last executing test programs: 6.204066369s ago: executing program 1 (id=2): ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}}, 0x1c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) (async) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080)=0x8000, 0x5) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) 6.037455131s ago: executing program 1 (id=6): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0xcf}, {&(0x7f00000000c0)=""/3}, {&(0x7f0000000340)=""/27}, {&(0x7f00000004c0)=""/150}], 0x12}, 0x20000002) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0xe, 0x5, "7bd31830a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.514990715s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xa70}) unshare(0x2c020400) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x36425000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x62010, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r5, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x5, 0x3, 0x4, 0x57c1}}}, 0x0) 5.369051336s ago: executing program 0 (id=1): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000380)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY`l\xe7\x00K\xc2K\xb34\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\xbf\x86\xea\xe9O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x9f', 0x3) fcntl$dupfd(r0, 0x0, r0) (async) fcntl$dupfd(r0, 0x0, r0) r1 = fsopen(&(0x7f0000000040)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fchdir(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x10000, @local}}}, 0x32) (async) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x10000, @local}}}, 0x32) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) (async) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x1dc, 0x24, 0x400, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xe}, {0xfff2, 0x9}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1ac, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x9, 0xb, 0x9, 0x6, 0x4, 0x2, 0xb, 0xe, 0xf, 0x7, 0x1, 0xb, 0x6, 0x6, 0x7], 0x1, [0x1000, 0xfff7, 0xcf2b, 0x6, 0x6, 0x1ff, 0x7fff, 0x6, 0xbb0b, 0xfee, 0x6, 0x3, 0xd, 0x8, 0x8, 0x7], [0x8, 0x7, 0x6, 0xf100, 0x2, 0x6, 0xfff9, 0x4, 0x1ff, 0xffff, 0x2, 0x3ff, 0x69fa, 0x5, 0x19]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0xf, 0xd, 0x4, 0xd, 0x2, 0x9, 0x6, 0x4, 0x6, 0xb, 0x10, 0x8, 0x8, 0xe, 0xc], 0x1, [0x9, 0xce4c, 0xf0b, 0x5, 0x7fff, 0xc49, 0x5, 0x9, 0x8001, 0x7, 0x0, 0x0, 0x7, 0x1, 0x1, 0x3], [0x9, 0xee, 0x5, 0x1, 0x871, 0x8, 0x9, 0x81, 0x969d, 0x8, 0xfc, 0x7, 0x2, 0x389, 0xf8, 0x980]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x53}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7349fb34}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x800}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x10}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xa0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x38}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7e}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x102}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x800}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 4.863297585s ago: executing program 0 (id=7): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffefffffe, 0x8000000000000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x2000fe, 0xd8}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980902, 0xffffff7c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x60, 0x6, 0x88, 0x40, 0x5ac, 0x243, 0xc896, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x2, 0x3, 0xeb, 0x2, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffefffffe, 0x8000000000000000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x2000fe, 0xd8}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980902, 0xffffff7c}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x60, 0x6, 0x88, 0x40, 0x5ac, 0x243, 0xc896, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x2, 0x3, 0xeb, 0x2, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) (async) 4.86304405s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) shutdown(r1, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000001480)=[{&(0x7f0000000140)="ec3a", 0x2}], 0x1, 0x9, 0x26d0d5f1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r8, 0x4, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"f8ffffff4fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0aee29973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e821119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa177b3c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfdd95083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dacc4c3f0008047096a44002bebc2421aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b346fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e20cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047499569373c0e23ef4df5c89644f48bb536f7945b59d7bcddff754420d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad039c2211f1033195563c7f93cd54b9094f226e783271e1e5a207c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d8c768f7971d31488b8658afc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae095ed3eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a897fe8e757a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f12f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3918c54e24b48ec027562d0687dc746b0827cbf6529006c6b95f2722e5655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2786f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f11aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7cb6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af22af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000022ff00", 0x1000}}, 0x1006) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {}, 0x0, 0x33}}) 4.730705708s ago: executing program 4 (id=5): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) close_range(r1, r1, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182183"], 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0xe, 0x7, 0x21185045, 0x6}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x1f, 0x7, 0x10408, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20300, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x2f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x0, 0x1}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}, @qdisc_kind_options=@q_mq]}, 0x64}}, 0x4040010) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x0, 0x0) 4.380370826s ago: executing program 2 (id=8): setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000180)="24cd3960601b0355eba857a4f9474c17ac5039d744b4af4c0b2d8e088373bba178b4bfaa77ce76347159b159a0c5930986ed912fb330b0bd51", 0x39) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x22, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x4, 0x9}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x8, 0x5, 0x10, 0xf}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x7, 0x4}]}, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) (async) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb, 0x8, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x34, 0x1}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xe, 0xf2, 0x8, 0x10, 0x5}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x2, [@ptm_cap={0x3}, @generic={0x11, 0x10, 0xa, "bed6b92749095a5a88927eb005ed"}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x1f, &(0x7f0000000540)=@string={0x1f, 0x3, "b8780f22eb1ef28857fcb6e50000a827aa5c23c263efa8cb06895e16ee"}}, {0x0, 0x0}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x34, &(0x7f0000000740)=@string={0x34, 0x3, "7e9c5676dc72fe61770d5ba2812a4b3625dd2b65c07e26f262c26ab5a2ca98867d4fde1422f61338700ba3874e58d52e35d8"}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "0a10ae4236af4148f5a84ff33f0dac6010e1e8d1a23b08a202e4e177292fd4d0a02b67b5a2b08d9fabb54fb514d393d1d6fe79d6d7ebbccf11b2fde490d67842bb9074c8badc13f63c7c463f7efb80107f3b9cfad565cc4b0536c9c493f2daa521b625257e093dc2fd0533422c322263df11d2619259fff08dfa51294b591369d9202c5bc0619b71d2b5d4bed34af0841fcc9b9d25d6052beb937fc9af3a4508f67993b05cc3f28e74f441d3b3a96728"}}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4104) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 3.899477539s ago: executing program 4 (id=9): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) dup2(r1, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) ftruncate(r4, 0xffff) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.769063335s ago: executing program 0 (id=10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffd}, 0x1c) (async) socket(0x1a, 0xa, 0xf3) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x20044000) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x75b, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000280)={r4, 0x4dce}) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000340)={r5}) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) (async) socket$inet_tcp(0x2, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 3.510864201s ago: executing program 3 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x28) r2 = syz_usb_connect(0x6, 0x6cf, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x91, 0x96, 0x9f, 0x0, 0x4113, 0x410, 0x991f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bd, 0x2, 0x0, 0x4, 0x10, 0x3, [{{0x9, 0x4, 0x16, 0x6c, 0x6, 0x7a, 0x3d, 0x21, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, 'G0:'}, {0x5, 0x24, 0x0, 0xf6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x1af3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0xd}, [@obex={0x5, 0x24, 0x15, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xda6, 0xfffe, 0x0, 0x2, 0xfffd, 0x7}, @country_functional={0x8, 0x24, 0x7, 0x10, 0x9, [0x4]}, @country_functional={0x12, 0x24, 0x7, 0xdf, 0x1, [0x0, 0x8, 0x3, 0x400, 0x3, 0x0]}, @mdlm_detail={0x96, 0x24, 0x13, 0x7, "5ad667891fa0c85fb6df124e0fffd4d5c70bc587865267006da057fe841c70b09900fee4840036a16019be7b7edecb77d701b5d2f920dd16948db801edcdfa7c603ef63a35ed9b6611411b44323032c9d1b13eaeb1d3c7e247eece150b33e83641da35f9974b5e83fa3f88fc5b221f9f6039616aced0ff6bc73f8748eedf59c44e84cef629d11a90e1275a2a95f9b2ec7851"}, @acm={0x4, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x10, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x98, 0x0, 0x7, [@generic={0xb5, 0x23, "01c8509e1f830462c4894a635de46614a71ff27408d9cf7c1e673e2249b74ed821bfceb1be92e41dda5e383d77d999054113f180beb327d5f7d9df0650cb714da9c55de31e391d9dac75727b0fbb3fd7b60c827c0853dfae2dcee74a48033c67e1a50281df5ec4a19af3ba0b8d07b773ce6f8ea48732a2f59c299dcddcef03a0e326f2ba66aa94656cceb93c4b886a585d4bb07e10e8f297398fe6a90c68f8ad2b0589ec7f70ab062d4d056d857d51ceb78eda"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xb1, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0xb, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x28, 