last executing test programs: 30m19.647789453s ago: executing program 3 (id=371): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 30m16.592036227s ago: executing program 3 (id=378): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e2030109021200010000000009040000009d144e00"/36], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x3, 0x4, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x27800000300, 0x0, 0x1, r3, 0x5}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 30m13.458966641s ago: executing program 3 (id=388): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 30m10.328222109s ago: executing program 3 (id=399): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(r3, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r7, 0x4, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x45, 0x9, 0x0, 0x0, r6}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$vga_arbiter(r0, &(0x7f0000000500)=@target={'target ', {'PCI:', '1a', ':', '17', ':', '9', '.', 'e'}}, 0x15) 30m9.268411665s ago: executing program 3 (id=403): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000002a80)={0x0, [{0x50ad947deb8c700a, 0x620, 0x9a4, &(0x7f0000000040)="1033561d2eb467882cdeb7d33d25482fe709a7d87f6a9013bb47a7363ec56392de6cae07dcb845c5090c2276b1cb6742ddcc8139f7289ed9637c4d8410326a3131c27527d47acca829fbf2b1ddaf2e1a7c8bab1ca198f03db808bd5f28dd2b382eee0a32b9552871da010d55e9c111fdb3075215054bf5e914970e28166c90a8c71224d7ba658cb0568c3c16a873d56c053143495cb282f0c6f5ae1e7f80986701f9d1bb3d1eb977ab8e1485b690e7d0afada35ed48daf4ad684458cee24020eb7431eab"}, {0x1, 0x6b0, 0xd, &(0x7f0000000140)="1deb6ed443da602bf15871a02a8cbb7cbb7007420cf03ec84d73f589d5c9e5b5402929d3b3502ee0c34c980071f71f8ec1726bf21e7b68b8c99548020410a6b654810ccb71776f4fc39760a40b1db73197cd94b1173519083acaefe55a70198855ab2edd0de5a43ae208428311f48e103660a5589cf0cad3836e884eb4e6316e8e84ac0070870e9f62bf90f2371dc3033ce8fde513ac8f054dce624ff27f71228a88cf1f7e27589e0a8af5ec6fc3f3224e07265aa2eabf9224c5fb855704f2ab383504e50ea4060edb5b3fd204d8ccba036b82f64f1e"}, {0x2, 0x7e0, 0x6, &(0x7f0000000240)="de5a050ef7b4372e3b23818dc5cca063933666669f3348995d3bf720b18d0b9611a53f1e0b47e65b6e9d4f835f0428f310d8b0c447e0a30266d0a327f31277d53d862e183ddcfbbc76e8a32aa6c640a9fd8b62e179a68cb0c8713f05e1b77172ae3d7f439f3fe55b95b97a038172951e2f1f8330a443ef01383f37e9cfba7151ce4eadd9994c6fdf8e0909e46c6d6671451e9b4d5ee83d4e9c42eb342c4f3ee2dc8707bfd941c49c82a77911a15b54c5441232f42d5e2e79ff42cd94288b49cf4fd5f238ca3b442d1977a600bd1f3744a2562f2cb6197a197fb201ac0e0a97b8ec8a895a4f8f83e95b9b5bc0ae58dbd78834152be4b0acddd386090e"}, {0x2, 0x570, 0x8, &(0x7f0000000340)="d50ad90ee9a0b032e45109b60c070cd26bd17792f610bde7e6a73b2a16913da71f0519a1998c57c72fed19adaaa0c08173f58301d6f47fedfe785703c462893dd081faa623c1cbc73a7dffa1d96f67190e2e7da99b364683e042e363ca1fddaad05abca0cb9dfb86f4c03ae39125a858f98af8302a6213eb3afd9b349e674f1fd1b8db3051fafc2760d5252f078e209f5d059e92d0a90e5cab9c9f01793d2c13dd91725c6a17589146ba648e9033"}, {0x3, 0x20, 0xf, &(0x7f0000000400)=',XL{'}, {0x0, 0x720, 0x8, &(0x7f0000000440)="13e887089d2bb272331da9f9777c7cc1771393c0d159806f6c3d5e28a6eb8407ab55d33666a3a588352b7e03ff18fa8ecac8db3edc116d85ceaf5bfa590ed141b2c7b51144ed86bed6eb60e4124bda10aa388b7afd79060d055e0792140948ff48cb1f4983368534b34e2765bab3c2721d33da4cefd1cfb1b66a75365eca7081f207af35caa54f9194dbe193d83fd6064c57c7dbe59357f811ebd9f4080a3de9f1b6b52a3e1b215a8b1db44bbc42eaf0389d8c5f00cd8906fdb1d3d8bbcc808cfbcc745219f425a2eea07e23bb6a6f9a45e9b5670410aef0131c0e4d3ef881cb52c2ed08"}, {0x3, 0x4b0, 0x0, &(0x7f0000000540)="eb1e937a856bf2509b37db8497a33db057fa39da4e7803cc5037244b8960dfc172ff86817f3c56033caf16674b6a21cac002a23ad8dfb166daced2793337ce137ffacdd8f151c4c90ff6f4b682112ba406f4fe51893a875b2de135c4459994c86ea34c6e9ba62a9f2e21e7155939b465e1368fc729352caff5a9f3d08c445814adc34973d9ba972c0d08c55fd2b5bf7a8cff88824978"}, {0x1, 0x768, 0x0, &(0x7f0000000600)="9be41242d8c4eabeeba27a3e9f4c15ef8645b15dee0b584eb795e25048a4ca5eec7dc35ee5bc9f635480bb877f55b5973a440a500df6739813e4bc5f1fee42589323837dc8c293519e4a938e32f77fd96d1ca351250e63b9a6106b109b3ec06ab9566b5d26c9867381d74751ed311fbdfac9a53daa2ccc89d581bf0412d68701c7fbedd6096be307cd5ae50c7b617478c3ad9219e87599192ec0dcb1dc2e4f92d5326545f94d5ef3009a0fb29cd8abd35f31f57d1c168a84b387c502b398c1a729f56e4d70e3367f6177b8cdb272681bc8ea5d1d3d33eff34195c8a6f1c309dc7a4b31e182822c0f9676157a83"}, {0x0, 0x260, 0x4, &(0x7f0000000700)="e4d6cd58836ed6875996538b2a0d41dd5a855c39ae1f4381a43975f4bd7a643ee737f1b0809da6df29f9ce44fa280d55db853cca969f6f0a8512aef0e191bf088e34243171f2f48b1362abc5"}, {0x0, 0x1d8, 0x3, &(0x7f0000000780)="00821a98692ad0d5909d78e5f543a47a0beb88e3ab069507db39a1d4c86af62d50897caca347a4fbb32986410bde4503c00adb897b56a1091e7ee6"}, {0x1, 0x738, 0xdc4, &(0x7f00000007c0)="177c4af92989aeb3714479e5dbd57eaefe4a9bdf8eb4c2fda63ace369a426c234f188aa59dbb6c2659cb24461954f10f1c57c47559add19cf5a2f93a9ea7078208c256793fb1f9e99a0441605aed49563eacb79367f46644b55afd97bb5155a642cd4529fa7e6089b4b332319556fc0267e8f8fc8a62d4d8e2d1dae658ee77a1a01ff1021dc28ff040dfa094ec9b4b544171a61662d336a7532ffbf4efd1012568c994df4462b97d5ecc461cee99856861e9e3acfef17c0e5cdaf051c86e5502b8159658efcdee1dfeaaab0294bf4e891b6033e2f190fb72cd9508f4a06029f037b718b39bf8ae"}, {0x1, 0x2e8, 0x7, &(0x7f00000008c0)="9ab858451f94cb63977db691ca3a5a439de7ea8c66eeb45df553107032ab0b7cf0a9631ccf14959ef43f8e25bf695a361e4e1e7c541297f50020b6eefa966978d6bd7867f0fe08ce72e6ddc691db5cd74be0ae9897e27802a581afd5dc"}, {0x1, 0x498, 0x0, &(0x7f0000000940)="c2b6873c761b9ff7e51a455540517fe101a651c0bbaa314f4720dab0892ceaac954c09fece501e4bc98e6ed81858eca37585de57db9dfdddc7db8f8de9091898da6cb0b1f385107e771be0979b7e441872f5251bebc652a6243a7e5b35b96d5282854a1361e705fe92a6c9db5ff2c4b59b71712893f3682666d2a7867acbe0d189d1baf441118f3102f53caf2c024eb822a57d"}, {0x0, 0x370, 0x401, &(0x7f0000000a00)="855226ccbaf0e5912420c3bcf4f4408c96441f0182f590be89ed93cbf56575508588dc3147c7d5a99d792de163ed29608887a7cbcb209bb693a82aa7f8f9d9db6d39e09802e2469f12edf1cc5bc1b48a006944231acf2c1538c07868c65226e7f85b89669c010f12f9fe55a205c2"}, {0x0, 0x8000, 0x0, &(0x7f0000000a80)="3a3a513d946dcbf61d9c6eccab8cdff04aa33830f6084da1435966e8fea0c78bbcf2d110769b6ed22c556e6e785c1cfe58ca1132ce39a19d7f8c40b0660cf01ccbcfccc12365e1a73e97d27edacf1df7e8fd203de5432eb6f7b4565e2de43cce5dec0a476afa50f4e2782a61b208338754c1b226e8f721e143a4c0780d233c057f02031ba478c1e1921bdb23dc8d6a063f2d72d18a3486e46c76ce342895e036599275c6750a8b997b63323d002da19352483c1ce65599584116834ffedcd0ca4afda31e181a06ddfb81361dc63a22c9172dbfa8aef48c3776259125b896aeaa3690a38296961cf827e753d08a08838a0b8bd1e89b725da3d8a1bea636b096ae06398d7a616e1ce9193b6701083f0d3a525bf140382bd744cdda14d5bda994ae633080ffc1d26425ed2308ff7fe119c9313ea1a6ec646940addf802a05a57a45d54bd18949e997355f36147c2781abe802e515220275e4c2a9e4e9933a84006c3f09d8d1c6112ddb4b44be542d7e028798eb5ae360c2e7f46a6757823c5005104f30513f10f210b9bbaf55726b9233bb7c9ae39ab722bcda538740f70fa2e0112a79abcd0743a2d866f2c1e295109adec9ff5c502567cf4134edd55bd0f395c7f925efc297b2366ae213d07890106c02cc4039524b1b69beffa1fef741b08bb6b680570a4be66312899cf14c159d27d2cafa4c9877d723b23c47e9d5c61ac70d779e57c74e10c2e32bb5d2066e0c5a3428341af1688bcea570c1073222a4f6a1e37c02e93a1207457dae7317b80448a79b54fcdcc1765d658e314722ceacf6518aa9a768f9134c619b37461c2c15b874442aeed74bfbe4847de4ea41f26cd3e6235323a98fce6c025f17b1941f1a744a107839ced914b37134b22cbdf5f40abf7a69fcd17ecf951349d8d6cfdf584e5edb60621f79b28f8f46fb5fbb7e5cafff8a495c07ff98cafb7126061bc62d9ac90e4bb7901136f99a8dbd50efc6d2dff7cbd347c64b755cb1b95f4e8763037bea89ab4cd8bab993790fa28bde9ccd16eb05d05bdecb0cfcfbd9dbc5da85acb7cae32852e13ed2cbcf8958d01ae1f6d4816540c0c1a302709e166f84e90267ad1956b3bb3d1de86804f9af04d1e23ed6a532cc53330c6e68ca26a6decd6d446d0dcea225b1dec6497d6a0fd42bad66ae7f373fd79373dd6e844de102d12b523601dd5c9242db56b625035ade7ccdc3c4bfadd1a54f4568e4febfe5e6f38100a7264114945cd4671239dd74ed6e3db3c8d77b9177faa13d39a0953db1ab9e0ebe3bfe1b10e935e80f43f3ca03db755a9e23aaadeaab0811e7eec55a78863d2a45b1e5a06b5f7ce45b73df5ab9409fc69adad2e61c7da13f1145de4b117d6dc95977e326b6a8893369c61910e28ad76914ca1adaeb5dcaca724f296415f771cf889386e86b130188e750821ad3d47d65bde2448ef65a25e1ab32c14b3a662b7cd59d81c191e6287243a58bebca55dd982fa73f457653ef53534a17c92795e14f40a3e56c1f9e4e752d686b259d207df8fa248e25ac719841d9d3195c5beac8d539797a84d74e6b9690aacc36b7c8ecf25faea03423e0529d39e2dad5604c8927f7ecf4c7c20eda140e55bfc717089877a18aa344fece6edcac8fe8508ba573865b632c786e3871fea3c7d1dc608058956048e5a58409fc824aab7a39e62ff12ecee24e988436a7ed9565d3b09b6af3101068050949fb2de8e7bb8a90efd95a1411aa520bb5f69254b046f70b0907727788d3e0e0f835771e47b39eefe0c2e326c7f02b7dfa650f5959b84b8820935420cf13dce3ef6aaccb83587788359a02182fcc2dfb1e07901f7c38ef123a00380a73a171c888dd5b8524fd05da732e585882b9538b1e300c83cd62eda3a7c362f73a4574414aeaab4a70064331ff23cd35c2de4ce007eb436311622bea773de09c569eb93b457a51db35a6195120b9309a0cb5625c7240c8bba23291dfa7438a60cc29b847fbce7c43de34fc9e94844d06856f2cc9f5dc95b759179ebc7c390c210693a2030be116df83f0a9d4ae8bd28e973da477e85f5fb3a74d0558b6b3f2b5ed7bb4f3e8ca9e8ceb554ab9a31d6a9a37527c99651e633f22c42f78ff2d8d23ec8c3cc9065734cbf44583a8b6a71530b387eff1c92e1d87613a7ea1ca561c814a729e15290377f7481f12c30f5dbd99d2b4b347426b4f073e63b331c9d5609cf201b34a79c046a2645a840190a8ca928257c828711110c54b3d0ee8654b976d229c933fe9e8fa7fd3f6c7029a1893ea8ac12edf544b73929bf22117067d888b17076c423a2cccee96d2ad6551a3b9b63ad8604b216eed9481c192e4a6fd5260424bfbd8b062941b06bafcb9748892cb03b296d8e64943aaab4a5999be127d482a1395d83a8d1e6e8a7374faa6440e459b80177a517677a78a5027609c9b7d323c3872c8573bfd9995812365a43fdbe9a1e1437701c3deade1aa1c62c23c950b25da967b67d3fa10cf0a14bb1d72b3e8871804aa027756d793c622e4290f3d7578982c73fac5b06732dc7464d1bb84ea64980a224bd0f00d5c1bcfae2e036ece01d8befc43705436c2c9f4a30a23e97247440d69400b15f7e85b658d08022052666237c05de8305779ea2ceeaa48725f5e4d198ea5f84154371f7fe796ee3963fe67a41e4a0017f7eb137b56b10895b85744028b4acb4b482685e5e8668aae2d57aba1e9287cf31192869b0612ff56d41995d71908bce6627ef45da37cd680cc1177f3e1c29194b4b0ef7b59bc8c47402677f39cc47df12fd0b65dec3887e165e355bc5df5a352ad4ea4a1471acd358ae89e94e40820f6a0cb2761caa92f9fa8135a293e467e06bde2dd48b1e70f421a7b51a48c57fc8b54276ec690f42a94ba7b291b108b1957d9c73d9ad06ffb9dd4b31d0f15d35a7857b537352b18c3717166188cf2edea5cdc62a6d573cb989ea6207e71231ba6b076fbf241f4d09747d5fe830e14c074d70a3c6c041c351e33d3da555301ee7b6f9292f78cf645c6cabcd1fc6342911cf089734ae38f4553870c18b1aee6899908555a9e44442c12a587b90a8f7b4c916db0a3ab877590301c30851fd412fa39423f4ea06e0152aa6c7971add5c102033cb95845f6f7bc10c10b8e4057472d36242fa7d20682d645175e4793ba2ec9906b87027e1caf90f23d1c3d44a0ddcce238d36ee18847456c2d77d6e47745469d3bfc5ac7e0d5533bfba35aa9320f888a28b1073b7707c364576d2d112ade19756b16c79c696dd5036f2f3b93a46d8703c0e12aee9e376bed2dd90d25e56750d1f30ed9d89dda6bf4ad1353aa908eb5cc973e867f0897af60a4c381b7f9d9f616b67f8010ae5f668480ceed032d108c164b6bd05e502d2b7294ac6c07c94ec79ee3a26f075c5db2c9b12f55dc1faf1382294ca542f81192b32189e4d6aef156ded0cb1e4f424f681584eccbc774cf876188550b09389078b0838293bde032fb2b91bb2a7b8f184ac40acac68b3b7aba435773d9d82d8ce6f673bf72325ea148442d0f432229b78a6bfe6ea24a1e04f915d9920de76683393e1f95c8df2dc959c0f4ca590ae89b469b41460daefe7f022cffbaf0b76b5dacd3080d1b4d8af5a01c3ed9a1839534930aa47ee421aeee5b0aa53ccc2589a1f4b7685385f7f09a10d9b00f85cb36b805a1771678a109ee874671bf353aa3460a0b9dc06d7de9d60cbc89791ccf30efa6f27a2014254351d6826adeee46a0a289fb3efcf80914b92ae3f013a86b2fbf29c94747c97c1c9da83ff698daa4327420233b1748e1cf0c9a705e8bf37ab6c4aa3059420856f9ca980654cbbe604312e7afeb836fdadb34445e6bc5c210256eafac845dd8e7becead6bbe23b2b672d5df1481dcc62acecc96aacdcbbebc6772e06e028b712118e83b509988ae876755c92ff3b77932c56a9667c57c3e945df7b3566fa4b59cf128029cff436bc80b3a46b314b2f3e26f00833ee658ffe7af286d6ddf964d7295b72bc54ce5aca7056c7aaa68ec119f50777fc792a7bae8d4199332d4a69725d4bd7d49ad1ff00e127b2532194dfaefe7508cc343cb871610f68205aef76aa08c7160356d90b594d7f354fe5fa8313f035dc74198317b57b476a6f82b7a8f9c769bbcebc51a0146a39bad57a2546dafe36c6e9b4ed071787f9d69cd368fc2d86f84d832aee50bfc1165244ef3dbf9012ff0e04e86d4db6cbfaa96677ed9879deb684b90c93c23123e51e04358f064a135856d900d2d2b0e13249e9044d6b9e6dae14ebff6720eb6cdfa2602f7e7611f136fc60b1cb8d7f0d6d06b4e1cbe7fed024ccc1fbdd0867625d6a837d8036295ceec53935729befbe156ff517ddb3e2f5c2944dbb1bf302d74951fe12d51c8ab13ddfc59d48f08d55f8fd778190b3630a4498c585a9f8f216c0e58b3c79c85c4ee2e7d7113062ad8a95917667926fbf86fe97c8b7d3483f273bcca8a13ca45f5962d8e9e0f0f144bc86afef87c44c9df2d5f686c7d655704f8a82e0e4bb071803687746dfa4ae537ffa83c246d1bf6769e6ab2e05b840b15bf89a8068ea40cabae7c4061accbb43bebb8589f6e08003c5305724a2d741b7c0f49a6d56376e29b56154b3ba371a753d2671a278b226c813edec56329e8d25d833448daa88cb788f27452ad4be9edc47a782a8044ff3d5be9ab761ad7da191b02bd8056d18c985b2246ab37e47fe1ace4d4822c95b0ea20647c5712b709e030d0c06b802d44060cfbf3d312a76f7c989f5503216d9e72e1944f2e95e18217702a28bfca30933dfc9b3ab151d59833ed181f64c7587d3977ecf1ca7cb57fcf3613f00c2c196d096af8f32763e47d1b321be12aa921603ddbadc1f2da84bbb619b7431566e58ee31956ad27fa14384d2b1d8cda02b5e3d5463db4d0218deb58f8b324db5571680addc72a2ef6abe29a1b0b418f57fef945991d0eb1aef2615f8c2e40b7b8479f47039a1a470a7ca8cbcff3b541d14ff313593613001056a4b84aee7fbfbd7bf8d150edad7a13349b6052fbed027f696b64270ccba6009256e5fe2a9fc61e5b3d016c4bc9fafcefb346d8c69925fe30582984c36dd7747308921ffdc517da1dfa5220a6d10d6540e218f3556f51af57e72ae0ee4ab2c984b5264a92c657fb08cfbd86505a5a4a4eb972ed409677dc89af813f4967596e225c0f59c4c0573ccbba120864408522a6747ab08c12418a08579c66943dced92314aa90c73ac358fbe90c51b9a91bc6698c9015a98fbb2f721bbe8763e3068199a459ba3a7540a29f3ba8c474bb25e428b7c30252ca8b547c6d607ac644b6ac2a2fd50dd8d6cca22244eedbc6abadc0bd06ad28f72c3934fd117f75620287c46fd3acc47822c38d81c0744ae1ab81fb5b3cdcb7f32aa42cd9726f6fbba08dd5973fb01fdba4f49124761713a34d2c52cc4791d1b6833f35265b7a5472bd1427700b3055216c6e897413f480990ea97ae61b5b658718eda3fc8a7b90fe6b35374d13409c289e49fa3b0f6f1d5540f7fdb3717aa1c2bc469cfa452aa731c775322467d575abc0ed4868220ba386f49f3eee0408f42d47edecedb5db7684bb533c2c86a54b71f7936fcf0e639859674f75499fac4ae5cb5c30f66ecba0a0e73ffc4980fcbb3e695aecc2b01759c21434db1acd9272d99e3d981fd8b394b63f37db64f8eed7f35ff6a5c286d8596deda79a294661f0ef0380ed035f1f9c9db985317c7420646b0c931ec2e02bd5228afc9bfcbdffc951522579715706b2feb2cc0ee6b4358fdcce801694e34f36"}, {0x2, 0x8000, 0x8, &(0x7f0000001a80)="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"}]}) socketpair(0x5, 0xa, 0xfff, &(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002d40)={'pim6reg1\x00', &(0x7f0000002c80)=@ethtool_flash={0x33, 0x80000000, './file0\x00'}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002d80)=r0, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000002dc0)={0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002e00)={r2, 0x7, 0x61d549a9, 0x7f}) r5 = openat(r4, &(0x7f0000002e40)='./file0\x00', 0x20200, 0x32) r6 = dup(r0) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000002e80)={0x3, 0x6, 0x401, 0x1ed}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0\x00'}) getpeername$packet(r1, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002f40)=0x14) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002f80), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000002fc0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$CEC_G_MODE(r7, 0x80046108, &(0x7f0000003000)) r8 = dup(r6) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000003180)={&(0x7f0000003040), 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x60, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x48855) syz_usbip_server_init(0x5999eeee64a73715) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003200), r5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x1c, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x1) pipe2(&(0x7f0000003300), 0x80080) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000003380), r5) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x3c, r11, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x880) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000003480)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 'dh\x00', 0x20, 0x2a27652c, 0x28}, {@multicast1, 0x4e21, 0x3, 0xe3, 0x6, 0x1}}, 0x44) fcntl$setpipe(r1, 0x407, 0x100) syz_usb_connect(0x6, 0x7b2, &(0x7f0000003500)={{0x12, 0x1, 0x201, 0x9c, 0xb5, 0x74, 0x8, 0x1b3d, 0x118, 0x4400, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x4, 0x9, 0x7, 0x52f8e299c548d896, 0x54, [{{0x9, 0x4, 0x61, 0x81, 0x6, 0xb, 0xc7, 0xba, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0x20, 0x3a, "9ba9403354a9c9da33"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x2, 0x99, 0x6, [@generic={0x4f, 0xa, "a5649b97720edf5429aba142b4cf09f8af2730025cd5193af5ea4c1bb7f1ca26d225866baa784c0e72e3eca74e3db0bce2eb6b53930ec25cce48fe778f67cc4fcc8b72c8a3ab6ed50cac697e6b"}, @generic={0x30, 0x22, "17d12bdb78010159e67b508dd152de43661e07fa6f80307f8d41aea36d4f4fd6483b304584f0e889f41fdfb6bef8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0xd, 0x1}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x8, 0xc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8e}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xf, 0x5, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x9, 0xff, [@generic={0x49, 0x22, "a6889abd9e51ed6a65dc6a0889f40144c39609915dad4e54edb6f5f6b8aab0699dc2c581d4b801f6e3ad81f6034d236bdf41ba05409e635a21098265618008d612af0673c3dfaf"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x6, 0x5, [@generic={0xe9, 0x0, "479ccfd481459a80b9156f683222e5a6b6157f13d6922ac27897714b93a62bbdccc1a7eb2da74083d9b13ac5340f2166f3ee319a6cc93112a44d9f675b43c98abf6e15a7c80c34b3546a4657e34477266fb96deebfa2e7b92c6ff50db031c4f675b19a783a1f0a795cf200479e51aeeb45ca93ca66d66a7eee02be98c99311aef66042f2188f8117c79cacdca50d72d3283843577d2548ec5d2797ab9ba692700f3d6cdc0d5b05af697e647d77d81592dfbe515653f9a6f62ede715e3f4ac4b257182f202cfaf4c24561a2b18581a7ee1db962ee8d2b8dad1d41855986cd4a870b1cc1feadf311"}]}}]}}, {{0x9, 0x4, 0x7e, 0x9, 0x7, 0x9a, 0x93, 0x1d, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0xfffb, 0x24}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x2, 0x1, [0x1], 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x4, 0x4, 0x1}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0xa, 0xa, 0x6, 0x1, 0x5], 0x9}]}, @generic={0xe1, 0xc, "45e3e4942a12e1614ab9742a57e1998c6ca6ecc08527cd5a7c832d73e77ddbce65aa558ac507a8fd74a8868dcd9fdd882f6a2945ee8d113c041d165e32bacbf71f2bbe91bf1fb8da45717cff2493a91f220d8f94734e702a0ea4b16d95ac88de07f700314802aee82d588ed73a1c0887c418c5c0891dd66f628fdc2dd2b29ac22c4990d070122dce36d56be5ca6f0d98b5af31927288cd0599c4951c143827b665d03d31e6e4fc6a75f99e9e95e44f846702b2801ca6b51cddbbe0fc649503258ee0e2ece602cc24f42956d71701331b9e38c8eae20d93e2e155825146e0e4"}], [{{0x9, 0x5, 0x4, 0x1, 0x400, 0x1, 0x7, 0x5}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x8, 0x2, 0xfa}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x4}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x5, 0x3, 0x2}}, {{0x9, 0x5, 0x80, 0x93bb2ecaacfe39a4, 0x20, 0xed, 0x0, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x20, 0x3, 0x9}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x80, 0x18, 0x81, [@generic={0x46, 0x23, "70b2c4233bd4f4800eb007d23ba2d97a4ada7744a7b74e7425104de6a0bb6b24108fc0d3a626aaf73943ef165a2f3eacd1ac051e0c2e5dbd05ef8cab1cd0ea3563c72754"}]}}]}}, {{0x9, 0x4, 0xef, 0x7, 0xb, 0x19, 0x18, 0x6d, 0x7, [], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0x8f, 