996][ T4946] do_sock_setsockopt+0x17c/0x1b0 [ 2462.270020][ T4946] __ia32_sys_setsockopt+0x13d/0x1b0 [ 2462.270045][ T4946] __do_fast_syscall_32+0x20d/0x640 [ 2462.270062][ T4946] ? do_fast_syscall_32+0x33/0x70 [ 2462.270075][ T4946] ? asm_int80_emulation+0x1a/0x20 [ 2462.270090][ T4946] ? do_int80_emulation+0x274/0x4d0 [ 2462.270104][ T4946] ? trace_irq_disable+0x3b/0x150 [ 2462.270128][ T4946] do_fast_syscall_32+0x33/0x70 [ 2462.270143][ T4946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2462.270162][ T4946] RIP: 0023:0xf702ef6c [ 2462.270177][ T4946] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2462.270190][ T4946] RSP: 002b:00000000f53db50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2462.270208][ T4946] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000029 [ 2462.270218][ T4946] RDX: 0000000000000023 RSI: 0000000080000180 RDI: 00000000000000e8 [ 2462.270229][ T4946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2462.270238][ T4946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2462.270247][ T4946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2462.270269][ T4946] [ 2463.462418][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8209'. [ 2464.095848][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8212'. [ 2464.670778][ T4977] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8216'. [ 2464.682255][ T4981] syzkaller0: entered promiscuous mode [ 2464.688057][ T4981] syzkaller0: entered allmulticast mode [ 2464.695738][ T4981] FAULT_INJECTION: forcing a failure. [ 2464.695738][ T4981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2464.709559][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.6.8217 Tainted: G L syzkaller #0 PREEMPT(full) [ 2464.709590][ T4981] Tainted: [L]=SOFTLOCKUP [ 2464.709597][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2464.709610][ T4981] Call Trace: [ 2464.709617][ T4981] [ 2464.709624][ T4981] dump_stack_lvl+0xe8/0x150 [ 2464.709655][ T4981] should_fail_ex+0x412/0x560 [ 2464.709681][ T4981] _copy_from_iter+0x1d3/0x1670 [ 2464.709707][ T4981] ? sock_alloc_send_pskb+0x896/0x990 [ 2464.709740][ T4981] ? __pfx__copy_from_iter+0x10/0x10 [ 2464.709770][ T4981] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2464.709802][ T4981] skb_copy_datagram_from_iter+0xf5/0x710 [ 2464.709832][ T4981] ? dev_get_by_index+0x22/0x2e0 [ 2464.709851][ T4981] ? skb_put+0x11b/0x210 [ 2464.709878][ T4981] packet_sendmsg+0x37e4/0x50f0 [ 2464.709914][ T4981] ? __lock_acquire+0x6b5/0x2cf0 [ 2464.709959][ T4981] ? __lock_acquire+0x6b5/0x2cf0 [ 2464.709984][ T4981] ? aa_sk_perm+0x6d5/0x900 [ 2464.710004][ T4981] ? __pfx_packet_sendmsg+0x10/0x10 [ 2464.710035][ T4981] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2464.710061][ T4981] ? __import_iovec+0x5d4/0x7e0 [ 2464.710087][ T4981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2464.710116][ T4981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2464.710138][ T4981] ? __pfx_packet_sendmsg+0x10/0x10 [ 2464.710162][ T4981] ____sys_sendmsg+0xa68/0xad0 [ 2464.710196][ T4981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2464.710226][ T4981] ? kstrtoull+0x12f/0x1d0 [ 2464.710253][ T4981] ___sys_sendmsg+0x2a5/0x360 [ 2464.710283][ T4981] ? __pfx____sys_sendmsg+0x10/0x10 [ 2464.710311][ T4981] ? get_pid_task+0x20/0x1f0 [ 2464.710328][ T4981] ? get_pid_task+0x20/0x1f0 [ 2464.710343][ T4981] ? get_pid_task+0x20/0x1f0 [ 2464.710383][ T4981] ? __fget_files+0x2a/0x420 [ 2464.710407][ T4981] ? __fget_files+0x3a0/0x420 [ 2464.710441][ T4981] __sys_sendmsg+0x183/0x260 [ 2464.710468][ T4981] ? __pfx___sys_sendmsg+0x10/0x10 [ 2464.710511][ T4981] __do_fast_syscall_32+0x20d/0x640 [ 2464.710531][ T4981] ? do_fast_syscall_32+0x33/0x70 [ 2464.710548][ T4981] ? asm_int80_emulation+0x1a/0x20 [ 2464.710566][ T4981] ? do_int80_emulation+0x274/0x4d0 [ 2464.710582][ T4981] ? trace_irq_disable+0x3b/0x150 [ 2464.710611][ T4981] do_fast_syscall_32+0x33/0x70 [ 2464.710629][ T4981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2464.710652][ T4981] RIP: 0023:0xf7f85f6c [ 2464.710669][ T4981] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2464.710685][ T4981] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2464.710705][ T4981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 2464.710719][ T4981] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.710730][ T4981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2464.710741][ T4981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2464.710753][ T4981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.710779][ T4981] [ 2465.069359][ T4977] syzkaller0: entered promiscuous mode [ 2465.083626][ T4977] syzkaller0: entered allmulticast mode [ 2465.244512][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8218'. [ 2465.265964][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8218'. [ 2465.309275][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8223'. [ 2465.622135][ T5011] FAULT_INJECTION: forcing a failure. [ 2465.622135][ T5011] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.855877][ T5011] CPU: 1 UID: 0 PID: 5011 Comm: syz.5.8226 Tainted: G L syzkaller #0 PREEMPT(full) [ 2465.855909][ T5011] Tainted: [L]=SOFTLOCKUP [ 2465.855916][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2465.855924][ T5011] Call Trace: [ 2465.855929][ T5011] [ 2465.855934][ T5011] dump_stack_lvl+0xe8/0x150 [ 2465.855954][ T5011] should_fail_ex+0x412/0x560 [ 2465.855969][ T5011] should_failslab+0xa8/0x100 [ 2465.855983][ T5011] __kmalloc_cache_noprof+0x88/0x660 [ 2465.856000][ T5011] ? sctp_add_bind_addr+0x8c/0x370 [ 2465.856012][ T5011] ? __pfx_sctp_get_port_local+0x10/0x10 [ 2465.856032][ T5011] sctp_add_bind_addr+0x8c/0x370 [ 2465.856044][ T5011] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 2465.856061][ T5011] sctp_do_bind+0x5b2/0x9d0 [ 2465.856081][ T5011] sctp_connect_new_asoc+0x270/0x6b0 [ 2465.856098][ T5011] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2465.856114][ T5011] ? __ipv6_addr_type+0x14d/0x2f0 [ 2465.856132][ T5011] ? sctp_inet6_send_verify+0x6e/0x300 [ 2465.856144][ T5011] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 2465.856161][ T5011] __sctp_connect+0x5cb/0xdc0 [ 2465.856182][ T5011] ? __pfx___sctp_connect+0x10/0x10 [ 2465.856196][ T5011] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2465.856214][ T5011] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 2465.856227][ T5011] sctp_getsockopt_connectx3+0x227/0x360 [ 2465.856241][ T5011] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2465.856258][ T5011] ? __local_bh_enable_ip+0xd0/0x130 [ 2465.856282][ T5011] sctp_getsockopt+0x984/0xb90 [ 2465.856297][ T5011] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2465.856310][ T5011] do_sock_getsockopt+0x2d3/0x3f0 [ 2465.856327][ T5011] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2465.856342][ T5011] ? __fget_files+0x2a/0x420 [ 2465.856356][ T5011] ? __fget_files+0x3a0/0x420 [ 2465.856370][ T5011] ? __fget_files+0x2a/0x420 [ 2465.856389][ T5011] __ia32_sys_getsockopt+0x1a4/0x240 [ 2465.856419][ T5011] __do_fast_syscall_32+0x20d/0x640 [ 2465.856440][ T5011] ? do_fast_syscall_32+0x33/0x70 [ 2465.856456][ T5011] ? asm_int80_emulation+0x1a/0x20 [ 2465.856473][ T5011] ? do_int80_emulation+0x274/0x4d0 [ 2465.856490][ T5011] ? trace_irq_disable+0x3b/0x150 [ 2465.856514][ T5011] do_fast_syscall_32+0x33/0x70 [ 2465.856524][ T5011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2465.856536][ T5011] RIP: 0023:0xf70aef6c [ 2465.856547][ T5011] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2465.856556][ T5011] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2465.856568][ T5011] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000084 [ 2465.856576][ T5011] RDX: 000000000000006f RSI: 0000000080000280 RDI: 00000000800002c0 [ 2465.856583][ T5011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2465.856589][ T5011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2465.856595][ T5011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2465.856609][ T5011] [ 2466.733649][ T3444] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2466.907574][ T3444] usb 2-1: Using ep0 maxpacket: 32 [ 2466.919598][ T3444] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 2466.928316][ T3444] usb 2-1: config 0 has no interface number 0 [ 2466.941944][ T3444] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2466.960346][ T3444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.970730][ T3444] usb 2-1: Product: syz [ 2466.975552][ T3444] usb 2-1: Manufacturer: syz [ 2466.980306][ T3444] usb 2-1: SerialNumber: syz [ 2466.995962][ T3444] usb 2-1: config 0 descriptor?? [ 2467.009240][ T3444] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2467.018983][ T3444] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2467.025420][ T3444] dvb-usb: bulk message failed: -22 (2/0) [ 2467.039243][ T3444] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2467.054258][ T3444] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2467.069939][ T3444] usb 2-1: media controller created [ 2467.072861][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8235'. [ 2467.075876][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.090769][ T3444] dw2102: i2c transfer failed. [ 2467.099825][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.105934][ T3444] dw2102: i2c transfer failed. [ 2467.110725][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.117188][ T3444] dw2102: i2c transfer failed. [ 2467.121979][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.128661][ T3444] dw2102: i2c transfer failed. [ 2467.133890][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.139739][ T3444] dw2102: i2c transfer failed. [ 2467.145561][ T3444] dvb-usb: bulk message failed: -22 (6/0) [ 2467.151380][ T3444] dw2102: i2c transfer failed. [ 2467.158270][ T3444] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2467.195424][ T3444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2467.210959][ T5016] dvb-usb: bulk message failed: -22 (1/0) [ 2467.227595][ T5016] dw2102: i2c transfer failed. [ 2467.232472][ T5016] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 2467.244370][ T5016] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2467.252969][ T5016] CPU: 1 UID: 0 PID: 5016 Comm: syz.1.8227 Tainted: G L syzkaller #0 PREEMPT(full) [ 2467.263818][ T5016] Tainted: [L]=SOFTLOCKUP [ 2467.268134][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2467.278196][ T5016] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 2467.284090][ T5016] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ca 95 39 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 2467.303692][ T5016] RSP: 0000:ffffc90004cc79d0 EFLAGS: 00010202 [ 2467.309752][ T5016] RAX: 0000000000000002 RBX: 0000000000000010 RCX: a719b5e82347bf00 [ 2467.317708][ T5016] RDX: ffffc90012097000 RSI: 0000000000003a52 RDI: 0000000000003a53 [ 2467.325665][ T5016] RBP: 0000000000000000 R08: ffff8880b87247d3 R09: 1ffff110170e48fa [ 2467.333626][ T5016] R10: dffffc0000000000 R11: ffffed10170e48fb R12: 0000000000000003 [ 2467.341585][ T5016] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff88805a641d88 [ 2467.349543][ T5016] FS: 0000000000000000(0000) GS:ffff888125567000(0063) knlGS:00000000f541db40 [ 2467.358460][ T5016] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2467.365030][ T5016] CR2: 0000000000000000 CR3: 000000004a416000 CR4: 00000000003526f0 [ 2467.373002][ T5016] Call Trace: [ 2467.376273][ T5016] [ 2467.379200][ T5016] __i2c_transfer+0x79a/0x2020 [ 2467.383961][ T5016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2467.389762][ T5016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2467.395566][ T5016] ? i2c_transfer+0xc8/0x2d0 [ 2467.400151][ T5016] i2c_transfer+0x1cc/0x2d0 [ 2467.404672][ T5016] i2cdev_ioctl_rdwr+0x460/0x740 [ 2467.409628][ T5016] compat_i2cdev_ioctl+0x59f/0x5c0 [ 2467.414750][ T5016] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2467.420381][ T5016] ? __fget_files+0x3a0/0x420 [ 2467.425060][ T5016] ? __fget_files+0x2a/0x420 [ 2467.429647][ T5016] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2467.435183][ T5016] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2467.440636][ T5016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2467.446608][ T5016] ? __se_sys_futex_time32+0x3ab/0x440 [ 2467.452064][ T5016] ? rcu_is_watching+0x15/0xb0 [ 2467.456835][ T5016] __do_fast_syscall_32+0x20d/0x640 [ 2467.462026][ T5016] ? do_fast_syscall_32+0x33/0x70 [ 2467.467034][ T5016] ? asm_int80_emulation+0x1a/0x20 [ 2467.472139][ T5016] ? do_int80_emulation+0x274/0x4d0 [ 2467.477336][ T5016] ? trace_irq_disable+0x3b/0x150 [ 2467.482377][ T5016] do_fast_syscall_32+0x33/0x70 [ 2467.487218][ T5016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2467.493541][ T5016] RIP: 0023:0xf702ef6c [ 2467.497603][ T5016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2467.517200][ T5016] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2467.525615][ T5016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2467.533590][ T5016] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2467.541557][ T5016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2467.549518][ T5016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2467.557480][ T5016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2467.565446][ T5016] [ 2467.568465][ T5016] Modules linked in: [ 2467.573052][ T5016] ---[ end trace 0000000000000000 ]--- [ 2467.581133][ T5930] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2467.594131][ T5016] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 2467.600153][ T5016] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ca 95 39 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 2467.620200][ T5016] RSP: 0000:ffffc90004cc79d0 EFLAGS: 00010202 [ 2467.626752][ T5016] RAX: 0000000000000002 RBX: 0000000000000010 RCX: a719b5e82347bf00 [ 2467.634880][ T5016] RDX: ffffc90012097000 RSI: 0000000000003a52 RDI: 0000000000003a53 [ 2467.636482][ T5041] fuse: Unknown parameter 'Xötž)ÈÙ©Ž™'àÏáyÌã³to0x0000000000000006' [ 2467.648133][ T5016] RBP: 0000000000000000 R08: ffff8880b87247d3 R09: 1ffff110170e48fa [ 2467.659463][ T5016] R10: dffffc0000000000 R11: ffffed10170e48fb R12: 0000000000000003 [ 2467.668388][ T5016] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff88805a641d88 [ 2467.676982][ T5016] FS: 0000000000000000(0000) GS:ffff888125567000(0063) knlGS:00000000f541db40 [ 2467.686478][ T5016] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2467.693158][ T5016] CR2: 00000000f7f8a190 CR3: 000000004a416000 CR4: 00000000003526f0 [ 2467.701843][ T5016] Kernel panic - not syncing: Fatal exception [ 2467.708295][ T5016] Kernel Offset: disabled [ 2467.712645][ T5016] Rebooting in 86400 seconds..