0x1, 0x2, [@generic={0x41, 0xb, "f7491dd90472a62c88d3465f3241f1f23e27fdb85073cc5312a4bed4030f5ba41caca867dba198f9ecda44c128f325d0a70a4504cb975386e56bab4f04d854"}]}}]}}, {{0x9, 0x4, 0x2, 0x93, 0xb, 0x46, 0x91, 0x94, 0xb, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "a8"}, {0x5, 0x24, 0x0, 0x4e}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7f, 0x0, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xcd, 0x2, 0x5, 0x1}, @mdlm_detail={0x55, 0x24, 0x13, 0x4, "bcd95621d5a3845be107a840c7a2a6ceee7072ec4ee93e89d70d3d560da5db61a83d5dca12c51e81e42a397c5b83d656d7908738bf93e5dc8eba3432087661a650434022a73e02d1add29362622d5847c8"}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0x2f, 0x6}]}], [{{0x9, 0x5, 0x80, 0x2, 0x0, 0x5, 0x2, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}]}}, {{0x9, 0x5, 0x4, 0x660c0c028880d9d2, 0x20, 0x6, 0x1, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xbe, 0x93, 0x2e, [@generic={0xec, 0x21, "56923044ef01a70f295ed373a35b1336e94ce4abd0cbbb40e2431b9f60f30872243f5f88040af2acd968f8b8db386f1175a693cf70e09a0e9d8eaf040887d48652401d0982b3f31431107fbf3487e03a7ffa3bad4e89b709c54d302939b5e9e12ad91714c2a55ae27512dada5b7884b355af86cd3ecc1910cb1e5681e684c90d64fb0301ac76dcb7dc7f63607e96601cbfd2c981be2f557faf7b4336940a692e6f30806aa7e626f2ca5b055f64d847cc2ee5e1ffbba7d5da915a4d98e3cbd86dbcee5eece0e9bdf0b6e83af61b19ba9ceac0dbf8b729ded9ed2eecd0a9544e564a36ce78faa8b733022b"}, @generic={0x33, 0x7, "df22db8a1e999732f0c64674100de32a03f1590679973b393be981bdabff5f17d98337e4fd0920cacc87064c499ba73df0"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xa, 0x7, 0x81, [@generic={0xc9, 0x9, "d10a0aa495a4aa9804dee966c21283429704796252c61ff7ff27a162504333af2234f7da06f7a8297a1ba86b12e1f2dd5569f92c964d02e80a6cecd9740c1c18e1530d9c08b6a072a27bcf759c6c6a0b38dbabbedeb61f57658131f0de5a118705783f3248a40d4305eeefca0db99c6810026344d6971828ea498b379533404c52f8c1917af0bf78f97c0d811d8ee19b1d745d6e2cc518b45850e2fcf01f9793f99cc16f1e9304f93822ad090884dbab4b3489009efffdbbcd11c88eefea84d98bf509e54b2b1f"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x9, 0x5, 0x7, [@generic={0x79, 0x10, "897e56c65234c86a92a9105d596a9752fb0c7036b1367e09ecc7e2d0280038f800d868edd25580a17aea3ea341394708e7713b4965c45fa0862d5667f72f77be5c29438ac22deacf8380910fbdf659a4555e54f40cccf56a2c9f8679c214c3e4c7645e2762cb9eaf91d9b61982bfc82461533eaad1660e"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xed, 0x5d, 0x94, [@generic={0x21, 0x22, "4aad647e6261252d51b46866548219c69260d9598b4acff90955472b1d7c01"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xdb, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x7, 0xf9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x2}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0xfc, 0x5c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x2b, 0x8, 0x2, [@generic={0x72, 0x2f, "0c18ea4a138cb3b25a50ee1eb9023963dea4c10d1434d6a953277e60b1869db28a2466c1ec686a889cdae7b98e93c75c27500b85aa3c1847613d6630f1cea52fa796db26197e36e2a740976db16ce11a2321719b7b43793aeebd1e07c724949607fc46c49682aba4c834fe4a74e18220"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x4, 0x5, [@generic={0x6b, 0x8, "9370687d793f4c84c35dbccefbeec8cd062426d66ecbb33733146281a4f8867a482520fc156a848ff30df486a4d0d55ba29dbac4ae6c19aa24983a626988f591ef87ece9b24fd853dd305d76b9a5674e882b25d8fea06cf4784d12b11711e453aa9e087f06420eae37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x200}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0xf7, 0x9, 0x3, 0x8, 0x4}, 0x105, &(0x7f00000012c0)=ANY=[@ANYBLOB="050f0501061410047f72fa8dfb8ae7f30ee863822dba598274cc1002f20b14a4d6a0c69049f6e945a6172aa5bb32c662cb92ea2fa683e8914471ac6596071dab65e2e5c1c3a5cf0715e3c2b059be2774ce2c4529371f41a8ff93b99dba32e1a6a007dc244f2ed4485317d61d2f2cb5f6d1b43503b1eda0af13849f93125100b87c1126f3fd52a6293429b4177ef2e124ecac4dea2c6967db19a774409aba4653bd162f1eca20f8cb3e0800cbf27966eeb26a37b7eb569ef057ea3b836070bccbfeaa0f0e4773c2767a0af303e5023123699b47d9de75e04b227485a3682c99116ba2c41ec834eb2baf8f29fb23c73971d7270d8310100a02e17f00000fffff7f0f00000003100b03180b0a1003000000ff0303007b0c807d0e3f1c26adff1a1399f8e6737c24a7506975a5b4941a1e782a2812a4f02b2e0e74f1adae79e93e58a2da2915e98458066b33c7b0b28897f9ec8489380278978b386262b804ffcce62cd0fa146be2ea9d36976a3cb961a399f7ac6207c8fe8c0f857b2e7520cd1a1d036ce88ee9580f6f80534ec8d73a4981f4a464b3cebeadc13777856bdd010b0f01996b16ea3a22bce3bda9248369c52843056fa6d940"], 0x2, [{0x82, &(0x7f0000000700)=@string={0x82, 0x3, "408f5d083dc34632930588276342d41a50079280952e580cad1c5925b18cced3f416efadc5adf84484db56b18af16a3bab2e2e61f89300ffbee2809926435a41b2447ad632d8a8ef00ad682c70ba562b1b0dea9a81c2f861b3414596b824f037f7782893704136ed8f13b79847c8d02c611efc08c8f488f8abf4e798bfc75605"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_usb_control_io$printer(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0x24, 0x13, {0x13, 0x2, "14a8efdf602cb307cdee0a9c9a06096e6a"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000001280)={0x34, &(0x7f0000000900)={0x0, 0x25, 0x7e, "78db4bfb1b16a2359ec6294eb0168f6f18f532e66c8da8dc0f2a17c5633188089b7add1cb28a66263c9db9adc4fef7813f23d0643a11d0fc56443ffc6314c72f0b463b80d5866b6657f51475dfd5f2f1dd8e56d8fc529f82b6e9669a891c8ddd8a87e44b4e8d065f77d51239afc3c984ba6175eb91a801a224857e65c592"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001180)={0x20, 0x0, 0x67, {0x65, "ac94c93ded4dc6a073f87566a49cd232389055b4895a2c452b743d3b0d827c68258d2a775fe15372f8785bec98d74145e0ad62861cfdc6d83a11cfdf08ff042b2727ca239b80a7d2f33f222ded023cdda832aded5f46e55d25e3111953b7e072a92fad570a"}}, &(0x7f0000001200)={0x20, 0x1, 0x1}, &(0x7f0000001240)={0x20, 0x0, 0x1, 0xa}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x30314752, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)={0x0, 0x9, 0x2, 'wI'}, 0x0, 0x0}) syz_usb_connect$uac1(0x6, 0xfb, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x5, 0x40, 0x50, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xe4}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x7f, 0xecb3, 0x1, 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x6, "145a58"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xb2, 'B'}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x3, 0x1, [0x5], 0xd}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x4, 0x5, 0x3, 0xa], 0xf}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0xa, 0x5], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x1, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9f, 0x6, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x6, "01", "b94c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xf, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x9, 0xc, {0x7, 0x25, 0x1, 0x80, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe5, 0x4, 0x33, 0x2, "dd", "40c4"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xf, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xc7, 0x7}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xd51, 0x2, "f0c4729773e250f6d2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xdf, 0xff, 0x4, {0x7, 0x25, 0x1, 0x1, 0x54, 0xffff}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x69, 0x7, 0x8, 0x7}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xb9, 0x4, 0x4, 0xdb}]}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "0a7a75e7b7a089ab9ea9b630f77a4c34428f8f565444269f331d2f1f2050f6299845"}}, {0x79, &(0x7f0000000300)=@string={0x79, 0x3, "2dc2f35c2e5e981fa466221755f2b912b8b17eb825e222a8972a28b62dc41c0d7eb92eb4bfb05f0ffba74e034bf7c3ec370c92b6d9f098e678547d959079f082da2f279f5679c547d44c928131ed5b2d4c40fcbf96e1e4c20dcd71dd3aab4486cd1ef213c6bda62f04d10c3417d3504230adf1d9b8accb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.92288693s ago: executing program 1 (id=12): unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x2, 0x8031, 0xffffffffffffffff, 0xcb2e7000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000040)='./control\x00') (fail_nth: 5) 1.983874231s ago: executing program 0 (id=13): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6-\xe5\xd3-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd'}, 0x2a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) flistxattr(r0, &(0x7f0000000380)=""/128, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x356}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00004e8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000002880)="0f080f01c866b9170b00000f32ba2000b0faeeb8a5008ed80fb91f6766c7442400fbffffff6766c7442402160000006766c744240600000000670f01142466b9800000c00f326635008000000f30f23e67814fd60400650fc733", 0x5a}], 0x1, 0x2, &(0x7f0000002900)=[@dstype3={0x7, 0xe}, @flags={0x3, 0x40}], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket(0x11, 0xa, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x46b}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xe50efb2afbcd11f3}, 0x24040041) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x2044, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x15, 