0x2d, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x31, 0x5899}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x0, 0x4, 0x9, [@generic={0x32, 0x6, "25a94c8af10d13034c6133a088eb84b708862c9bbe23488b305b68296ada10315ecb64b538b5d703c8add21322c9506c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x3, 0x9, 0xf}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x40, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x2fb}]}}, {{0x9, 0x5, 0x86, 0x0, 0x10, 0x8, 0xb, 0x1, [@generic={0x8e, 0xd, "ade7fc642dee52b70a0b640d107dcf6dae482074270cb0862feae6bb5ba76463f2f12861c03fa38a7072543d8970bd79e2b8ac9b4f43b4b8a32ced88d5f463c3c36c23d47906789e08a5dc3a2c9f66db4f1ca353f41d94964c7ea47ae748c62ce7d0a12cafe766fcdf626af04a156ff9d46373c41a854798c46dfdda0bb01095d04a6b7c27d581c7f1d8bbc5"}]}}, {{0x9, 0x5, 0x4, 0x15, 0x3ff, 0xd4, 0x6e, 0x2, [@generic={0x4c, 0x1, "28958abd991776e7d39acf4fc3ca3e818f841fd58a3bf5a39f865c42cb38d692bfb263fb8678c1aec9093511ba86ecad9831d0b69da433fcac91dc2cbf709ecc15838e1e945bc29ff18e"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0xff, 0xa0, 0xf2}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfffc}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0xae, 0x3, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7, 0x3, 0x7f}}]}}, {{0x9, 0x4, 0x80, 0x3, 0x3, 0x83, 0x44, 0x5c, 0x8, [@generic={0xc2, 0x21, "96b466a5cbc3dae1854df1774970776d4c4a896884185d1db2237901beeb6fbe303678eac32c94bcd7110a609d21336d4d86a953a4fc661d3f53c667c9dd8ae43f0d166c68ee1d825554bf92c654af13e8ab5ffb3eda1d04cf2470e189a2c3f068605fa8a758a8f75ddaa86e498a750ca45067d689f856f2339283c4dc1c6b5538ad11a17591f9226fca31c20650234683d91167e3c2502aca191ecfe0572039f7ea9aa1e8eb287404193d1a01ee1decc171b240bde7303dac1169ef17606aa2"}], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x81, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3f6a}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x3, 0x3, 0x0, [@generic={0x69, 0x10, "0092305e44fddbf40a6c849a09fb14d8b9d3f5f41e541991252136777e30cf5a2959311aaa1f5850f1b978e2259616bcc91f2761eb3b6093db16758e5e9db4501378bec9a7c0ae143b2466a1484f266752e099ae876ddcc40cbf9808b58f0c505f0913c7502ac8"}, @generic={0xfc, 0x4, "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"}]}}]}}]}}]}}, &(0x7f0000003e40)={0xa, &(0x7f0000003cc0)={0xa, 0x6, 0x201, 0x1, 0x9, 0x30, 0x8, 0x3}, 0x12, &(0x7f0000003d00)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x8, 0x9}]}, 0x4, [{0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x413}}]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003ec0), 0x11b280, 0x0) 30m9.020052276s ago: executing program 3 (id=405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x1c0, 0x0, 0x380, 0xe0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x24}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4, 0xf}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff64347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945dfa32005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000002740)="45e88cbe3c68", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="04000000000000", @ANYRESHEX], 0x20) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000300)=r3) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x101, 0x0, 0xa0}) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) 30m8.454635771s ago: executing program 32 (id=405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x1c0, 0x0, 0x380, 0xe0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x24}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4, 0xf}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff64347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945dfa32005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000002740)="45e88cbe3c68", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="04000000000000", @ANYRESHEX], 0x20) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000300)=r3) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x101, 0x0, 0xa0}) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) 27m39.727961251s ago: executing program 1 (id=963): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 27m38.71187934s ago: executing program 1 (id=966): fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async, rerun: 32) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (rerun: 32) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000bb6000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (rerun: 64) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 27m38.61542488s ago: executing program 1 (id=967): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00fffd801900", [0x0, 0x2000000000001]}}) 27m38.437719114s ago: executing program 1 (id=968): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r2, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getchain={0x5c, 0x66, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0x4, 0xd}, {0xfff2, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d0}, 0x8840) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@permit_directio}, {@smackfstransmute}, {@subj_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '#'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@dont_appraise}]}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)="790323f276ebf2985fc2995e14a066ed76e62d1fecd49c3abfcc41", 0x1b, 0x6) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 27m38.085821179s ago: executing program 1 (id=970): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) (async) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) (async) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000500)=@pptp={0x2d, 0x2, {0x0, @remote}}, 0x80, 0x0}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1, 0x700}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdffffeffffff, 0x800, 0x40003, 0x1}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'netpci0\x00', 0x1000}) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c0002400000000000f500090800014000000ba308000140"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x0) 27m37.763945558s ago: executing program 1 (id=971): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) 27m37.258789779s ago: executing program 33 (id=971): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) 11m29.77359745s ago: executing program 0 (id=4877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r4 = fanotify_init(0x200, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x501, 0x48001060, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r6) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x400081) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r0], 0x23c}}, 0x0) 11m29.491731954s ago: executing program 0 (id=4878): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) syz_open_procfs(0x0, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x98, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_FLAGS={0x0, 0xb, 0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x800) 11m28.530567985s ago: executing program 0 (id=4880): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ed2dad7580be51f13ca3800"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ed2dad7580be51f13ca3800"/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) 11m27.261132127s ago: executing program 0 (id=4884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="5f58ba8fdf4a36581b34846b7f2ad5966abfc264dae460e2af4ab59fc20fc5683efac75dc209e5e2f5e019970f2d616327ddafeb65e924e199eccb196b408d61465f29ccd3cc30af0ca4d0ab66439faa9f9c8cfa628ce736a2d8f49c58b938a740da8a4bef77e4b9e0", @ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r1], 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x20000081) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r7, 0x8, 0x9) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x1, r7}) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009fef7f2099043910760c010203010902450001000010000904b00002a1e0d800052406000105240006000d24020100000000060091008106241a00002f0424020009050402ffe7ff0000090582021800"], 0x0) 11m24.18119543s ago: executing program 0 (id=4898): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x22020600) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x3, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000001180)=""/109, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) 11m23.827160155s ago: executing program 0 (id=4899): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000200)='./file0\x00', r3}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x4}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff5, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x3590, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x9, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x10000003, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0xc, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) close_range(r1, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r10, 0xffffffffffffffff, 0x0) 11m23.256554547s ago: executing program 34 (id=4899): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000200)='./file0\x00', r3}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x4}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff5, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x3590, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x9, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x10000003, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0xc, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) close_range(r1, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r10, 0xffffffffffffffff, 0x0) 7m20.724868114s ago: executing program 6 (id=5525): syz_open_dev$sg(&(0x7f0000000040), 0xffffffffffffffff, 0x246843) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000040)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) io_setup(0x8003, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r3 = dup(r2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000040)={0xf030002, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980001, 0x4, '\x00', @p_u8=0x0}}) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 7m20.302407763s ago: executing program 6 (id=5527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000010a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000010000000000000020000000000000000000000000000000000000000000000000c0015005b07350081"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 7m20.191408546s ago: executing program 6 (id=5528): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbdc117751bc76bd884d5681095fb20e708dffaaea4000008002b001f8dffff08002ba4f0068c02ff8a1c8b", @ANYRES32=0x0, @ANYBLOB="08003b0006"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x4000000000000306, 0x3, 0x27, [0x8000]}}, @generic={0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x180}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x800, 0x300e, 0x0, 0xa, 0x3, 0x2, 0x4}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000880)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x5f, {"460f20c6b805000000b9178f56dd0f01c166baf80cb873b03c8eef66bafc0cb086eec4e250f3d5c4027d1943f466410f388085811f00002333c4613972e4ab3e430f01cb66ba2000b805080000ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x3e, 0x5, 0x6, 0x2}}, @uexit={0x0, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x80000000}}, @nested_load_code={0x12e, 0x53, {0x0, "66b83a008ec0c4c22db60d40991cf036420f326643a5decb650f01ca430f17ab000000003e660fc73066baf80cb8cc37408bef66bafc0ced0fc72b"}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xc885, 0x1, 0x3db}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x2}}, @in_dx={0x69, 0x20, {0x1126, 0x1}}, @wrmsr={0x65, 0x20, {0x345, 0xa000}}, @set_irq_handler={0xc8, 0x20, {0x64, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb30, 0x3}}], 0x272}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m19.984886937s ago: executing program 6 (id=5529): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{0x0, 0x56}, {&(0x7f0000000080)="5404f15ca2cd15ee176eb03aa18504000000", 0x4}], 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021200015f6560700904010800ffa230e65d"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x8, &(0x7f0000000600)=@string={0x8, 0x3, "7173913aa7ed"}}, {0xc9, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) fstatfs(r1, &(0x7f0000000380)=""/21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket(0x1d, 0x800, 0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x200d01) syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\xe5h\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\x86B%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xda\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x4) lseek(r4, 0x0, 0x3) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, 0x0) r6 = syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x8000, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x9d, 0x9, 0x5, 0x7f, @time={0xcd1, 0x80000001}, {0x6, 0xff}, {0x5, 0x9}, @note={0x7, 0x1, 0x1, 0xb, 0xff}}, {0xc, 0x5, 0xe, 0x5, @tick=0x4a6e, {0xff, 0x1}, {0x5, 0x4}, @note={0x86, 0x6, 0xf3, 0x2, 0x1}}, {0x66, 0x0, 0xa4, 0x5, @tick=0x8, {0x7, 0x80}, {0x4, 0x6}, @quote={{0x2, 0x8}, 0x3}}, {0x5, 0x78, 0xae, 0x9, @time={0xda, 0x7b}, {0x7, 0x80}, {0x4, 0x3}, @raw32={[0x8, 0x8000, 0xacc]}}, {0xc, 0xa3, 0x6, 0x6, @tick=0x2, {0xc, 0x5}, {0xf3, 0x1}, @connect={{0xef, 0xb}, {0x4, 0x5}}}, {0x0, 0x4, 0x13, 0x1, @time={0x3, 0x9}, {0x1, 0xb}, {0x5, 0xf}, @raw32={[0x10, 0x5, 0x2]}}], 0xa8) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x89100) dup3(0xffffffffffffffff, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x100000, 0x0, 0x0, 0x0) 7m19.376116173s ago: executing program 6 (id=5531): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 7m19.060155062s ago: executing program 6 (id=5532): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r6, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r8) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b1500080000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0431000014b401002000128008000100677470001400028008000700ac1e0101050032b2969a0500c494edab274aa4ac33e61bffa429559db94e5c73416c9b60bc58acad3e23743b94e89bab94ecda90e49548d4244fcbe1828a95956f7c6cc8c39b09d7d621955006726ffcef384780f498882afa5f1e877dbeffc2613e65ab6ee4c1db1b54021bdcb48cafa67d2982d74f75fc87dbc7d76e67c9b965305682bf1b85000000000000"], 0x40}}, 0x0) 7m18.514907516s ago: executing program 35 (id=5532): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r6, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r8) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b1500080000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0431000014b401002000128008000100677470001400028008000700ac1e0101050032b2969a0500c494edab274aa4ac33e61bffa429559db94e5c73416c9b60bc58acad3e23743b94e89bab94ecda90e49548d4244fcbe1828a95956f7c6cc8c39b09d7d621955006726ffcef384780f498882afa5f1e877dbeffc2613e65ab6ee4c1db1b54021bdcb48cafa67d2982d74f75fc87dbc7d76e67c9b965305682bf1b85000000000000"], 0x40}}, 0x0) 28.869838801s ago: executing program 4 (id=7002): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x31, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xfffffffffffffffc}]}}]}, 0x98}}, 0x4000080) 28.627553623s ago: executing program 4 (id=7007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 28.467754664s ago: executing program 4 (id=7012): unshare(0x22020600) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x208840, 0x0) fdatasync(r0) 28.311698713s ago: executing program 4 (id=7016): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c49f8c41109"], 0x33) close(r0) 28.184750348s ago: executing program 4 (id=7020): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 28.063033346s ago: executing program 4 (id=7022): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/243, 0xf3}], 0x1) read$usbmon(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 19.414232524s ago: executing program 7 (id=7142): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="04000b00080009"], 0x40}}, 0x8000) 19.323505744s ago: executing program 7 (id=7144): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c", 0x5c}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.055863057s ago: executing program 7 (id=7150): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4093, 0xffd}], 0x1}}], 0x1, 0x34000, 0x0) 18.979353378s ago: executing program 7 (id=7154): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="04000b00080009"], 0x40}}, 0x8000) 18.829163195s ago: executing program 7 (id=7159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 17.830789554s ago: executing program 7 (id=7170): unshare(0x22020600) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000380), 0x4) 12.905292606s ago: executing program 36 (id=7022): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/243, 0xf3}], 0x1) read$usbmon(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 2.670746401s ago: executing program 37 (id=7170): unshare(0x22020600) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000380), 0x4) 2.510887701s ago: executing program 9 (id=7337): r0 = syz_open_dev$dri(&(0x7f0000000700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, 0x0, 0x0, 0xa000000, 0x80002000, 0x80000001, 0x0, 0x2, 0x5, 0xd, 0x20000, 0x3}) 2.29827169s ago: executing program 9 (id=7341): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.082858762s ago: executing program 9 (id=7343): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 2.081971526s ago: executing program 5 (id=7344): socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) acct(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x9, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.961245028s ago: executing program 9 (id=7345): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800035, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x2000000002d, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000140)=0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x8, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x4}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.941809767s ago: executing program 5 (id=7346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000bbffe641a3e02bb664010100000000000000000000000080800000cc000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000100000000000040fbffffffffffffff00000000000000000100000000000000020000000000000000000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff9d"], 0xb8}}, 0x10) 1.830083094s ago: executing program 5 (id=7348): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @aes128, 0x2, @desc3}) openat$dir(0xffffffffffffff9c, 0x0, 0x6001, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r2, 0x402, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 1.755126761s ago: executing program 9 (id=7349): r0 = socket$tipc(0x1e, 0x5, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x5, 0x2) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socket$netlink(0x10, 0x3, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80000) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0xa090, 0x211, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x80, 0x3, 0x8001, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xb, 0xaa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r3, 0x31}, 0x10) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 847.73613ms ago: executing program 2 (id=7354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x6c}}, 0x0) 830.697556ms ago: executing program 5 (id=7355): socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) acct(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x9, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 790.095396ms ago: executing program 8 (id=7356): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 676.218467ms ago: executing program 2 (id=7357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000bbffe641a3e02bb664010100000000000000000000000080800000cc000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000100000000000040fbffffffffffffff00000000000000000100000000000000020000000000000000000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff9d"], 0xb8}}, 0x10) 547.849552ms ago: executing program 8 (id=7358): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1fffffff, 0x900}}) 547.69765ms ago: executing program 2 (id=7359): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x6b, 0x40, 0xfa00, {{0xa, 0x5, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0xffffffffffffffff, 0x6}}, 0x48) 526.807099ms ago: executing program 5 (id=7360): r0 = syz_open_dev$dri(&(0x7f0000000700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, r2, r3, 0xa000000, 0x80002000, 0x80000001, 0x0, 0x2, 0x5, 0xd, 0x20000, 0x3}) 497.856817ms ago: executing program 2 (id=7361): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) 426.192918ms ago: executing program 8 (id=7362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 388.295038ms ago: executing program 5 (id=7363): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) 340.314876ms ago: executing program 9 (id=7364): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @aes128, 0x2, @desc3}) openat$dir(0xffffffffffffff9c, 0x0, 0x6001, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r2, 0x402, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 302.997785ms ago: executing program 8 (id=7365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 255.115352ms ago: executing program 2 (id=7366): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x7ffffe, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000008fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)}], 0x1, &(0x7f0000006640)=ANY=[], 0x108}}], 0x1, 0x0) 202.975649ms ago: executing program 8 (id=7367): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x3, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 42.556041ms ago: executing program 8 (id=7368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 0s ago: executing program 2 (id=7369): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x3) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.623411][T32647] RSP: 002b:00007f7ea1d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.623432][T32647] RAX: ffffffffffffffda RBX: 00007f7ea11e6090 RCX: 00007f7ea0f8f749 [ 1804.623445][T32647] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1804.623456][T32647] RBP: 00007f7ea1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.623468][T32647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.623480][T32647] R13: 00007f7ea11e6128 R14: 00007f7ea11e6090 R15: 00007f7ea130fa28 [ 1804.623512][T32647] [ 1805.308369][ T5871] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1805.412095][ T5891] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1805.519823][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 1805.543082][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.558216][ T5871] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1805.568438][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.577694][ T5871] usb 5-1: Product: syz [ 1805.582082][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 1805.582337][ T5871] usb 5-1: Manufacturer: syz [ 1805.592336][ T5871] usb 5-1: SerialNumber: syz [ 1805.602259][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.631121][ T5891] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1805.646330][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.665521][ T5891] usb 3-1: Product: syz [ 1805.674940][ T5891] usb 3-1: Manufacturer: syz [ 1805.688022][ T5891] usb 3-1: SerialNumber: syz [ 1805.709026][ T5891] usb 3-1: config 0 descriptor?? [ 1805.723067][ T5891] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1805.754026][ T5871] usb 5-1: config 0 descriptor?? [ 1805.765030][ T5871] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1806.006479][ T5871] gspca_t613: unknown sensor 0000 [ 1806.014515][ T5871] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 1806.028072][ T5871] usb 5-1: USB disconnect, device number 120 [ 1806.142623][T32672] netlink: 'syz.7.6664': attribute type 8 has an invalid length. [ 1806.802113][ T5891] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1806.827155][ T5891] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1806.984573][ T5891] usb 3-1: USB disconnect, device number 29 [ 1807.714563][ T5871] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1807.912235][ T5871] usb 3-1: device descriptor read/64, error -71 [ 1808.192138][ T5871] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1808.424823][ T5871] usb 3-1: device descriptor read/64, error -71 [ 1808.542421][ T5871] usb usb3-port1: attempt power cycle [ 1808.892098][ T5871] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1808.921047][T32723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.922759][ T5871] usb 3-1: device descriptor read/8, error -71 [ 1808.935172][T32723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.194503][ T5871] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1809.232772][ T5871] usb 3-1: device descriptor read/8, error -71 [ 1809.362650][ T5871] usb usb3-port1: unable to enumerate USB device [ 1809.912110][ T5828] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1810.052013][ T5871] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1810.062080][ T5828] usb 5-1: Invalid ep0 maxpacket: 16 [ 1810.182101][ T5871] usb 6-1: device descriptor read/64, error -71 [ 1810.192112][ T5828] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 1810.352065][ T5828] usb 5-1: Invalid ep0 maxpacket: 16 [ 1810.357724][ T5828] usb usb5-port1: attempt power cycle [ 1810.422020][ T5871] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1810.552106][ T5871] usb 6-1: device descriptor read/64, error -71 [ 1810.662394][ T5871] usb usb6-port1: attempt power cycle [ 1810.702186][ T5828] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 1810.722608][ T5828] usb 5-1: Invalid ep0 maxpacket: 16 [ 1810.853032][ T5828] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 1810.882747][ T5828] usb 5-1: Invalid ep0 maxpacket: 16 [ 1810.888320][ T5828] usb usb5-port1: unable to enumerate USB device [ 1810.912029][T28711] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1811.002026][ T5871] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1811.022443][ T5871] usb 6-1: device descriptor read/8, error -71 [ 1811.063699][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.074760][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.084597][T28711] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1811.093838][T28711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.104635][T28711] usb 3-1: config 0 descriptor?? [ 1811.262077][ T5871] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1811.282467][ T5871] usb 6-1: device descriptor read/8, error -71 [ 1811.393006][ T5871] usb usb6-port1: unable to enumerate USB device [ 1811.519870][T28711] lg-g15 0003:046D:C222.0070: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1811.844989][ T5828] usb 3-1: USB disconnect, device number 34 [ 1811.979174][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1811.979192][ T30] audit: type=1326 audit(1767259739.963:23475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.011579][ T30] audit: type=1326 audit(1767259739.963:23476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.035513][ T30] audit: type=1326 audit(1767259739.973:23477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.059265][ T30] audit: type=1326 audit(1767259739.973:23478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.083104][ T30] audit: type=1326 audit(1767259739.973:23479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.105948][ T30] audit: type=1326 audit(1767259739.973:23480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.129638][ T30] audit: type=1326 audit(1767259739.973:23481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.153007][ T30] audit: type=1326 audit(1767259739.993:23482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.176340][ T30] audit: type=1326 audit(1767259739.993:23483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.201269][ T30] audit: type=1326 audit(1767259739.993:23484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.8.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1812.642356][T28711] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1812.814140][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.835097][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.867509][T28711] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1812.920208][T28711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.945303][T28711] usb 3-1: config 0 descriptor?? [ 1812.974119][ T311] fuse: Unknown parameter '000000000000000000030000000000000000000000300000000000000000000' [ 1813.371610][T28711] sony 0003:054C:024B.0071: unexpected long global item [ 1813.392753][T28711] sony 0003:054C:024B.0071: parse failed [ 1813.399608][T28711] sony 0003:054C:024B.0071: probe with driver sony failed with error -22 [ 1813.584101][ T5828] usb 3-1: USB disconnect, device number 35 [ 1813.931808][ T335] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1814.272541][ T5828] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1814.461485][ T5828] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1814.500715][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.549252][ T5828] usb 5-1: config 0 has no interface number 0 [ 1814.585976][ T5828] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1814.632594][T28711] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1814.662905][ T5828] usb 5-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.720325][ T5828] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1814.838221][T28711] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 1814.852472][ T5828] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1814.876401][T28711] usb 3-1: config 0 has no interface number 0 [ 1814.904599][T28711] usb 3-1: config 0 interface 93 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.927478][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.942500][T28711] usb 3-1: config 0 interface 93 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.972126][T28711] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1815.001567][T28711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.016028][ T5828] usb 5-1: Product: syz [ 1815.047185][T28711] usb 3-1: config 0 descriptor?? [ 1815.062993][ T5828] usb 5-1: Manufacturer: syz [ 1815.104047][ T5828] usb 5-1: SerialNumber: syz [ 1815.141369][ T5828] usb 5-1: config 0 descriptor?? [ 1815.277467][ T364] netlink: 'syz.7.6707': attribute type 58 has an invalid length. [ 1815.285960][ T364] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6707'. [ 1815.368237][ T5828] cdc_subset 5-1:0.110: probe with driver cdc_subset failed with error -22 [ 1815.515627][T28711] uclogic 0003:256C:006D.0072: interface is invalid, ignoring [ 1815.569413][ T341] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.6700'. [ 1815.604627][ T341] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1815.694481][T28711] usb 5-1: USB disconnect, device number 125 [ 1815.830727][ T377] netlink: 91 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1816.424229][ T396] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1817.386045][ T5871] usb 3-1: USB disconnect, device number 36 [ 1817.889339][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1817.889357][ T30] audit: type=1326 audit(1767259745.873:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=408 comm="syz.4.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1818.041725][ T30] audit: type=1326 audit(1767259745.923:23501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=408 comm="syz.4.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1818.163422][ T30] audit: type=1326 audit(1767259745.923:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=408 comm="syz.4.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1818.282902][ T30] audit: type=1326 audit(1767259745.923:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=408 comm="syz.4.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1818.394057][ T30] audit: type=1326 audit(1767259745.923:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=408 comm="syz.4.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1818.438657][ T6365] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1818.602025][ T5891] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1818.822342][ T6365] dvmrp6 (unregistering): left allmulticast mode [ 1818.833541][ T5891] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1818.902447][ T5891] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.967872][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1818.999150][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.072849][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1819.080699][ T5891] usb 6-1: invalid MIDI out EP 0 [ 1819.152139][ T434] netlink: 452 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1819.360767][ T30] audit: type=1800 audit(1767259747.343:23505): pid=437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6726" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1819.397857][ T5891] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1819.420663][T26753] udevd[26753]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1819.628977][ T6365] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1819.637961][ T6365] bond0 (unregistering): Released all slaves [ 1819.658075][ T6365] bond1 (unregistering): Released all slaves [ 1819.817236][ T6365] bond2 (unregistering): Released all slaves [ 1820.262996][ T6365] bond3 (unregistering): Released all slaves [ 1820.378063][ T5891] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1820.447619][ T6365] bond4 (unregistering): Released all slaves [ 1820.557893][ T5891] usb 3-1: Invalid ep0 maxpacket: 64 [ 1820.590758][ T6365] bond5 (unregistering): Released all slaves [ 1820.603631][ T6365] bond6 (unregistering): Released all slaves [ 1820.660999][ T6365] : left promiscuous mode [ 1820.695023][ T5891] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1820.708233][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.719036][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.852326][ T5891] usb 3-1: Invalid ep0 maxpacket: 64 [ 1820.880177][ T5891] usb usb3-port1: attempt power cycle [ 1821.242203][ T5891] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1821.291386][ T5891] usb 3-1: Invalid ep0 maxpacket: 64 [ 1821.337324][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.353315][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.422308][ T5891] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1821.445859][ T5891] usb 3-1: Invalid ep0 maxpacket: 64 [ 1821.451569][ T5891] usb usb3-port1: unable to enumerate USB device [ 1821.491379][ T6365] hsr_slave_0: left promiscuous mode [ 1821.499360][ T6365] hsr_slave_1: left promiscuous mode [ 1821.536261][T29600] usb 6-1: USB disconnect, device number 90 [ 1822.032119][T29600] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1822.242093][T29600] usb 6-1: Using ep0 maxpacket: 16 [ 1822.270538][T29600] usb 6-1: config 0 has no interfaces? [ 1822.287917][T29600] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1822.308178][T29600] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1822.317751][T29600] usb 6-1: Manufacturer: syz [ 1822.367460][T29600] usb 6-1: config 0 descriptor?? [ 1822.422485][ T5871] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1822.602008][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 1822.659981][ T461] netlink: 'syz.5.6734': attribute type 1 has an invalid length. [ 1822.668559][ T5871] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 1822.678219][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1822.705038][ T5871] usb 5-1: Manufacturer: syz [ 1822.720433][ T5871] usb 5-1: config 0 descriptor?? [ 1822.945243][ T468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.954506][ T468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.347403][ T474] tipc: Started in network mode [ 1823.354606][ T474] tipc: Node identity 0ecb98d19037, cluster identity 4711 [ 1823.362081][ T474] tipc: Enabled bearer , priority 0 [ 1823.455218][ T461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1823.515630][ T475] bond1: (slave gretap1): making interface the new active one [ 1823.546429][ T475] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1823.563353][ T476] syzkaller0: entered promiscuous mode [ 1823.568857][ T476] syzkaller0: entered allmulticast mode [ 1823.605738][ T5871] usb_8dev 5-1:0.0 can0: sending command message failed [ 1823.625407][ T5871] usb_8dev 5-1:0.0 can0: can't get firmware version [ 1823.637473][ T471] tipc: Resetting bearer [ 1823.677346][ T492] netlink: 'syz.4.6743': attribute type 8 has an invalid length. [ 1823.707185][ T471] tipc: Disabling bearer [ 1823.779642][ T487] kvm: kvm [486]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 1823.786221][ T495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6744'. [ 1823.826474][ T495] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6744'. [ 1823.848954][ T5871] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 1823.889485][ T487] kvm: kvm [486]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 1823.984980][ T5871] usb 5-1: USB disconnect, device number 126 [ 1824.108596][ T487] kvm: kvm [486]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1824.137662][ T487] kvm: kvm [486]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1824.295498][ T6365] IPVS: stop unused estimator thread 0... [ 1824.548816][ T511] netlink: 'syz.2.6750': attribute type 2 has an invalid length. [ 1824.622028][ T5891] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1824.757081][T28711] usb 6-1: USB disconnect, device number 91 [ 1824.786023][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.808804][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.840760][ T5891] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1824.870125][ T5891] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1824.888370][ T5891] usb 5-1: Manufacturer: syz [ 1824.900567][ T5891] usb 5-1: config 0 descriptor?? [ 1824.947395][ T520] fuse: Bad value for 'group_id' [ 1824.952617][ T520] fuse: Bad value for 'group_id' [ 1825.312319][T29600] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1825.496130][T29600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.530318][T29600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.561877][T29600] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1825.601369][T29600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.630660][T29600] usb 3-1: config 0 descriptor?? [ 1825.943838][ T5891] uclogic 0003:256C:006D.0073: failed retrieving string descriptor #100: -71 [ 1825.965008][ T5891] uclogic 0003:256C:006D.0073: failed retrieving pen parameters: -71 [ 1825.975060][ T5891] uclogic 0003:256C:006D.0073: failed probing pen v1 parameters: -71 [ 1825.985573][ T5891] uclogic 0003:256C:006D.0073: failed probing parameters: -71 [ 1825.996863][ T5891] uclogic 0003:256C:006D.0073: probe with driver uclogic failed with error -71 [ 1826.027076][ T5891] usb 5-1: USB disconnect, device number 127 [ 1826.223039][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.233821][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.247645][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.260327][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.275562][T29600] hid-led 0003:1D34:000A.0074: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1826.326870][T29600] hid-led 0003:1D34:000A.0074: Dream Cheeky Webmail Notifier initialized [ 1826.461586][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.510273][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.582893][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.615227][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.671676][T29600] usb 3-1: USB disconnect, device number 41 [ 1826.687555][ T30] audit: type=1326 audit(1767259754.643:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.719161][ T30] audit: type=1326 audit(1767259754.703:23507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.752008][ T30] audit: type=1326 audit(1767259754.703:23508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.775521][ T30] audit: type=1326 audit(1767259754.703:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.808006][ T30] audit: type=1326 audit(1767259754.703:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.835121][ T30] audit: type=1326 audit(1767259754.783:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.859219][ T30] audit: type=1326 audit(1767259754.793:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.882469][ T30] audit: type=1326 audit(1767259754.793:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.906869][ T30] audit: type=1326 audit(1767259754.793:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1826.932475][ T30] audit: type=1326 audit(1767259754.793:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=547 comm="syz.4.