last executing test programs: 10m42.694173287s ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (fail_nth: 2) 10m42.354344117s ago: executing program 0 (id=437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000a707648cf45bed3b80602cac79cb885338654da4552961ebb4aac017c25c7fb13b9b931f134d3d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000480016804400018040000c8014000104ff0300ff88a8000014000100390e00003f0000000d000000810000001400010006000000af0600000700000088a8000005001100060000000000000000000000337289ae8504346600e663960b2466b8aeb6d543ca7b0ab342095dd8aa80a9436ac2f322cd6bb964e3248157af44c58b53fb284ad18ee521b78b0b06ef2dad6158b7e9a5a099c23ff2e5a4f76b865a82818641f06dd6e5a447eed69dd0eb0c356e744afe52ad9e3f7a4ee55afa2316f56ff79b8928a92f1afe8c6d0077f0960092ad769d4294fff153"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r9, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m40.820723739s ago: executing program 0 (id=443): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_gettime(r0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$FUSE(r1, &(0x7f0000001900)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_NAME(0x4, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = userfaultfd(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) openat$adsp1(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000019e000/0x2000)=nil, 0x2000}, 0xf}) io_uring_setup(0x4262, &(0x7f00000001c0)={0x0, 0x13b1, 0x20, 0x0, 0x32f}) r4 = syz_io_uring_setup(0x867, &(0x7f0000003940)={0x0, 0x9162, 0x1000, 0x4, 0x38f}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) close_range(r3, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f00000018c0)=[{0x3, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000540)=""/54, 0x36}], &(0x7f00000005c0)=[0x10001, 0x101]}, {0x6, 0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/5, 0x5}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/72, 0x48}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/158, 0x9e}], &(0x7f0000001880)=[0x74ec5d01]}], 0x2) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f00006c1000/0x1000)=nil}) 10m40.527999164s ago: executing program 0 (id=446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x1, 0xfffe, 0xdc, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r5, 0x0, r6, 0x0, 0x807, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x23, {[@global=@item_012={0x2, 0x1, 0x9, '\f\"'}, @global=@item_4={0x3, 0x1, 0x1, "61f3bdd5"}, @global=@item_4={0x3, 0x1, 0x2, "c6dc64b9"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}, @main=@item_4={0x3, 0x0, 0xb, "c83e0503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x9, "808c84d6"}, @local=@item_4={0x3, 0x2, 0x5, 'c^,-'}]}}, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r9, 0x0, 0x14, 0x0, &(0x7f0000000340)) keyctl$update(0x2, r8, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read(r10, &(0x7f0000000240)=""/240, 0xf0) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000080)) keyctl$clear(0x7, r8) 10m39.236578352s ago: executing program 0 (id=454): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f048, 0x0, '\x00', @string=0x0}}) pipe(&(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x43}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xfff2, 0xfff1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x70, 0x7}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d4}, 0x4004880) 10m38.948783695s ago: executing program 0 (id=456): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x8040010) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0xf0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r5, r5, r6, r6, r5, r6, r5], &(0x7f0000000180), 0x0, 0x8000000000009}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x8040010) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0xf0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r5, r5, r6, r6, r5, r6, r5], &(0x7f0000000180), 0x0, 0x8000000000009}) (async) 10m36.587368546s ago: executing program 32 (id=456): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x8040010) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0xf0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r5, r5, r6, r6, r5, r6, r5], &(0x7f0000000180), 0x0, 0x8000000000009}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x8040010) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0xf0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r5, r5, r6, r6, r5, r6, r5], &(0x7f0000000180), 0x0, 0x8000000000009}) (async) 4m11.217474598s ago: executing program 4 (id=2044): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) sendto$packet(r0, &(0x7f0000000000)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x2004c8b1, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (fail_nth: 1) 4m10.788345484s ago: executing program 4 (id=2045): open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x62, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 4m8.97132236s ago: executing program 4 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x10) 4m7.472494412s ago: executing program 4 (id=2058): r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x20000, 0x115) cachestat(r0, &(0x7f0000001280)={0x7, 0xffffffff}, &(0x7f00000012c0), 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', &(0x7f0000001200)={0x404001, 0x6a, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100"], 0x0, 0x53}, 0x28) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = gettid() r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000016c0)=0x0) read$FUSE(r0, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003980)={0x0, 0x0}, &(0x7f00000039c0)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003dc0)=0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r11, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x200005, 0x4, 0x8001, 0x7fffffff, 0x9e9, 0x4, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, r14, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000003e40)={&(0x7f0000001300)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d80)=[{&(0x7f0000001340)={0x318, 0x30, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@generic="3a70132407c942356e4ac936cff83419b9905bd665e9d6f05d1b149ccd04c886018f63a1d52c6190b3bfff4d9d66c2232510aec7a2716c2d2eb5a3", @nested={0x3b, 0xa, 0x0, 0x1, [@nested={0x4, 0xf5}, @typed={0xc, 0x73, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xe7}, @generic="ce2c628d1237b0e3e0c6460bf5b1b2", @typed={0x5, 0xbd, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x6}]}, @typed={0x8, 0x135, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x80000001}, @nested={0x1ac, 0x1c, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @pid=r5}, @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3a}}, @generic="5ce2179c367a8205e5be6260e8ebffb76ad566311da9fecac83d56e8e3dc79bd7b5f863f3125d490553dda5135ddf587fdf83b88822435118aa391296707fc32419e357f80ab78f474fe0270f7441c2c6bd6030618003685a2b5a0ce441cbb3ccb781c259830017f7ff262e7354da4db6ba5b6c6727b482e1a794ab961145f9d1929c825f09aa34d", @typed={0x5, 0x97, 0x0, 0x0, @binary="94"}, @generic="41326ab000ea9b56c6e2983fb0c81587402079c5da69841a839f4f4a8595032aa3369a0087799cb79e471df8a2860cb8568a00becdc79f8eccb7abb12e0c6d613656e981607d2a6a4a341fd47dd3c463178c835952355ee5a96e629fb4bf2a12eb728d099f91367743738ed21fc45ecaf920e8c17751153535fb7c611770c32d33afaf6b8dbe978fe7c560fa6e6786087451141bbdb09f8aebf4c57b6b96e7b45d061d87a328bebdccf06fa13bb490e7f08c671ac42210ce0ea2fd05813adb95492b6400ab031c7a093cc52a3d11e44c45270dfb73d25ede", @nested={0x4, 0xb3}, @typed={0x4, 0xde}, @nested={0x4, 0xfb}, @nested={0x4, 0x115}]}, @generic="a285bb22f8b0bcf59c4df30ed8d7408c2da30bdfbe95fc61a181c15a1a538ad032ae856a394f255025f115a7a16b43995a0a2adef445626926518f8518a6075921c6e7f4fae88b6d2019905f85c52534af25f74a00ab04c21172c663b45169ef0d777b9feeea96fd38f6120d4683d8bdc8619371f1b4d76810dcc4c2f11a06344535e677a6b77bc01851d180fd268f22114acb2be90b5a44147f282cc5e044d56f2abb0d9823a44377ac73187e5e6d1f4814efe8d452854c7ff3e5abd8778787209a"]}, 0x318}, {&(0x7f0000001680)={0x14, 0x28, 0x100, 0x70bd26, 0x25dfdbfe, "", [@typed={0x4, 0x98}]}, 0x14}, {&(0x7f0000001700)={0x230, 0x37, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x35, 0x0, 0x0, @pid=r6}, @nested={0x172, 0x4b, 0x0, 0x1, [@generic="c67422ae317cd2ec4af09c05d8e9291b5284b8b1599febbb2a6912676c490c9df8e4c477a69cb642c84d85e10f219fb1d1936b9a3f7a2c20c55a91d7041000733b779b1c52a770634c70941db2a6ad116568b76450909b95333f806072c0ec456fc20a18cc5f67a57c1eae2d6b30e38debd7cff8684daf8709fba520a6bd97a6dfd4c6e3bfb1c4a7137caebf9eb6bdc487f7e4828e94314c454cd07d01202659354724a5dea6c25369388b54d05bbaef8505e4eb514f7b50f3f4c1aca4c28c4aad356290717d7c19c8ea152cffca98e00687a48ed4760dacb2d381103993129cbe8db7b065596f55f7d10c16d661e23d6869b15d4f51", @generic="8c9a04b9684e045e5279ba7fb0d290d9", @typed={0x8, 0x9b, 0x0, 0x0, @fd=r3}, @generic="d464b96aecf7e8f608d0b00dd9c7464409afc10d1100454db351b80055477d42bde642292a525e88edeb40252d50f01b38", @generic="4fc54bddd44d6aff2a9a82df35af1ba18fa93b6c48cc8dd4be5d2d627212a0aff5634a0798cc5984617828", @nested={0x4, 0x79}]}, @nested={0x18, 0x13c, 0x0, 0x1, [@nested={0x4, 0x1f}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}, @typed={0x8, 0x6, 0x0, 0x0, @pid=r7}]}, @generic="a34000a22769faa705d8ab49a77bbc2752720255aade5a1e9598ff856a45cd5d4067a156d2d02c001572f6588e919f7d63779a852ae1434f3049c79f0f73b8849286a888a0a56c612ae4adc660df6dc682a16fd10b106de40fc0fa14de5c67cae032a7913a858f50a779a9807d5d4ab4fd2d0212dc16763e75ad3a8a65e803aac5687cd65e4755e513da"]}, 0x230}, {&(0x7f0000003a00)={0x374, 0x12, 0x100, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x2b, 0x0, 0x0, @uid=r8}, @typed={0xc, 0xce, 0x0, 0x0, @u64=0x7}, @generic="b7c417e077aa215c9e8a6a0e4e0c266c011de0bb320cba5c95ac504268ddda0c7f2b4e29c036b0df2f92da58eeda98786af58fdbce2fc4e6bd39cd49ce6de9975d0e4f8f38d61110b9126f655202172793b7b68b1a2ebd69c27c2b057425bb509d1ae2fad708b847f53f196648341b9b161a6066ad453e2b6a14eb52a2c3ba562b4279a858dcafa1396aec17f5889d9470218b0f3b4cf06b3aa3d6431d0858de02efd3551bc0130364f51a7edff0d3fc8cf478f88f44ca22e42563a6a75ecd590f58f0c954336b3f7394bdef06c712b51b7ea267004c0beb728ac52edb0a6abd76f4920f456c794490", @nested={0xa7, 0x73, 0x0, 0x1, [@nested={0x4, 0x48}, @nested={0x4, 0xed}, @generic="56921d846554b7eeb26357dfd1783f1a134abb54f3f9d5dc3de9957fccfd44a1b48c7075a665048dc75215a9aaca99624de105e5b6551dd512f2074db503c802", @typed={0x8, 0x66, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x13f}, @generic="06679462572406595160a3e8edea0aed45e052d40f93577a6f03fea6fea1facbde044c18c40aac8d8823ffb6eee950a3ed463d0bd0d7598ffeb06d948e51b9935a982e45386aae29b7720c", @nested={0x4, 0xb9}]}, @nested={0x8f, 0xba, 0x0, 0x1, [@generic="a2ff", @generic="9478e66d4732f39d26f71916d654b3ea3bd43f460c726f8b21a63f6fb49b6265784f3883a833", @generic="ee12aa01744a546e8864ccf949e015fc514b043e8c2bd585ab0009e9ea0fffaaaf332e7537813cab41d404ad7f643beb3aec7bdc4d1daa2a01513cc55d7a3c4466d4c52d035d6b0051941026df457c", @typed={0x9, 0x76, 0x0, 0x0, @str='hsr0\x00'}, @nested={0x4, 0x153}, @nested={0x4, 0x111}]}, @nested={0x117, 0x105, 0x0, 0x1, [@generic="d1bb5532c3bb1aced4031a1f1ddd004112cd124d3636770bdc9817bb7d170cc3b51bdab64208170e0cafc3691045fc14e09bcb4f8f665972db50d847ac819ecac5ce8d6c665941c9415867afdc34888be337d534971f93fb98dba7379bf72b9c5c32481f8822b9389e2e41fd3a361e2e33b6d90f295b071f76d4803c241f5f8798ee59f048c8c8735653b8b395ba09cfce5aad5f52b9ff648953aaba4052cb", @typed={0x73, 0x7e, 0x0, 0x0, @binary="de0f39dff5f7303d51197126c3f5041c79daa2b76084df04e51c2f804e21fa09556eb1fa11f417789ffd6672ea12d5e6e9a15f17c1a5edef1635e4ee86b6ac93e7bb022440d34c948fc172ce6c5eddcc7a63fb524726c93810c79249d9f5cf5bbd9c4be45626d82b45b6c26883d7cb"}]}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x374}], 0x4, &(0x7f0000003e00)=[@cred={{0x18, 0x1, 0x2, {r10, 0xee01, r14}}}, @rights={{0x14, 0x1, 0x1, [r1, r3]}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x3c, 0x48001}, 0x8000) r15 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x291, 0x0, 0xfffffffffffffff9}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'hsr0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$apparmor_task_current(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 4m6.173825342s ago: executing program 4 (id=2061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r1, 0x1000002, 0x13, r4, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x88000) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000200)=@l={0x92, 0x3, 0xb0, 0x16, 0x5, 0xf9, 0xf801}) 4m5.989061683s ago: executing program 4 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 4m5.560630723s ago: executing program 33 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 59.200499205s ago: executing program 1 (id=2788): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[r3, 0x0, r4, r5, 0x0], 0x20c9c183, 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f00000001c0)={&(0x7f00000000c0)=[r2, 0x0, r3, r6], 0x6, 0x4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000551000/0x1000)=nil, 0x1000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x299d7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x6}, 0xa}, 0x10) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 58.525305126s ago: executing program 1 (id=2790): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9d, 0x5, 0x4, 0x12, 0x3, 0xfb9d, 0x80009, {0x0, @in6={{0xa, 0x4e21, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x81, 0x8003, 0xc, 0x4b, 0x807}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 58.344509439s ago: executing program 1 (id=2791): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}], 0x2c}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0xb, 0x8, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x67, 0x0, 0x0, 0x13a510832a07e4e5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x100}, {@private=0xa010100, 0x100000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) openat$pfkey(0xffffff9c, &(0x7f0000000380), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000003000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000825d76762afb07005cfdb7a638c84fca13eb069bf11cfacbacc49b5c4fb1007a4dffb8adf7a20cc85b79cce421fddddb35688f361bb3cd6a363ffc26d0ebe1fe33f8"], 0x50) socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_pgetevents(r7, 0x3, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0xfffffffa, 0x4]}, 0x8}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 55.240224697s ago: executing program 1 (id=2795): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x0, 0x6, 0xc8, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0x8, 0xa6f2, 0xa, 0xa9, 0xc, 0x7, 0x8, 0x3, 0x4, 0x13, 0x1, 0xfe, 0x2}, {0x100000, 0x407, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f1f03000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000005000)=""/4082, 0xff2}], 0x1}, 0x18001}], 0x2, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 53.532804955s ago: executing program 1 (id=2801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8f", 0xa3}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) 52.946763524s ago: executing program 1 (id=2804): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f000005e000/0x4000)=nil) 51.592357529s ago: executing program 34 (id=2804): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f000005e000/0x4000)=nil) 7.76669179s ago: executing program 6 (id=2928): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x73}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3400000029000000360000003203000000000000c910fc0100000000000000000000000000010700000007ff05020006001f0000d8676493781b4e5fc8c78f31f8d6fa70f0df76b570234b0deee77a64a75a446bbbc036130fa9e134a0aba7a7336cd64cc05e6cdf66db5af29063c7a1f64a6624581cf3455bf3a62b7fb676ad14e52976ba31607bb1cf23916caed79dffe4d10c6974efed20228022a3a1638cbf2d90e956d212babaed498bb122c9da53975f0cdf17457611b839b4a63f38cf55acf6b157e47b74e48bedb6f14eb494f73af0291f5fafd6bf"], 0x34}, 0x40408c0) 7.673782009s ago: executing program 6 (id=2929): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000008c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) r5 = open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = syz_io_uring_setup(0x32d9, &(0x7f0000000280)={0x0, 0x6273, 0x8, 0x2, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r6, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) r10 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) io_submit(r1, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 7.206392819s ago: executing program 3 (id=2931): r0 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0xb, r0, {0x9}}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffefe000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x20, 0x9, 0x2e, "dad9da4c965740f482d4f527055e1ca3f1520f22ce35cbe7e88fdd44a4d942554e07a7c63d729d705d92d145c82f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc044) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206050000000000000000000500ffff0c00078008000800000000400900020073797a32000000000500040008000000050005000a0000000500010006000000110003254b4900686173683569702c706f7274000000008f74c95539237d1a2fb2d057f904cc60fd3d4ac3b971e2d99696af3baaa328f8e429214541afcedc556cff32833f71dc48fcfe0063c0718b6fb4d2adf332f4feddfb"], 0x58}}, 0x90) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(r8, &(0x7f0000000100)='./file0\x00', 0x1a2) r9 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) 7.065656291s ago: executing program 7 (id=2932): open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x62, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 6.98053263s ago: executing program 5 (id=2933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x1, 0x800, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0xb1f, 0x1, 0x7, 0xefc20000}, 0x10) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000004) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 5.58468166s ago: executing program 2 (id=2935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000140)=0x54) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "d50bb9be6a03d497", "40e62b51c177d8e64ab66ac3d49824a8", "f0b27018", "a54dc30d6d389b76"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "8e7eaff2", "d4c27feb98ae71cc"}, 0x28) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b00)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x1d0, 0x1d0, 0xfeffffff, 0x1d0, 0x0, 0x37c, 0x37c, 0xffffffff, 0x37c, 0x37c, 0x5, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@addrtype={{0x2c}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x1], 0x2}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x9c, 0xe4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x0, 0x182}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x46c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x9, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1c90, 0x13, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 5.329281597s ago: executing