last executing test programs: 1m14.770445512s ago: executing program 4 (id=5): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x753c, 0x0, 0x3}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m14.106067186s ago: executing program 4 (id=8): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_usb_connect(0x3, 0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="120150c588d142545515b805f3680102030109021a00010209500009047804005e77dd01080b4cc1d7efac7c0d8357215ee077aa92c693837d4bfcc2f143921c4606e98c075c304a5375ed9fee942217c9ae7f168ec20657d2c1ffcfe924e3282efa61b9360ea3746be40f95c4fd5223d6ef1b11456ce979a34aca889c3e009c65769b80fd323754a5ce9c6a3784ef634180e5ae8d8351072fce171b66e0afddac3da477997420547684ea5cd5b9d7fa8ba34e8d12a375d8edeb3b38d14b1e4eb82eacc98cf553ad5a83144ffb4e2347aa673d"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000000, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x81, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x8, 0x7fb, 0x4, 0xef, 0xfd, 0x4, 0x3, 0xf86, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x800003, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0x3]}) 1m10.878018922s ago: executing program 4 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x50001000, &(0x7f0000000400)="78e8a5bd7706d88f73f6", 0xa, 0x0, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) r3 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r3) keyctl$assume_authority(0x10, r4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x884) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1m9.030158765s ago: executing program 4 (id=23): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r2, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r4, &(0x7f0000000080)="255b2a20f7", 0x5, 0x800, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072000103fdffffff00000000070000002b07"], 0x18}, 0x1, 0xf00}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 1m8.014205128s ago: executing program 4 (id=29): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @local, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000180)={0xd04}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) getsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x8, 0x78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x40, 0x20, 0x8, 0x6}}) statx(r4, &(0x7f00000006c0)='./file0\x00', 0x7900, 0x8, &(0x7f0000000700)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2493}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000000) write$apparmor_current(r3, &(0x7f0000000100)=@profile={'changeprofile ', '{)}/!+/\\+\'\x00'}, 0x19) r8 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000500)={r8, 0x3, 0x2, r8}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r8}) write$binfmt_misc(r4, &(0x7f0000000640), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 1m7.627743337s ago: executing program 4 (id=30): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') lseek(r0, 0x7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x2, 0x4, 'syz1\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000040)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00"], 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x8, 0x6, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfa, 0x2, 0x0, 0x0, "c6e8b912ce2150c0"}}, 0x34}, 0x2}, 