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc158f749 code=0x7ffc0000 [ 1827.310900][ T557] tap0: tun_chr_ioctl cmd 1074025677 [ 1827.317251][ T557] tap0: linktype set to 776 [ 1827.510235][ T560] veth4: entered allmulticast mode [ 1827.566700][ T563] fuse: Bad value for 'group_id' [ 1827.584748][ T563] fuse: Bad value for 'group_id' [ 1827.735599][ T571] FAULT_INJECTION: forcing a failure. [ 1827.735599][ T571] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.782103][ T571] CPU: 1 UID: 0 PID: 571 Comm: syz.2.6766 Tainted: G L syzkaller #0 PREEMPT(full) [ 1827.782136][ T571] Tainted: [L]=SOFTLOCKUP [ 1827.782142][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1827.782150][ T571] Call Trace: [ 1827.782155][ T571] [ 1827.782161][ T571] dump_stack_lvl+0xe8/0x150 [ 1827.782180][ T571] should_fail_ex+0x414/0x560 [ 1827.782200][ T571] should_failslab+0xa8/0x100 [ 1827.782217][ T571] kmem_cache_alloc_noprof+0x88/0x710 [ 1827.782234][ T571] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1827.782246][ T571] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1827.782260][ T571] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1827.782278][ T571] mmu_topup_memory_caches+0x21/0x170 [ 1827.782292][ T571] kvm_mmu_load+0x9d/0x22d0 [ 1827.782305][ T571] ? kvm_msr_allowed+0x9a/0x490 [ 1827.782319][ T571] ? kvm_msr_allowed+0x9a/0x490 [ 1827.782333][ T571] ? kvm_msr_allowed+0x9a/0x490 [ 1827.782346][ T571] ? kvm_msr_allowed+0x9a/0x490 [ 1827.782359][ T571] ? kvm_apic_has_interrupt+0x744/0x770 [ 1827.782379][ T571] vcpu_run+0x5497/0x7670 [ 1827.782413][ T571] ? cpufreq_update_util+0x8e/0x290 [ 1827.782473][ T571] ? __pfx_vcpu_run+0x10/0x10 [ 1827.782498][ T571] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1827.782529][ T571] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1827.782547][ T571] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1827.782563][ T571] ? rcu_is_watching+0x15/0xb0 [ 1827.782578][ T571] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1827.782601][ T571] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1827.782616][ T571] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1827.782633][ T571] ? __lock_acquire+0x6b6/0x2cf0 [ 1827.782645][ T571] ? __mutex_lock+0x335/0x1350 [ 1827.782660][ T571] ? kasan_quarantine_put+0xbb/0x1f0 [ 1827.782677][ T571] ? do_raw_write_lock+0x120/0x260 [ 1827.782700][ T571] kvm_vcpu_ioctl+0x99a/0xed0 [ 1827.782717][ T571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1827.782729][ T571] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1827.782750][ T571] ? __fget_files+0x2a/0x420 [ 1827.782765][ T571] ? __fget_files+0x2a/0x420 [ 1827.782777][ T571] ? __fget_files+0x3a0/0x420 [ 1827.782789][ T571] ? __fget_files+0x2a/0x420 [ 1827.782803][ T571] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1827.782815][ T571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1827.782828][ T571] __se_sys_ioctl+0xfc/0x170 [ 1827.782839][ T571] do_syscall_64+0xec/0xf80 [ 1827.782850][ T571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.782860][ T571] ? trace_irq_disable+0x37/0x100 [ 1827.782874][ T571] ? clear_bhb_loop+0x60/0xb0 [ 1827.782887][ T571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.782897][ T571] RIP: 0033:0x7fdbd018f749 [ 1827.782907][ T571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1827.782917][ T571] RSP: 002b:00007fdbd10c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.782929][ T571] RAX: ffffffffffffffda RBX: 00007fdbd03e6090 RCX: 00007fdbd018f749 [ 1827.782937][ T571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1827.782944][ T571] RBP: 00007fdbd10c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.782950][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.782956][ T571] R13: 00007fdbd03e6128 R14: 00007fdbd03e6090 R15: 00007fdbd050fa28 [ 1827.782973][ T571] [ 1828.736477][ T591] macvlan0: entered promiscuous mode [ 1828.751980][ T592] @: renamed from vlan0 (while UP) [ 1829.037132][ T604] fuse: Bad value for 'group_id' [ 1829.042473][ T604] fuse: Bad value for 'group_id' [ 1829.379025][ T622] FAULT_INJECTION: forcing a failure. [ 1829.379025][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.392081][ T622] CPU: 0 UID: 0 PID: 622 Comm: syz.5.6783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.392113][ T622] Tainted: [L]=SOFTLOCKUP [ 1829.392121][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1829.392135][ T622] Call Trace: [ 1829.392143][ T622] [ 1829.392152][ T622] dump_stack_lvl+0xe8/0x150 [ 1829.392181][ T622] should_fail_ex+0x414/0x560 [ 1829.392217][ T622] should_failslab+0xa8/0x100 [ 1829.392243][ T622] kmem_cache_alloc_noprof+0x88/0x710 [ 1829.392272][ T622] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1829.392295][ T622] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1829.392322][ T622] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1829.392362][ T622] mmu_topup_memory_caches+0x21/0x170 [ 1829.392387][ T622] kvm_mmu_load+0x9d/0x22d0 [ 1829.392407][ T622] ? kvm_msr_allowed+0x9a/0x490 [ 1829.392433][ T622] ? kvm_msr_allowed+0x9a/0x490 [ 1829.392458][ T622] ? kvm_msr_allowed+0x9a/0x490 [ 1829.392484][ T622] ? kvm_msr_allowed+0x9a/0x490 [ 1829.392505][ T622] ? kvm_apic_has_interrupt+0x744/0x770 [ 1829.392543][ T622] vcpu_run+0x5497/0x7670 [ 1829.392591][ T622] ? cpufreq_update_util+0x8e/0x290 [ 1829.392661][ T622] ? __pfx_vcpu_run+0x10/0x10 [ 1829.392688][ T622] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1829.392719][ T622] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1829.392749][ T622] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1829.392774][ T622] ? rcu_is_watching+0x15/0xb0 [ 1829.392799][ T622] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1829.392838][ T622] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1829.392863][ T622] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1829.392890][ T622] ? __lock_acquire+0x6b6/0x2cf0 [ 1829.392910][ T622] ? __mutex_lock+0x335/0x1350 [ 1829.392937][ T622] ? kasan_quarantine_put+0xbb/0x1f0 [ 1829.392969][ T622] ? do_raw_write_lock+0x120/0x260 [ 1829.393010][ T622] kvm_vcpu_ioctl+0x99a/0xed0 [ 1829.393040][ T622] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1829.393063][ T622] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1829.393100][ T622] ? __fget_files+0x2a/0x420 [ 1829.393126][ T622] ? __fget_files+0x2a/0x420 [ 1829.393148][ T622] ? __fget_files+0x3a0/0x420 [ 1829.393168][ T622] ? __fget_files+0x2a/0x420 [ 1829.393192][ T622] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1829.393214][ T622] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1829.393238][ T622] __se_sys_ioctl+0xfc/0x170 [ 1829.393259][ T622] do_syscall_64+0xec/0xf80 [ 1829.393280][ T622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.393298][ T622] ? trace_irq_disable+0x37/0x100 [ 1829.393323][ T622] ? clear_bhb_loop+0x60/0xb0 [ 1829.393352][ T622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.393371][ T622] RIP: 0033:0x7f53ba78f749 [ 1829.393389][ T622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1829.393407][ T622] RSP: 002b:00007f53bb714038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.393429][ T622] RAX: ffffffffffffffda RBX: 00007f53ba9e5fa0 RCX: 00007f53ba78f749 [ 1829.393444][ T622] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1829.393456][ T622] RBP: 00007f53bb714090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.393469][ T622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.393480][ T622] R13: 00007f53ba9e6038 R14: 00007f53ba9e5fa0 R15: 00007f53bab0fa28 [ 1829.393513][ T622] [ 1830.182240][T29604] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1830.322107][T29604] usb 3-1: device descriptor read/64, error -71 [ 1830.523203][T19108] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1830.572022][T29604] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1830.682047][T19108] usb 6-1: Using ep0 maxpacket: 32 [ 1830.698880][T19108] usb 6-1: config 5 has an invalid interface number: 51 but max is 2 [ 1830.712964][T29604] usb 3-1: device descriptor read/64, error -71 [ 1830.724275][T19108] usb 6-1: config 5 has an invalid interface number: 237 but max is 2 [ 1830.742039][T19108] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1830.764570][T19108] usb 6-1: config 5 has an invalid interface number: 96 but max is 2 [ 1830.783150][T19108] usb 6-1: config 5 has an invalid interface number: 23 but max is 2 [ 1830.796092][T19108] usb 6-1: config 5 has an invalid interface number: 238 but max is 2 [ 1830.812051][T19108] usb 6-1: config 5 has an invalid interface number: 169 but max is 2 [ 1830.821660][T19108] usb 6-1: config 5 has 6 interfaces, different from the descriptor's value: 3 [ 1830.831088][T19108] usb 6-1: config 5 has no interface number 0 [ 1830.837626][T19108] usb 6-1: config 5 has no interface number 1 [ 1830.846476][T29604] usb usb3-port1: attempt power cycle [ 1830.853781][T19108] usb 6-1: config 5 has no interface number 2 [ 1830.859945][T19108] usb 6-1: config 5 has no interface number 3 [ 1830.866181][T19108] usb 6-1: config 5 has no interface number 4 [ 1830.872466][T19108] usb 6-1: config 5 has no interface number 5 [ 1830.878744][T19108] usb 6-1: config 5 interface 51 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1830.895440][T19108] usb 6-1: config 5 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1830.926646][T19108] usb 6-1: config 5 interface 51 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 1830.945071][T19108] usb 6-1: config 5 interface 51 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 1830.961139][T19108] usb 6-1: too many endpoints for config 5 interface 237 altsetting 230: 134, using maximum allowed: 30 [ 1830.967074][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.975507][T19108] usb 6-1: config 5 interface 237 altsetting 230 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1830.993154][T19108] usb 6-1: config 5 interface 237 altsetting 230 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1831.002423][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.005155][T19108] usb 6-1: config 5 interface 237 altsetting 230 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 1831.028323][T19108] usb 6-1: config 5 interface 96 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1831.029215][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.039341][T19108] usb 6-1: config 5 interface 96 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1831.058475][T19108] usb 6-1: config 5 interface 96 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1831.078091][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.088763][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.098453][T19108] usb 6-1: config 5 interface 96 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1831.101072][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.111169][T19108] usb 6-1: config 5 interface 96 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 1831.134742][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.138828][T19108] usb 6-1: too many endpoints for config 5 interface 23 altsetting 98: 122, using maximum allowed: 30 [ 1831.144751][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.155876][T19108] usb 6-1: config 5 interface 23 altsetting 98 bulk endpoint 0xE has invalid maxpacket 64 [ 1831.171919][T19108] usb 6-1: config 5 interface 23 altsetting 98 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1831.193192][T19108] usb 6-1: config 5 interface 23 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 1831.204986][T29604] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1831.219274][T19108] usb 6-1: config 5 interface 23 altsetting 98 has a duplicate endpoint with address 0xE, skipping [ 1831.230543][T19108] usb 6-1: config 5 interface 23 altsetting 98 bulk endpoint 0xA has invalid maxpacket 8 [ 1831.240925][T29604] usb 3-1: device descriptor read/8, error -71 [ 1831.253592][T19108] usb 6-1: config 5 interface 23 altsetting 98 has 7 endpoint descriptors, different from the interface descriptor's value: 122 [ 1831.266939][T19108] usb 6-1: too many endpoints for config 5 interface 238 altsetting 29: 228, using maximum allowed: 30 [ 1831.278322][T19108] usb 6-1: config 5 interface 238 altsetting 29 has a duplicate endpoint with address 0xE, skipping [ 1831.289944][T19108] usb 6-1: config 5 interface 238 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 228 [ 1831.305681][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1831.305704][ T668] FAULT_INJECTION: forcing a failure. [ 1831.305704][ T668] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.317854][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1831.330903][ T668] CPU: 0 UID: 0 PID: 668 Comm: syz.8.6795 Tainted: G L syzkaller #0 PREEMPT(full) [ 1831.330930][ T668] Tainted: [L]=SOFTLOCKUP [ 1831.330938][ T668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1831.330950][ T668] Call Trace: [ 1831.330957][ T668] [ 1831.330966][ T668] dump_stack_lvl+0xe8/0x150 [ 1831.330995][ T668] should_fail_ex+0x414/0x560 [ 1831.331029][ T668] should_failslab+0xa8/0x100 [ 1831.331054][ T668] kmem_cache_alloc_noprof+0x88/0x710 [ 1831.331083][ T668] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1831.331105][ T668] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1831.331130][ T668] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1831.331163][ T668] mmu_topup_memory_caches+0x21/0x170 [ 1831.331187][ T668] kvm_mmu_load+0x9d/0x22d0 [ 1831.331217][ T668] ? kvm_msr_allowed+0x9a/0x490 [ 1831.331240][ T668] ? kvm_msr_allowed+0x9a/0x490 [ 1831.331265][ T668] ? kvm_msr_allowed+0x9a/0x490 [ 1831.331290][ T668] ? kvm_msr_allowed+0x9a/0x490 [ 1831.331313][ T668] ? kvm_apic_has_interrupt+0x744/0x770 [ 1831.331350][ T668] vcpu_run+0x5497/0x7670 [ 1831.331397][ T668] ? cpufreq_update_util+0x8e/0x290 [ 1831.331463][ T668] ? __pfx_vcpu_run+0x10/0x10 [ 1831.331490][ T668] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1831.331520][ T668] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1831.331549][ T668] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1831.331576][ T668] ? rcu_is_watching+0x15/0xb0 [ 1831.331604][ T668] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1831.331644][ T668] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1831.331672][ T668] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1831.331703][ T668] ? __lock_acquire+0x6b6/0x2cf0 [ 1831.331725][ T668] ? __mutex_lock+0x335/0x1350 [ 1831.331753][ T668] ? kasan_quarantine_put+0xbb/0x1f0 [ 1831.331784][ T668] ? do_raw_write_lock+0x120/0x260 [ 1831.331824][ T668] kvm_vcpu_ioctl+0x99a/0xed0 [ 1831.331855][ T668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1831.331877][ T668] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1831.331917][ T668] ? __fget_files+0x2a/0x420 [ 1831.331946][ T668] ? __fget_files+0x2a/0x420 [ 1831.331969][ T668] ? __fget_files+0x3a0/0x420 [ 1831.331990][ T668] ? __fget_files+0x2a/0x420 [ 1831.332016][ T668] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1831.332037][ T668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1831.332061][ T668] __se_sys_ioctl+0xfc/0x170 [ 1831.332082][ T668] do_syscall_64+0xec/0xf80 [ 1831.332102][ T668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.332119][ T668] ? trace_irq_disable+0x37/0x100 [ 1831.332143][ T668] ? clear_bhb_loop+0x60/0xb0 [ 1831.332166][ T668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.332185][ T668] RIP: 0033:0x7f7ea0f8f749 [ 1831.332206][ T668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1831.332223][ T668] RSP: 002b:00007f7ea1dbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.332243][ T668] RAX: ffffffffffffffda RBX: 00007f7ea11e5fa0 RCX: 00007f7ea0f8f749 [ 1831.332258][ T668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1831.332270][ T668] RBP: 00007f7ea1dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.332283][ T668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.332294][ T668] R13: 00007f7ea11e6038 R14: 00007f7ea11e5fa0 R15: 00007f7ea130fa28 [ 1831.332325][ T668] [ 1831.672367][T28711] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1831.686025][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1831.697227][ T672] netlink: 50 bytes leftover after parsing attributes in process `syz.7.6796'. [ 1831.706396][T19108] usb 6-1: config 5 interface 169 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1831.717380][T19108] usb 6-1: config 5 interface 169 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1831.729063][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1831.740407][T19108] usb 6-1: config 5 interface 169 altsetting 7 endpoint 0xD has invalid maxpacket 24989, setting to 64 [ 1831.753204][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1831.764228][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1831.775847][T19108] usb 6-1: config 5 interface 169 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1831.786599][T19108] usb 6-1: config 5 interface 169 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1831.797511][T19108] usb 6-1: config 5 interface 237 has no altsetting 0 [ 1831.804399][T29604] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1831.814863][T19108] usb 6-1: config 5 interface 96 has no altsetting 0 [ 1831.821565][T19108] usb 6-1: config 5 