0x5b, "df060ade96c53abf26ea2c122d4fbba0ce"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "708f5039651ed42d7ad6964c65c08cb101f8349aa4cfcf44570ea396d8cf5e0f652a8dafa73d60239346a08078cedf1be250c6659edfa370531054707d3bca3d8c450a034d78b560a8761c8d68e6bbbf81766ef839759da5c1098699bb210f17df31a37fdb8d7dcd904774bdacbed70cf4a3ed7e309af9b8614326512c96edb66c26ae472f7212f17602458fe0b7814a1c17f7b2d9f8698c3ac3e15c42ec7e319b93bdca4b66b42c5601c28f2628d5ee841c2499efefc8b36954f96dfd0f45e6e955a45434f70e098c11dabcd19a05376518abd547ae890b474acaff2a76cfa923a7d54cc6204e40817cd6f6adae19e8bad3d54a861f6160b7763cedded9e67d24939523f6fadce5497d68777e87515403a1cc481ba558697d0bf01e4a209e5b0982407fcdaf4507b5c5622fa4bd85b1de6268fae923a5e791663d3eea16e3a9ef379621f563b3625cce8ed11085f8f8ae3880bdc28fa5c2666ab6ca64c94cac7d6e849c158343510adbc2aac3b01ad07141c40cd4708486db249e2d2d23f8be4549c7788ac28c2376d7dc5902953d843810f66459253eabcf4fd39c6d6812c599cff9c68ec69ba7505aa2c0b0035af9593b17ff8932a97da246cba86895797fc01f101bbae26fbd73490e7ce211bb8f2ea089bae419a7f4a7b45913d7f585b2836a3b3c70a26ec0fe6bf928910c0870be482335de2bf00d0168dae06435985106e1d7897626bd26f80decbc6f642fe39d6761b99d3002253fbe70fd9e0cda1cac17dd5030ec5969e2506a2f6810dc6c5f258d2308010bf8b344de653075089791e56c4690ae5e650e7b92506b3ad184789fe6feddf6d11f4e0b6c57f653626887ff71e6db96bd1f98fcb61c8af17b4da5b109286ce4c79a60ad719a7a22c07ffbfff16c4a349418cd7ba516fc0c3edb0e0cae65582e32e034ca475995cdd3cac9421344dc0f85e721ebdd3c832828943b07c7323b2b6c5cb0d7f35de2c01b3a2afcbaf28c07003ac41603776740a26e23ae9d41b6b39bd100999a3b12d0c728b6dce7b92df70b1df7ed433acb5840a2ca7a1d1534d92ea983e0c73b15103ea4047c136f9c9258470ec3f701093a231d6e2a7ac6783fd9267bf27be9ccb54a193942bb96b0ab3a8f37197a4198a443403557ed25ffbaf8a1b4ad5095a538ba00133571544357418d748a3a8b144a5ec26b662ff366f10f16dc4a68702951b7f6170ec2ddf9badc1a9cb683ebdf48a8650954478d8b33ff3b2a891b003c284d84cfe531d6d7b2eb7d60c2dc1658ffd49fe263f9da90ef1c257e0ab98f2cdfb62e12a42da3c90b908fafc39b57df8dc582024a00d6d382d1ec52d8b54105cfd5a603c0a4dcb67f7d76377281b70efc908d7bef098e63118ddb5f6344319a5ffee8b7eb27280343d711a8ddf39dd150540038ac4141de6ca2da6ccb8ab1a2dd1eda71c341acdccf817f0326a1783f700a97df1b7b9ca14610fa8dd96c609682bae43d7e4634a9e8fc4d708a6e5efb884579b9c3fd9faf58a0e243902d51371e57c6ab71935dc86e7bf70cadd6e2a1ada87849376a5080346443f54f6a9fc1ac9c64a342f0a61923180824c807d8d55935555d79c8600efbe01cd80db421f7b964547de7a47879e49de28b95b883111995aca95d0939d7e3ab9ec23e280d8b609665844eaa8a89ee542aa1115b25cafe632fcdf9a30b9a9a2bde9a1b1b92ab41f64d827430dc6c91a16ae808f44033801d7b580de811c07e19dd23a90dfbdace7c8c8c6c5b53c3f82a5a570479403dd93b0df465517f5635230cdbf036896aa51b1e434bf01e506454c4c64a070ddacb725ae238f57cd7482c3156f78483385aaa34939a0d08a4a180d5119151d3a038f1dd93dac0fce744b9fde70ac5812fc3b0fb56a07c2a96bb7698d087caf9aa78c02141c986c737f617ffd7d3e8ecf2df52acf45ca607e2d87b7206ec5073dae5ca0a8f1e0968e5f34a94faa0b2d48d1f726e97180f790c488a1736524e4cc63afa99ac6b0da3337285518fdb2a5ebbcb1aa9e21bb24d9019702028fdca3c57e92301ccb442107c990431750981857681f47a3e90d79cc676b4c8951e06fada53a700a1ca01bb106cccccf4040931698105ed6089e3c0c4acfb7aa000bf66fbae6d5ef08547eb42df1ea8651094a620f4074db222091a8ae7c4d3cf774815172f271d684322c4a02250a69c7c8c0cddb071761a8715abfb55bf63a4d8af9280c9e726249c29711a327ddf3855c2ec339f21a8c8ba03c340bf5662dadaa897d284c3e8a797e25a973995e3635a386dd7c95231e482756397b8761b25794b275cfc7631c76ff9484df2d2084c724de7f694c90789d552b251e240bb1e68feae5cd2992b3294b8bfd2ac2bcea863a3866b1d01a50a3fc9d512ae6991fe65becb0c644464e04c6b3281f45c656f939c8be9f44ec744bc5a5b3494a129f97ce157deacd652f406f0e598a6938dd54940feb43fa824e845427ba0ad4e5761ad881a4bfe2eae4b6ac3bba36f4bbeb9c80d4ac69114f2ad9a0fd0da9709bfb9c1365ea58324d546562ea4b5b5c65feeea0af4570d7da991981f8e55418d39af91bcbf8dfa2bc9830399d5291532e20db1d48961fc55739280efec6a448dd4e4b29600c56eac150d1a3959f964cb31531163123ceda2063497b532beebfe5b2d6a6713384923346adaff4dabc3e9cd13a9fc848207310accd5789deacdc7e39a9d46ed20e7715ce149d23af60adf28c6e4ea2e710cceefccaebf4f7a4844fb55735c4efe2b3e426f910700cc29ad4165e751b0ab5e1038c187544d0bfc676352c0077670b3ffdde54d253f4f7f299bc9ac506f76511a6e6a037ffc2e23bec9df24960638aed9548ff5e975ed25fedd338c0b43e665a710c9fdb754d5148f74bb83056534ea93e0a6efab8b6adfc87ec83b47acdf9afe62651ef3f41b6a7d5b7df5e5e448fe0e1e73935430fa210e813db8c3254092e78c5367c35d82258fd2e3cc17cf38cf5b45f9da6c32cb88ecf2e57859b6f5cdbb5e381734c441be379ba99b277a42630a0b4a565c55540e929bd8b97745c3a9bf3ebb7f86fba26a278ea5c23c7d4d692d55a7f54792d068ad00395c89798d41903a16e50d13f94d6dba026e7bbcb234f57586ae0956880f2ba7558ee03417505d23c5e4f49fb84245d2bab00faead228fd8a8bad0a140de05b3d69fa8fe0b3aba88b337ff7622903b4704c85aac420f7d4c0222c252a959f1662c83aa01233a54e49459cbfb2456b7fd43f15817a82ac9885d34303849317aff08570eee5a82b1d79d004be0200b08c2fbaa922659b6ecf26956038b9aaef753a5bef39924f022f764b60ef4dd4979702fc5d30e246f4132f6162267cccde4499bf117de614cc108e008ab47cad547a6b41bd7ff3919a302b466bcea7a071d2685b3907e88c00d9ca46ae5b197e147412c9479053fee7243415455b010d54d34407a4c9d79a3ddc0d697e1b1d65d3c91b2cf5d4fe73a579e55503f0777c57fc0cc6681b7a9553b2a0d3be1c742866b5812bda1187d3a85c8fdc432a063a20f587cb73491b5de2c5bae2058ba6f08c29f511c8dc8e67c969cd28672f68101b8012beef6cbb910ff49fbc2713c9aed5447da89d1a92d627cc3759b599725d1971ce495a20375b9628a0fb1823c35b095ccbf0fce7fa159609624c3409a6049a7d26e4c1a0977732557f5e95231ae5977d6773bc42c47fd44b2ed4e2cfb1adb27adfc3b09b973cb7f0b30ad6af77c5b419fcca0574cc8f42d68f88c941526935410e2fbc8b799377c0820a75ad754f8639b1c6b98d87d97de8130f89ae0d3a56385faefbab997277ac5aa04b1d7d6a0a731015849846dd5e9d69a42caad39c34f220a0c85521da2998fb5891480c5af60285cf4e1c41bb4618681699135d6d5214412890265c13d78404884c0d50b8a31b51ab83482fbe334d451f6b228231d09fcfcda951a0977b7ad81e0996b43eebcba6fa7aba900ae8685f80418fa4cc595a9d6babee8fa8a8542a86a3b12d96aa452cdf3434f2505910b45df53c31a3a646b6b670ed9b95ce213ce243a622a9b90ab9ac9f85c19f4c0277ab83bfb8a9fc0a45a213de8669ce1d80bb84a5052d1d96a9f5453b1e33d53dc3f60e5b329f65b49f7db8fb1ce7acbca68446db4202f554fba7521216d862ae55e2333f5854b4b08591004bcc8a08f43373eed782a4c15934acdfede28d95a70dccc6c7ea4bae943221836aad02fddc9df458994828069043de10bbf6cc0a54ef571748e87e3d5e6dbec736a84295105f0661b29171e164ed88b8e41533480ba959d34d0aa58bf712f6656ae26d9a30a6b32a789855faebccb5a297c5460150cfec0e71031c2ae8921f15f54fe3cd993c1d9cc5b81b81ea76678d23b237f528307da0a9eb5e9c320090285f92d5261402b9e9ac3ccdddab588f930f55650f9b499411bbb64e39dbc9a9095b26d183ebce9ecf4d5e9dfe79a2e2bcb6a4be35f577465506f22eaedbd004157c96a46c8638dc29c1a64bfc21a59c55a310a2f11f08ea9decefdc701c49bd57f999592dd1fceb155e14ffd22c2441e3c4cba0c537c916339075451f911ce548671aaa8e48a1d46c4e8dae659b6e37964ff9ffd97d656735ab027d7904c000698a5f7e8c9c5f65049c887eb7ff25174c4f00162aa81fe8b47eece7ba3103d93452669cdfa2bbe47750a715289c0c978ebc3830faf3d4d35e0e14cd582b9c851ac461fedf0cb961240acc091eb0a7d02b57b095fc25afd530fa230a2fc303169dd94799cc09b07c7af1529e69eddd93e8581dc6226b236dec6bde0d5d9d78f1d133a6c0efd7a9533ad5eaa219e0c6345399561f39e37c002e6419b7f89bd54ec14c5f5d12607c1af7829dac73cbbb144917dcefc510d43e086b755c82a2e82679f148dec43e015c80b09698e739b8e9432998d56ba58d709ade0810fa17de48107a3e89be55f35dbb48bd82dbb996622056aaffe8424eb03faeede352f5091722a33796bc8001ac3277bdf7d264bc22127062b21ce27e92946cf14d2f4d90255318c9090a5e1bfeb03713be40feede3b726d00c33ed6f82bc61ac45b95acd80023bbf261d98f82d7ca6262b6dac09ad3101907c53be53d0aa1c8909577c7f6f06c39a45a65b3c1197c27c047f0d5bcc0ab30c8fa5656383b985a6ee858cd442fecab5a806d92e5de674c1d8f91a431b99a689b811bfb3b7c44de2159aabffec39a38d13a875f108c5d67faba27f0352728384548542de2cc4e2d139de745bd373ebfcf303c7dabdda35294307eb227b35df66486a1dd21308470ed074a0e2b23469fb1cc12a444ccdf96bf69aad0a9afec528648f259c4854ad675c6ebbcdbbdeb70b0776111e7881e5fada1508816eca435638a5b56a9f9912542e142c22041bbbd9909419cd93f0b95cc379438f73ea2eb99e30d3745f9f257c235f6de4264ad1c16e44e5c1cbd13a0001e1179263dffc2b989372f02dd87f139f303dac633780802d08b313686d328b40f87c83bbbe16e9c4edc633e09074ba364582e6901e614fec225159eae4609acf8a821462ff26fba0abdbac7c5bfb421a04859f6de00ba558b4db20e7b29046f0d6427c2b33ea398949485b3202f8e0af7eb585912bba2d506e35cf492e27714b17bc18342b81a21f6e3735c729b84286d070ed03aedc90562013610ce8f2e918b14ae5365b8a7935003d3a72b0e7a154826febcbd75e123ac50b4093cae259db2819c006c3bb96c0285a4f26d407328d8cfd3f0b6013121a66a71"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x2044}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r10], 0x48}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.881203342s ago: executing program 4 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) readlink(&(0x7f00000001c0)='./bus\x00', &(0x7f00000005c0)=""/20, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYBLOB="0a604c7e46d9949d32a73ef06e7cd169d9498be9ceb59fa54ca9d8247ac57944318fca95b77c3b24ea33c180250070165b529de3455eb2743c7b2332c7f4f9bbd85800dc87e7d28bf727f4556d26ed3603aa638507818108ad00abab0cde3ce200809158190fc4fc8b9eb609f0ee1d85d6f19202603b5dee66acb1f9329f440085ea8295248d304f54661dcd40bd63c24fd6cfd02ee0daa815629a1cfd062162023e39f2491f31500aedaed47eafb0dd5aa8e13cefe91cee1f0c1011"], 0x0) 1.667869161s ago: executing program 1 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x2a) syz_open_dev$dri(0x0, 0x8000000000000200, 0x705801) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x53, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40808c5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe53, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) 1.278223148s ago: executing program 2 (id=16): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='/dev/kvm\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r6, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 874.001697ms ago: executing program 3 (id=17): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) writev(0xffffffffffffffff, &(0x7f0000004900)=[{&(0x7f0000004640)="6ca9", 0x2}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4f21, @local}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac163951707", 0x7e}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0x56}], 0x1}}], 0x400000000000300, 0x4000) close(r5) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b979fc5100000dd46b001fe944e827bf253fea4540545", 0x17}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f00000002c0)="d8fa34bdc8", 0x5}, {&(0x7f0000000440)="36bd", 0x2}], 0x4}}], 0x1, 0x24008804) sendmmsg$alg(r6, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) socket$netlink(0x10, 0x3, 0x0) 315.235966ms ago: executing program 2 (id=18): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6d288, 0x42004}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) read$usbmon(r9, &(0x7f00000005c0)=""/4096, 0x1000) (async) read$usbmon(r9, &(0x7f00000005c0)=""/4096, 0x1000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r8, @ANYBLOB="050033"], 0x2c}}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 0s ago: executing program 1 (id=19): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0cfa684b146c15e8829c7ab42210cc8b9cc5a396e5ab3b3d9feeda0ddb3be1e0cce3e773db93d11349fbc47768b9a79133f41155f1ab377218a575ac6f599f05c1685fcebf987a91e5a8dbfa2c32ff9709f9937b8c1c48ea1231a007068df1440057b13741d32c24ae3f575484653bac7d10237ba755057a12c6f41d356b8cf5b13d80ba30f609277508617a90d184d81cfd6810cc63b431b8e8c5493007f67f7567b2313435ad69e65c", @ANYRES16=r3, @ANYBLOB="0700000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000000)="716f88cabc9b050a4c2efb7448850c573ebdb4d52efd8e8e", 0x0, 0x18) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000000000000003000000250000009d000100", @ANYRES32, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0000000800"/24, @ANYRESHEX=r1, @ANYBLOB], 0x50) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x1e0a4000) r6 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000d40)="01", 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000740), 0x15, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000480)={0x13, 0x1, 