0x20000080) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) recvfrom$inet(r3, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003afe0620e60403000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind(r7, &(0x7f0000000140)=@rc={0x1f, @any, 0x4}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x8, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xd5, 0x10001, 0x6, 0x4, 0x6, 0x3, 0x0, 0x80cc}}}}]}, 0x58}}, 0x0) 1m6.93300728s ago: executing program 32 (id=30): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') lseek(r0, 0x7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x2, 0x4, 'syz1\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000040)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00"], 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x8, 0x6, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfa, 0x2, 0x0, 0x0, "c6e8b912ce2150c0"}}, 0x34}, 0x2}, 0x20000080) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) recvfrom$inet(r3, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003afe0620e60403000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind(r7, &(0x7f0000000140)=@rc={0x1f, @any, 0x4}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x8, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xd5, 0x10001, 0x6, 0x4, 0x6, 0x3, 0x0, 0x80cc}}}}]}, 0x58}}, 0x0) 11.056123118s ago: executing program 1 (id=264): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x50, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef8e, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000640)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x4000, @fd_index=0x2002, 0x6bd9, 0xa9, 0x8, 0x1b, 0x1, {0x2, r12}}) syz_io_uring_submit(r0, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r12}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$SG_IO(r15, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000340)="9374c96e5067", 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_deladdrlabel={0x0, 0x49, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x8037d9d3899c6bcb, 0x0, r17, 0x4}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc040006) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r15, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r17, 0x0, 0x9, 0x21, 0x2, 0x90, @private1, @mcast1, 0x7, 0x8000, 0x1000, 0xffff364b}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8b}}}, 0x3a) 10.960982923s ago: executing program 0 (id=265): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x4800) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x4800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xc, 0x5f1}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) (async) close(r4) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x8, 0x8, 0x7, 0x4c, {{0x37, 0x4, 0x0, 0x8, 0xdc, 0x66, 0x0, 0xf, 0x4, 0x0, @broadcast, @remote, {[@generic={0x16, 0xa, "b135adce27ab8024"}, @cipso={0x86, 0x4f, 0x1, [{0x2, 0xc, "64ca27085fd950e9f4ea"}, {0x6, 0xb, "45624901421959f1b6"}, {0x2, 0x12, "f15ff35ec8478d8d66ea254ab3c25419"}, {0x5, 0x3, "19"}, {0x7, 0x6, "ece5accd"}, {0x0, 0x7, "cb1d6a3f38"}, {0x2, 0xb, "8a8655c4ec4a6da99e"}, {0x1, 0x5, "5cc2d6"}]}, @cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "1e7ae94215383428be"}]}, @generic={0x88, 0xf, "4c37e9f1707165154c585c71b8"}, @lsrr={0x83, 0x23, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @remote, @empty, @loopback, @local, @remote]}, @timestamp={0x44, 0x2c, 0x74, 0x0, 0xa, [0x7, 