interface 23 has no altsetting 0 [ 1831.832011][T28711] usb 5-1: Using ep0 maxpacket: 8 [ 1831.839461][T28711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.853406][T29604] usb 3-1: device descriptor read/8, error -71 [ 1831.861212][T28711] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1831.872837][T19108] usb 6-1: config 5 interface 238 has no altsetting 0 [ 1831.880570][T19108] usb 6-1: config 5 interface 169 has no altsetting 0 [ 1831.888062][T28711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.898257][T28711] usb 5-1: Product: syz [ 1831.913111][T19108] usb 6-1: Dual-Role OTG device on HNP port [ 1831.919305][T19108] usb 6-1: New USB device found, idVendor=10b8, idProduct=0bb8, bcdDevice=b2.bd [ 1831.939974][T28711] usb 5-1: Manufacturer: syz [ 1831.950636][T28711] usb 5-1: SerialNumber: syz [ 1831.970573][T19108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.981755][T28711] usb 5-1: config 0 descriptor?? [ 1831.989803][T29604] usb usb3-port1: unable to enumerate USB device [ 1832.005104][T19108] usb 6-1: Product: syz [ 1832.010593][T19108] usb 6-1: Manufacturer: syz [ 1832.017927][T28711] cdc_phonet 5-1:0.0: skipping garbage [ 1832.031997][T19108] usb 6-1: SerialNumber: syz [ 1832.037309][T28711] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1832.058090][ T645] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1832.142566][ T689] fuse: Unknown parameter '+ON%O 29 P}U [ 1832.142566][ T689] ˀjQk]"4}MHaW0x0000000000000004' [ 1832.148048][ T688] vlan2: entered promiscuous mode [ 1832.223807][T29600] usb 5-1: USB disconnect, device number 2 [ 1832.225090][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.268199][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.287128][T19108] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1832.314666][T19108] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1832.324522][T19108] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1832.365066][ T695] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1832.639142][ T699] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1832.661344][ T699] CUSE: unknown device info "3ܟ,̘" [ 1832.667577][ T699] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1832.667577][ T699] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1832.687524][ T699] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1832.701616][ T699] CUSE: DEVNAME unspecified [ 1832.749143][ T699] netlink: 'syz.7.6805': attribute type 6 has an invalid length. [ 1832.814993][T28711] hid (null): unknown global tag 0xc [ 1832.821814][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x5 [ 1832.830096][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x6 [ 1832.857636][T28711] hid-generic FF4B:0007:0001.0075: reserved main item tag 0xd [ 1832.866417][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x0 [ 1832.876380][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x0 [ 1832.883892][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x5 [ 1832.891768][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x4 [ 1832.900967][T28711] hid-generic FF4B:0007:0001.0075: unknown main item tag 0x6 [ 1832.926920][T28711] hid-generic FF4B:0007:0001.0075: unknown global tag 0xc [ 1832.934629][T28711] hid-generic FF4B:0007:0001.0075: item 0 0 1 12 parsing failed [ 1832.963553][T28711] hid-generic FF4B:0007:0001.0075: probe with driver hid-generic failed with error -22 [ 1832.993658][T29604] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1833.002571][ T708] FAULT_INJECTION: forcing a failure. [ 1833.002571][ T708] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.032099][ T708] CPU: 1 UID: 0 PID: 708 Comm: syz.8.6808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1833.032128][ T708] Tainted: [L]=SOFTLOCKUP [ 1833.032136][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1833.032148][ T708] Call Trace: [ 1833.032156][ T708] [ 1833.032164][ T708] dump_stack_lvl+0xe8/0x150 [ 1833.032192][ T708] should_fail_ex+0x414/0x560 [ 1833.032224][ T708] should_failslab+0xa8/0x100 [ 1833.032249][ T708] kmem_cache_alloc_noprof+0x88/0x710 [ 1833.032278][ T708] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1833.032300][ T708] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1833.032324][ T708] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1833.032356][ T708] mmu_topup_memory_caches+0x21/0x170 [ 1833.032381][ T708] kvm_mmu_load+0x9d/0x22d0 [ 1833.032404][ T708] ? kvm_msr_allowed+0x9a/0x490 [ 1833.032429][ T708] ? kvm_msr_allowed+0x9a/0x490 [ 1833.032454][ T708] ? kvm_msr_allowed+0x9a/0x490 [ 1833.032481][ T708] ? kvm_msr_allowed+0x9a/0x490 [ 1833.032505][ T708] ? kvm_apic_has_interrupt+0x744/0x770 [ 1833.032542][ T708] vcpu_run+0x5497/0x7670 [ 1833.032587][ T708] ? cpufreq_update_util+0x8e/0x290 [ 1833.032658][ T708] ? __pfx_vcpu_run+0x10/0x10 [ 1833.032685][ T708] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1833.032717][ T708] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1833.032746][ T708] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1833.032774][ T708] ? rcu_is_watching+0x15/0xb0 [ 1833.032801][ T708] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1833.032851][ T708] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1833.032880][ T708] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1833.032912][ T708] ? __lock_acquire+0x6b6/0x2cf0 [ 1833.032935][ T708] ? __mutex_lock+0x335/0x1350 [ 1833.032964][ T708] ? kasan_quarantine_put+0xbb/0x1f0 [ 1833.032995][ T708] ? do_raw_write_lock+0x120/0x260 [ 1833.033033][ T708] kvm_vcpu_ioctl+0x99a/0xed0 [ 1833.033065][ T708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1833.033087][ T708] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1833.033129][ T708] ? __fget_files+0x2a/0x420 [ 1833.033156][ T708] ? __fget_files+0x2a/0x420 [ 1833.033179][ T708] ? __fget_files+0x3a0/0x420 [ 1833.033201][ T708] ? __fget_files+0x2a/0x420 [ 1833.033228][ T708] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1833.033249][ T708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1833.033273][ T708] __se_sys_ioctl+0xfc/0x170 [ 1833.033293][ T708] do_syscall_64+0xec/0xf80 [ 1833.033313][ T708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.033332][ T708] ? trace_irq_disable+0x37/0x100 [ 1833.033357][ T708] ? clear_bhb_loop+0x60/0xb0 [ 1833.033380][ T708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.033400][ T708] RIP: 0033:0x7f7ea0f8f749 [ 1833.033418][ T708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1833.033436][ T708] RSP: 002b:00007f7ea1d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.033456][ T708] RAX: ffffffffffffffda RBX: 00007f7ea11e6090 RCX: 00007f7ea0f8f749 [ 1833.033471][ T708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1833.033483][ T708] RBP: 00007f7ea1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.033496][ T708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.033508][ T708] R13: 00007f7ea11e6128 R14: 00007f7ea11e6090 R15: 00007f7ea130fa28 [ 1833.033538][ T708] [ 1833.403518][ T716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.412742][ T716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.453900][T29604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1833.464561][T29604] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1833.475160][T29604] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1833.484122][T29604] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1833.495422][T29604] usb 5-1: config 129 has no interface number 0 [ 1833.501765][T29604] usb 5-1: config 129 has no interface number 1 [ 1833.508751][T29604] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1833.523227][T29604] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1833.535161][T29604] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1833.548649][T29604] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1833.556643][T29604] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1833.567717][T29604] usb 5-1: string descriptor 0 read error: -22 [ 1833.574994][T29604] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1833.584156][T29604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.607826][ T719] netlink: 'syz.7.6811': attribute type 2 has an invalid length. [ 1833.618372][T29604] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1833.625485][T29604] usb 5-1: MIDIStreaming interface descriptor not found [ 1833.633427][ T5871] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1833.806231][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1833.824762][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.874505][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.882104][T21501] usb 5-1: USB disconnect, device number 3 [ 1833.901206][ T5871] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1833.911075][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.940592][ T5871] usb 3-1: config 0 descriptor?? [ 1833.979931][ T727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.019648][ T727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.167437][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1834.181884][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1834.211234][ T5871] usb 3-1: USB disconnect, device number 46 [ 1834.475320][ T750] netlink: 27 bytes leftover after parsing attributes in process `syz.8.6817'. [ 1835.460024][ T777] batadv_slave_1: entered promiscuous mode [ 1835.508293][ T785] FAULT_INJECTION: forcing a failure. [ 1835.508293][ T785] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.533266][ T785] CPU: 1 UID: 0 PID: 785 Comm: syz.4.6823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.533291][ T785] Tainted: [L]=SOFTLOCKUP [ 1835.533296][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1835.533303][ T785] Call Trace: [ 1835.533308][ T785] [ 1835.533313][ T785] dump_stack_lvl+0xe8/0x150 [ 1835.533331][ T785] should_fail_ex+0x414/0x560 [ 1835.533351][ T785] should_failslab+0xa8/0x100 [ 1835.533365][ T785] kmem_cache_alloc_noprof+0x88/0x710 [ 1835.533381][ T785] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1835.533394][ T785] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1835.533407][ T785] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1835.533425][ T785] mmu_topup_memory_caches+0x21/0x170 [ 1835.533439][ T785] kvm_mmu_load+0x9d/0x22d0 [ 1835.533451][ T785] ? kvm_msr_allowed+0x9a/0x490 [ 1835.533465][ T785] ? kvm_msr_allowed+0x9a/0x490 [ 1835.533478][ T785] ? kvm_msr_allowed+0x9a/0x490 [ 1835.533491][ T785] ? kvm_msr_allowed+0x9a/0x490 [ 1835.533504][ T785] ? kvm_apic_has_interrupt+0x744/0x770 [ 1835.533524][ T785] vcpu_run+0x5497/0x7670 [ 1835.533548][ T785] ? trace_sched_exit_tp+0x36/0xf0 [ 1835.533594][ T785] ? __pfx_vcpu_run+0x10/0x10 [ 1835.533619][ T785] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1835.533641][ T785] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1835.533657][ T785] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1835.533674][ T785] ? __lock_acquire+0x6b6/0x2cf0 [ 1835.533686][ T785] ? __mutex_lock+0x335/0x1350 [ 1835.533704][ T785] ? kasan_quarantine_put+0xbb/0x1f0 [ 1835.533720][ T785] ? do_raw_write_lock+0x120/0x260 [ 1835.533742][ T785] kvm_vcpu_ioctl+0x99a/0xed0 [ 1835.533759][ T785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1835.533771][ T785] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1835.533793][ T785] ? __fget_files+0x2a/0x420 [ 1835.533807][ T785] ? __fget_files+0x2a/0x420 [ 1835.533819][ T785] ? __fget_files+0x3a0/0x420 [ 1835.533831][ T785] ? __fget_files+0x2a/0x420 [ 1835.533845][ T785] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1835.533856][ T785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1835.533870][ T785] __se_sys_ioctl+0xfc/0x170 [ 1835.533881][ T785] do_syscall_64+0xec/0xf80 [ 1835.533892][ T785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.533902][ T785] ? trace_irq_disable+0x37/0x100 [ 1835.533916][ T785] ? clear_bhb_loop+0x60/0xb0 [ 1835.533928][ T785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.533938][ T785] RIP: 0033:0x7f7dc158f749 [ 1835.533953][ T785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1835.533962][ T785] RSP: 002b:00007f7dc246e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1835.533974][ T785] RAX: ffffffffffffffda RBX: 00007f7dc17e6090 RCX: 00007f7dc158f749 [ 1835.533983][ T785] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1835.533989][ T785] RBP: 00007f7dc246e090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.533996][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1835.534002][ T785] R13: 00007f7dc17e6128 R14: 00007f7dc17e6090 R15: 00007f7dc190fa28 [ 1835.534019][ T785] [ 1835.884986][ T776] batadv_slave_1: left promiscuous mode [ 1836.533095][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1836.544418][ T811] netlink: 'syz.5.6829': attribute type 28 has an invalid length. [ 1836.682056][ T5871] usb 5-1: device descriptor read/64, error -71 [ 1836.735096][ T817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1836.862141][T29600] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1836.935096][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1837.022121][T29600] usb 3-1: Using ep0 maxpacket: 8 [ 1837.030837][T29600] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1837.040599][T29600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.053545][T29600] usb 3-1: config 0 has no interface number 0 [ 1837.059962][T29600] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1837.086962][ T5871] usb 5-1: device descriptor read/64, error -71 [ 1837.106328][T29600] usb 3-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 1837.170427][T29600] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 1837.203073][ T5871] usb usb5-port1: attempt power cycle [ 1837.210262][T29600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.251000][T29600] usb 3-1: Product: syz [ 1837.271205][T29600] usb 3-1: Manufacturer: syz [ 1837.296849][T29600] usb 3-1: SerialNumber: syz [ 1837.316468][T29600] usb 3-1: config 0 descriptor?? [ 1837.346412][T29600] ttusb_dec_send_command: command bulk message failed: error -8 [ 1837.372621][T29600] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8 [ 1837.383817][T29600] usbhid 3-1:0.113: couldn't find an input interrupt endpoint [ 1837.539038][ T815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1837.548555][T28711] IPVS: starting estimator thread 0... [ 1837.573055][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1837.624985][ T5871] usb 5-1: device descriptor read/8, error -71 [ 1837.642010][ T830] IPVS: using max 32 ests per chain, 76800 per kthread [ 1837.691775][ T835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.703521][T29600] usb 3-1: USB disconnect, device number 47 [ 1837.733654][ T835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.860736][ T844] FAULT_INJECTION: forcing a failure. [ 1837.860736][ T844] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.875266][ T5871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1837.884097][ T844] CPU: 0 UID: 0 PID: 844 Comm: syz.5.6838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1837.884116][ T844] Tainted: [L]=SOFTLOCKUP [ 1837.884121][ T844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1837.884127][ T844] Call Trace: [ 1837.884132][ T844] [ 1837.884137][ T844] dump_stack_lvl+0xe8/0x150 [ 1837.884156][ T844] should_fail_ex+0x414/0x560 [ 1837.884177][ T844] should_failslab+0xa8/0x100 [ 1837.884191][ T844] kmem_cache_alloc_noprof+0x88/0x710 [ 1837.884209][ T844] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1837.884222][ T844] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1837.884235][ T844] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1837.884253][ T844] mmu_topup_memory_caches+0x21/0x170 [ 1837.884267][ T844] kvm_mmu_load+0x9d/0x22d0 [ 1837.884280][ T844] ? kvm_msr_allowed+0x9a/0x490 [ 1837.884294][ T844] ? kvm_msr_allowed+0x9a/0x490 [ 1837.884308][ T844] ? kvm_msr_allowed+0x9a/0x490 [ 1837.884322][ T844] ? kvm_msr_allowed+0x9a/0x490 [ 1837.884334][ T844] ? kvm_apic_has_interrupt+0x744/0x770 [ 1837.884355][ T844] vcpu_run+0x5497/0x7670 [ 1837.884408][ T844] ? __pfx_vcpu_run+0x10/0x10 [ 1837.884422][ T844] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1837.884439][ T844] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1837.884457][ T844] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1837.884482][ T844] ? rcu_is_watching+0x15/0xb0 [ 1837.884509][ T844] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1837.884555][ T844] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1837.884581][ T844] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1837.884610][ T844] ? __lock_acquire+0x6b6/0x2cf0 [ 1837.884630][ T844] ? __mutex_lock+0x335/0x1350 [ 1837.884657][ T844] ? kasan_quarantine_put+0xbb/0x1f0 [ 1837.884684][ T844] ? do_raw_write_lock+0x120/0x260 [ 1837.884723][ T844] kvm_vcpu_ioctl+0x99a/0xed0 [ 1837.884753][ T844] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1837.884775][ T844] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1837.884811][ T844] ? __fget_files+0x2a/0x420 [ 1837.884836][ T844] ? __fget_files+0x2a/0x420 [ 1837.884858][ T844] ? __fget_files+0x3a0/0x420 [ 1837.884878][ T844] ? __fget_files+0x2a/0x420 [ 1837.884903][ T844] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1837.884924][ T844] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1837.884945][ T844] __se_sys_ioctl+0xfc/0x170 [ 1837.884957][ T844] do_syscall_64+0xec/0xf80 [ 1837.884968][ T844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.884978][ T844] ? trace_irq_disable+0x37/0x100 [ 1837.884991][ T844] ? clear_bhb_loop+0x60/0xb0 [ 1837.885004][ T844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.885014][ T844] RIP: 0033:0x7f53ba78f749 [ 1837.885024][ T844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1837.885033][ T844] RSP: 002b:00007f53bb6f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.885045][ T844] RAX: ffffffffffffffda RBX: 00007f53ba9e6090 RCX: 00007f53ba78f749 [ 1837.885054][ T844] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1837.885060][ T844] RBP: 00007f53bb6f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.885067][ T844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.885073][ T844] R13: 00007f53ba9e6128 R14: 00007f53ba9e6090 R15: 00007f53bab0fa28 [ 1837.885090][ T844] [ 1838.229086][ T5871] usb 5-1: device descriptor read/8, error -71 [ 1838.342932][ T5871] usb usb5-port1: unable to enumerate USB device [ 1838.604151][ T853] binder: 852:853 ioctl c0306201 200000000080 returned -22 [ 1838.841507][ T862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.875651][ T862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.952161][T28711] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1839.148577][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.201901][T28711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.275377][T28711] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1839.313264][T28711] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1839.335733][ T871] Cannot find map_set index 135 as target [ 1839.350805][T28711] usb 3-1: Manufacturer: syz [ 1839.387407][T28711] usb 3-1: config 0 descriptor?? [ 1839.616919][ T860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.655567][ T860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.874821][ T888] FAULT_INJECTION: forcing a failure. [ 1839.874821][ T888] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.918968][ T888] CPU: 0 UID: 0 PID: 888 Comm: syz.8.6850 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.918998][ T888] Tainted: [L]=SOFTLOCKUP [ 1839.919005][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1839.919016][ T888] Call Trace: [ 1839.919024][ T888] [ 1839.919033][ T888] dump_stack_lvl+0xe8/0x150 [ 1839.919064][ T888] should_fail_ex+0x414/0x560 [ 1839.919099][ T888] should_failslab+0xa8/0x100 [ 1839.919125][ T888] kmem_cache_alloc_noprof+0x88/0x710 [ 1839.919154][ T888] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 1839.919177][ T888] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1839.919203][ T888] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1839.919237][ T888] mmu_topup_memory_caches+0x21/0x170 [ 1839.919262][ T888] kvm_mmu_load+0x9d/0x22d0 [ 1839.919285][ T888] ? kvm_msr_allowed+0x9a/0x490 [ 1839.919311][ T888] ? kvm_msr_allowed+0x9a/0x490 [ 1839.919336][ T888] ? kvm_msr_allowed+0x9a/0x490 [ 1839.919383][ T888] ? kvm_msr_allowed+0x9a/0x490 [ 1839.919407][ T888] ? kvm_apic_has_interrupt+0x744/0x770 [ 1839.919444][ T888] vcpu_run+0x5497/0x7670 [ 1839.919541][ T888] ? __pfx_vcpu_run+0x10/0x10 [ 1839.919569][ T888] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1839.919599][ T888] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1839.919630][ T888] ? fpu_swap_kvm_fpstate+0xc2/0x4f0 [ 1839.919657][ T888] ? __srcu_check_read_flavor+0x106/0x250 [ 1839.919683][ T888] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1839.919722][ T888] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1839.919751][ T888] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1839.919783][ T888] ? __lock_acquire+0x6b6/0x2cf0 [ 1839.919806][ T888] ? __mutex_lock+0x335/0x1350 [ 1839.919834][ T888] ? kasan_quarantine_put+0xbb/0x1f0 [ 1839.919866][ T888] ? do_raw_write_lock+0x120/0x260 [ 1839.919909][ T888] kvm_vcpu_ioctl+0x99a/0xed0 [ 1839.919939][ T888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1839.919960][ T888] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1839.919997][ T888] ? __fget_files+0x2a/0x420 [ 1839.920024][ T888] ? __fget_files+0x2a/0x420 [ 1839.920044][ T888] ? __fget_files+0x3a0/0x420 [ 1839.920065][ T888] ? __fget_files+0x2a/0x420 [ 1839.920089][ T888] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1839.920110][ T888] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1839.920131][ T888] __se_sys_ioctl+0xfc/0x170 [ 1839.920149][ T888] do_syscall_64+0xec/0xf80 [ 1839.920167][ T888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.920184][ T888] ? trace_irq_disable+0x37/0x100 [ 1839.920207][ T888] ? clear_bhb_loop+0x60/0xb0 [ 1839.920227][ T888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.920244][ T888] RIP: 0033:0x7f7ea0f8f749 [ 1839.920261][ T888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1839.920277][ T888] RSP: 002b:00007f7ea1d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1839.920297][ T888] RAX: ffffffffffffffda RBX: 00007f7ea11e6090 RCX: 00007f7ea0f8f749 [ 1839.920310][ T888] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1839.920321][ T888] RBP: 00007f7ea1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.920332][ T888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.920343][ T888] R13: 00007f7ea11e6128 R14: 00007f7ea11e6090 R15: 00007f7ea130fa28 [ 1839.920372][ T888] [ 1840.432059][T21501] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1840.494173][T28711] usbhid 3-1:0.0: can't add hid device: -32 [ 1840.500256][T28711] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1840.514925][ T891] usb usb8: usbfs: process 891 (syz.7.6851) did not claim interface 0 before use [ 1840.524756][ T891] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1840.664209][T28711] usb 3-1: USB disconnect, device number 48 [ 1840.734027][T21501] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1840.758234][T21501] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1840.783411][ T898] netlink: 'syz.8.6854': attribute type 10 has an invalid length. [ 1840.802014][T21501] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1840.811074][T21501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.831030][ T898] team0: Device veth1_macvtap failed to register rx_handler [ 1840.977259][T21501] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1840.992981][T21501] usb 5-1: invalid MIDI out EP 0 [ 1841.114333][T26667] udevd[26667]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.135779][T21501] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1841.234725][ T911] ip6tnl2: entered promiscuous mode [ 1841.694709][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6861'. [ 1841.764589][ T939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6861'. [ 1842.412148][T21501] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1842.573300][T21501] usb 3-1: Using ep0 maxpacket: 16 [ 1842.586581][T21501] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1842.609232][T21501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1842.624697][T21501] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1842.629999][ T958] tipc: Started in network mode [ 1842.636765][T21501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.650524][T21501] usb 3-1: Product: syz [ 1842.655846][T21501] usb 3-1: Manufacturer: syz [ 1842.656966][ T958] tipc: Node identity ba00287522e4, cluster identity 4711 [ 1842.660639][T21501] usb 3-1: SerialNumber: syz [ 1842.679582][T21501] usb 3-1: config 0 descriptor?? [ 1842.702772][ T958] tipc: Enabled bearer , priority 0 [ 1842.707272][T21501] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1842.728356][T28711] usb 5-1: USB disconnect, device number 8 [ 1842.760377][ T959] syzkaller0: entered promiscuous mode [ 1842.769440][T21501] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1842.782545][ T959] syzkaller0: entered allmulticast mode [ 1842.829733][ T958] x_tables: duplicate underflow at hook 2 [ 1843.392916][T21501] em28xx 3-1:0.0: chip ID is em2874 [ 1843.474493][ T954] tipc: Resetting bearer [ 1843.507575][ T954] tipc: Disabling bearer [ 1843.686176][ T979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.705211][ T979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.912420][ T5871] usb 3-1: USB disconnect, device number 49 [ 1843.934743][ T5871] em28xx 3-1:0.0: Disconnecting em28xx [ 1843.953504][ T5871] em28xx 3-1:0.0: Freeing device [ 1844.710847][ T992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.719610][ T992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.772669][ T5871] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1844.926205][ T5871] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1844.938352][ T5871] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.951483][ T5871] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1844.960695][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.994095][ T5871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1845.002375][ T5871] usb 3-1: invalid MIDI out EP 0 [ 1845.083054][ T5871] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1846.052084][T21501] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1846.107436][ T1009] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1846.212017][T21501] usb 5-1: Using ep0 maxpacket: 16 [ 1846.220427][T21501] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1846.236321][T21501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1846.266228][T21501] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1846.276289][T21501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.287377][T21501] usb 5-1: Product: syz [ 1846.295516][T21501] usb 5-1: Manufacturer: syz [ 1846.306028][T21501] usb 5-1: SerialNumber: syz [ 1846.319216][T21501] usb 5-1: config 0 descriptor?? [ 1846.337320][T21501] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1846.355074][T21501] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1846.738438][T21501] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1846.745226][T21501] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1846.753017][T21501] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1846.760190][T21501] em28xx 5-1:0.0: No AC97 audio processor [ 1846.902424][T21501] usb 5-1: USB disconnect, device number 9 [ 1846.920826][T21501] em28xx 5-1:0.0: Disconnecting em28xx [ 1846.943667][T21501] em28xx 5-1:0.0: Freeing device [ 1847.352076][T21501] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1847.502580][T29600] usb 3-1: USB disconnect, device number 50 [ 1847.523786][T21501] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 1847.542294][T21501] usb 5-1: config 0 has no interface number 0 [ 1847.555872][T21501] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1847.570203][T21501] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1847.583739][T21501] usb 5-1: config 0 interface 48 has no altsetting 0 [ 1847.593341][T21501] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1847.603375][T21501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.611383][T21501] usb 5-1: Product: syz [ 1847.616146][T21501] usb 5-1: Manufacturer: syz [ 1847.626228][T21501] usb 5-1: SerialNumber: syz [ 1847.639649][T21501] usb 5-1: config 0 descriptor?? [ 1847.911582][ T1021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6883'. [ 1847.982054][T29600] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1847.982666][ T1021] vxlan1: entered promiscuous mode [ 1848.149671][ T1042] netlink: 'syz.8.6888': attribute type 10 has an invalid length. [ 1848.175254][T29600] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.186955][T29600] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1848.193746][T29600] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1848.203663][T29600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.216715][T29600] usb 3-1: config 0 descriptor?? [ 1848.298562][ T1042] mac80211_hwsim hwsim97 wlan1: entered promiscuous mode [ 1848.311403][ T1042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1848.654491][ T1037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.675217][ T1037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.736730][ T1037] 0: reclassify loop, rule prio 0, protocol 800 [ 1848.760477][T29600] dragonrise 0003:0079:0006.0076: nested delimiters [ 1848.781898][T29600] dragonrise 0003:0079:0006.0076: item 0 4 2 10 parsing failed [ 1848.803632][T29600] dragonrise 0003:0079:0006.0076: parse failed [ 1848.822340][T29600] dragonrise 0003:0079:0006.0076: probe with driver dragonrise failed with error -22 [ 1849.028969][T29600] usb 3-1: USB disconnect, device number 51 [ 1849.802058][T29600] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1849.942628][ T1063] bond0: Removing last ns target with arp_interval on [ 1849.960643][ T1063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.968958][T29600] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 1849.991240][T29600] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.992282][T21501] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 1850.011298][T29600] usb 3-1: config 171 has no interface number 0 [ 1850.018041][T21501] f81604 5-1:0.48: Setting termination of CH#0 failed: -EPROTO [ 1850.019716][T29600] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1850.036103][T21501] f81604 5-1:0.48: probe with driver f81604 failed with error -71 [ 1850.041744][T29600] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1850.057523][ T1063] netlink: 'syz.8.6893': attribute type 6 has an invalid length. [ 1850.058754][T29600] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1850.082052][ T1063] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6893'. [ 1850.084354][T29600] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1850.093606][T21501] usb 5-1: USB disconnect, device number 10 [ 1850.119816][T29600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.138249][T29600] usb 3-1: Product: syz [ 1850.167829][T29600] usb 3-1: Manufacturer: syz [ 1850.172919][T29600] usb 3-1: SerialNumber: syz [ 1850.180550][ T1058] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1851.255816][T29600] ath6kl: Failed to submit usb control message: -110 [ 1851.300635][T29600] ath6kl: unable to send the bmi data to the device: -110 [ 1851.323023][ T1085] netlink: 'syz.5.6898': attribute type 1 has an invalid length. [ 1851.339743][T29600] ath6kl: Unable to send get target info: -110 [ 1851.386264][T29600] ath6kl: Failed to init ath6kl core: -110 [ 1851.419372][ T1085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1851.436038][T29600] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1852.122145][T30492] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1852.275010][T30492] usb 5-1: Using ep0 maxpacket: 8 [ 1852.294397][T30492] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1852.315955][T30492] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 1852.325342][T30492] usb 5-1: config 7 has no interface number 0 [ 1852.340350][T30492] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1852.360564][T30492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.372152][T30492] usb 5-1: Product: syz [ 1852.378415][T30492] usb 5-1: Manufacturer: syz [ 1852.383297][T30492] usb 5-1: SerialNumber: syz [ 1852.737129][T28711] usb 3-1: USB disconnect, device number 52 [ 1852.787550][ T1097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.805102][ T1097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.918723][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1852.918747][ T30] audit: type=1326 audit(1767259780.903:23559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1852.964065][ T30] audit: type=1326 audit(1767259780.943:23560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1852.987648][ T30] audit: type=1326 audit(1767259780.943:23561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.020628][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.030080][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.059922][ T30] audit: type=1326 audit(1767259780.943:23562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.123461][ T30] audit: type=1326 audit(1767259780.943:23563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.200213][ T30] audit: type=1326 audit(1767259780.943:23564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.272469][ T30] audit: type=1326 audit(1767259780.943:23565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.309130][ T30] audit: type=1326 audit(1767259780.943:23566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.339151][ T30] audit: type=1326 audit(1767259780.943:23567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.372164][ T30] audit: type=1326 audit(1767259780.943:23568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1111 comm="syz.2.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd018f749 code=0x7ffc0000 [ 1853.491361][ T1133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.511312][ T1133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.542265][T21501] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1853.702733][T21501] usb 3-1: Using ep0 maxpacket: 32 [ 1853.710669][T21501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.725488][T21501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.741380][T21501] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1853.752764][T21501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.779553][T21501] usb 3-1: config 0 descriptor?? [ 1854.198575][T21501] ft260 0003:0403:6030.0077: unknown main item tag 0x0 [ 1854.208524][T21501] ft260 0003:0403:6030.0077: unknown main item tag 0x0 [ 1854.395182][T21501] ft260 0003:0403:6030.0077: chip code: 6424 8183 [ 1854.782320][T30492] usb 5-1: USB disconnect, device number 11 [ 1854.808891][T21501] usb 3-1: USB disconnect, device number 53 [ 1854.839914][ T1165] program syz.4.6920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1854.855021][ T1165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1855.575224][ T1186] tipc: Started in network mode [ 1855.581232][ T1186] tipc: Node identity a6215a17f55, cluster identity 4711 [ 1855.590058][ T1186] tipc: Enabled bearer , priority 0 [ 1855.597925][ T1186] syzkaller0: entered promiscuous mode [ 1855.604034][ T1186] syzkaller0: entered allmulticast mode [ 1855.632063][T30492] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1855.640829][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6927'. [ 1855.659394][ T1186] tipc: Resetting bearer [ 1855.666199][ T1186] netlink: 'syz.5.6927': attribute type 11 has an invalid length. [ 1855.677359][ T1185] tipc: Resetting bearer [ 1855.719316][ T1185] tipc: Disabling bearer [ 1855.772203][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1855.793655][T30492] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1855.827724][T30492] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1855.849383][T30492] usb 3-1: can't read configurations, error -22 [ 1855.953915][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1855.973811][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1855.992106][T30492] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1856.004297][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1856.024630][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.047943][ T1184] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1856.069374][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1856.172823][T30492] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1856.196309][T30492] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1856.218232][T30492] usb 3-1: can't read configurations, error -22 [ 1856.238724][T30492] usb usb3-port1: attempt power cycle [ 1856.582356][T30492] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1856.613554][T30492] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1856.623816][T30492] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1856.632014][T30492] usb 3-1: can't read configurations, error -22 [ 1856.762106][T30492] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1856.804588][T30492] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1856.819218][T30492] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1856.827885][T30492] usb 3-1: can't read configurations, error -22 [ 1856.834986][T30492] usb usb3-port1: unable to enumerate USB device [ 1858.167921][T29604] usb 5-1: USB disconnect, device number 12 [ 1858.488048][ T1207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.497644][ T1207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.672367][T29604] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1858.827467][T29604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.839468][T29604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.851053][T29604] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1858.866979][T29604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.893036][T29604] usb 5-1: config 0 descriptor?? [ 1859.031229][ T1225] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6939'. [ 1859.202063][T21501] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1859.386235][T21501] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1859.397265][T21501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.405552][T21501] usb 3-1: Product: syz [ 1859.409970][T21501] usb 3-1: Manufacturer: syz [ 1859.414891][T21501] usb 3-1: SerialNumber: syz [ 1859.437286][T21501] usb 3-1: config 0 descriptor?? [ 1859.512776][ T1203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.544917][ T1203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.616304][T29604] hid-led 0003:1D34:000A.0078: probe with driver hid-led failed with error -71 [ 1859.650975][T21501] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1859.667427][T29604] usb 5-1: USB disconnect, device number 13 [ 1859.728349][ T1245] netlink: 'syz.4.6943': attribute type 10 has an invalid length. [ 1859.762167][ T1245] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 1859.795063][ T1245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1860.222620][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 1860.412335][ T1263] netlink: 'syz.5.6948': attribute type 5 has an invalid length. [ 1860.698423][ T1270] netlink: 'syz.8.6950': attribute type 2 has an invalid length. [ 1861.091827][ T1281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6951'. [ 1861.303668][T21501] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1861.313178][T21501] usb 3-1: USB disconnect, device number 58 [ 1861.935868][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6955'. [ 1862.173940][ T1309] syzkaller0: entered promiscuous mode [ 1862.180630][ T1311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.189232][ T1309] syzkaller0: entered allmulticast mode [ 1862.195406][ T1311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.226089][ T1309] tipc: Enabling of bearer rejected, failed to enable media [ 1862.230134][ T1311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.260755][ T1311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.382135][T29604] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1862.545539][T29604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.569737][T29604] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1862.588959][T29604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.612424][T29604] usb 3-1: config 0 descriptor?? [ 1862.979662][ T1333] Cannot find add_set index 2 as target [ 1863.011855][ T1336] input: syz0 as /devices/virtual/input/input142 [ 1863.046190][ T1336] input: failed to attach handler leds to device input142, error: -6 [ 1863.278247][T29604] razer 0003:1532:010D.0079: unbalanced delimiter at end of report description [ 1863.342913][T29604] razer 0003:1532:010D.0079: probe with driver razer failed with error -22 [ 1864.387673][ T1367] loop9: detected capacity change from 0 to 7 [ 1864.406408][T26753] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1864.419783][T26753] loop9: partition table partially beyond EOD, truncated [ 1864.444646][T26753] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1864.485682][ T1365] tipc: Enabled bearer , priority 0 [ 1864.508954][ T1367] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1864.527859][ T1367] loop9: partition table partially beyond EOD, truncated [ 1864.529918][ T1358] syzkaller0: entered promiscuous mode [ 1864.558193][ T1367] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1864.575591][ T1358] syzkaller0: entered allmulticast mode [ 1864.968354][ T1357] tipc: Resetting bearer [ 1865.015850][ T1357] tipc: Disabling bearer [ 1865.454550][ T1384] fuse: Unknown parameter 'group_i00000000000000000000' [ 1865.565173][ T1390] : renamed from vlan0 (while UP) [ 1865.577863][ T1391] ptrace attach of "./syz-executor exec"[28201] was attempted by "vlan0 net/vlan/vlan0 pagemap  "[1391] [ 1865.696862][ T1393] random: crng reseeded on system resumption [ 1865.772039][T29604] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1865.922041][T29604] usb 5-1: device descriptor read/64, error -71 [ 1866.172037][T29604] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1866.316628][T29604] usb 5-1: device descriptor read/64, error -71 [ 1866.434041][T29604] usb usb5-port1: attempt power cycle [ 1866.568017][T18396] usb 3-1: USB disconnect, device number 59 [ 1866.792079][T29604] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1866.832598][T29604] usb 5-1: device descriptor read/8, error -71 [ 1867.086769][ T1414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.095285][T29604] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1867.126499][ T1414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.127081][T29604] usb 5-1: device descriptor read/8, error -71 [ 1867.244943][T29604] usb usb5-port1: unable to enumerate USB device [ 1868.202022][T29604] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1868.342022][T29604] usb 3-1: device descriptor read/64, error -71 [ 1868.592168][T29604] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1868.742069][T29604] usb 3-1: device descriptor read/64, error -71 [ 1868.863623][T29604] usb usb3-port1: attempt power cycle [ 1869.212054][T29604] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1869.243970][T29604] usb 3-1: device descriptor read/8, error -71 [ 1869.502065][T29604] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1869.522475][T29604] usb 3-1: device descriptor read/8, error -71 [ 1869.632266][T29604] usb usb3-port1: unable to enumerate USB device [ 1875.572074][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1893.679878][ T5199] udevd[5199]: worker [26752] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 1893.979882][T19108] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1893.997077][T19108] dvb_usb_dibusb_mb 6-1:5.51: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1894.011555][T19108] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1894.024233][T19108] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1894.034345][T19108] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1914.457745][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.464144][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1955.419187][T19108] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1955.435700][T19108] dvb_usb_dibusb_mb 6-1:5.237: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1955.449061][T19108] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1955.461445][T19108] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1955.470850][T19108] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1961.010166][ T1483] netlink: 'syz.5.7006': attribute type 1 has an invalid length. [ 1961.033242][ T1483] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7006'. [ 1961.256960][ T1499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7014'. [ 1961.379738][ T1503] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1962.144489][T29600] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1962.325364][T29600] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1962.339756][T29600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.356139][T29600] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1962.365422][T29600] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1962.375797][T29600] usb 3-1: Manufacturer: syz [ 1962.384421][T29600] usb 3-1: config 0 descriptor?? [ 1962.420444][ T1556] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7039'. [ 1962.432585][ C1] vcan0: j1939_session_tx_dat: 0xffff888031071000: queue data error: -100 [ 1962.493490][T29600] rc_core: IR keymap rc-hauppauge not found [ 1962.499490][T29600] Registered IR keymap rc-empty [ 1962.506613][T29600] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1962.520929][T29600] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input143 [ 1962.601081][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1962.644235][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1962.644253][ T30] audit: type=1326 audit(1767259890.633:23572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.7.7041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399d38f749 code=0x0 [ 1963.299927][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.309593][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.091812][ T1581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.116457][ T1581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.138861][ T1583] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1964.342162][ T1581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.371091][ T1581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.734741][ T1595] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7053'. [ 1964.852789][ T5871] usb 3-1: USB disconnect, device number 64 [ 1964.969118][ T1605] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1965.291587][ T1617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1965.416775][ T1627] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1965.467011][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.478695][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.867317][ T1640] vivid-000: disconnect [ 1965.873883][ T1639] vivid-000: reconnect [ 1966.053750][ T1652] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1966.336250][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.345254][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.994613][ T1681] program syz.8.7095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1967.090475][ T1687] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7098'. [ 1968.200081][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7109'. [ 1968.381639][ T1728] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1968.819589][ T1737] netlink: 116 bytes leftover after parsing attributes in process `syz.8.7118'. [ 1969.497649][ T1759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7130'. [ 1969.969183][ T1781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7138'. [ 1970.275236][ T1790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7142'. [ 1970.577390][ T1805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7149'. [ 1970.759330][ T1816] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7154'. [ 1971.021460][ T1818] syz.5.7156 (1818): drop_caches: 2 [ 1971.152105][ T5871] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1971.322378][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1971.343621][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1971.363650][ T5871] usb 3-1: config 1 has an invalid interface number: 102 but max is 0 [ 1971.371851][ T5871] usb 3-1: config 1 has no interface number 0 [ 1971.397920][ T5871] usb 3-1: config 1 interface 102 has no altsetting 0 [ 1971.417284][ T5871] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=51.e8 [ 1971.442297][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.450316][ T5871] usb 3-1: Product: syz [ 1971.475935][ T5871] usb 3-1: Manufacturer: syz [ 1971.480560][ T5871] usb 3-1: SerialNumber: syz [ 1971.642798][ T30] audit: type=1326 audit(1767259899.633:23573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.673488][ T30] audit: type=1326 audit(1767259899.633:23574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.697752][ T30] audit: type=1326 audit(1767259899.653:23575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.738799][ T5871] s2255 3-1:1.102: Could not find bulk-in endpoint [ 1971.772195][ T5871] Sensoray 2255 driver load failed: 0xfffffff4 [ 1971.778402][ T5871] s2255 3-1:1.102: probe with driver s2255 failed with error -12 [ 1971.803381][ T30] audit: type=1326 audit(1767259899.653:23576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.853549][ T5871] usb 3-1: USB disconnect, device number 65 [ 1971.873500][ T30] audit: type=1326 audit(1767259899.653:23577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.898985][ T30] audit: type=1326 audit(1767259899.653:23578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1971.926873][ T30] audit: type=1326 audit(1767259899.713:23579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.8.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1972.083321][ T1856] bridge0: port 1(syz_tun) entered blocking state [ 1972.092986][ T1856] bridge0: port 1(syz_tun) entered disabled state [ 1972.099601][ T1856] syz_tun: entered allmulticast mode [ 1972.123186][ T1856] syz_tun: entered promiscuous mode [ 1972.131603][ T1856] bridge0: port 1(syz_tun) entered blocking state [ 1972.138418][ T1856] bridge0: port 1(syz_tun) entered listening state [ 1972.257537][ T1861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7175'. [ 1972.358110][ T1865] delete_channel: no stack [ 1973.888615][ T1890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7185'. [ 1974.214605][ C1] bridge0: port 1(syz_tun) entered learning state [ 1974.478170][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1975.896746][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.904398][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.292061][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 1976.298743][ C1] bridge0: topology change detected, propagating [ 1976.894818][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1976.906642][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1976.914725][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1976.925115][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1976.934891][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1977.464393][ T1944] chnl_net:caif_netlink_parms(): no params data found [ 1977.666020][ T1965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1977.705486][ T1944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.732821][ T1944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.741614][ T1944] bridge_slave_0: entered allmulticast mode [ 1977.763587][ T1944] bridge_slave_0: entered promiscuous mode [ 1977.784236][ T1944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.791518][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.798953][ T1944] bridge_slave_1: entered allmulticast mode [ 1977.809910][ T1944] bridge_slave_1: entered promiscuous mode [ 1977.855627][ T1944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.871524][ T1944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.946196][ T1944] team0: Port device team_slave_0 added [ 1977.978159][ T1944] team0: Port device team_slave_1 added [ 1978.084045][ T1944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.101218][ T1944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.156695][ T1944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.187938][ T1944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.208236][ T1944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.249922][ T1977] kvm: pic: non byte write [ 1978.267592][ T1944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.379057][ T1944] hsr_slave_0: entered promiscuous mode [ 1978.394202][ T1944] hsr_slave_1: entered promiscuous mode [ 1978.403582][ T1944] debugfs: 'hsr0' already exists in 'hsr' [ 1978.409326][ T1944] Cannot create hsr debugfs directory [ 1978.755414][ T1998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1979.013432][ T5825] Bluetooth: hci2: command tx timeout [ 1979.045567][ T1944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1979.082145][ T1944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1979.106110][ T1944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1979.137657][ T1944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1979.360186][ T1944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1979.411443][ T1944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1979.426124][T29600] IPVS: starting estimator thread 0... [ 1979.437674][ T2025] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1979.452919][T28110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.460058][T28110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.484521][T28110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.491690][T28110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.532081][ T2026] IPVS: using max 32 ests per chain, 76800 per kthread [ 1979.615065][ T1944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.684975][ T1944] veth0_vlan: entered promiscuous mode [ 1979.718636][ T1944] veth1_vlan: entered promiscuous mode [ 1979.785962][ T1944] veth0_macvtap: entered promiscuous mode [ 1979.815913][ T1944] veth1_macvtap: entered promiscuous mode [ 1979.853056][ T1944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1979.867843][ T1944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1979.904143][ T788] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.914362][ T788] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.932862][ T788] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.950921][ T788] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.119334][T20496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.138718][T20496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.200403][T20496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.219910][T20496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.270513][ T2038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1980.584174][T30492] IPVS: starting estimator thread 0... [ 1980.589984][ T2055] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1980.693400][ T2056] IPVS: using max 33 ests per chain, 79200 per kthread [ 1980.702984][ T2062] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7248'. [ 1980.769633][ T30] audit: type=1326 audit(1767259908.753:23580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.8.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1980.796159][ T2034] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1980.805674][ T30] audit: type=1326 audit(1767259908.753:23581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.8.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1980.829972][ T30] audit: type=1326 audit(1767259908.783:23582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.8.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1980.853973][ T30] audit: type=1326 audit(1767259908.783:23583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.8.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1980.877204][ T30] audit: type=1326 audit(1767259908.783:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.8.