0x0, "8eb8a83fe93b07f1dd06da7a41bfeac48048beb159fbba17425ced8f098c68d9"}) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) syz_clone3(&(0x7f00000002c0)={0x40000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r6) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x23abadfe31dbac71, @capture={0x0, 0x1, {0x4, 0x6}, 0x100, 0xfff}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 74.148723][ T5815] cgroup: Unknown subsys name 'net' [ 74.296579][ T5815] cgroup: Unknown subsys name 'cpuset' [ 74.305792][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.878015][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.394647][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.416157][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.424403][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.431891][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.439290][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.447115][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.452159][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.454404][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.472363][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.473011][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.480369][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.489128][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.494464][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.502386][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.517287][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.519182][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.526002][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.532977][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.540028][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.546041][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.553252][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.567152][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.576726][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.589400][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.599704][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.078059][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.361863][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.409877][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 79.448389][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.456137][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.463785][ T5842] bridge_slave_0: entered allmulticast mode [ 79.471076][ T5842] bridge_slave_0: entered promiscuous mode [ 79.480223][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.487383][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.494652][ T5842] bridge_slave_1: entered allmulticast mode [ 79.501829][ T5842] bridge_slave_1: entered promiscuous mode [ 79.514477][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.649410][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.688245][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.710843][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 79.810276][ T5842] team0: Port device team_slave_0 added [ 79.850758][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.858235][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.865715][ T5844] bridge_slave_0: entered allmulticast mode [ 79.873250][ T5844] bridge_slave_0: entered promiscuous mode [ 79.893832][ T5842] team0: Port device team_slave_1 added [ 79.941020][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.948408][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.955612][ T5846] bridge_slave_0: entered allmulticast mode [ 79.963226][ T5846] bridge_slave_0: entered promiscuous mode [ 79.970711][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.978370][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.985666][ T5844] bridge_slave_1: entered allmulticast mode [ 79.993018][ T5844] bridge_slave_1: entered promiscuous mode [ 80.029675][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.037129][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.046814][ T5846] bridge_slave_1: entered allmulticast mode [ 80.054334][ T5846] bridge_slave_1: entered promiscuous mode [ 80.073503][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.080694][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.088198][ T5847] bridge_slave_0: entered allmulticast mode [ 80.095510][ T5847] bridge_slave_0: entered promiscuous mode [ 80.148001][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.155607][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.162912][ T5847] bridge_slave_1: entered allmulticast mode [ 80.169983][ T5847] bridge_slave_1: entered promiscuous mode [ 80.178141][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.188599][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.214876][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.253710][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.276755][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.283764][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.309793][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.334358][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.341602][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.348919][ T5848] bridge_slave_0: entered allmulticast mode [ 80.356892][ T5848] bridge_slave_0: entered promiscuous mode [ 80.366833][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.379491][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.390976][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.420573][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.433578][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.443816][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.451001][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.458450][ T5848] bridge_slave_1: entered allmulticast mode [ 80.466191][ T5848] bridge_slave_1: entered promiscuous mode [ 80.550141][ T5847] team0: Port device team_slave_0 added [ 80.573405][ T5828] Bluetooth: hci1: command tx timeout [ 80.584750][ T5846] team0: Port device team_slave_0 added [ 80.593647][ T5844] team0: Port device team_slave_0 added [ 80.603473][ T5847] team0: Port device team_slave_1 added [ 80.611629][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.623856][ T5846] team0: Port device team_slave_1 added [ 80.631171][ T5844] team0: Port device team_slave_1 added [ 80.653007][ T5828] Bluetooth: hci0: command tx timeout [ 80.653058][ T5836] Bluetooth: hci3: command tx timeout [ 80.658478][ T5139] Bluetooth: hci4: command tx timeout [ 80.664100][ T5833] Bluetooth: hci2: command tx timeout [ 80.684708][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.784856][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.791849][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.819000][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.842323][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.849578][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.875776][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.887916][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.894996][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.920930][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.937848][ T5842] hsr_slave_0: entered promiscuous mode [ 80.944472][ T5842] hsr_slave_1: entered promiscuous mode [ 80.951838][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.959041][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.984966][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.998574][ T5848] team0: Port device team_slave_0 added [ 81.007258][ T5848] team0: Port device team_slave_1 added [ 81.014223][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.021182][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.047496][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.066276][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.073971][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.099975][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.151763][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.158942][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.185170][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.213030][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.219995][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.246080][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.361472][ T5846] hsr_slave_0: entered promiscuous mode [ 81.368668][ T5846] hsr_slave_1: entered promiscuous mode [ 81.376462][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.385080][ T5846] Cannot create hsr debugfs directory [ 81.415021][ T5844] hsr_slave_0: entered promiscuous mode [ 81.421400][ T5844] hsr_slave_1: entered promiscuous mode [ 81.428854][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.436788][ T5844] Cannot create hsr debugfs directory [ 81.447762][ T5847] hsr_slave_0: entered promiscuous mode [ 81.454438][ T5847] hsr_slave_1: entered promiscuous mode [ 81.460809][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.468673][ T5847] Cannot create hsr debugfs directory [ 81.707257][ T5848] hsr_slave_0: entered promiscuous mode [ 81.715775][ T5848] hsr_slave_1: entered promiscuous mode [ 81.722132][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.729816][ T5848] Cannot create hsr debugfs directory [ 82.179448][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.192180][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.208454][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.218847][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.318446][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.328784][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.348889][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.386100][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.457860][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.479026][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.499253][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.509585][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.575056][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.614338][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.653774][ T5833] Bluetooth: hci1: command tx timeout [ 82.659657][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.672257][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.685214][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.692062][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.733312][ T5836] Bluetooth: hci0: command tx timeout [ 82.736764][ T5828] Bluetooth: hci4: command tx timeout [ 82.743033][ T5833] Bluetooth: hci2: command tx timeout [ 82.746953][ T5828] Bluetooth: hci3: command tx timeout [ 82.771079][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.778351][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.821272][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.828415][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.867540][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.897473][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.911923][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.925502][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.937990][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.985829][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.004719][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.036669][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.043843][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.078170][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.118989][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.126142][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.138151][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.145333][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.177485][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.184634][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.224767][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.235984][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.301798][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.341899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.349075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.403885][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.411016][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.466510][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.501219][ T5842] veth0_vlan: entered promiscuous mode [ 83.539512][ T5842] veth1_vlan: entered promiscuous mode [ 83.551024][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.565512][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.590903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.598534][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.622300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.629471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.696516][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.714557][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.735327][ T5842] veth0_macvtap: entered promiscuous mode [ 83.751894][ T5842] veth1_macvtap: entered promiscuous mode [ 83.797805][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.807533][ T5844] veth0_vlan: entered promiscuous mode [ 83.841598][ T5844] veth1_vlan: entered promiscuous mode [ 83.858065][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.895773][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.905350][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.915640][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924369][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.962476][ T5846] veth0_vlan: entered promiscuous mode [ 83.977931][ T5847] veth0_vlan: entered promiscuous mode [ 84.007742][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.028572][ T5847] veth1_vlan: entered promiscuous mode [ 84.043854][ T5844] veth0_macvtap: entered promiscuous mode [ 84.051158][ T5846] veth1_vlan: entered promiscuous mode [ 84.079473][ T5844] veth1_macvtap: entered promiscuous mode [ 84.155068][ T5848] veth0_vlan: entered promiscuous mode [ 84.208187][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.219219][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.231284][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.241849][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.253428][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.264601][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.274858][ T5847] veth0_macvtap: entered promiscuous mode [ 84.283405][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.289745][ T5846] veth0_macvtap: entered promiscuous mode [ 84.291294][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.301834][ T5846] veth1_macvtap: entered promiscuous mode [ 84.328850][ T5848] veth1_vlan: entered promiscuous mode [ 84.354868][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367428][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.376533][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.385571][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.397238][ T5847] veth1_macvtap: entered promiscuous mode [ 84.427478][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.438183][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.451227][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.465036][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.476735][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.490566][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.491902][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.508884][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.516759][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.516778][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.516793][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.518627][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.571885][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.586145][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595000][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.603776][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657379][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.671155][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.681508][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.692233][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.704231][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.714835][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.726980][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.736285][ T5828] Bluetooth: hci1: command tx timeout [ 84.755738][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.785986][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.797026][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.807362][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.819422][ T5828] Bluetooth: hci3: command tx timeout [ 84.820656][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.825897][ T5836] Bluetooth: hci2: command tx timeout [ 84.840227][ T5833] Bluetooth: hci4: command tx timeout [ 84.840771][ T5139] Bluetooth: hci0: command tx timeout [ 84.846963][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.861605][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.874289][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.887296][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.896344][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.905160][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.913940][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011486][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.030619][ T5848] veth0_macvtap: entered promiscuous mode [ 85.048699][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.056929][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.098588][ T5848] veth1_macvtap: entered promiscuous mode [ 85.181973][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.182224][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.204633][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.215290][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.215733][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.234485][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.244387][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.255007][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.265045][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.275526][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.286690][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.336235][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.347093][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358009][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.368658][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.378569][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.389128][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399078][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.409578][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.420702][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.450153][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.460214][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.497614][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.508358][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517561][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526671][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.555075][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.568149][ T5886] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.576092][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.605196][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.618368][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.713684][ T5903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.755546][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.791486][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 85.833583][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 85.867560][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 85.877965][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.894239][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.919586][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933091][ T5886] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 85.947114][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.962560][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 85.970829][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.988812][ T5886] usb 2-1: Product: syz [ 86.004993][ T5886] usb 2-1: Manufacturer: syz [ 86.014957][ T5886] usb 2-1: SerialNumber: syz [ 86.023012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.031523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.068930][ T5886] usb 2-1: config 0 descriptor?? [ 86.162125][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.187892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.285937][ T5886] radio-si470x 