program 5 (id=2936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x20004) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x309c40, 0x40) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0xffff1000, 0xddccb000, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x9, 0x44, 0xe, 0x0, 0x2}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x6, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfd, 0x0, 0x2, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x84, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x1, 0x0, 0x6, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xd000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe, 0x2}, {0x6000}, {0x1, 0xff4d}, 0x60000021, 0x0, 0x0, 0x10, 0x14000000c, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f0000000100)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) socket$packet(0x11, 0x3, 0x300) 5.274764744s ago: executing program 2 (id=2937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @broadcast}) open_tree(0xffffffffffffff9c, 0x0, 0x89101) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open(0x0, 0x1, 0x104) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 5.268581986s ago: executing program 7 (id=2938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="20110605000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x101}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = getpid() syz_pidfd_open(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, &(0x7f0000000140)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x4000804) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@gettaction={0x58, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0xc050) recvmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000003140)=""/4099, 0x1003}], 0x1}, 0x40012063) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.776709503s ago: executing program 6 (id=2939): open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x62, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 4.460959704s ago: executing program 3 (id=2940): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x85, 0x4) 4.241338935s ago: executing program 3 (id=2941): syz_usb_connect$hid(0x2, 0x3f, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x32, 0x0, &(0x7f0000000300)) ptrace$pokeuser(0x6, r1, 0x10e, 0x4) syz_clone3(&(0x7f0000003780)={0x40010000, &(0x7f0000003600), &(0x7f0000003640)=0x0, &(0x7f0000003680), {0x7}, &(0x7f00000036c0)=""/19, 0x13, &(0x7f0000003700), &(0x7f0000003740)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r0}}, 0x58) syz_clone3(&(0x7f0000003840)={0x100000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000002600)=""/4096, &(0x7f0000003800)=[r1, r3], 0x2, {r0}}, 0x58) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 4.204376348s ago: executing program 5 (id=2942): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}) io_setup(0x1, &(0x7f00000004c0)=0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x30, 0xe9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xe8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0xe, 0x4, {0xa, 0x25, 0x25, 0x2c5816, 0x4, 0x3a85}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)="75cb66e392753c3ff715d739d3ff4e8dcb0d2f6e62e5f03a8c63c70f12f050845df205970cd7dc255935eee10e08ef6d8f02c0eb7a218911133dee4b9d045569f0b6d36b061645716214facf92dfbdaf9af14cf2170f3fedc98aa72a56f6fcc72edf66ee480cf3bc6d72e0e2", 0x6c}, {&(0x7f00000003c0)="6f96f17a7223e8e313b0c817c8e5d56f874a6d6df39e225191e24aad00a746e007d18a415d87ec30883017768658cb35199d064c0114f1d5a9a0b0ec5b03db373b1ddc23714a8f73eb2c53b35192f4bf99e2d6b2dd0bef8a86b35ca1f7c3244c848b81a42f1be3f7d6ce6ee0df8c2a7c1d17e4a03df7d38408a116011abf993c162db75d06539e25277fea1a248c8163ecbc317cc7af5ea6666063b9543cac1789276cae55385c876efe45e5fa6fdd91059f1863f010d53d8b4069bd48512221d1d74c497016fcfaaa4fc8e2b923a2f833e1e5299f0f2e671c54d4191b21189f97f878301f1f3144bda9e5aa4b110653", 0xf0}, {&(0x7f0000000500)="0503ebd2eecfd74e6a6ddc50aa6059a7e1e3000da92a4d3cfaf89af6271bb6", 0x1f}, {&(0x7f0000000540)="127cdd0d8d398a0048b5feec2d8b928dde406ce1082b453ecfdb6ddfa6a9976d1eee556e234f188e3367ce5b7403737e52597bf5e941b75183c8566a95984963de68abca00ad5dd7481ec5c7e8e4", 0x4e}, {&(0x7f00000005c0)="4756856221f8e5285b96bbd6736d3a24706f81a75481b301d6a546144ca5d3289e8429730ca834e148c15a4423f44f90a5385fc7d1a8f0e0f172a8cc5c13d216b7f6d1b0c6ecdaab3a8da5354c7984e58898b000466d80b25c3e3202bec27c22dc4f268afac035be01a79de2a53ff87e2b9f4ad4ed389553d68fcd83a86af1fb6ade6a376ad91dc3038515635f5bc3955b703bd3811f7e4b5f941f9f268d68e9db0d7b339e5e7d5e2cd407525f3eedbbdd32025f3c1e08018a64b61e763e736f9c8ef14a7b8528049e1feea200f699a324b1cff503fad71d8c8b08d1f39bae7c5edc1ff9cb796f852f2efd3a", 0xec}, {&(0x7f00000006c0)="8a4616e968ca23259c7437ec5c100a6c4cc17b5c92177643adb8a50f3455d799353ed938cf10219f2c0863684617d0f42654f89f991ddbda7e37ef434d604ebac5fd4724d96068ab101884df3668943fde049064b27b233be59f8a547e7f3a1ec1a03eaa2d51bdaffef7bf1827da7c9567dc5f671ee126faaa2f7a5516a3fbba50a6e5f03d8c147fcefb18d45440ab9296a3531e34ee12c516b6c24cfeff6f1a4fa2d13fcdf1bf16cada8dad8211b4941f1cc96f81b87c8f5cdc6433", 0xbc}], 0x6, &(0x7f0000000900)=[{0xac, 0x117, 0x7, "7ffdab549bcf54eab58781ca41f641aaf9bd459b47164da1d7b8e3c66497a640a4361866d32015cbe8e25bb5a04f0bde711e8128d7f686816b2eb46e643855bf2f8f88a41bbff2c93370642562c2be1cc390ed3e555e1de82acf09961c17bff9aba4d29ac7e3b6d9a11fe263154ef17b9ae80911de85eee37cc31cefb2ac0e414d926446c1dea11440f3316590b1ec7466831a787fcc72a88ace911210526b59"}, {0xd8, 0x10d, 0xa, "2637e60b95b3968b9414a005d65e06bb9f9428d050758fa2bc762459d4d058fde5c0f6c890555cf7498f3c37cf031af0dcdff2b6885f8fa912d186d246738105b9cb6a505780c3f9fb95991db8cccab6ef392eeb9a0e66f2fa80397b8c4df148a427a5b2471ce05194944e808a005b6f02d649173ac741ee063811b87f41ef4d9f815baac5ba9977c297b5703b23b5dcd41e9a6a7391bea7b63fe0628ee66152cce196829337e2e7e3097bd0fb35d0a0436ac348807aae637cc8ceb9771b1a841b441b5d189a47d3916187"}], 0x184}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) io_submit(r4, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.78865832s ago: executing program 6 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0xe) close_range(r6, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0xd, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2fa3c1ccb0c82eb8}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x201}], 0x1, 0x20, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000640)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 3.660760964s ago: executing program 2 (id=2944): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000008c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) r5 = open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = syz_io_uring_setup(0x32d9, &(0x7f0000000280)={0x0, 0x6273, 0x8, 0x2, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r6, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) r10 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000080)={r6}) userfaultfd(0x801) syz_clone3(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r7 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000080)='0', 0x1) fchown(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x20, 0x70bd27}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) writev(r2, &(0x7f0000000100), 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0xe8c1, 0x9}, {0x7fffffff, 0x1}, {0x8, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x28, 0x7}], 0x98, 0x1, 0x0, 0x1, 0x2}}) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0xc, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x3, 0xb, 0x10001, 0x3, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0xe6, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x2, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x9, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x7, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xf9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0xfffffff8, 0xff, 0x4]}, 0x45c) 2.964308388s ago: executing program 6 (id=2946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=ANY=[@ANYBLOB="50000000020605fcff00000000000000000000050500040001000000ac071eea42e103813e5ad238af219c540c000300686173683a69708e40de23000c00078008000600ffffffff050001000700000005000500020000000900020073797a3000000000"], 0x50}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfff0) r2 = socket$nl_route(0x10, 0x3, 0x0) msgget$private(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff2bbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800003c00128009fdea00766c616e000000002c0002800600010003a594dc175a4900000010000480b5fe0100ffffffff040000001000038001003900070000000700126b7a42101bc0a7245f067386550a41baa6c94049006db90a27573f445d31e4ceaf15180206ca05541777bc03e0ca0acd3a7d", @ANYRES32=r3, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8402, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r8, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) unshare(0x2a020480) poll(&(0x7f0000000280)=[{r7, 0x480}], 0x1, 0xf0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000040)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r11 = dup2(r5, r10) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8940, &(0x7f0000000000)=@buf={0x3, &(0x7f0000000040)="ce6c06"}) 2.90461794s ago: executing program 3 (id=2947): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000008c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) r5 = open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = syz_io_uring_setup(0x32d9, &(0x7f0000000280)={0x0, 0x6273, 0x8, 0x2, 0x400000, 0x0, 0x0}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_enter(r6, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x2000000c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}, 0x1, 0x0, 0x0, 0x2001c005}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x100, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x105a, 0xb400, 0xffffffffffffffff, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(r3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'full', 0x20, 0x2000000001, 0x20, 0x10000000fffff}, 0x2f) close(r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) 1.844205921s ago: executing program 7 (id=2949): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_dev$video(&(0x7f0000002740), 0x3, 0x200) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') syz_fuse_handle_req(r3, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x2e60, &(0x7f00000002c0)={0x0, 0xa00000, 0x13090, 0x0, 0x72, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_submit(r2, 0x1, &(0x7f0000000fc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r4, 0x0}]) io_uring_enter(r4, 0x21d2, 0x7c5, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0xc2, 0x14, 0x4, 0x72, @empty, @empty, 0x40, 0xff10, 0x0, 0x10000}}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000002940)={0xa, @win={{0xb, 0x6, 0xba, 0x8}, 0x9, 0x3, 0x0, 0x5d, 0x0, 0x7}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r7, &(0x7f0000001740)={0x2020}, 0x2020) openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) close(0x3) io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xffffff4c}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.249955906s ago: executing program 3 (id=2950): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)="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", 0x130, 0x24010095, &(0x7f0000000080)={0xa, 0x4e21, 0xd2, @mcast1, 0x56}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x4d, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003000000000000810010000800450000b000000000fb019078ac1e0001ac1414aa03019078032400004500000000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520509020007651442eb000e7434954373561de584b703c80005e706d30bd224f80207cfa11cab1a00108475be675de6a70a8525dc91e5c6060a0000000000800000021173bc23f9ffffffa30900a301c846000011c8f46976e79ea788f03d9d3205927e86cff972950f5812fe9725fb4a4f3e57b75529cc576fb569c3f2ee16b71f8652d984d482117c8b8c9e571790b0630f759ce982f57b1600"/254], 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000340)=0x6, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(r2, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000480)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000240)={0x2b, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) setpgid(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8110ac00f8cd58700d305c7569f9000000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x60000000, 0x6d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f26, 0x12002, 0xb, 0x8003, 0x10}}, 0x44) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x41c, 0x248, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x354, 0x20a, 0x278, 0x354, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, [0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x4, 0x3}, 0x0, 0x224, 0x248, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x597, 'kmp\x00', "ad4bff4386cdeeecbb1592ef2ec6370f926ffd8034db5c419cf708b56fb841897a28e865757ba0e326a6c9cb18671e6de0db269d93b547047b86137fb2ec073d8004db4cb2d47c4aef08ba4c7c3c687a54219bf10914d82711449f7798c3963a9abd25ce0d48300ebf2f88f0a8a6a92b8f59bbc6596775a37e25eebbc12fcf3f", 0x4, 0x4, {0xffffffc0}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de6d767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x6c, 0x0, {0xff}}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@local, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {0x44efc056fb5ee4c2}, 0x67, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080012401606000008001340000000350213000300686173683a6e65752c696661636500000500054f5010dcf90a00000005000400000000000900020073797a310000005baad1f05580cb080655f2a2757e0be32e9179cd9d92ab001e43c8f5e39e05dc00"/136], 0x60}}, 0x0) 1.10056326s ago: executing program 2 (id=2951): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r1, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x2a, 0x0) splice(r4, 0x0, r6, 0x0, 0x25a5, 0x4) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file1', [{0x20, '\xd0]$#^-[+['}, {0x20, ':::(%,\b^'}], 0xa, "1b6e063234e4dc5bf6c0a14921324208d0de5f45429eb9aa21f9c77d52d6b3c7d57dc00fcd4632990461d3b0b3257d3d8c29386a3d3b910d16261ecda77e2184413fe0f531cf75e461b37457ddb9ca2cad083b9f6011911906a39f5de268b431c83ed3f248f6ee3e062909b79ba52bd90188ce44a3bf88c76fd9c297644948558e413724613f3f66602e9f88ba31d1ed0e940abeab0fdb12a970df5861724227b16be7c26fd47fae417ff73db299eaef64e13677e45381fbd91a0ef3242f51e98384e1497b5c5648441f0dd9a68c608385a446db67a52af7e4"}, 0xf7) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x44, 0x26, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0xfff2}, {0x1c, 0xffff}, {0xd, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'virt_wifi0\x00'}) socket(0x400000000010, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 859.560672ms ago: executing program 5 (id=2952): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x85, 0x4) 721.096059ms ago: executing program 5 (id=2953): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r2, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000980)="01a4acc7cf1bab9f6c7fc745c30b01040000010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b700022146835ad015c801f95be5b890e44fb3dfbe8e88d2ab3b31584c970207f23b0073ca5375abddf56331c8396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800"/188, 0x382d183a, 0x55, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x5}) (fail_nth: 2) 642.295156ms ago: executing program 7 (id=2954): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000540)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000040)="010000002e21c3ba447172e883a17f4da59e151cc0e38d3f1ab5796fc0ea572d357ff92eca4633d7", 0x28, 0xd5f}]) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2230164cf063df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r4, &(0x7f0000003300), 0x0, 0x40010143, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xf}, {0x8, 0x10}, {0xd}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xf, 0x7, 0x0, 0x2, 0xa31f, 0x80, 0x7}}, {0x12, 0x2, [0x5, 0x5582, 0x9, 0x3ff, 0x4, 0x3, 0x81]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010007bd6e0300004be800ddff00083f1aa6", @ANYRES32=r15, @ANYBLOB="0c0050800800070000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000004) (async, rerun: 32) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/226, 0xe2}], 0x1, 0x10, 0x1) (rerun: 32) 313.137426ms ago: executing program 5 (id=2955): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xef, 0x0, 0x0}) 167.172563ms ago: executing program 6 (id=2956): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000840)={0x1, 0x1, 0x1000, 0xdb, &(0x7f0000000640)="1adc5d24d8c88509ac57784c7536f4f6a86d352d333db31ad012cc13f5a3e59b4f81d66aa598324817ffa947e37613530c7eddda9c94a42358466932c4fe31177b623acdce41f97abd88cbca42a8ced0977c76c3b744b9bfad35d0b425877719aa49bd4f7d49da7cfb2c8799dc0c46ebbab160ae28544fcd58b0f67577b7b749cc466138092a07aac47426579c5e2418d582ae25b3e7cfd1f0aea5da11b334a3f1ccab8cb8a7e149b1d81a2160cee6276c2f9302a72244eedbc89f04d272daf854e79d499ce5409498a302f9d6a4d7f1aca7ded0937d899a28db1d", 0xf0, 0x0, &(0x7f0000000740)="c98a247e11dec6a87859ab0e64a81e5136f7558323480c83be4ce02c9fc2a7422594a32bc7645830ae652e003010ef813e448d855b874a94a4f1fa973c3ab0e5a086a943e690c3bba13595c43427599c8329e58ac507e1f6a46c1e944d1695b2ba9073646093ec53c166ea65ef77b1eddcc1e3e02fc53c3e562b5bea867eb18275da33e9caee97f1e06100741a66ac4864e610b802eb3d4bdacae27ff55cef1a5f549739f3ec6ef6eb329b6b562a0eeac38e8132a78da5e49abd10f7b58437984e08da1567f598750e35fc0b4db1f3fa4f9e03f3121b32110342a3c1c16678f48a7a6ff6e1e95be16eb130fe26c1cf3f"}) listen(r3, 0x2) r4 = socket$netlink(0x10, 0x3, 0xe) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000780)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r4, @ANYBLOB="8bc6e806d9dcaebd643d", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=](,obj_user=group_id,app2aise_type=imasig,pcr=00000000000000000025,context=root,\x00']) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = socket(0xa, 0x5, 0x8) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0xf4) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x182, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$can_raw(0x1d, 0x3, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_usb_connect$midi(0x2, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102400000205247110040000102030109022c00010104c00809040000020103200809050102080000ac02042501000905ee02200100000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r8 = inotify_init1(0x80000) fremovexattr(r8, 0x0) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 99.892286ms ago: executing program 2 (id=2957): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)="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", 0x130, 0x24010095, &(0x7f0000000080)={0xa, 0x4e21, 0xd2, @mcast1, 