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1980.982033][ T2034] usb 3-1: Using ep0 maxpacket: 8 [ 1980.995791][ T2034] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1981.010679][ T2034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.028435][ T2034] usb 3-1: Product: syz [ 1981.033648][ T2034] usb 3-1: Manufacturer: syz [ 1981.038249][ T2034] usb 3-1: SerialNumber: syz [ 1981.052584][ T2034] usb 3-1: config 0 descriptor?? [ 1981.064911][ T2034] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1981.093314][ T5825] Bluetooth: hci2: command tx timeout [ 1981.455893][ T2089] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1981.679943][ T2034] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1981.697041][ T2034] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1981.710305][ T2034] usb 3-1: USB disconnect, device number 66 [ 1982.718514][ T2034] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 1982.740065][ T2034] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1982.807537][ T2146] fido_id[2146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1983.085424][ T2154] trusted_key: encrypted_key: key user:syz not found [ 1983.173678][ T5825] Bluetooth: hci2: command tx timeout [ 1984.143580][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.155737][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.365698][ T2200] [U]  [ 1984.368814][ T2200] [U] K{ [ 1984.382322][ T2200] [U] T 1ŠFFˊ`GJǘGO/MC [ 1984.391060][ T2200] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1984.422812][ T2200] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1984.452869][ T2200] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1984.491242][ T2200] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1984.516862][ T2200] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1984.528750][ T2200] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1984.543503][ T2200] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1984.643423][ T2200] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1984.672581][ T2200] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1984.692036][ T2200] [U] 22Ʃ۩X?0;3U [ 1984.712436][ T2200] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1984.768178][ T2200] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1984.798579][ T2200] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1984.814552][ T2200] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1984.829254][ T2200] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1984.841754][ T2200] [U] EC [ 1984.868654][ T2200] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1984.901278][ T2199] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1985.167395][T29600] IPVS: starting estimator thread 0... [ 1985.252111][ T5825] Bluetooth: hci2: command tx timeout [ 1985.257909][ T2212] SET target dimension over the limit! [ 1985.264461][ T2210] IPVS: using max 30 ests per chain, 72000 per kthread [ 1986.124353][ T5909] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1986.319677][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 1986.326900][ T5909] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1986.347502][ T5909] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1986.371402][ T5909] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1986.399285][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1986.417838][ T5909] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1986.441435][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.465156][ T5909] usb 3-1: config 0 descriptor?? [ 1986.539477][ T30] audit: type=1326 audit(1767259914.523:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.601171][ T30] audit: type=1326 audit(1767259914.523:23586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.673637][ T30] audit: type=1326 audit(1767259914.563:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.702292][ T30] audit: type=1326 audit(1767259914.563:23588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.725227][ T30] audit: type=1326 audit(1767259914.563:23589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.815444][ T30] audit: type=1326 audit(1767259914.563:23590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.858914][ T30] audit: type=1326 audit(1767259914.563:23591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1986.910149][ T5909] lenovo 0003:17EF:6047.007B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1986.930202][ T30] audit: type=1326 audit(1767259914.563:23592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1987.006024][ T30] audit: type=1326 audit(1767259914.563:23593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1987.106955][ T30] audit: type=1326 audit(1767259914.573:23594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2251 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f7ea0f8f749 code=0x7ffc0000 [ 1987.125823][ T5909] usb 3-1: USB disconnect, device number 67 [ 1987.237163][ T2264] fido_id[2264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1987.352725][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1987.394056][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1987.403570][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1987.411406][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1987.419219][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1987.820120][ T2280] chnl_net:caif_netlink_parms(): no params data found [ 1987.955396][ T2280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.962894][ T2280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.970062][ T2280] bridge_slave_0: entered allmulticast mode [ 1987.978541][ T2280] bridge_slave_0: entered promiscuous mode [ 1987.987291][ T2280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.994629][ T2280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.001828][ T2280] bridge_slave_1: entered allmulticast mode [ 1988.009050][ T2280] bridge_slave_1: entered promiscuous mode [ 1988.040882][ T2280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1988.053523][ T2280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1988.085123][ T2280] team0: Port device team_slave_0 added [ 1988.093902][ T2280] team0: Port device team_slave_1 added [ 1988.120813][ T2280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1988.128075][ T2280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1988.155086][ T2280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1988.167933][ T2280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1988.172049][T28711] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1988.174954][ T2280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1988.208847][ T2280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1988.277413][ T2280] hsr_slave_0: entered promiscuous mode [ 1988.288739][ T2280] hsr_slave_1: entered promiscuous mode [ 1988.299792][ T2280] debugfs: 'hsr0' already exists in 'hsr' [ 1988.307021][ T2280] Cannot create hsr debugfs directory [ 1988.344348][T28711] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.362698][T28711] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1988.388983][T28711] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1988.408102][T28711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.419529][T28711] usb 10-1: config 0 descriptor?? [ 1988.447448][T28711] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1988.456063][T28711] dvb-usb: bulk message failed: -22 (3/0) [ 1988.499722][T28711] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1988.523839][T28711] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1988.551515][T28711] usb 10-1: media controller created [ 1988.574328][T28711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1988.609050][T28711] dvb-usb: bulk message failed: -22 (6/0) [ 1988.619482][T28711] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1988.634345][T28711] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input144 [ 1988.648708][ T2303] dvb-usb: bulk message failed: -22 (2/0) [ 1988.693696][T28711] dvb-usb: schedule remote query interval to 150 msecs. [ 1988.752305][T28711] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1988.787097][T28711] usb 10-1: USB disconnect, device number 2 [ 1988.863272][T28711] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1989.381528][ T2349] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7365'. [ 1989.492683][ T5825] Bluetooth: hci6: command tx timeout [ 1989.511463][ T2354] tipc: Cannot configure node identity twice [ 1989.661726][ T2280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1989.673237][ T2280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1989.686974][ T2280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1989.699230][ T2280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1989.849855][ T2280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.890211][ T2280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.908123][T20367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.915326][T20367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1989.936389][T20367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.943601][T20367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.103037][ T2280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1990.189927][ T2280] veth0_vlan: entered promiscuous mode [ 1990.283609][ T2280] veth1_vlan: entered promiscuous mode [ 1990.350726][ T2280] veth0_macvtap: entered promiscuous mode [ 1990.376158][ T2280] veth1_macvtap: entered promiscuous mode [ 1990.432947][ T2280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.447797][ T2390] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7376'. [ 1990.512756][ T2280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.543616][ T6945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.558937][ T6945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.574722][ T6945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.604833][ T6945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.795177][T28110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.820018][T28110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.859204][T28110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.868698][T28110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1991.572729][ T5825] Bluetooth: hci6: command tx timeout [ 1993.652189][ T5825] Bluetooth: hci6: command tx timeout [ 1995.732490][ T5825] Bluetooth: hci6: command tx timeout [ 2014.512383][ T5199] udevd[5199]: worker [26752] /devices/platform/dummy_hcd.5/usb6/6-1 timeout; kill it [ 2014.524807][ T5199] udevd[5199]: seq 53382 '/devices/platform/dummy_hcd.5/usb6/6-1' killed [ 2014.546815][ T5199] udevd[5199]: worker [26752] terminated by signal 9 (Killed) [ 2014.554446][ T5199] udevd[5199]: worker [26752] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1' [ 2016.873706][T19108] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2016.895688][T19108] dvb_usb_dibusb_mb 6-1:5.96: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 2016.910285][T19108] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 2016.926969][T19108] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 2016.936946][T19108] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 2037.336291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.342673][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2078.299732][T19108] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2078.320919][T19108] dvb_usb_dibusb_mb 6-1:5.23: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 2078.617276][T19108] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 2078.636333][T19108] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 2078.645889][T19108] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 2098.775116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.790463][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.852068][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 2111.092275][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 2112.212362][ T31] INFO: task syz.4.7022:1523 blocked for more than 143 seconds. [ 2112.220092][ T31] Tainted: G L syzkaller #0 [ 2112.227715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2112.237166][ T31] task:syz.4.7022 state:D stack:27160 pid:1523 tgid:1513 ppid:29396 task_flags:0x400040 flags:0x00080002 [ 2112.250080][ T31] Call Trace: [ 2112.253463][ T31] [ 2112.256397][ T31] __schedule+0x149b/0x4fd0 [ 2112.260901][ T31] ? __pfx___schedule+0x10/0x10 [ 2112.265841][ T31] ? schedule+0x91/0x360 [ 2112.270091][ T31] schedule+0x165/0x360 [ 2112.274364][ T31] schedule_preempt_disabled+0x13/0x30 [ 2112.279827][ T31] __mutex_lock+0x7e6/0x1350 [ 2112.284510][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2112.289285][ T31] ? usbdev_open+0x16e/0x760 [ 2112.293983][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2112.299019][ T31] ? bus_find_device+0x273/0x2b0 [ 2112.305415][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 2112.310721][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2112.317240][ T31] ? usbdev_open+0xa7/0x760 [ 2112.321756][ T31] usbdev_open+0x16e/0x760 [ 2112.326197][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 2112.331838][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 2112.336934][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2112.342325][ T31] chrdev_open+0x4cc/0x5e0 [ 2112.346753][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2112.351673][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2112.358159][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2112.363139][ T31] do_dentry_open+0x7ce/0x1420 [ 2112.367896][ T31] vfs_open+0x3b/0x340 [ 2112.372036][ T31] ? path_openat+0x33f3/0x3dd0 [ 2112.376801][ T31] path_openat+0x340e/0x3dd0 [ 2112.381380][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2112.386900][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 2112.392671][ T31] ? getname_flags+0xb8/0x540 [ 2112.397339][ T31] ? __pfx_path_openat+0x10/0x10 [ 2112.402317][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 2112.408124][ T31] do_filp_open+0x1fa/0x410 [ 2112.412754][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2112.417796][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2112.422745][ T31] ? alloc_fd+0x64c/0x6c0 [ 2112.427097][ T31] do_sys_openat2+0x121/0x200 [ 2112.431789][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2112.437085][ T31] ? exc_page_fault+0x71/0xd0 [ 2112.441760][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 2112.447092][ T31] __x64_sys_openat+0x138/0x170 [ 2112.452098][ T31] do_syscall_64+0xec/0xf80 [ 2112.456609][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2112.462758][ T31] ? trace_irq_disable+0x37/0x100 [ 2112.467793][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2112.472547][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2112.478446][ T31] RIP: 0033:0x7f7dc158df90 [ 2112.482907][ T31] RSP: 002b:00007f7dc244cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2112.491321][ T31] RAX: ffffffffffffffda RBX: 0000000000080100 RCX: 00007f7dc158df90 [ 2112.499392][ T31] RDX: 0000000000080100 RSI: 00007f7dc244cc10 RDI: 00000000ffffff9c [ 2112.508270][ T31] RBP: 00007f7dc244cc10 R08: 0000000000000000 R09: 0000000000000000 [ 2112.516346][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 2112.524342][ T31] R13: 00007f7dc17e6218 R14: 00007f7dc17e6180 R15: 00007f7dc190fa28 [ 2112.532413][ T31] [ 2112.535457][ T31] [ 2112.535457][ T31] Showing all locks held in the system: [ 2112.543202][ T31] 1 lock held by khungtaskd/31: [ 2112.548043][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2112.558038][ T31] 2 locks held by getty/5586: [ 2112.562763][ T31] #0: ffff88814dcb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2112.572645][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2112.582809][ T31] 6 locks held by kworker/1:1/19108: [ 2112.588086][ T31] #0: ffff88801f6ee948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2112.599467][ T31] #1: ffffc90003427bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2112.612264][ T31] #2: ffff888143718198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2112.621174][ T31] #3: ffff888040098198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 2112.630413][ T31] #4: ffff8880213a3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 2112.639701][ T31] #5: ffffffff8dde68d0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 2112.650169][ T31] 1 lock held by syz.4.7022/1523: [ 2112.655257][ T31] #0: ffff888143718198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2112.664307][ T31] 1 lock held by syz.7.7170/1849: [ 2112.669329][ T31] #0: ffff888143718198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2112.678649][ T31] [ 2112.680966][ T31] ============================================= [ 2112.680966][ T31] [ 2112.689441][ T31] NMI backtrace for cpu 1 [ 2112.689459][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2112.689483][ T31] Tainted: [L]=SOFTLOCKUP [ 2112.689489][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2112.689501][ T31] Call Trace: [ 2112.689509][ T31] [ 2112.689518][ T31] dump_stack_lvl+0xe8/0x150 [ 2112.689544][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2112.689570][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2112.689598][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2112.689626][ T31] sys_info+0x135/0x170 [ 2112.689648][ T31] watchdog+0xf95/0xfe0 [ 2112.689678][ T31] ? watchdog+0x20a/0xfe0 [ 2112.689710][ T31] kthread+0x711/0x8a0 [ 2112.689737][ T31] ? __pfx_watchdog+0x10/0x10 [ 2112.689762][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.689789][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.689815][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.689848][ T31] ret_from_fork+0x510/0xa50 [ 2112.689869][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2112.689886][ T31] ? __switch_to+0xc9e/0x1480 [ 2112.689915][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.689939][ T31] ret_from_fork_asm+0x1a/0x30 [ 2112.689980][ T31] [ 2112.689989][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2112.815970][ C0] NMI backtrace for cpu 0 [ 2112.815991][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2112.816015][ C0] Tainted: [L]=SOFTLOCKUP [ 2112.816021][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2112.816032][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2112.816056][ C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2112.816072][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 2112.816093][ C0] RAX: 0000000002c7949d RBX: ffffffff819713ee RCX: 0000000080000001 [ 2112.816106][ C0] RDX: 0000000000000001 RSI: ffffffff8d79207b RDI: ffffffff8bc083e0 [ 2112.816119][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2112.816132][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270 [ 2112.816145][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2112.816157][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2112.816172][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2112.816184][ C0] CR2: 00005598a07f40f0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2112.816200][ C0] Call Trace: [ 2112.816207][ C0] [ 2112.816213][ C0] default_idle+0x13/0x20 [ 2112.816233][ C0] default_idle_call+0x73/0xb0 [ 2112.816253][ C0] do_idle+0x1be/0x4d0 [ 2112.816271][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 2112.816290][ C0] ? __pfx_do_idle+0x10/0x10 [ 2112.816312][ C0] cpu_startup_entry+0x44/0x60 [ 2112.816331][ C0] rest_init+0x2de/0x300 [ 2112.816353][ C0] start_kernel+0x381/0x3d0 [ 2112.816369][ C0] x86_64_start_reservations+0x24/0x30 [ 2112.816391][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2112.816411][ C0] common_startup_64+0x13e/0x147 [ 2112.816440][ C0] [ 2113.007160][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2113.014022][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2113.024672][ T31] Tainted: [L]=SOFTLOCKUP [ 2113.028969][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2113.039001][ T31] Call Trace: [ 2113.042269][ T31] [ 2113.045189][ T31] vpanic+0x1e0/0x670 [ 2113.049152][ T31] panic+0xb9/0xc0 [ 2113.052853][ T31] ? __pfx_panic+0x10/0x10 [ 2113.057246][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2113.062605][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2113.068772][ T31] watchdog+0xfdf/0xfe0 [ 2113.072931][ T31] ? watchdog+0x20a/0xfe0 [ 2113.077249][ T31] kthread+0x711/0x8a0 [ 2113.081300][ T31] ? __pfx_watchdog+0x10/0x10 [ 2113.085957][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.090529][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2113.095708][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.100283][ T31] ret_from_fork+0x510/0xa50 [ 2113.104851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2113.109940][ T31] ? __switch_to+0xc9e/0x1480 [ 2113.114606][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.119197][ T31] ret_from_fork_asm+0x1a/0x30 [ 2113.124002][ T31] [ 2113.127360][ T31] Kernel Offset: disabled [ 2113.131667][ T31] Rebooting in 86400 seconds..