2-1:0.0: DeviceID=0xd318 ChipID=0x30a9 [ 86.332801][ T976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.458303][ T5916] Zero length message leads to an empty skb [ 86.564491][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 86.571928][ T976] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.593395][ T24] cfg80211: failed to load regulatory.db [ 86.594211][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.599230][ T976] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.621753][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.631456][ T976] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 86.646904][ T976] usb 4-1: Product: syz [ 86.651744][ T976] usb 4-1: Manufacturer: syz [ 86.721472][ T976] hub 4-1:4.0: USB hub found [ 86.808260][ T5883] usb 1-1: config 0 has an invalid interface number: 220 but max is 0 [ 86.812821][ T5139] Bluetooth: hci1: command tx timeout [ 86.822936][ T5883] usb 1-1: config 0 has no interface number 0 [ 86.829362][ T5883] usb 1-1: config 0 interface 220 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 86.845562][ T5883] usb 1-1: config 0 interface 220 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 86.856515][ T5886] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 86.880140][ T5886] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 86.894672][ T5139] Bluetooth: hci0: command tx timeout [ 86.901552][ T5836] Bluetooth: hci2: command tx timeout [ 86.902638][ T5139] Bluetooth: hci4: command tx timeout [ 86.907478][ T5836] Bluetooth: hci3: command tx timeout [ 86.936262][ T5886] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 86.939144][ T5883] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=c8.96 [ 86.958539][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.970563][ T976] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 86.994825][ T5883] usb 1-1: Product: syz [ 87.005434][ T5883] usb 1-1: Manufacturer: syz [ 87.010163][ T5883] usb 1-1: SerialNumber: syz [ 87.063864][ T5883] usb 1-1: config 0 descriptor?? [ 87.069771][ T5914] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 87.091161][ T976] usb 4-1: USB disconnect, device number 2 [ 87.110696][ T5914] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 87.146884][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.190094][ T5883] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.220/input/input5 [ 87.292895][ T5887] usb 3-1: device descriptor read/64, error -71 [ 87.368659][ T5184] bcm5974 1-1:0.220: could not read from device [ 87.396064][ T5184] bcm5974 1-1:0.220: could not read from device [ 87.425585][ T5184] bcm5974 1-1:0.220: could not read from device [ 87.437840][ T5883] usb 1-1: USB disconnect, device number 2 [ 87.463793][ T5184] bcm5974 1-1:0.220: could not read from device [ 87.503639][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.542768][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.662604][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 87.671568][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 87.692415][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.711264][ T5887] usb 3-1: device descriptor read/64, error -71 [ 87.721668][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.736557][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.746207][ T5930] usb 5-1: Product: syz [ 87.750397][ T5930] usb 5-1: Manufacturer: syz [ 87.755245][ T5930] usb 5-1: SerialNumber: syz [ 87.762626][ T5930] usb 5-1: config 0 descriptor?? [ 87.776401][ T5930] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 87.785716][ T5930] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 87.833805][ T5887] usb usb3-port1: attempt power cycle [ 87.882737][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.913188][ T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.067865][ T976] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 88.075989][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.077301][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.094138][ T5883] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 88.094167][ T976] usb 4-1: Product: syz [ 88.094189][ T5883] usb 1-1: config 6 has no interface number 0 [ 88.105310][ T976] usb 4-1: Manufacturer: syz [ 88.110098][ T5883] usb 1-1: config 6 interface 200 has no altsetting 0 [ 88.119840][ T976] usb 4-1: SerialNumber: syz [ 88.137332][ T5883] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 88.139858][ T976] usb 4-1: config 0 descriptor?? [ 88.192633][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.216573][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.247721][ T5887] usb 3-1: device descriptor read/8, error -71 [ 88.264231][ T5883] usb 1-1: Product: syz [ 88.270338][ T5883] usb 1-1: Manufacturer: syz [ 88.282788][ T5883] usb 1-1: SerialNumber: syz [ 88.315811][ T978] usb 2-1: USB disconnect, device number 2 [ 88.392111][ T5930] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 88.400233][ T5930] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 88.502169][ T5883] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 88.512690][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.523291][ T5883] dvb-usb: bulk message failed: -71 (3/0) [ 88.537770][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.548384][ T5887] usb 3-1: device descriptor read/8, error -71 [ 88.556572][ T5883] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 88.565271][ T5883] usb 1-1: media controller created [ 88.597232][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.610833][ T5930] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 88.618027][ T5930] em28xx 5-1:0.0: No AC97 audio processor [ 88.651113][ T5930] usb 5-1: USB disconnect, device number 2 [ 88.662992][ T5887] usb usb3-port1: unable to enumerate USB device [ 88.677114][ T5883] dvb-usb: bulk message failed: -71 (6/0) [ 88.683692][ T5930] em28xx 5-1:0.0: Disconnecting em28xx [ 88.692292][ T5883] dvb-usb: bulk message failed: -71 (6/0) [ 88.700734][ T5930] em28xx 5-1:0.0: Freeing device [ 88.706858][ T5883] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 88.739884][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 88.764816][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 88.771807][ T5883] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 88.791775][ T5944] FAULT_INJECTION: forcing a failure. [ 88.791775][ T5944] name failslab, interval 1, probability 0, space 0, times 1 [ 88.818232][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.1.12 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(full) [ 88.818256][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.818270][ T5944] Call Trace: [ 88.818281][ T5944] [ 88.818288][ T5944] dump_stack_lvl+0x189/0x250 [ 88.818324][ T5944] ? irqentry_exit+0x74/0x90 [ 88.818350][ T5944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.818392][ T5944] should_fail_ex+0x414/0x560 [ 88.818425][ T5944] should_failslab+0xa8/0x100 [ 88.818451][ T5944] kmem_cache_alloc_noprof+0x73/0x3c0 [ 88.818491][ T5944] ? security_inode_alloc+0x39/0x330 [ 88.818517][ T5944] security_inode_alloc+0x39/0x330 [ 88.818542][ T5944] inode_init_always_gfp+0x9ed/0xdc0 [ 88.818572][ T5944] ? __pfx_proc_alloc_inode+0x10/0x10 [ 88.818599][ T5944] alloc_inode+0x82/0x1b0 [ 88.818622][ T5944] new_inode+0x22/0x170 [ 88.818650][ T5944] proc_sys_make_inode+0x4c/0x500 [ 88.818698][ T5944] ? d_set_d_op+0x25f/0x380 [ 88.818736][ T5944] proc_sys_lookup+0x352/0x5f0 [ 88.818771][ T5944] __lookup_slow+0x294/0x3d0 [ 88.818802][ T5944] ? __pfx___lookup_slow+0x10/0x10 [ 88.818844][ T5944] ? down_read+0x1ad/0x2e0 [ 88.818872][ T5944] lookup_slow+0x53/0x70 [ 88.818901][ T5944] link_path_walk+0x925/0xe50 [ 88.818944][ T5944] __filename_parentat+0x246/0x670 [ 88.818972][ T5944] ? kasan_save_track+0x4f/0x80 [ 88.819000][ T5944] ? __pfx___filename_parentat+0x10/0x10 [ 88.819054][ T5944] ? __might_fault+0xb0/0x130 [ 88.819087][ T5944] do_rmdir+0xcc/0x630 [ 88.819110][ T5944] ? __pfx_do_rmdir+0x10/0x10 [ 88.819130][ T5944] ? strncpy_from_user+0x150/0x290 [ 88.819162][ T5944] ? getname_flags+0x1e5/0x540 [ 88.819191][ T5944] __x64_sys_rmdir+0x47/0x50 [ 88.819211][ T5944] do_syscall_64+0xf6/0x210 [ 88.819235][ T5944] ? clear_bhb_loop+0x45/0xa0 [ 88.819258][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.819275][ T5944] RIP: 0033:0x7fc28838e969 [ 88.819297][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.819312][ T5944] RSP: 002b:00007fc2861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 88.819331][ T5944] RAX: ffffffffffffffda RBX: 00007fc2885b5fa0 RCX: 00007fc28838e969 [ 88.819345][ T5944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 88.819356][ T5944] RBP: 00007fc2861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.819367][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.819378][ T5944] R13: 0000000000000000 R14: 00007fc2885b5fa0 R15: 00007fc2886dfa28 [ 88.819407][ T5944] [ 88.823889][ T5883] usb 1-1: USB disconnect, device number 3 [ 89.093471][ T5881] dvb-usb: bulk message failed: -19 (1/0) [ 89.099365][ T5881] dvb-usb: error while querying for an remote control event. [ 89.235221][ T5952] netlink: 'syz.0.13': attribute type 32 has an invalid length. [ 89.255323][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 89.305525][ T5883] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 89.317107][ T5953] libceph: resolve 'c' (ret=-3): failed [ 89.372059][ T5955] netlink: 'syz.4.14': attribute type 3 has an invalid length. [ 89.392271][ T5955] netlink: 'syz.4.14': attribute type 3 has an invalid length. [ 89.409042][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14'. [ 89.469864][ T5952] (unnamed net_device) (uninitialized): option coupled_control: invalid value (101) [ 89.639774][ T976] usb 4-1: Firmware version (0.0) predates our first public release. [ 89.650648][ T976] usb 4-1: Please update to version 0.2 or newer [ 89.689390][ T976] usb 4-1: USB disconnect, device number 3 [ 89.704440][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.754190][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.774852][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.872585][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 89.889409][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.912693][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 89.923379][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 89.940708][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 89.940780][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 89.958593][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 