0x56}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x4d, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003000000000000810010000800450000b000000000fb019078ac1e0001ac1414aa03019078032400004500000000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520509020007651442eb000e7434954373561de584b703c80005e706d30bd224f80207cfa11cab1a00108475be675de6a70a8525dc91e5c6060a0000000000800000021173bc23f9ffffffa30900a301c846000011c8f46976e79ea788f03d9d3205927e86cff972950f5812fe9725fb4a4f3e57b75529cc576fb569c3f2ee16b71f8652d984d482117c8b8c9e571790b0630f759ce982f57b1600"/254], 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000340)=0x6, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(r2, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000480)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000240)={0x2b, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) setpgid(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8110ac00f8cd58700d305c7569f9000000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x60000000, 0x6d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f26, 0x12002, 0xb, 0x8003, 0x10}}, 0x44) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x41c, 0x248, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x354, 0x20a, 0x278, 0x354, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, [0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x4, 0x3}, 0x0, 0x224, 0x248, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x597, 'kmp\x00', "ad4bff4386cdeeecbb1592ef2ec6370f926ffd8034db5c419cf708b56fb841897a28e865757ba0e326a6c9cb18671e6de0db269d93b547047b86137fb2ec073d8004db4cb2d47c4aef08ba4c7c3c687a54219bf10914d82711449f7798c3963a9abd25ce0d48300ebf2f88f0a8a6a92b8f59bbc6596775a37e25eebbc12fcf3f", 0x4, 0x4, {0xffffffc0}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de6d767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x6c, 0x0, {0xff}}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@local, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {0x44efc056fb5ee4c2}, 0x67, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080012401606000008001340000000350213000300686173683a6e65752c696661636500000500054f5010dcf90a00000005000400000000000900020073797a310000005baad1f05580cb080655f2a2757e0be32e9179cd9d92ab001e43c8f5e39e05dc00"/136], 0x60}}, 0x0) 0s ago: executing program 7 (id=2958): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x5, 0x4, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r4}, 0x38) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) io_setup(0x2, &(0x7f0000000000)) r6 = eventfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6], 0x50}}, 0x2400c815) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): ? trace_irq_disable+0x3b/0x150 [ 756.234824][T14990] ? asm_int80_emulation+0x1a/0x20 [ 756.234845][T14990] ? clear_bhb_loop+0x40/0x90 [ 756.234866][T14990] ? clear_bhb_loop+0x40/0x90 [ 756.234893][T14990] asm_int80_emulation+0x1a/0x20 [ 756.234914][T14990] RIP: 0023:0xf7155cab [ 756.234934][T14990] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 756.234952][T14990] RSP: 002b:00000000f540d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 756.234974][T14990] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000840 [ 756.234990][T14990] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.235004][T14990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.235016][T14990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 756.235029][T14990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.235060][T14990] [ 756.618533][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 756.639153][ T5903] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 756.648762][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.656851][ T5903] usb 6-1: Product: syz [ 756.661720][ T5903] usb 6-1: Manufacturer: syz [ 756.666395][ T5903] usb 6-1: SerialNumber: syz [ 756.921447][ T5903] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 756.939595][ T5903] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 756.976029][ T5903] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 756.995434][ T5903] usb 6-1: media controller created [ 757.018343][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.108753][ T7987] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 757.250473][ T5903] zl10353_read_register: readreg error (reg=127, ret==-110) [ 757.276051][ T7987] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 757.285775][ T7987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.316453][ T7987] usb 3-1: Product: syz [ 757.321440][ T7987] usb 3-1: Manufacturer: syz [ 757.326205][ T7987] usb 3-1: SerialNumber: syz [ 757.338177][ T8000] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 757.350036][ T7987] usb 3-1: config 0 descriptor?? [ 757.468902][ T5903] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 757.538362][ T8000] usb 7-1: Using ep0 maxpacket: 8 [ 757.577010][ T8000] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.601519][ T7987] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 757.601751][ T5903] usb 6-1: USB disconnect, device number 9 [ 757.626827][ T8000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 757.659830][ T8000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 757.804537][T15002] program syz.2.2651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.819069][ T8000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 757.834476][ T8000] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 757.845993][ T8000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.890037][ T8000] hub 7-1:1.0: bad descriptor, ignoring hub [ 757.896052][ T8000] hub 7-1:1.0: probe with driver hub failed with error -5 [ 757.917133][ T8000] cdc_wdm 7-1:1.0: skipping garbage [ 757.923526][ T8000] cdc_wdm 7-1:1.0: skipping garbage [ 757.939104][ T8000] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 757.945086][ T8000] cdc_wdm 7-1:1.0: Unknown control protocol [ 758.041955][ T5948] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 758.093582][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.110690][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.339316][ T7984] usb 7-1: USB disconnect, device number 26 [ 758.367554][ T5948] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 758.441422][ T5948] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 758.452197][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.472405][ T5948] usb 4-1: Product: syz [ 758.476731][ T5948] usb 4-1: Manufacturer: syz [ 758.492683][ T5948] usb 4-1: SerialNumber: syz [ 758.708162][ T7984] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 758.727362][ T5948] usb 4-1: selecting invalid altsetting 1 [ 758.879361][ T7984] usb 7-1: Using ep0 maxpacket: 16 [ 758.887079][ T7984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 758.898378][ T7984] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.909905][ T7984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 758.921254][ T7984] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 758.932597][ T5948] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 758.932740][ T5948] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 758.960598][ T7984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 758.972858][ T7984] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 758.997330][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.015124][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.031201][ T7984] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 759.041613][ T7984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.050742][ T7984] usb 7-1: Product: syz [ 759.055028][ T7984] usb 7-1: Manufacturer: syz [ 759.060148][ T7984] usb 7-1: SerialNumber: syz [ 759.069993][ T7984] usb 7-1: config 0 descriptor?? [ 759.108311][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 759.114688][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 759.122044][ T7984] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 759.200174][ T7984] usb 4-1: USB disconnect, device number 14 [ 759.234938][T15037] loop9: detected capacity change from 0 to 2640 [ 759.253907][T15037] buffer_io_error: 6 callbacks suppressed [ 759.253927][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.269390][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.290098][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.299682][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.333435][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.359642][T15039] dummy0: left allmulticast mode [ 759.374841][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.420049][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 759.437850][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 759.442609][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.461377][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 759.485733][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.488053][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 759.514068][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 759.528942][T15037] ldm_validate_partition_table(): Disk read failed. [ 759.545235][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.546356][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 759.569058][T15037] Buffer I/O error on dev loop9, logical block 0, async page read [ 759.584727][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 759.599459][T15037] Dev loop9: unable to read RDB block 0 [ 759.617984][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 759.628780][T15037] loop9: unable to read partition table [ 759.648083][T15037] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 759.773210][ T7984] usb 7-1: USB disconnect, device number 27 [ 759.807468][ T7984] mcba_usb 7-1:0.0 can0: device disconnected [ 760.072369][ T7987] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 760.217988][ T7985] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 760.368140][ T7985] usb 4-1: Using ep0 maxpacket: 32 [ 760.405670][ T7985] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 760.415612][ T7985] usb 4-1: config 0 has no interface number 0 [ 760.424365][ T7985] usb 4-1: config 0 interface 12 has no altsetting 0 [ 760.440626][ T7985] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 760.450852][ T7985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.488110][ T7985] usb 4-1: Product: syz [ 760.497816][ T7985] usb 4-1: Manufacturer: syz [ 760.502476][ T7985] usb 4-1: SerialNumber: syz [ 760.528452][ T7985] usb 4-1: config 0 descriptor?? [ 760.800475][ T8000] usb 3-1: USB disconnect, device number 26 [ 761.031626][ T7985] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 761.042783][ T7985] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 761.052028][ T7985] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 761.060583][ T7985] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 761.153458][ T7985] usb 4-1: USB disconnect, device number 15 [ 762.041042][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 763.438178][ T8000] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 763.609751][ T8000] usb 6-1: config 0 has no interfaces? [ 763.626374][ T8000] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 763.686226][ T8000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.698293][ T8000] usb 6-1: Product: syz [ 763.709290][ T8000] usb 6-1: Manufacturer: syz [ 763.713970][ T8000] usb 6-1: SerialNumber: syz [ 763.815141][ T8000] usb 6-1: config 0 descriptor?? [ 763.833499][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2678'. [ 763.992457][T15128] loop8: detected capacity change from 0 to 8 [ 764.003440][T15128] Dev loop8: unable to read RDB block 8 [ 764.009731][T15128] loop8: unable to read partition table [ 764.022047][T15128] loop8: partition table beyond EOD, truncated [ 764.030118][T15128] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 764.047556][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2671'. [ 764.123290][ T795] usb 6-1: USB disconnect, device number 10 [ 764.168505][ T8000] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 764.321041][ T8000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.332175][ T8000] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 764.342413][ T8000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.374353][ T8000] usb 3-1: config 0 descriptor?? [ 764.391374][ T8000] pwc: Askey VC010 type 2 USB webcam detected. [ 764.701650][T15136] netlink: 'syz.1.2682': attribute type 21 has an invalid length. [ 764.709752][T15136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2682'. [ 764.723996][T15136] netlink: 'syz.1.2682': attribute type 5 has an invalid length. [ 764.741585][T15136] netlink: 'syz.1.2682': attribute type 6 has an invalid length. [ 764.750106][T15136] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2682'. [ 764.814720][ T8000] pwc: recv_control_msg error -32 req 02 val 2b00 [ 764.822818][T15129] IPVS: ip_vs_add_dest(): server weight less than zero [ 764.830274][ T5903] IPVS: starting estimator thread 0... [ 764.839691][ T8000] pwc: recv_control_msg error -32 req 02 val 2700 [ 764.927994][T15137] IPVS: using max 26 ests per chain, 62400 per kthread [ 765.069014][ T8000] pwc: recv_control_msg error -32 req 04 val 1000 [ 765.108024][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.137353][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.153386][ T8000] pwc: recv_control_msg error -32 req 04 val 1300 [ 765.161235][ T8000] pwc: recv_control_msg error -32 req 04 val 1400 [ 765.168974][ T8000] pwc: recv_control_msg error -32 req 02 val 2000 [ 765.502583][ T8000] pwc: recv_control_msg error -71 req 04 val 1500 [ 765.555310][ T8000] pwc: recv_control_msg error -71 req 02 val 2500 [ 765.583691][ T8000] pwc: recv_control_msg error -71 req 02 val 2400 [ 765.600418][ T8000] pwc: recv_control_msg error -71 req 02 val 2600 [ 765.619331][ T8000] pwc: recv_control_msg error -71 req 02 val 2900 [ 765.639017][ T8000] pwc: recv_control_msg error -71 req 02 val 2800 [ 765.706530][ T8000] pwc: recv_control_msg error -71 req 04 val 1100 [ 765.715874][ T8000] pwc: recv_control_msg error -71 req 04 val 1200 [ 765.730590][ T8000] pwc: Registered as video103. [ 765.930680][ T8000] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input111 [ 766.020688][ T8000] usb 3-1: USB disconnect, device number 27 [ 766.235551][T15157] netlink: 'syz.2.2687': attribute type 21 has an invalid length. [ 766.243742][T15157] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2687'. [ 766.253593][T15157] netlink: 'syz.2.2687': attribute type 5 has an invalid length. [ 766.262478][T15157] netlink: 'syz.2.2687': attribute type 6 has an invalid length. [ 766.270671][T15157] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2687'. [ 767.343994][T15167] netlink: 'syz.5.2691': attribute type 4 has an invalid length. [ 767.425539][T15169] netlink: 'syz.5.2691': attribute type 4 has an invalid length. [ 768.098752][ T7993] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 768.479649][ T7993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 768.489468][ T7993] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 768.499213][ T7993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 768.512224][ T7993] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 768.522340][ T7993] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 768.531594][ T7993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.567070][ T7993] usb 6-1: config 0 descriptor?? [ 768.598308][ T8000] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 768.768644][ T8000] usb 4-1: config 0 has no interfaces? [ 768.779903][ T8000] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.817885][ T8000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.846292][ T8000] usb 4-1: Product: syz [ 768.862901][ T8000] usb 4-1: Manufacturer: syz [ 768.878769][ T8000] usb 4-1: SerialNumber: syz [ 768.905752][ T8000] usb 4-1: config 0 descriptor?? [ 768.942299][ T7993] hdpvr 6-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 768.985571][ T7993] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 769.007163][T15187] netlink: 'syz.6.2697': attribute type 22 has an invalid length. [ 769.122282][T15194] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2700'. [ 769.154408][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'. [ 769.163587][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 769.163605][ T29] audit: type=1326 audit(1776203211.529:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.195049][ T29] audit: type=1326 audit(1776203211.529:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.234447][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 769.235008][ T1576] usb 4-1: USB disconnect, device number 16 [ 769.252816][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.263862][ T29] audit: type=1326 audit(1776203211.529:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.292164][T15191] usb usb8: usbfs: process 15191 (syz.2.2698) did not claim interface 0 before use [ 769.302642][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.315043][ T29] audit: type=1326 audit(1776203211.529:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.338563][ T29] audit: type=1326 audit(1776203211.539:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.363881][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 769.383225][ T29] audit: type=1326 audit(1776203211.559:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.409554][ T29] audit: type=1326 audit(1776203211.559:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.432683][ T5903] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 769.441884][ T29] audit: type=1326 audit(1776203211.559:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.466734][ T7993] hdpvr 6-1:0.0: device init failed [ 769.472251][ T7993] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 769.483428][ T7993] usb 6-1: USB disconnect, device number 11 [ 769.491925][ T29] audit: type=1326 audit(1776203211.559:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.527523][ T29] audit: type=1326 audit(1776203211.559:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 769.599797][ T5903] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 769.608722][ T5903] usb 7-1: config 0 has no interface number 0 [ 769.614886][ T5903] usb 7-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 769.628723][ T7985] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 769.630940][ T5903] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 769.646057][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.654554][ T5903] usb 7-1: Product: syz [ 769.659283][ T5903] usb 7-1: Manufacturer: syz [ 769.663919][ T5903] usb 7-1: SerialNumber: syz [ 769.673169][ T5903] usb 7-1: config 0 descriptor?? [ 769.679889][T15192] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 769.788103][ T7985] usb 3-1: Using ep0 maxpacket: 8 [ 769.795721][ T7985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.807585][ T7985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.819208][ T7985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.839433][ T7985] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 769.858312][ T7985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.876818][ T7985] usb 3-1: config 0 descriptor?? [ 770.184543][T15205] FAULT_INJECTION: forcing a failure. [ 770.184543][T15205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.202671][T15205] CPU: 1 UID: 0 PID: 15205 Comm: syz.5.2702 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.202710][T15205] Tainted: [L]=SOFTLOCKUP [ 770.202720][T15205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 770.202734][T15205] Call Trace: [ 770.202744][T15205] [ 770.202755][T15205] dump_stack_lvl+0xe8/0x150 [ 770.202801][T15205] should_fail_ex+0x412/0x560 [ 770.202833][T15205] _copy_from_user+0x2d/0xb0 [ 770.202867][T15205] do_sys_poll+0x2a3/0x10e0 [ 770.202920][T15205] ? __pfx_do_sys_poll+0x10/0x10 [ 770.202956][T15205] ? __lock_acquire+0x6b5/0x2cf0 [ 770.203007][T15205] ? is_bpf_text_address+0x26/0x2b0 [ 770.203102][T15205] ? get_pid_task+0x20/0x1f0 [ 770.203136][T15205] ? get_pid_task+0x20/0x1f0 [ 770.203208][T15205] ? __pfx_vfs_write+0x10/0x10 [ 770.203232][T15205] ? set_compat_user_sigmask+0xc7/0x1c0 [ 770.203263][T15205] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 770.203296][T15205] ? kmem_cache_free+0x187/0x630 [ 770.203332][T15205] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 770.203385][T15205] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 770.203419][T15205] ? ksys_write+0x1fc/0x270 [ 770.203459][T15205] __do_fast_syscall_32+0x20d/0x680 [ 770.203490][T15205] ? do_fast_syscall_32+0x33/0x70 [ 770.203515][T15205] ? asm_int80_emulation+0x1a/0x20 [ 770.203538][T15205] ? do_int80_emulation+0x286/0x530 [ 770.203568][T15205] do_fast_syscall_32+0x33/0x70 [ 770.203595][T15205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.203625][T15205] RIP: 0023:0xf709ef6c [ 770.203647][T15205] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 770.203667][T15205] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 770.203692][T15205] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 770.203708][T15205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.203722][T15205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.203736][T15205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 770.203751][T15205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.203787][T15205] [ 770.771495][ T7985] usbhid 3-1:0.0: can't add hid device: -71 [ 770.789970][ T7985] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 770.851946][ T7985] usb 3-1: USB disconnect, device number 28 [ 771.827967][ T7993] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 771.992481][T15236] syzkaller0: entered promiscuous mode [ 771.998308][T15236] syzkaller0: entered allmulticast mode [ 772.011468][ T7993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 772.025846][ T7993] usb 3-1: not running at top speed; connect to a high speed hub [ 772.041270][ T7993] usb 3-1: config 8 has an invalid interface number: 238 but max is 0 [ 772.054056][ T7993] usb 3-1: config 8 has no interface number 0 [ 772.061440][ T7993] usb 3-1: config 8 interface 238 has no altsetting 0 [ 772.092042][ T7993] usb 3-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=29.bc [ 772.111826][ T7993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.142628][ T7993] usb 3-1: Product: syz [ 772.164680][ T7993] usb 3-1: Manufacturer: syz [ 772.182063][ T7993] usb 3-1: SerialNumber: syz [ 772.218907][ T5903] asix 7-1:0.251: probe with driver asix failed with error -71 [ 772.459652][ T5903] usb 7-1: USB disconnect, device number 28 [ 772.829266][ T5903] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 772.988952][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 773.045837][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 773.069463][ T5903] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 773.079451][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.094352][ T5903] usb 7-1: Product: syz [ 773.101642][ T5903] usb 7-1: Manufacturer: syz [ 773.110861][ T5903] usb 7-1: SerialNumber: syz [ 773.131644][ T5903] usb 7-1: config 0 descriptor?? [ 773.181656][ T5903] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 773.275663][ T5903] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 773.406048][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2717'. [ 773.641374][T15259] loop7: detected capacity change from 0 to 16384 [ 773.779739][ T5903] em28xx 7-1:0.0: chip ID is em2765 [ 774.328297][ T7984] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 774.395421][T15243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.407671][T15243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.428226][ T5903] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 774.436316][ T5903] em28xx 7-1:0.0: board has no eeprom [ 774.444263][ C1] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 774.454622][T15260] loop7: detected capacity change from 16384 to 0 [ 774.462638][ C1] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 774.472132][ C1] buffer_io_error: 11 callbacks suppressed [ 774.472145][ C1] Buffer I/O error on dev loop7, logical block 1184, async page read [ 774.517171][ T7984] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 774.546263][ T7984] usb 4-1: config 0 has no interface number 0 [ 774.548896][ T5903] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 774.563905][ T5903] em28xx 7-1:0.0: dvb set to bulk mode. [ 774.569907][ T8000] em28xx 7-1:0.0: Binding DVB extension [ 774.580406][ T7984] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 774.603026][ T5903] usb 7-1: USB disconnect, device number 29 [ 774.630795][ T5903] em28xx 7-1:0.0: Disconnecting em28xx [ 774.668461][ T7984] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 774.698424][ T7984] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x2 has invalid wMaxPacketSize 0 [ 774.769340][ T7984] usb 4-1: config 0 interface 11 has no altsetting 0 [ 774.790979][ T7984] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 774.796373][ T8000] em28xx 7-1:0.0: Registering input extension [ 774.844822][ T7993] usb 3-1: USB disconnect, device number 29 [ 774.852813][ T7984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.858735][ T5903] em28xx 7-1:0.0: Closing input extension [ 774.910235][ T7984] usb 4-1: config 0 descriptor?? [ 774.939651][T15264] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 774.954481][ T5903] em28xx 7-1:0.0: Freeing device [ 774.971878][ T7984] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 775.046737][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2720'. [ 775.098570][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 775.229479][T15259] kernel read not supported for file /zero (pid: 15259 comm: syz.3.2718) [ 775.276129][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 775.276284][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 775.276366][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 775.276450][ T7984] keyspan 4-1:0.11: unsupported endpoint type 1 [ 775.276529][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 775.276613][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 775.296318][ T7984] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 775.605792][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 775.605898][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 775.605982][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 775.606065][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 775.606122][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 775.606177][ T7984] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 775.609301][ T7984] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 776.217331][ T7984] usb 4-1: USB disconnect, device number 17 [ 776.246912][T15282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2723'. [ 776.277114][ T7984] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 776.312261][ T7984] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 776.325566][ T7984] keyspan 4-1:0.11: device disconnected [ 776.380017][T15287] FAULT_INJECTION: forcing a failure. [ 776.380017][T15287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.420270][T15287] CPU: 1 UID: 0 PID: 15287 Comm: syz.5.2725 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.420306][T15287] Tainted: [L]=SOFTLOCKUP [ 776.420315][T15287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 776.420328][T15287] Call Trace: [ 776.420338][T15287] [ 776.420348][T15287] dump_stack_lvl+0xe8/0x150 [ 776.420385][T15287] should_fail_ex+0x412/0x560 [ 776.420415][T15287] _copy_to_user+0x31/0xb0 [ 776.420445][T15287] simple_read_from_buffer+0xe1/0x170 [ 776.420484][T15287] proc_fail_nth_read+0x1bb/0x230 [ 776.420535][T15287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.420572][T15287] ? rw_verify_area+0x2a6/0x4d0 [ 776.420596][T15287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.420631][T15287] vfs_read+0x20c/0xa70 [ 776.420653][T15287] ? fdget_pos+0x246/0x320 [ 776.420677][T15287] ? __pfx___mutex_lock+0x10/0x10 [ 776.420703][T15287] ? __pfx_vfs_read+0x10/0x10 [ 776.420728][T15287] ? __fget_files+0x2a/0x420 [ 776.420764][T15287] ? __fget_files+0x3a0/0x420 [ 776.420793][T15287] ? __fget_files+0x2a/0x420 [ 776.420834][T15287] ksys_read+0x150/0x270 [ 776.420860][T15287] ? __pfx_ksys_read+0x10/0x10 [ 776.420888][T15287] ? asm_int80_emulation+0x1a/0x20 [ 776.420916][T15287] do_int80_emulation+0x181/0x530 [ 776.420938][T15287] ? trace_irq_disable+0x3b/0x150 [ 776.420970][T15287] ? asm_int80_emulation+0x1a/0x20 [ 776.420989][T15287] ? clear_bhb_loop+0x40/0x90 [ 776.421010][T15287] ? clear_bhb_loop+0x40/0x90 [ 776.421037][T15287] asm_int80_emulation+0x1a/0x20 [ 776.421058][T15287] RIP: 0023:0xf71d5cab [ 776.421078][T15287] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 776.421097][T15287] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 776.421120][T15287] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 776.421136][T15287] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 776.421174][T15287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.421187][T15287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 776.421199][T15287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.421238][T15287] [ 776.851626][ T7985] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 776.998431][ T7985] usb 3-1: device descriptor read/64, error -71 [ 777.180457][T15293] No buffer was provided with the request [ 777.480506][ T7985] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 778.140539][ T7985] usb 3-1: device descriptor read/64, error -71 [ 778.248843][ T7985] usb usb3-port1: attempt power cycle [ 778.380737][T15296] deleting an unspecified loop device is not supported. [ 778.688163][ T7985] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 778.740459][ T7985] usb 3-1: device descriptor read/8, error -71 [ 778.997187][ T7985] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 779.036510][ T7985] usb 3-1: device descriptor read/8, error -71 [ 779.136296][T15303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2729'. [ 779.152955][ T7985] usb usb3-port1: unable to enumerate USB device [ 779.348477][ T7984] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 779.425273][T15313] FAULT_INJECTION: forcing a failure. [ 779.425273][T15313] name failslab, interval 1, probability 0, space 0, times 0 [ 779.440325][T15313] CPU: 0 UID: 0 PID: 15313 Comm: syz.2.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.440360][T15313] Tainted: [L]=SOFTLOCKUP [ 779.440368][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.440382][T15313] Call Trace: [ 779.440392][T15313] [ 779.440402][T15313] dump_stack_lvl+0xe8/0x150 [ 779.440440][T15313] should_fail_ex+0x412/0x560 [ 779.440471][T15313] should_failslab+0xa8/0x100 [ 779.440502][T15313] __kmalloc_noprof+0xe8/0x760 [ 779.440527][T15313] ? mpi_alloc+0x77/0x140 [ 779.440650][T15313] ? __kmalloc_cache_noprof+0x15b/0x660 [ 779.440679][T15313] mpi_alloc+0x77/0x140 [ 779.440707][T15313] mpi_read_raw_data+0x139/0x970 [ 779.440741][T15313] dh_set_secret+0x193/0x320 [ 779.440820][T15313] ? crypto_create_tfm_node+0x83/0x3f0 [ 779.440851][T15313] ? __kmalloc_node_noprof+0x34f/0x7c0 [ 779.440879][T15313] ? __pfx_dh_set_secret+0x10/0x10 [ 779.440908][T15313] ? crypto_alloc_tfm_node+0x3c0/0x3f0 [ 779.440942][T15313] ? __keyctl_dh_compute+0x3df/0xd10 [ 779.440981][T15313] __keyctl_dh_compute+0x5ae/0xd10 [ 779.441008][T15313] ? __lock_acquire+0x6b5/0x2cf0 [ 779.441044][T15313] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 779.441128][T15313] ? compat_keyctl_dh_compute+0x186/0x220 [ 779.441160][T15313] compat_keyctl_dh_compute+0x19d/0x220 [ 779.441187][T15313] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 779.441219][T15313] ? fput+0xa0/0xd0 [ 779.441260][T15313] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 779.441288][T15313] __do_fast_syscall_32+0x20d/0x680 [ 779.441314][T15313] ? do_fast_syscall_32+0x33/0x70 [ 779.441336][T15313] ? asm_int80_emulation+0x1a/0x20 [ 779.441357][T15313] ? do_int80_emulation+0x286/0x530 [ 779.441379][T15313] ? trace_irq_disable+0x3b/0x150 [ 779.441437][T15313] do_fast_syscall_32+0x33/0x70 [ 779.441461][T15313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.441494][T15313] RIP: 0023:0xf701ef6c [ 779.441515][T15313] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 779.441535][T15313] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 779.441559][T15313] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000100 [ 779.441575][T15313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000180 [ 779.441588][T15313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.441601][T15313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.441615][T15313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.441646][T15313] [ 779.728110][ T7984] usb 4-1: Using ep0 maxpacket: 32 [ 779.735225][ T7984] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 779.743922][ T7984] usb 4-1: config 0 has no interface number 0 [ 779.750152][ T7984] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 779.763737][ T7984] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 779.773005][ T7984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.781620][ T7984] usb 4-1: Product: syz [ 779.786374][ T7984] usb 4-1: Manufacturer: syz [ 779.791527][ T7984] usb 4-1: SerialNumber: syz [ 779.798250][ T7985] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 779.809086][ T7984] usb 4-1: config 0 descriptor?? [ 779.815298][T15304] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 779.837881][ T5903] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 779.900206][T15317] FAULT_INJECTION: forcing a failure. [ 779.900206][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 779.949220][ T7985] usb 7-1: Using ep0 maxpacket: 32 [ 779.957553][ T7985] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 779.957965][T15317] CPU: 1 UID: 0 PID: 15317 Comm: syz.2.2735 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.958063][T15317] Tainted: [L]=SOFTLOCKUP [ 779.958092][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.958129][T15317] Call Trace: [ 779.958162][T15317] [ 779.958186][T15317] dump_stack_lvl+0xe8/0x150 [ 779.958300][T15317] should_fail_ex+0x412/0x560 [ 779.958394][T15317] should_failslab+0xa8/0x100 [ 779.958486][T15317] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 779.958576][T15317] ? ethnl_default_set_doit+0x595/0xad0 [ 779.958786][T15317] ? __kmalloc_noprof+0x37d/0x760 [ 779.958868][T15317] kmemdup_noprof+0x2b/0x70 [ 779.958963][T15317] ethnl_default_set_doit+0x595/0xad0 [ 779.959082][T15317] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 779.959202][T15317] genl_family_rcv_msg_doit+0x22a/0x330 [ 779.959294][T15317] ? __asan_memcpy+0x40/0x70 [ 779.959366][T15317] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 779.959481][T15317] ? bpf_lsm_capable+0x9/0x20 [ 779.959564][T15317] ? security_capable+0x7e/0x2c0 [ 779.959693][T15317] genl_rcv_msg+0x61c/0x7a0 [ 779.959775][T15317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.959844][T15317] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 779.959940][T15317] ? __lock_acquire+0x6b5/0x2cf0 [ 779.960058][T15317] netlink_rcv_skb+0x232/0x4b0 [ 779.960154][T15317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.960224][T15317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.960372][T15317] ? down_read+0x272/0x2e0 [ 779.960442][T15317] ? genl_rcv+0xd/0x40 [ 779.960511][T15317] genl_rcv+0x28/0x40 [ 779.960592][T15317] netlink_unicast+0x80f/0x9b0 [ 779.960712][T15317] ? __pfx_netlink_unicast+0x10/0x10 [ 779.960804][T15317] ? netlink_sendmsg+0x650/0xb40 [ 779.960885][T15317] ? skb_put+0x11b/0x210 [ 779.960991][T15317] netlink_sendmsg+0x813/0xb40 [ 779.961092][T15317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.961194][T15317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 779.961268][T15317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.961391][T15317] ____sys_sendmsg+0x972/0x9f0 [ 779.961520][T15317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.961646][T15317] ? kstrtoull+0x12f/0x1d0 [ 779.961772][T15317] ___sys_sendmsg+0x2a5/0x360 [ 779.961890][T15317] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.961996][T15317] ? get_pid_task+0x20/0x1f0 [ 779.962090][T15317] ? get_pid_task+0x20/0x1f0 [ 779.962202][T15317] ? get_pid_task+0x20/0x1f0 [ 779.962393][T15317] ? __fget_files+0x2a/0x420 [ 779.962477][T15317] ? __fget_files+0x3a0/0x420 [ 779.962591][T15317] __sys_sendmsg+0x183/0x260 [ 779.962697][T15317] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.962870][T15317] __do_fast_syscall_32+0x20d/0x680 [ 779.962950][T15317] ? do_fast_syscall_32+0x33/0x70 [ 779.963011][T15317] ? asm_int80_emulation+0x1a/0x20 [ 779.963078][T15317] ? do_int80_emulation+0x286/0x530 [ 779.963142][T15317] ? trace_irq_disable+0x3b/0x150 [ 779.963246][T15317] do_fast_syscall_32+0x33/0x70 [ 779.963323][T15317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.963403][T15317] RIP: 0023:0xf701ef6c [ 779.963471][T15317] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 779.963543][T15317] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 779.963638][T15317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 779.963669][T15317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.963720][T15317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.963756][T15317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.963791][T15317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.963894][T15317] [ 780.028022][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 780.040645][ T7985] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 780.097492][ T5903] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 780.287662][ T7985] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 780.390940][T15299] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 780.402524][ T5903] usb 6-1: config 0 has no interface number 0 [ 780.471313][ T5903] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 780.480569][ T7985] usb 7-1: Product: syz [ 780.480617][ T7985] usb 7-1: Manufacturer: syz [ 780.480634][ T7985] usb 7-1: SerialNumber: syz [ 780.494446][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.507830][ T5903] usb 6-1: Product: syz [ 780.514509][ T5903] usb 6-1: Manufacturer: syz [ 780.524604][ T5903] usb 6-1: SerialNumber: syz [ 780.546289][ T7985] usb 7-1: config 0 descriptor?? [ 780.558897][T15310] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 780.589152][ T5903] usb 6-1: config 0 descriptor?? [ 780.811004][ T7984] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 780.822201][ T7984] asix 4-1:0.188: probe with driver asix failed with error -32 [ 780.835521][ T5903] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 780.848166][ T7985] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 780.872757][ T5903] usb 6-1: USB disconnect, device number 12 [ 781.009908][ T7985] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 781.028132][ T7985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.048355][ T7985] usb 3-1: config 0 has no interface number 0 [ 781.054687][ T7985] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 781.088108][ T7985] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 781.117775][ T7985] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 781.148225][ T7985] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 781.157388][ T7985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.188676][ T7985] usb 3-1: config 0 descriptor?? [ 781.229403][ T7985] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 781.338977][T15327] cifs: Unknown parameter 'fd,ffffffffffffff' [ 781.403988][T15321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.418928][T15321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.439477][T11113] usb 3-1: Failed to submit usb control message: -71 [ 781.446764][T11113] usb 3-1: unable to send the bmi data to the device: -71 [ 781.452968][ T5903] usb 3-1: USB disconnect, device number 34 [ 781.462613][T11113] usb 3-1: unable to get target info from device [ 781.530544][T11113] usb 3-1: could not get target info (-71) [ 781.544614][T11113] usb 3-1: could not probe fw (-71) [ 781.683279][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 782.183930][T15342] binder: 15341:15342 ioctl c0306201 80000540 returned -22 [ 782.251463][ T5903] usb 4-1: USB disconnect, device number 18 [ 782.361973][ T7987] usb 7-1: USB disconnect, device number 30 [ 782.837948][ T8000] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 782.930267][ T5903] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 783.000167][ T8000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.017238][ T8000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.035292][ T8000] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 783.054195][ T8000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.091038][ T8000] usb 7-1: config 0 descriptor?? [ 783.101332][ T5903] usb 6-1: config 0 has no interfaces? [ 783.109515][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 783.122176][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.132692][ T5903] usb 6-1: Product: syz [ 783.139093][ T5903] usb 6-1: Manufacturer: syz [ 783.146878][ T5903] usb 6-1: SerialNumber: syz [ 783.561696][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.570640][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.581692][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.601295][ T5903] usb 6-1: config 0 descriptor?? [ 783.620777][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.638111][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.645270][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.652462][ T8000] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 783.669572][ T8000] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 783.773346][ T8000] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0xFE [ 783.877099][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2746'. [ 784.025589][ T795] usb 6-1: USB disconnect, device number 13 [ 784.416581][ T8000] cp2112 0003:10C4:EA90.001E: error setting SMBus config [ 784.430964][ T8000] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 784.469214][ T8000] usb 7-1: USB disconnect, device number 31 [ 787.624188][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2761'. [ 787.796984][ T7987] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 788.039177][ T7987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.053393][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 788.098516][ T7987] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.128631][ T7987] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.137865][ T7987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.154595][ T7987] usb 6-1: Product: syz [ 788.160945][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 788.209146][ T7987] usb 6-1: Manufacturer: syz [ 788.219169][ T7987] usb 6-1: SerialNumber: syz [ 788.502087][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2760'. [ 788.579965][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2760'. [ 788.667503][ T7987] usb 6-1: cannot find UAC_HEADER [ 788.775201][ T7987] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 788.791320][ T7987] usb 6-1: USB disconnect, device number 14 [ 788.815128][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.978103][ T7985] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 789.258427][ T795] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 789.684838][ T795] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 789.739282][ T795] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 789.792877][ T795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 789.805881][ T795] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 789.970596][ T795] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.010431][ T795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 790.023140][ T7985] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.051302][ T795] usb 2-1: string descriptor 0 read error: -22 [ 790.057900][ T795] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 790.080210][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.282557][ T795] usb 2-1: config 0 descriptor?? [ 790.320167][ T7985] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.401250][ T795] hub 2-1:0.0: bad descriptor, ignoring hub [ 790.757885][ T795] hub 2-1:0.0: probe with driver hub failed with error -5 [ 790.779462][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.788671][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.811775][ T7985] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.176004][ T7985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.201392][ T7985] usb 3-1: Product: syz [ 791.214991][ T7985] usb 3-1: Manufacturer: syz [ 791.407356][ T7985] usb 3-1: SerialNumber: syz [ 791.719247][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2771'. [ 791.749509][ T7985] usb 3-1: 0:2 : does not exist [ 791.752209][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2771'. [ 792.132568][ T7985] usb 3-1: USB disconnect, device number 35 [ 792.282103][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.658160][T15439] loop7: detected capacity change from 0 to 16383 [ 792.670411][T11823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 792.682434][T11823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 792.691454][T11823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 792.699992][T11823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 792.707665][T11823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.118076][ T795] usb 2-1: USB disconnect, device number 14 [ 793.416679][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2777'. [ 793.463276][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.660417][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.758276][ T795] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 793.797900][ T7984] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 793.928256][ T795] usb 3-1: device descriptor read/64, error -71 [ 793.948319][ T7984] usb 6-1: Using ep0 maxpacket: 32 [ 793.965505][ T7984] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 793.975003][ T7984] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 793.991222][ T7984] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 794.012640][ T7984] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 794.046221][ T7984] usb 6-1: config 0 interface 0 has no altsetting 0 [ 794.056559][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.263796][ T7984] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 794.331174][ T795] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 794.344063][ T7984] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 794.375596][ T7984] usb 6-1: Product: syz [ 794.391879][ T7984] usb 6-1: Manufacturer: syz [ 794.403039][ T7984] usb 6-1: SerialNumber: syz [ 794.424269][ T7984] usb 6-1: config 0 descriptor?? [ 794.456278][ T7984] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 794.489744][ T795] usb 3-1: device descriptor read/64, error -71 [ 794.559237][ T7984] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 794.601203][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.638432][ T795] usb usb3-port1: attempt power cycle [ 794.656979][T15442] chnl_net:caif_netlink_parms(): no params data found [ 794.781871][T11823] Bluetooth: hci5: command tx timeout [ 794.978468][ T795] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 795.019197][ T795] usb 3-1: device descriptor read/8, error -71 [ 795.088796][T15472] ldusb 6-1:0.0: Write buffer overflow, 64804 bytes dropped [ 795.106024][ T69] vlan0: left promiscuous mode [ 795.129683][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.143228][ T69] bridge0: port 3(vlan0) entered disabled state [ 795.158670][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.172051][ T69] bridge_slave_1: left allmulticast mode [ 795.181283][ T69] bridge_slave_1: left promiscuous mode [ 795.187123][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.224005][ T69] bridge_slave_0: left promiscuous mode [ 795.238717][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.279082][ T795] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 795.328339][ T795] usb 3-1: device descriptor read/8, error -71 [ 795.379147][ T7984] usb 6-1: USB disconnect, device number 15 [ 795.397180][ T7984] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 795.444268][ T795] usb usb3-port1: unable to enumerate USB device [ 795.590780][ T69] bond3 (unregistering): (slave gretap1): Releasing active interface [ 795.626721][ T69] geneve0 (unregistering): left allmulticast mode [ 795.634307][ T69] team0: Port device geneve0 removed [ 795.647404][ T69] bridge0 (unregistering): left allmulticast mode [ 795.654996][ T69] team0: Port device bridge0 removed [ 795.801446][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.812384][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.825284][ T69] bond0 (unregistering): Released all slaves [ 795.838858][ T69] bond1 (unregistering): (slave dummy0): Releasing active interface [ 795.846887][ T69] dummy0: left allmulticast mode [ 795.855701][ T69] bond1 (unregistering): Released all slaves [ 795.873005][ T69] bond2 (unregistering): Released all slaves [ 795.896112][ T69] bond3 (unregistering): Released all slaves [ 795.917331][ T69] bond4 (unregistering): Released all slaves [ 796.104265][T15442] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.138054][T15442] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.190498][T15442] bridge_slave_0: entered allmulticast mode [ 796.198852][T15442] bridge_slave_0: entered promiscuous mode [ 796.221201][T15442] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.400423][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.414349][T15442] bridge_slave_1: entered allmulticast mode [ 796.544614][T15442] bridge_slave_1: entered promiscuous mode [ 796.857864][T11823] Bluetooth: hci5: command tx timeout [ 796.883574][T15442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.906610][T15442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.048125][ T8000] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 797.067515][T15442] team0: Port device team_slave_0 added [ 797.111024][ T69] hsr_slave_0: left promiscuous mode [ 797.156652][ T69] hsr_slave_1: left promiscuous mode [ 797.164078][ T69] team0: left allmulticast mode [ 797.179835][ T69] team_slave_0: left allmulticast mode [ 797.185475][ T69] team_slave_1: left allmulticast mode [ 797.212738][ T8000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.223835][ T8000] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 797.234056][ T8000] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 797.261904][ T8000] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 797.271627][ T8000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.300110][T15487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 797.334444][ T8000] hub 3-1:1.0: bad descriptor, ignoring hub [ 797.350461][ T8000] hub 3-1:1.0: probe with driver hub failed with error -5 [ 797.370340][ T8000] cdc_wdm 3-1:1.0: skipping garbage [ 797.375759][ T8000] cdc_wdm 3-1:1.0: skipping garbage [ 797.384419][ T8000] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 797.410874][ T8000] cdc_wdm 3-1:1.0: Unknown control protocol [ 797.623462][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.630386][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.638652][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.645312][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.651689][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.658334][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.665038][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.671691][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.678677][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.685496][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.691837][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.698480][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.705255][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.711913][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.718784][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.725445][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.731636][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 797.967848][ T7984] usb 3-1: USB disconnect, device number 40 [ 798.234533][T15509] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2790'. [ 798.367832][ T5903] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 798.400004][ T69] team0 (unregistering): Port device team_slave_1 removed [ 798.468850][ T69] team0 (unregistering): Port device team_slave_0 removed [ 798.539134][ T5903] usb 7-1: device descriptor read/64, error -71 [ 798.735171][T15523] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 798.901689][ T5903] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 798.909942][ T7984] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 798.948914][T11823] Bluetooth: hci5: command tx timeout [ 799.037823][ T5903] usb 7-1: device descriptor read/64, error -71 [ 799.137503][T15442] team0: Port device team_slave_1 added [ 799.145506][ T7984] usb 6-1: unable to get BOS descriptor or descriptor too short [ 799.173977][ T7984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.188438][ T5903] usb usb7-port1: attempt power cycle [ 799.204759][ T7984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.260510][ T7984] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 799.269979][ T7984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.282261][ T7984] usb 6-1: Product: syz [ 799.286521][ T7984] usb 6-1: Manufacturer: syz [ 799.291476][ T7984] usb 6-1: SerialNumber: syz [ 799.463679][ T7984] usb 6-1: selecting invalid altsetting 1 [ 799.471540][ T7984] usb 6-1: unit 6 not found! [ 799.512386][T15442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.532181][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.558565][ T5903] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 799.788125][ T5903] usb 7-1: device descriptor read/8, error -71 [ 799.887878][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 799.887898][ T29] audit: type=1326 audit(1776203242.169:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 799.905231][ T7984] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 799.936234][T15442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.035801][ T29] audit: type=1326 audit(1776203242.169:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 800.064915][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.093486][ T29] audit: type=1326 audit(1776203242.169:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.119190][ T5903] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 800.148401][ T29] audit: type=1326 audit(1776203242.169:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.148442][ T5903] usb 7-1: device descriptor read/8, error -71 [ 800.214624][T15442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.234591][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.263790][ T29] audit: type=1326 audit(1776203242.169:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.304405][T15442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.321385][ T29] audit: type=1326 audit(1776203242.169:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.383303][ T29] audit: type=1326 audit(1776203242.169:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.483026][ T29] audit: type=1326 audit(1776203242.169:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 800.572177][ T29] audit: type=1326 audit(1776203242.169:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.609769][T15442] hsr_slave_0: entered promiscuous mode [ 800.625364][T15442] hsr_slave_1: entered promiscuous mode [ 800.645983][T15442] debugfs: 'hsr0' already exists in 'hsr' [ 800.663626][ T29] audit: type=1326 audit(1776203242.179:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15511 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 800.694216][T15442] Cannot create hsr debugfs directory [ 800.906734][ T69] IPVS: stop unused estimator thread 0... [ 800.909346][ T5903] usb usb7-port1: unable to enumerate USB device [ 801.018693][T11823] Bluetooth: hci5: command tx timeout [ 801.612693][T15534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2794'. [ 801.696429][T15536] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 801.703105][T15536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.721943][T15536] vhci_hcd vhci_hcd.0: Device attached [ 801.751047][T15540] usbip_core: unknown command [ 801.755769][T15540] vhci_hcd: unknown pdu 808464432 [ 801.803520][ T8000] usb 6-1: USB disconnect, device number 16 [ 801.810254][T15540] usbip_core: unknown command [ 801.815442][T11113] vhci_hcd vhci_hcd.6: stop threads [ 801.829357][T11113] vhci_hcd vhci_hcd.6: release socket [ 801.852851][T11113] vhci_hcd vhci_hcd.6: disconnect device [ 801.897915][ T7987] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 802.203338][T15442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 802.238770][T15442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.295238][T15442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.322529][T15442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.052353][T15442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.107485][T15442] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.439221][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.446414][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.515896][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.523158][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.800395][T15442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.156017][T15442] veth0_vlan: entered promiscuous mode [ 804.639509][T15442] veth1_vlan: entered promiscuous mode [ 805.007486][T15442] veth0_macvtap: entered promiscuous mode [ 805.075604][T15442] veth1_macvtap: entered promiscuous mode [ 805.134970][T15442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.161025][T15442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.221242][T11113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.243400][T11113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.291997][T11113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.317815][T11113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.731102][T13132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.763844][T13132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.773359][T13132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.784146][T13132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.799385][T11111] vlan0: left promiscuous mode [ 805.804789][T13132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.812581][T11111] bridge0: port 3(vlan0) entered disabled state [ 805.913148][T11111] bridge_slave_1: left allmulticast mode [ 805.923327][T11111] bridge_slave_1: left promiscuous mode [ 805.941536][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.972329][T11111] bridge_slave_0: left promiscuous mode [ 805.981350][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.338535][T15622] loop9: detected capacity change from 0 to 7 [ 806.373002][T15622] Dev loop9: unable to read RDB block 7 [ 806.381244][T15622] loop9: AHDI p1 p2 p3 [ 806.385513][T15622] loop9: partition table partially beyond EOD, truncated [ 806.394630][T15622] loop9: p1 start 1601398130 is beyond EOD, truncated [ 806.418116][T15622] loop9: p2 start 1702059890 is beyond EOD, truncated [ 806.644568][T11111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.654348][T11111] bond_slave_0: left allmulticast mode [ 806.725631][T11111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.796954][T11111] bond_slave_1: left allmulticast mode [ 806.836511][T11111] bond0 (unregistering): Released all slaves [ 807.067938][T11113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.101718][T11113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.137656][T11111] tipc: Left network mode [ 807.744766][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.761802][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.897813][T11823] Bluetooth: hci0: command tx timeout [ 808.182293][T11111] hsr_slave_0: left promiscuous mode [ 808.229268][T11111] hsr_slave_1: left promiscuous mode [ 808.793686][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.800209][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.265912][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'. [ 809.281047][T15663] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2815'. [ 809.783465][ T5903] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 810.010093][T11823] Bluetooth: hci0: command tx timeout [ 810.106741][T11111] team_slave_1 (unregistering): left promiscuous mode [ 810.161328][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 810.173651][T11111] team0 (unregistering): Port device team_slave_1 removed [ 810.203319][T11111] team_slave_0 (unregistering): left promiscuous mode [ 810.226554][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.256781][T11111] team0 (unregistering): Port device team_slave_0 removed [ 810.281197][ T5903] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 810.295029][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.341019][ T5903] usb 3-1: Product: syz [ 810.345426][ T5903] usb 3-1: Manufacturer: syz [ 810.379755][ T5903] usb 3-1: SerialNumber: syz [ 810.455308][ T5903] usb 3-1: config 0 descriptor?? [ 810.515389][ T5903] xr_serial 3-1:0.0: failed to claim sibling interface: -16 [ 810.532952][ T5903] xr_serial 3-1:0.0: probe with driver xr_serial failed with error -16 [ 811.451629][T15613] chnl_net:caif_netlink_parms(): no params data found [ 811.652981][T11111] IPVS: stop unused estimator thread 0... [ 811.734510][ T7984] usb 3-1: USB disconnect, device number 41 [ 812.015530][T15613] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.083639][T15613] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.118004][T15613] bridge_slave_0: entered allmulticast mode [ 812.125988][T15613] bridge_slave_0: entered promiscuous mode [ 812.138154][T11823] Bluetooth: hci0: command tx timeout [ 812.156932][T15613] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.188337][T15613] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.204850][T15613] bridge_slave_1: entered allmulticast mode [ 812.324974][T15613] bridge_slave_1: entered promiscuous mode [ 812.680859][T15613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.736745][T15613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.837518][T15613] team0: Port device team_slave_0 added [ 812.866210][T15613] team0: Port device team_slave_1 added [ 813.315629][T15613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.382875][T15613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.466815][T15613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.498286][T15613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.517647][T15613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.604188][T15613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.217807][T11823] Bluetooth: hci0: command tx timeout [ 814.360351][T15613] hsr_slave_0: entered promiscuous mode [ 814.390637][T15613] hsr_slave_1: entered promiscuous mode [ 814.401160][T15613] debugfs: 'hsr0' already exists in 'hsr' [ 814.406955][T15613] Cannot create hsr debugfs directory [ 816.590596][T15613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 816.698406][T15613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 816.738201][ T7984] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 816.759813][T15613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 816.823567][T15613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 816.907833][ T7984] usb 7-1: Using ep0 maxpacket: 8 [ 816.952697][ T7984] usb 7-1: config index 0 descriptor too short (expected 36, got 12) [ 816.980841][ T7984] usb 7-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 817.042023][ T7984] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.072860][ T7984] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 817.098094][ T7984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.123106][ T7984] usb 7-1: config 0 descriptor?? [ 817.416535][T15613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.452094][T15613] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.494527][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.501728][T11114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.525968][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.533293][T11114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.554037][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 817.563239][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 817.646992][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 817.647013][ T29] audit: type=1800 audit(1776203259.989:416): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2825" name="bus" dev="tmpfs" ino=740 res=0 errno=0 [ 818.078272][ T7993] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 818.101032][T15613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.218257][ T7993] usb 4-1: device descriptor read/64, error -71 [ 818.534463][T15613] veth0_vlan: entered promiscuous mode [ 818.564741][T15613] veth1_vlan: entered promiscuous mode [ 818.638113][ T7993] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 818.691864][T15613] veth0_macvtap: entered promiscuous mode [ 818.720724][T15613] veth1_macvtap: entered promiscuous mode [ 818.837640][T15613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.837862][ T7993] usb 4-1: device descriptor read/64, error -71 [ 818.958308][ T7993] usb usb4-port1: attempt power cycle [ 818.999825][T15613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.108901][T11114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.184052][T11114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.261164][T11114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.319174][ T7984] usb 7-1: USB disconnect, device number 36 [ 819.349257][ T7993] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 819.389246][ T7993] usb 4-1: device descriptor read/8, error -71 [ 819.420086][T11114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.461763][ T29] audit: type=1326 audit(1776203261.819:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 819.517107][ T29] audit: type=1326 audit(1776203261.849:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 819.667882][ T7993] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 819.751100][ T7993] usb 4-1: device descriptor read/8, error -71 [ 819.807226][ T29] audit: type=1326 audit(1776203262.169:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 819.857859][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.878535][ T7993] usb usb4-port1: unable to enumerate USB device [ 819.889442][T15780] binder: BINDER_SET_CONTEXT_MGR already set [ 819.895504][T15780] binder: 15778:15780 ioctl 4018620d 80004a80 returned -16 [ 819.906994][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.919480][ T29] audit: type=1326 audit(1776203262.169:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.037910][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.046470][ T29] audit: type=1326 audit(1776203262.229:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.075541][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.119752][ T29] audit: type=1326 audit(1776203262.229:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.223774][ T29] audit: type=1326 audit(1776203262.229:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.330346][ T29] audit: type=1326 audit(1776203262.239:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.406281][ T29] audit: type=1326 audit(1776203262.239:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.2829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 820.418117][ T7987] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 820.661284][ T7987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.702527][ T7987] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 820.734419][ T7987] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 820.764768][ T7987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.781765][ T7987] usb 7-1: Product: syz [ 820.786018][ T7987] usb 7-1: Manufacturer: syz [ 820.825853][ T7987] usb 7-1: SerialNumber: syz [ 821.234693][T15810] team_slave_1: entered promiscuous mode [ 821.310239][T15810] team_slave_1: entered allmulticast mode [ 823.123858][ T7987] usb 7-1: 0:2 : does not exist [ 823.143951][ T7987] usb 7-1: unit 3 not found! [ 823.168109][ T7984] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 823.198911][ T7987] usb 7-1: unit 64 not found! [ 823.313788][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 823.313808][ T29] audit: type=1326 audit(1776203265.679:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.362398][ T7984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 823.419179][ T7984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 823.444349][ T7987] usb 7-1: USB disconnect, device number 37 [ 823.448225][ T29] audit: type=1326 audit(1776203265.679:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.462503][ T7984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 823.628762][ T29] audit: type=1326 audit(1776203265.679:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.643641][ T7984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 823.697835][ T7984] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 823.717245][ T7984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.737604][ T29] audit: type=1326 audit(1776203265.689:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.788186][ T7984] usb 4-1: config 0 descriptor?? [ 823.805939][ T29] audit: type=1326 audit(1776203265.689:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.914890][ T29] audit: type=1326 audit(1776203265.699:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 823.968325][ T7987] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 824.000722][ T29] audit: type=1326 audit(1776203265.699:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 824.104770][ T29] audit: type=1326 audit(1776203265.699:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 824.137549][ T7984] hdpvr 4-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 824.158457][ T7984] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 824.218832][ T29] audit: type=1326 audit(1776203265.699:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 824.228013][ T7987] usb 7-1: Using ep0 maxpacket: 16 [ 824.286217][ T29] audit: type=1326 audit(1776203265.709:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.6.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 824.348746][ T7987] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.369064][ T7987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.414453][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.424782][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.460545][ T7987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 824.503505][ T7987] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 824.533847][ T7987] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.570864][ T7987] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 824.584307][ T7984] hdpvr 4-1:0.0: device init failed [ 824.590088][ T7984] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 824.600546][ T7987] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 824.622695][ T7987] usb 7-1: Manufacturer: syz [ 824.644992][ T7984] usb 4-1: USB disconnect, device number 23 [ 824.652540][ T7987] usb 7-1: config 0 descriptor?? [ 825.046635][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2844'. [ 825.070605][ T7987] rc_core: IR keymap rc-hauppauge not found [ 825.082590][ T7987] Registered IR keymap rc-empty [ 825.100367][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.167917][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.217512][ T7987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 825.279320][ T7987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input115 [ 825.336377][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.397961][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.438413][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.466943][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.497983][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.498919][ T795] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 825.527865][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.548247][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.573128][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.599310][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.637945][ T7987] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.671163][ T7987] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 825.690624][ T7987] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 825.725533][ T7987] usb 7-1: USB disconnect, device number 38 [ 825.731634][ T7984] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 825.739092][ T795] usb 6-1: Using ep0 maxpacket: 16 [ 825.776941][ T795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 825.796626][ T795] usb 6-1: config 2 has an invalid interface number: 200 but max is 0 [ 825.812117][ T795] usb 6-1: config 2 has no interface number 0 [ 825.841507][ T795] usb 6-1: config 2 interface 200 has no altsetting 0 [ 825.873127][ T795] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 825.894110][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.905222][ T7984] usb 3-1: Using ep0 maxpacket: 32 [ 825.914260][ T795] usb 6-1: Product: syz [ 825.923105][ T795] usb 6-1: Manufacturer: syz [ 825.930352][ T795] usb 6-1: SerialNumber: syz [ 826.020792][ T7984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.034175][ T7984] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 826.044666][ T7984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.136832][ T7984] usb 3-1: Product: syz [ 826.157758][ T7984] usb 3-1: Manufacturer: syz [ 826.183362][ T7984] usb 3-1: SerialNumber: syz [ 826.229030][ T7984] usb 3-1: config 0 descriptor?? [ 826.270901][ T7984] xr_serial 3-1:0.0: failed to claim sibling interface: -16 [ 826.331012][ T7984] xr_serial 3-1:0.0: probe with driver xr_serial failed with error -16 [ 826.362199][ T795] gspca_main: pac7311-2.14.0 probing 093a:260e [ 826.376813][ T795] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 826.397312][ T795] pac7311 6-1:2.200: probe with driver pac7311 failed with error -71 [ 826.453625][ T795] usb 6-1: USB disconnect, device number 17 [ 826.823697][ T8000] usb 3-1: USB disconnect, device number 42 [ 827.602145][T15907] team_slave_1: entered promiscuous mode [ 827.608199][T15907] team_slave_1: entered allmulticast mode [ 827.769055][ T8000] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 827.946974][ T8000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 827.967749][ T8000] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 827.990350][ T8000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 828.017774][ T8000] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 828.028079][ T7984] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 828.040204][ T8000] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 828.065659][ T8000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.080030][ T8000] usb 7-1: config 0 descriptor?? [ 828.200154][ T7984] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 828.209297][ T7984] usb 6-1: config 0 has no interface number 0 [ 828.215522][ T7984] usb 6-1: config 0 interface 41 has no altsetting 0 [ 828.227523][ T7984] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 828.237144][ T7984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.245720][ T7984] usb 6-1: Product: syz [ 828.281615][T15925] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2863'. [ 828.305922][ T7984] usb 6-1: Manufacturer: syz [ 828.342317][ T8000] hdpvr 7-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 828.355525][ T8000] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 828.375843][ T7984] usb 6-1: SerialNumber: syz [ 828.391510][ T7984] usb 6-1: config 0 descriptor?? [ 828.561571][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 828.561591][ T29] audit: type=1326 audit(1776203270.929:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 828.591145][ T29] audit: type=1326 audit(1776203270.939:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 828.633603][ T29] audit: type=1326 audit(1776203270.959:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.158578][ T29] audit: type=1326 audit(1776203270.959:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.182041][ T29] audit: type=1326 audit(1776203270.959:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.205096][ T29] audit: type=1326 audit(1776203270.999:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.246293][ T29] audit: type=1326 audit(1776203270.999:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.277882][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.434977][ T7984] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 829.435858][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.502478][ T29] audit: type=1326 audit(1776203270.999:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.614666][ T29] audit: type=1326 audit(1776203270.999:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.626753][ T8000] hdpvr 7-1:0.0: device init failed [ 829.682995][ T8000] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 829.713288][ T8000] usb 7-1: USB disconnect, device number 39 [ 829.745749][ T29] audit: type=1326 audit(1776203271.029:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.6.2857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 829.901286][ T7984] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 829.914853][ T7984] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 829.945348][ T7984] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 830.008975][ T7984] usb 6-1: USB disconnect, device number 18 [ 831.062395][T15956] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2871'. [ 831.182664][T15955] syzkaller0: entered promiscuous mode [ 831.188641][T15955] syzkaller0: entered allmulticast mode [ 831.203732][T15955] sg_write: data in/out 262109/38 bytes for SCSI command 0x5d-- guessing data in; [ 831.203732][T15955] program syz.7.2873 not setting count and/or reply_len properly [ 831.229897][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2869'. [ 831.249153][T15965] netlink: 265 bytes leftover after parsing attributes in process `syz.6.2869'. [ 831.318484][T15965] netlink: 265 bytes leftover after parsing attributes in process `syz.6.2869'. [ 831.654390][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2875'. [ 832.143698][T15980] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 832.667450][T15987] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2880'. [ 832.987763][ T8000] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 833.281268][ T8000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 833.293768][ T8000] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 833.311601][ T8000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 833.326569][ T8000] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 833.363421][ T8000] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 833.373020][ T8000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.399534][ T8000] usb 3-1: config 0 descriptor?? [ 833.847554][ T8000] hdpvr 3-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 833.862455][ T8000] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 834.047158][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 834.047177][ T29] audit: type=1326 audit(1776203276.409:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.113149][T15982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.133676][T15982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.171994][ T29] audit: type=1326 audit(1776203276.409:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.248186][ T29] audit: type=1326 audit(1776203276.439:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.278195][ T5903] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 834.312971][ T8000] hdpvr 3-1:0.0: device init failed [ 834.333807][ T8000] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 834.336500][ T29] audit: type=1326 audit(1776203276.439:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.434404][ T8000] usb 3-1: USB disconnect, device number 43 [ 834.444376][ T29] audit: type=1326 audit(1776203276.439:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.481380][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.498549][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.528024][ T29] audit: type=1326 audit(1776203276.449:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.556869][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.558188][ T7987] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 834.569814][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.589094][ T29] audit: type=1326 audit(1776203276.449:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.613881][ T5903] usb 4-1: Product: syz [ 834.618182][ T5903] usb 4-1: Manufacturer: syz [ 834.626325][ T5903] usb 4-1: SerialNumber: syz [ 834.631383][ T29] audit: type=1326 audit(1776203276.449:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.674619][ T29] audit: type=1326 audit(1776203276.449:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.697875][ T29] audit: type=1326 audit(1776203276.449:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15981 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 834.808590][ T7987] usb 7-1: device descriptor read/64, error -71 [ 834.970937][ T5903] usb 4-1: 0:2 : does not exist [ 835.057833][ T7987] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 835.161623][ T5903] usb 4-1: USB disconnect, device number 24 [ 835.190400][ T7987] usb 7-1: device descriptor read/64, error -71 [ 835.243989][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.341448][ T7987] usb usb7-port1: attempt power cycle [ 835.367849][T16023] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 835.730385][ T7987] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 835.768748][ T7987] usb 7-1: device descriptor read/8, error -71 [ 835.868317][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2890'. [ 836.050641][ T7987] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 836.089800][ T7987] usb 7-1: device descriptor read/8, error -71 [ 836.199992][ T7987] usb usb7-port1: unable to enumerate USB device [ 836.213639][T13132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 836.233860][T13132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 836.245949][T13132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 836.257285][T13132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 836.266724][T13132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 836.543777][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2894'. [ 837.032432][ T5903] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 837.157117][T11113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 837.259531][ T5903] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 837.269097][ T5903] usb 4-1: config 0 has no interface number 0 [ 837.275335][ T5903] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 837.287354][ T5903] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 837.398689][ T5903] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 837.476179][T11113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 837.555748][ T5903] usb 4-1: config 0 interface 11 has no altsetting 0 [ 837.647775][ T5903] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 837.709858][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.734614][ T5903] usb 4-1: config 0 descriptor?? [ 837.827197][T16052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 837.834712][T16052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 837.872769][ T5903] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 837.902951][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 837.932607][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 837.956728][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 837.997156][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 838.008046][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 838.018283][T11113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 838.060284][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 838.100947][ T5903] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 838.261723][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 838.318709][T16047] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2894'. [ 838.344549][T16047] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2894'. [ 838.379737][T11823] Bluetooth: hci4: command tx timeout [ 838.397466][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 838.420042][T11113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 838.456926][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 838.484373][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 838.525279][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 838.536920][T16048] chnl_net:caif_netlink_parms(): no params data found [ 838.553023][ T5903] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 838.639773][ T5903] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 839.141979][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.164718][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.173528][T16048] bridge_slave_0: entered allmulticast mode [ 839.184465][T16048] bridge_slave_0: entered promiscuous mode [ 839.216079][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.224299][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.232687][T16048] bridge_slave_1: entered allmulticast mode [ 839.264522][T16048] bridge_slave_1: entered promiscuous mode [ 839.339693][T11113] vlan2: left promiscuous mode [ 839.345912][T11113] bridge0: port 3(vlan2) entered disabled state [ 839.381658][T11113] bridge_slave_1: left allmulticast mode [ 839.399749][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.432973][T11113] bridge_slave_0: left promiscuous mode [ 839.448378][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.487395][ T7985] usb 4-1: USB disconnect, device number 25 [ 839.499519][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2899'. [ 839.521050][ T7985] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 839.564978][ T7985] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 839.602790][ T7985] keyspan 4-1:0.11: device disconnected [ 839.943016][T11113] erspan0 (unregistering): left promiscuous mode [ 839.965636][T11113] gretap0 (unregistering): left promiscuous mode [ 840.124697][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.133505][ T7985] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 840.142879][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.156408][T11113] bond0 (unregistering): Released all slaves [ 840.171223][T11113] bond1 (unregistering): Released all slaves [ 840.189391][T11113] bond2 (unregistering): Released all slaves [ 840.206958][T11113] bond3 (unregistering): Released all slaves [ 840.240411][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.274749][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.300638][ T7985] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.351088][ T7985] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.401129][ T7985] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.410784][ T7985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.442683][T11113] !: left promiscuous mode [ 840.450236][ T7985] usb 7-1: Product: syz [ 840.454490][ T7985] usb 7-1: Manufacturer: syz [ 840.459289][T11823] Bluetooth: hci4: command tx timeout [ 840.471972][ T7985] usb 7-1: SerialNumber: syz [ 840.540799][T16048] team0: Port device team_slave_0 added [ 840.561816][T16048] team0: Port device team_slave_1 added [ 840.641438][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.649645][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.691070][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.704803][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.713129][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.739612][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.809911][ T7985] usb 7-1: 0:2 : does not exist [ 840.871524][ T7985] usb 7-1: USB disconnect, device number 44 [ 840.975196][T16048] hsr_slave_0: entered promiscuous mode [ 840.988971][T16048] hsr_slave_1: entered promiscuous mode [ 841.009004][T16048] debugfs: 'hsr0' already exists in 'hsr' [ 841.026438][T16048] Cannot create hsr debugfs directory [ 841.297773][T11113] hsr_slave_0: left promiscuous mode [ 841.303978][T11113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.323203][T11113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.359752][T11113] dummy0: left allmulticast mode [ 841.366365][T11113] team0: left allmulticast mode [ 841.377193][T11113] team_slave_0: left allmulticast mode [ 841.388312][T11113] team0: left promiscuous mode [ 841.418553][T11113] team_slave_0: left promiscuous mode [ 841.748797][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036e9c000: rx timeout, send abort [ 841.757918][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888036e9c000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 842.335145][ T795] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 842.355083][ T795] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 842.570132][T11823] Bluetooth: hci4: command tx timeout [ 843.050179][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036e9c800: rx timeout, send abort [ 843.058921][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888036e9c800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 843.120632][T11113] team0 (unregistering): Port device team_slave_1 removed [ 843.198360][T11113] team0 (unregistering): Port device team_slave_0 removed [ 843.542026][T16139] syzkaller0: entered promiscuous mode [ 843.560754][T16139] syzkaller0: entered allmulticast mode [ 844.306708][ T7985] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 844.490307][ T7985] usb 4-1: Using ep0 maxpacket: 16 [ 844.534094][ T7985] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 844.618413][T11823] Bluetooth: hci4: command tx timeout [ 844.624332][T11113] IPVS: stop unused estimator thread 0... [ 844.644847][ T7985] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 844.658532][ T7985] usb 4-1: can't read configurations, error -61 [ 844.807870][ T7985] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 844.920690][T16048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 844.992312][T16170] xt_connbytes: Forcing CT accounting to be enabled [ 845.006511][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2914'. [ 845.067752][ T7985] usb 4-1: Using ep0 maxpacket: 16 [ 845.084537][ T7985] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 845.095934][T16048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.119821][ T7985] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 845.128462][ T7985] usb 4-1: can't read configurations, error -61 [ 845.135237][ T7985] usb usb4-port1: attempt power cycle [ 845.152103][T16048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.422380][T16177] "syz.6.2915" (16177) uses obsolete ecb(arc4) skcipher [ 845.435113][T16048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 845.548280][ T7985] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 845.599244][ T7985] usb 4-1: Using ep0 maxpacket: 16 [ 845.608116][ T7985] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 845.631371][ T7985] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 845.645386][ T7985] usb 4-1: can't read configurations, error -61 [ 845.694641][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.750949][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.788701][ T7985] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 845.799984][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.807143][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.818855][ T7985] usb 4-1: Using ep0 maxpacket: 16 [ 845.825351][ T7985] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 845.840161][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.847332][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.868254][ T7985] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 845.888347][ T7985] usb 4-1: can't read configurations, error -61 [ 845.896739][ T7985] usb usb4-port1: unable to enumerate USB device [ 846.056194][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.138902][T16048] veth0_vlan: entered promiscuous mode [ 846.170669][T16048] veth1_vlan: entered promiscuous mode [ 846.205160][T16048] veth0_macvtap: entered promiscuous mode [ 846.216651][T16048] veth1_macvtap: entered promiscuous mode [ 846.236750][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.256444][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.274127][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.284066][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.309087][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.326958][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.337951][ T5903] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 846.444393][T11114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.476327][T11114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.544928][ T5903] usb 7-1: config index 0 descriptor too short (expected 141, got 72) [ 846.555777][ T5903] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 846.676267][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.694754][ T5903] usb 7-1: Product: syz [ 846.703399][ T5903] usb 