89.969066][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 19552, setting to 1024 [ 89.981059][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 89.981832][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 89.997230][ T5886] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 90.011805][ T5830] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 90.027933][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.043234][ T5830] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 90.050138][ T5883] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 90.051426][ T5886] usb 2-1: config 0 has no interface number 0 [ 90.066741][ T5830] usb 5-1: Manufacturer: syz [ 90.077983][ T5830] usb 5-1: config 0 descriptor?? [ 90.083086][ T5886] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 90.086987][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.092407][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.101810][ T5883] usb 1-1: Product: syz [ 90.111045][ T5955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.114224][ T5883] usb 1-1: Manufacturer: syz [ 90.131181][ T5883] usb 1-1: SerialNumber: syz [ 90.133937][ T5830] smsusb:smsusb_probe: board id=9, interface number 0 [ 90.140304][ T5883] usb 1-1: config 0 descriptor?? [ 90.149041][ T5886] usb 2-1: config 0 descriptor?? [ 90.169769][ T5883] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 90.169956][ T5830] smsusb:siano_media_device_register: media controller created [ 90.189186][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.201771][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.209493][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.217572][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.225751][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.233309][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.244375][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.252732][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.262884][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.270363][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.277968][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.286142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.293494][ T5886] viperboard 2-1:0.143: version 0.00 found at bus 002 address 003 [ 90.301948][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.309543][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.324144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.331886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.342042][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.350915][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.358516][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.366206][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.374520][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.382204][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.390138][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.397689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.405233][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.414082][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.421752][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.430551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.438459][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.446644][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.455523][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.463119][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.470421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.477706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.485020][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.493365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.500706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.504298][ T5952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 90.508005][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.524270][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.531571][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.539159][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.546454][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.556302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.563584][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.570859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.578151][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.585391][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.594166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.601432][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.608669][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.615903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.623144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.630698][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.638001][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.645279][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.652560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.659853][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.668946][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.676221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.683472][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.690697][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.697929][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.706503][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.713873][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.721192][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.728511][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.735835][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.744218][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.751492][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.758759][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.766042][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.773308][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.787718][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.795105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.802414][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.809731][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.817087][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.826273][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.833629][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.840955][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.848230][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.855495][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.864051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.871356][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.878677][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.885973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.893242][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.904835][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.912234][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.919590][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.926934][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.934272][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.952094][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.959400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.966681][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.973959][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.981232][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.991676][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.998975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.006250][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.013536][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.020842][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.028487][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.035817][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.043111][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.050385][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.057659][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.065061][ T5886] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 91.076600][ T5886] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 91.079320][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.079441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.079537][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.079640][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.079744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.126723][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.134011][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.141292][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.148599][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.155876][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.164779][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.172107][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.179423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.186739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.194137][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.196051][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.201571][ T5830] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 91.224297][ T978] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.224736][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.239236][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.246509][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.253781][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.261044][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.268311][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.275585][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.282845][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.290100][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.297508][ T5830] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 91.308976][ T5830] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 91.316689][ T5830] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 91.327785][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.343853][ T5886] usb 2-1: USB disconnect, device number 3 [ 91.356249][ T5830] ------------[ cut here ]------------ [ 91.361756][ T5830] WARNING: CPU: 1 PID: 5830 at mm/slub.c:4752 free_large_kmalloc+0x165/0x200 [ 91.370615][ T5830] Modules linked