7-1: Manufacturer: syz [ 846.709139][ T5903] usb 7-1: SerialNumber: syz [ 846.723558][ T5903] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 846.766508][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.775450][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.775861][ T7993] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 846.944201][T16196] openvswitch: netlink: Multiple metadata blocks provided [ 847.193918][ T5948] usb 7-1: USB disconnect, device number 45 [ 847.322304][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 847.427436][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 847.611972][T16204] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 847.632325][T16206] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 847.676925][T16206] bond1 (unregistering): Released all slaves [ 848.095056][ T7993] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 848.125167][ T7993] ath9k_htc: Failed to initialize the device [ 848.152171][ T5948] usb 7-1: ath9k_htc: USB layer deinitialized [ 849.769870][ T7993] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 850.374245][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 850.389714][ T7993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 850.422467][ T7993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 850.448473][ T7993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 850.473697][ T7993] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 850.569303][ T7993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.758819][ T7993] usb 4-1: config 0 descriptor?? [ 850.992644][ T7993] hdpvr 4-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 851.013059][ T7993] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 851.200388][T16238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.209410][T16238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.249786][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 851.249803][ T29] audit: type=1326 audit(1776203293.559:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.336706][T16252] xt_TCPMSS: Only works on TCP SYN packets [ 851.381960][ T29] audit: type=1326 audit(1776203293.559:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.432515][ T29] audit: type=1326 audit(1776203293.559:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.455550][ T29] audit: type=1326 audit(1776203293.559:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.478934][ T29] audit: type=1326 audit(1776203293.559:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.532883][ T7993] hdpvr 4-1:0.0: device init failed [ 851.548567][ T7993] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 851.579227][ T7993] usb 4-1: USB disconnect, device number 30 [ 851.593355][ T29] audit: type=1326 audit(1776203293.559:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.668460][ T29] audit: type=1326 audit(1776203293.559:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.711407][ T29] audit: type=1326 audit(1776203293.559:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.743609][ T29] audit: type=1326 audit(1776203293.559:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.778066][ T29] audit: type=1326 audit(1776203293.559:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.3.2931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 851.804208][T16259] team_slave_1: entered promiscuous mode [ 851.810619][T16259] team_slave_1: entered allmulticast mode [ 851.862748][T16258] syzkaller0: entered promiscuous mode [ 851.888819][T16258] syzkaller0: entered allmulticast mode [ 852.837782][ T5948] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 852.999841][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.011624][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.023966][ T5948] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 853.033410][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.048890][ T5948] usb 6-1: config 0 descriptor?? [ 853.532786][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.568547][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.748015][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.779987][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.807396][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.831975][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.843801][T16283] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.863147][ T5948] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 853.903461][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.912892][ T5948] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 853.939839][T16286] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2946'. [ 854.227568][ T795] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 854.249866][ T5948] cp2112 0003:10C4:EA90.0020: error requesting version [ 854.314284][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.326560][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.204709][T16295] kAFS: unable to lookup cell '' [ 855.210731][T16295] kAFS: unable to lookup cell '(,c' [ 855.730986][ T5948] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -32 [ 855.740693][ T795] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz1] on syz0 [ 855.776225][ T5948] usb 6-1: USB disconnect, device number 19 [ 855.990201][T16310] FAULT_INJECTION: forcing a failure. [ 855.990201][T16310] name failslab, interval 1, probability 0, space 0, times 0 [ 856.016207][T16310] CPU: 1 UID: 0 PID: 16310 Comm: syz.5.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.016243][T16310] Tainted: [L]=SOFTLOCKUP [ 856.016252][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 856.016266][T16310] Call Trace: [ 856.016275][T16310] [ 856.016285][T16310] dump_stack_lvl+0xe8/0x150 [ 856.016323][T16310] should_fail_ex+0x412/0x560 [ 856.016354][T16310] should_failslab+0xa8/0x100 [ 856.016385][T16310] ? ep_insert+0x283/0x1a40 [ 856.016408][T16310] kmem_cache_alloc_noprof+0x87/0x650 [ 856.016432][T16310] ? percpu_counter_add_batch+0xea/0x1d0 [ 856.016559][T16310] ep_insert+0x283/0x1a40 [ 856.016581][T16310] ? __lock_acquire+0x6b5/0x2cf0 [ 856.016618][T16310] ? do_epoll_ctl+0x3c9/0xe80 [ 856.016641][T16310] ? __pfx_ep_insert+0x10/0x10 [ 856.016661][T16310] ? __pfx___mutex_lock+0x10/0x10 [ 856.016687][T16310] ? __fget_files+0x2a/0x420 [ 856.016723][T16310] ? __fget_files+0x2a/0x420 [ 856.016752][T16310] ? __fget_files+0x3a0/0x420 [ 856.016782][T16310] ? __fget_files+0x2a/0x420 [ 856.016823][T16310] do_epoll_ctl+0x7f4/0xe80 [ 856.016854][T16310] __ia32_sys_epoll_ctl+0x165/0x1b0 [ 856.016881][T16310] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 856.016914][T16310] __do_fast_syscall_32+0x20d/0x680 [ 856.016941][T16310] ? do_fast_syscall_32+0x33/0x70 [ 856.016962][T16310] ? asm_int80_emulation+0x1a/0x20 [ 856.016983][T16310] ? do_int80_emulation+0x286/0x530 [ 856.017072][T16310] ? trace_irq_disable+0x3b/0x150 [ 856.017109][T16310] do_fast_syscall_32+0x33/0x70 [ 856.017134][T16310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 856.017160][T16310] RIP: 0023:0xf709ef6c [ 856.017180][T16310] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 856.017202][T16310] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 856.017225][T16310] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 856.017240][T16310] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000000000000 [ 856.017253][T16310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.017266][T16310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 856.017279][T16310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.017311][T16310] [ 856.528642][ T5948] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 856.591200][ T1576] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 856.692738][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 856.707299][ T5948] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 856.728545][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.744286][ T5948] usb 4-1: Product: syz [ 856.748725][ T1576] usb 6-1: Using ep0 maxpacket: 16 [ 856.758635][ T1576] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.778424][ T5948] usb 4-1: Manufacturer: syz [ 856.789085][ T5948] usb 4-1: SerialNumber: syz [ 856.794633][ T1576] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.821056][ T1576] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 856.832692][ T1576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.962178][ T7984] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 857.028458][ T5948] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 857.046758][ T5948] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 857.059513][ T5948] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 857.068604][ T5948] usb 4-1: media controller created [ 857.109387][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.120860][ T7984] usb 7-1: unable to get BOS descriptor or descriptor too short [ 857.132732][ T7984] usb 7-1: not running at top speed; connect to a high speed hub [ 857.164631][ T7984] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.185334][ T7984] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 857.200196][ T7984] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 857.219644][ T7984] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 857.229812][ T7984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.238850][ T7984] usb 7-1: Product: syz [ 857.243314][ T7984] usb 7-1: Manufacturer: syz [ 857.248678][ T7984] usb 7-1: SerialNumber: syz [ 857.276535][T16319] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 857.294314][T16307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2950'. [ 857.389992][ T5948] zl10353_read_register: readreg error (reg=127, ret==-110) [ 857.395152][T16312] ------------[ cut here ]------------ [ 857.403483][T16312] usb 4-1: BOGUS control dir, pipe 80001f80 doesn't match bRequestType c0 [ 857.412135][T16312] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.5.2955/16312 [ 857.423174][T16312] Modules linked in: [ 857.427564][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.5.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.439052][T16312] Tainted: [L]=SOFTLOCKUP [ 857.444647][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 857.454844][T16312] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 857.460572][T16312] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 857.481185][T16312] RSP: 0018:ffffc90005887428 EFLAGS: 00010246 [ 857.487316][T16312] RAX: 0000000000000000 RBX: ffff88802a555400 RCX: 0000000080001f80 [ 857.496095][T16312] RDX: ffff888029b89200 RSI: ffffffff8c7f5cc0 RDI: ffffffff901f3a40 [ 857.504360][T16312] RBP: 1ffff110050a3e64 R08: 00000000000000c0 R09: 0000000000000000 [ 857.512471][T16312] R10: ffffc90005887520 R11: fffff52000b10eb0 R12: ffff888021680100 [ 857.520529][T16312] R13: ffff88802851f320 R14: 0000000080001f80 R15: ffff888029b89200 [ 857.528604][T16312] FS: 0000000000000000(0000) GS:ffff88812554b000(0063) knlGS:00000000f548db40 [ 857.537590][T16312] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 857.544274][T16312] CR2: 00000000f5386422 CR3: 000000007ae50000 CR4: 00000000003526f0 [ 857.552334][T16312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.560564][T16312] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 857.568608][T16312] Call Trace: [ 857.572598][T16312] [ 857.575589][T16312] ? __init_swait_queue_head+0xa9/0x150 [ 857.581809][T16312] usb_start_wait_urb+0x13f/0x5b0 [ 857.586976][T16312] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 857.592700][T16312] usb_control_msg+0x234/0x3e0 [ 857.597532][T16312] ? __lock_acquire+0x6b5/0x2cf0 [ 857.602586][T16312] gl861_ctrl_msg+0x207/0x420 [ 857.607410][T16312] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 857.612730][T16312] gl861_i2c_master_xfer+0x439/0x6a0 [ 857.618111][T16312] ? rcu_is_watching+0x15/0xb0 [ 857.622944][T16312] __i2c_transfer+0x79a/0x2020 [ 857.627913][T16312] __i2c_smbus_xfer+0xfca/0x1f70 [ 857.632973][T16312] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 857.638193][T16312] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 857.643721][T16312] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 857.649350][T16312] ? rt_mutex_lock_nested+0x170/0x1e0 [ 857.654789][T16312] ? tomoyo_path_number_perm+0x219/0x630 [ 857.660580][T16312] i2c_smbus_xfer+0x1f4/0x310 [ 857.665331][T16312] i2cdev_ioctl_smbus+0x1e7/0x730 [ 857.670498][T16312] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 857.676756][T16312] compat_i2cdev_ioctl+0x29d/0x5c0 [ 857.682458][T16312] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 857.688229][T16312] ? __fget_files+0x3a0/0x420 [ 857.692983][T16312] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 857.698656][T16312] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 857.704171][T16312] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 857.710236][T16312] ? kmem_cache_free+0x187/0x630 [ 857.715242][T16312] ? __se_sys_futex_time32+0x3ab/0x440 [ 857.720902][T16312] ? rcu_is_watching+0x15/0xb0 [ 857.725743][T16312] __do_fast_syscall_32+0x20d/0x680 [ 857.731045][T16312] ? do_fast_syscall_32+0x33/0x70 [ 857.736122][T16312] ? asm_int80_emulation+0x1a/0x20 [ 857.741493][T16312] ? do_int80_emulation+0x286/0x530 [ 857.746748][T16312] ? trace_irq_disable+0x3b/0x150 [ 857.751874][T16312] do_fast_syscall_32+0x33/0x70 [ 857.756821][T16312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.763258][T16312] RIP: 0023:0xf709ef6c [ 857.767373][T16312] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 857.787778][T16312] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 857.796254][T16312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 857.804908][T16312] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 857.813006][T16312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.821483][T16312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 857.829743][T16312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.837828][T16312] [ 857.840912][T16312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 857.848269][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.5.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.859252][T16312] Tainted: [L]=SOFTLOCKUP [ 857.863607][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 857.873692][T16312] Call Trace: [ 857.876996][T16312] [ 857.879998][T16312] vpanic+0x56c/0xa60 [ 857.884104][T16312] ? __pfx__printk+0x10/0x10 [ 857.888726][T16312] ? __pfx_vpanic+0x10/0x10 [ 857.893267][T16312] ? is_bpf_text_address+0x292/0x2b0 [ 857.898582][T16312] ? is_bpf_text_address+0x26/0x2b0 [ 857.903813][T16312] panic+0xc5/0xd0 [ 857.907563][T16312] ? __pfx_panic+0x10/0x10 [ 857.912017][T16312] __warn+0x315/0x4f0 [ 857.916027][T16312] ? usb_submit_urb+0x1053/0x18b0 [ 857.921078][T16312] ? usb_submit_urb+0x1053/0x18b0 [ 857.926140][T16312] __report_bug+0x29a/0x540 [ 857.930798][T16312] ? usb_submit_urb+0x1053/0x18b0 [ 857.935860][T16312] ? __pfx___report_bug+0x10/0x10 [ 857.940926][T16312] ? usb_submit_urb+0x111a/0x18b0 [ 857.946021][T16312] ? usb_submit_urb+0x1115/0x18b0 [ 857.951136][T16312] ? pt_regs_val+0xc/0x70 [ 857.955615][T16312] report_bug_entry+0x19a/0x290 [ 857.960517][T16312] ? usb_submit_urb+0x1115/0x18b0 [ 857.965573][T16312] ? usb_submit_urb+0x111a/0x18b0 [ 857.970634][T16312] handle_bug+0xce/0x200 [ 857.974927][T16312] exc_invalid_op+0x1a/0x50 [ 857.979495][T16312] asm_exc_invalid_op+0x1a/0x20 [ 857.984392][T16312] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 857.990065][T16312] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 858.009728][T16312] RSP: 0018:ffffc90005887428 EFLAGS: 00010246 [ 858.015831][T16312] RAX: 0000000000000000 RBX: ffff88802a555400 RCX: 0000000080001f80 [ 858.023917][T16312] RDX: ffff888029b89200 RSI: ffffffff8c7f5cc0 RDI: ffffffff901f3a40 [ 858.031918][T16312] RBP: 1ffff110050a3e64 R08: 00000000000000c0 R09: 0000000000000000 [ 858.039927][T16312] R10: ffffc90005887520 R11: fffff52000b10eb0 R12: ffff888021680100 [ 858.048100][T16312] R13: ffff88802851f320 R14: 0000000080001f80 R15: ffff888029b89200 [ 858.056115][T16312] ? usb_submit_urb+0x10a4/0x18b0 [ 858.061190][T16312] ? __init_swait_queue_head+0xa9/0x150 [ 858.066812][T16312] usb_start_wait_urb+0x13f/0x5b0 [ 858.071885][T16312] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 858.077489][T16312] usb_control_msg+0x234/0x3e0 [ 858.082295][T16312] ? __lock_acquire+0x6b5/0x2cf0 [ 858.087281][T16312] gl861_ctrl_msg+0x207/0x420 [ 858.092002][T16312] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 858.097249][T16312] gl861_i2c_master_xfer+0x439/0x6a0 [ 858.102569][T16312] ? rcu_is_watching+0x15/0xb0 [ 858.107412][T16312] __i2c_transfer+0x79a/0x2020 [ 858.112220][T16312] __i2c_smbus_xfer+0xfca/0x1f70 [ 858.117191][T16312] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 858.122346][T16312] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 858.127845][T16312] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 858.133262][T16312] ? rt_mutex_lock_nested+0x170/0x1e0 [ 858.138662][T16312] ? tomoyo_path_number_perm+0x219/0x630 [ 858.144351][T16312] i2c_smbus_xfer+0x1f4/0x310 [ 858.149083][T16312] i2cdev_ioctl_smbus+0x1e7/0x730 [ 858.154169][T16312] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 858.159765][T16312] compat_i2cdev_ioctl+0x29d/0x5c0 [ 858.164923][T16312] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 858.170630][T16312] ? __fget_files+0x3a0/0x420 [ 858.175358][T16312] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 858.180948][T16312] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 858.186443][T16312] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 858.192459][T16312] ? kmem_cache_free+0x187/0x630 [ 858.197445][T16312] ? __se_sys_futex_time32+0x3ab/0x440 [ 858.202942][T16312] ? rcu_is_watching+0x15/0xb0 [ 858.207755][T16312] __do_fast_syscall_32+0x20d/0x680 [ 858.212992][T16312] ? do_fast_syscall_32+0x33/0x70 [ 858.218087][T16312] ? asm_int80_emulation+0x1a/0x20 [ 858.223242][T16312] ? do_int80_emulation+0x286/0x530 [ 858.228490][T16312] ? trace_irq_disable+0x3b/0x150 [ 858.233564][T16312] do_fast_syscall_32+0x33/0x70 [ 858.238445][T16312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.244815][T16312] RIP: 0023:0xf709ef6c [ 858.248915][T16312] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 858.268565][T16312] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 858.277014][T16312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 858.285015][T16312] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.293016][T16312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 858.301023][T16312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 858.309034][T16312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.317075][T16312] [ 858.320720][T16312] Kernel Offset: disabled [ 858.325069][T16312] Rebooting in 86400 seconds..