in: [ 91.378665][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/1:3 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(full) [ 91.392916][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.403158][ T5830] Workqueue: usb_hub_wq hub_event [ 91.408235][ T5830] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 91.414151][ T5830] Code: 75 08 48 89 df e8 db e9 e2 ff 65 48 8b 05 53 02 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 30 02 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 91.432526][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.434162][ T5830] RSP: 0018:ffffc900042feba8 EFLAGS: 00010206 [ 91.447461][ T5830] RAX: 00000000ff000000 RBX: ffffea0000a81880 RCX: ffffea0000000000 [ 91.458481][ T5830] RDX: ffffc90018fa7000 RSI: ffff88802a062000 RDI: ffffea0000a81880 [ 91.467733][ T5830] RBP: 0000000000000100 R08: ffff88805d9ef403 R09: 1ffff1100bb3de80 [ 91.477275][ T5830] R10: dffffc0000000000 R11: ffffed100bb3de81 R12: 1ffff1102895c482 [ 91.486588][ T5830] R13: ffff888033a0cc80 R14: ffff88805d9ef460 R15: dffffc0000000000 [ 91.494658][ T5830] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 91.503671][ T5830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.510283][ T5830] CR2: 00007f751728af98 CR3: 0000000031dba000 CR4: 00000000003526f0 [ 91.518342][ T5830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.526406][ T5830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.538051][ T5830] Call Trace: [ 91.541364][ T5830] [ 91.545907][ T5830] usb_free_urb+0xd0/0x120 [ 91.550377][ T5830] smsusb_term_device+0x1d6/0x3b0 [ 91.555536][ T5830] smsusb_probe+0x1a04/0x2060 [ 91.560410][ T5830] ? __pfx_smsusb_probe+0x10/0x10 [ 91.565539][ T5830] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 91.571134][ T5830] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 91.578453][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.586094][ T5830] ? __pm_runtime_set_status+0x785/0xa50 [ 91.591795][ T5830] usb_probe_interface+0x641/0xbc0 [ 91.597050][ T5830] ? __pfx_usb_probe_interface+0x10/0x10 [ 91.602786][ T5830] really_probe+0x26a/0x9a0 [ 91.607360][ T5830] __driver_probe_device+0x18c/0x2f0 [ 91.613984][ T5830] driver_probe_device+0x4f/0x430 [ 91.619069][ T5830] __device_attach_driver+0x2ce/0x530 [ 91.625159][ T5830] bus_for_each_drv+0x24e/0x2e0 [ 91.630060][ T5830] ? __pfx___device_attach_driver+0x10/0x10 [ 91.636040][ T5830] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.641497][ T5830] __device_attach+0x2b8/0x400 [ 91.646426][ T5830] ? __pfx___device_attach+0x10/0x10 [ 91.651783][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 91.657122][ T5830] bus_probe_device+0x185/0x260 [ 91.662029][ T5830] device_add+0x7b6/0xb50 [ 91.666465][ T5830] usb_set_configuration+0x1a87/0x20e0 [ 91.672072][ T5830] usb_generic_driver_probe+0x8d/0x150 [ 91.677681][ T5830] usb_probe_device+0x1c1/0x390 [ 91.684120][ T5830] ? __pfx_usb_probe_device+0x10/0x10 [ 91.689541][ T5830] really_probe+0x26a/0x9a0 [ 91.697249][ T5830] __driver_probe_device+0x18c/0x2f0 [ 91.703149][ T5830] driver_probe_device+0x4f/0x430 [ 91.708234][ T5830] __device_attach_driver+0x2ce/0x530 [ 91.713718][ T5830] bus_for_each_drv+0x24e/0x2e0 [ 91.718624][ T5830] ? __pfx___device_attach_driver+0x10/0x10 [ 91.724655][ T5830] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.730112][ T5830] __device_attach+0x2b8/0x400 [ 91.735034][ T5830] ? __pfx___device_attach+0x10/0x10 [ 91.740387][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 91.745718][ T5830] bus_probe_device+0x185/0x260 [ 91.750626][ T5830] device_add+0x7b6/0xb50 [ 91.755102][ T5830] usb_new_device+0xa39/0x16c0 [ 91.759960][ T5830] ? __pfx_usb_new_device+0x10/0x10 [ 91.765299][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.770554][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.778398][ T5830] hub_event+0x2941/0x4a00 [ 91.785405][ T5830] ? __pfx_hub_event+0x10/0x10 [ 91.790230][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 91.797197][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.802431][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 91.808233][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 91.814049][ T5830] process_scheduled_works+0xadb/0x17a0 [ 91.819744][ T5830] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.825904][ T5830] worker_thread+0x8a0/0xda0 [ 91.830540][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.837000][ T5830] ? __kthread_parkme+0x7b/0x200 [ 91.842011][ T5830] kthread+0x70e/0x8a0 [ 91.846177][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 91.851319][ T5830] ? __pfx_kthread+0x10/0x10 [ 91.857755][ T5830] ? __pfx_kthread+0x10/0x10 [ 91.862390][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.868696][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.873997][ T5830] ? __pfx_kthread+0x10/0x10 [ 91.878624][ T5830] ret_from_fork+0x4b/0x80 [ 91.883138][ T5830] ? __pfx_kthread+0x10/0x10 [ 91.889156][ T5830] ret_from_fork_asm+0x1a/0x30 [ 91.895195][ T5830] [ 91.898245][ T5830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.905543][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/1:3 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(full) [ 91.917632][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.927707][ T5830] Workqueue: usb_hub_wq hub_event [ 91.932793][ T5830] Call Trace: [ 91.936095][ T5830] [ 91.939047][ T5830] dump_stack_lvl+0x99/0x250 [ 91.943680][ T5830] ? __asan_memcpy+0x40/0x70 [ 91.948302][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.953535][ T5830] ? __pfx__printk+0x10/0x10 [ 91.958168][ T5830] panic+0x2db/0x790 [ 91.962101][ T5830] ? __pfx_panic+0x10/0x10 [ 91.966547][ T5830] ? show_trace_log_lvl+0x4fb/0x550 [ 91.971801][ T5830] ? ret_from_fork_asm+0x1a/0x30 [ 91.976776][ T5830] __warn+0x31b/0x4b0 [ 91.980790][ T5830] ? free_large_kmalloc+0x165/0x200 [ 91.986027][ T5830] ? free_large_kmalloc+0x165/0x200 [ 91.991260][ T5830] report_bug+0x2be/0x4f0 [ 91.995626][ T5830] ? free_large_kmalloc+0x165/0x200 [ 92.000867][ T5830] ? free_large_kmalloc+0x165/0x200 [ 92.006094][ T5830] ? free_large_kmalloc+0x167/0x200 [ 92.011322][ T5830] handle_bug+0x84/0x160 [ 92.015609][ T5830] exc_invalid_op+0x1a/0x50 [ 92.020149][ T5830] asm_exc_invalid_op+0x1a/0x20 [ 92.025029][ T5830] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 92.030871][ T5830] Code: 75 08 48 89 df e8 db e9 e2 ff 65 48 8b 05 53 02 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 30 02 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 92.050500][ T5830] RSP: 0018:ffffc900042feba8 EFLAGS: 00010206 [ 92.056595][ T5830] RAX: 00000000ff000000 RBX: ffffea0000a81880 RCX: ffffea0000000000 [ 92.064599][ T5830] RDX: ffffc90018fa7000 RSI: ffff88802a062000 RDI: ffffea0000a81880 [ 92.072598][ T5830] RBP: 0000000000000100 R08: ffff88805d9ef403 R09: 1ffff1100bb3de80 [ 92.080591][ T5830] R10: dffffc0000000000 R11: ffffed100bb3de81 R12: 1ffff1102895c482 [ 92.088615][ T5830] R13: ffff888033a0cc80 R14: ffff88805d9ef460 R15: dffffc0000000000 [ 92.096636][ T5830] usb_free_urb+0xd0/0x120 [ 92.101086][ T5830] smsusb_term_device+0x1d6/0x3b0 [ 92.106166][ T5830] smsusb_probe+0x1a04/0x2060 [ 92.110895][ T5830] ? __pfx_smsusb_probe+0x10/0x10 [ 92.115958][ T5830] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 92.121549][ T5830] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 92.127477][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 92.133852][ T5830] ? __pm_runtime_set_status+0x785/0xa50 [ 92.139536][ T5830] usb_probe_interface+0x641/0xbc0 [ 92.144700][ T5830] ? __pfx_usb_probe_interface+0x10/0x10 [ 92.150374][ T5830] really_probe+0x26a/0x9a0 [ 92.154925][ T5830] __driver_probe_device+0x18c/0x2f0 [ 92.160261][ T5830] driver_probe_device+0x4f/0x430 [ 92.165325][ T5830] __device_attach_driver+0x2ce/0x530 [ 92.170748][ T5830] bus_for_each_drv+0x24e/0x2e0 [ 92.175648][ T5830] ? __pfx___device_attach_driver+0x10/0x10 [ 92.181582][ T5830] ? __pfx_bus_for_each_drv+0x10/0x10 [ 92.187014][ T5830] __device_attach+0x2b8/0x400 [ 92.191817][ T5830] ? __pfx___device_attach+0x10/0x10 [ 92.197137][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 92.202377][ T5830] bus_probe_device+0x185/0x260 [ 92.207262][ T5830] device_add+0x7b6/0xb50 [ 92.211651][ T5830] usb_set_configuration+0x1a87/0x20e0 [ 92.217278][ T5830] usb_generic_driver_probe+0x8d/0x150 [ 92.222788][ T5830] usb_probe_device+0x1c1/0x390 [ 92.227688][ T5830] ? __pfx_usb_probe_device+0x10/0x10 [ 92.233099][ T5830] really_probe+0x26a/0x9a0 [ 92.237654][ T5830] __driver_probe_device+0x18c/0x2f0 [ 92.242981][ T5830] driver_probe_device+0x4f/0x430 [ 92.248044][ T5830] __device_attach_driver+0x2ce/0x530 [ 92.253470][ T5830] bus_for_each_drv+0x24e/0x2e0 [ 92.258368][ T5830] ? __pfx___device_attach_driver+0x10/0x10 [ 92.264300][ T5830] ? __pfx_bus_for_each_drv+0x10/0x10 [ 92.269746][ T5830] __device_attach+0x2b8/0x400 [ 92.274561][ T5830] ? __pfx___device_attach+0x10/0x10 [ 92.279898][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 92.285129][ T5830] bus_probe_device+0x185/0x260 [ 92.290015][ T5830] device_add+0x7b6/0xb50 [ 92.294376][ T5830] usb_new_device+0xa39/0x16c0 [ 92.299184][ T5830] ? __pfx_usb_new_device+0x10/0x10 [ 92.304423][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.309652][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.314901][ T5830] hub_event+0x2941/0x4a00 [ 92.319426][ T5830] ? __pfx_hub_event+0x10/0x10 [ 92.324237][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 92.330021][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.335243][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 92.340992][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 92.346739][ T5830] process_scheduled_works+0xadb/0x17a0 [ 92.352354][ T5830] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.358390][ T5830] worker_thread+0x8a0/0xda0 [ 92.363024][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 92.369394][ T5830] ? __kthread_parkme+0x7b/0x200 [ 92.374385][ T5830] kthread+0x70e/0x8a0 [ 92.378523][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 92.383661][ T5830] ? __pfx_kthread+0x10/0x10 [ 92.388285][ T5830] ? __pfx_kthread+0x10/0x10 [ 92.392906][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.398139][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.403370][ T5830] ? __pfx_kthread+0x10/0x10 [ 92.407995][ T5830] ret_from_fork+0x4b/0x80 [ 92.412450][ T5830] ? __pfx_kthread+0x10/0x10 [ 92.417074][ T5830] ret_from_fork_asm+0x1a/0x30 [ 92.421892][ T5830] [ 92.425159][ T5830] Kernel Offset: disabled [ 92.429493][ T5830] Rebooting in 86400 seconds..