0x9, 0x7, 0x0, 0x5b0, 0x1, 0xfa4, 0x2, 0x7, 0x7]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtclass={0x18cc, 0x28, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3, 0xfff6}, {0xfff4, 0xb}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8f}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x100}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1ff}]}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x9}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x1858, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x10000, 0x0, 0xa58, 0x0, 0x40, 0x8001, 0x6, 0x0, 0x10, 0x5, 0x9, 0x1, 0x5d4cd5f0, 0x2b0c, 0x10001, 0x3, 0x3, 0x8, 0x30e, 0x2, 0x0, 0x200, 0x5, 0x6, 0x80000000, 0x6, 0x9, 0xffffffff, 0x80000001, 0x1, 0x2, 0xffffffff, 0x10000, 0x6, 0x64040f0a, 0x709e, 0x4, 0x2, 0xfffffffa, 0xfffffff4, 0x5, 0x5, 0x9, 0x8, 0x1000, 0x8, 0x4, 0xc, 0x20000000, 0x6, 0x5, 0x2, 0x9, 0x5, 0x8, 0x1, 0x1, 0x3b, 0x2, 0x8, 0x9, 0x2, 0xfffffff8, 0x2, 0x7, 0x5, 0xffff, 0xaea1, 0x6, 0x4, 0x8, 0x7, 0xb9, 0xa, 0x132, 0x0, 0x4, 0xd6, 0x9, 0x3880, 0xa6b, 0xfffffff9, 0x9, 0x7, 0xf0, 0x2, 0xb, 0xb933, 0x3402, 0x5, 0x5c6, 0xffff7022, 0xb, 0x9, 0xfffffff7, 0x0, 0x9, 0x3ff, 0x1, 0x4, 0x80, 0x2, 0x9, 0x99b, 0x2, 0x200, 0x8676, 0x7ff, 0x2, 0x40, 0x0, 0x8, 0x0, 0x6b, 0x0, 0xf, 0xffffffff, 0x101, 0x6, 0x77f, 0x400000, 0xfffffff7, 0xfffffff7, 0x3, 0x5, 0x99b, 0x3, 0x0, 0x9, 0x3400, 0x9, 0x7ff, 0x10001, 0x2, 0x8, 0xfffffff8, 0x5, 0x157, 0xfd, 0xe, 0x80, 0x7, 0xffffff00, 0x7, 0x2f9, 0x2, 0xfffffb10, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x4, 0x8, 0x40, 0xa, 0x5, 0x3, 0x7, 0x1, 0x8, 0x1, 0x1, 0x8, 0x6, 0xbbbf, 0x9c, 0x7, 0x6, 0xfffff7b9, 0x7ff, 0x49, 0x4, 0x7, 0x200, 0xd600000, 0x599, 0x2, 0x9, 0xfb, 0x4, 0xc4ec, 0x6, 0x6, 0xbdf, 0x5, 0x8, 0x6e5, 0x1, 0x172f, 0x1, 0x4, 0x3, 0xffffff3c, 0x1ff, 0x45b8, 0x5, 0x2, 0x3, 0x5, 0x5, 0x6, 0x8001, 0x7, 0x2, 0x3ff, 0x2, 0x2400, 0x8001, 0x2, 0x3e1a, 0xea5, 0x7, 0x1, 0x2, 0x1, 0x9, 0xfffffffa, 0x37, 0x9, 0x81, 0x6, 0x7, 0xcd, 0x5, 0x6, 0x4, 0x84e6, 0x4, 0xb, 0x8, 0x6, 0x7fff, 0x0, 0x401, 0xe2, 0x10000, 0x458f, 0x3, 0x4, 0x200, 0x1ff, 0x0, 0xfffffff6, 0x320, 0x8, 0x9214, 0x1, 0x8, 0x7, 0x9, 0x2, 0x7, 0xfa]}, @TCA_HTB_RTAB={0x404, 0x4, [0x66, 0x31f6, 0x101, 0x0, 0x2, 0x9, 0xff, 0x7f, 0x7303, 0x4, 0x8, 0x5, 0x4, 0x7, 0x0, 0xe8, 0x2, 0xffffffff, 0x5, 0x1b, 0x0, 0x6, 0x6, 0x7, 0x3, 0xc, 0x7, 0x3, 0x40, 0x0, 0x9, 0x9, 0x1, 0x8, 0x401, 0xf5, 0x800, 0x2, 0x6, 0x3, 0xffff, 0xd, 0x6, 0x0, 0xa, 0x1756, 0x3, 0x7, 0x1, 0x10, 0x1, 0x2, 0x9, 0x1, 0x2, 0x8, 0x0, 0x3, 0x5, 0x4, 0x5, 0x4, 0xfffffffc, 0xfff, 0xffffffff, 0x2000, 0x1, 0x1, 0x7d70000, 0x9, 0x3ff, 0x6, 0x80, 0x0, 0xfff, 0x8, 0x0, 0x4, 0x1ff, 0x6, 0x7, 0x5, 0xa, 0x5, 0x0, 0x10001, 0x5, 0x5, 0x1, 0xffff0001, 0x1cf, 0x6, 0xd, 0x10000, 0x10001, 0xfffffaf0, 0x1, 0x200, 0x6, 0xc9, 0x9, 0x4, 0xfb0, 0x5, 0xb85, 0x4, 0x80000001, 0x4, 0x0, 0xe877, 0x8, 0x8, 0x0, 0xb0, 0x5, 0xf, 0xffffffff, 0x4, 0x7, 0x8, 0x3ff, 0xef, 0xfff, 0x80, 0x1, 0x80000001, 0x7, 0x7, 0x6, 0xfff, 0x101, 0x8, 0x3, 0x80, 0x6, 0x9, 0x8, 0x7c31, 0x7ff, 0x5, 0x80, 0xf2df, 0x6, 0x2, 0x800, 0x2022e653, 0x90000, 0x0, 0x9, 0x3, 0x9, 0x9, 0x2dc5, 0x80000000, 0x1ff, 0xd8b, 0x1, 0x10000, 0x3, 0x2, 0x8, 0xa, 0x6, 0x80000001, 0x7fff, 0x100, 0xe2d, 0x3, 0x40, 0xe, 0x8, 0x101, 0x6, 0x0, 0x2ac, 0x1ff, 0x4, 0xd, 0x0, 0x7f, 0x1ff, 0x4, 0x2, 0x2, 0x3, 0x0, 0x8, 0x1, 0xb, 0x7fffffff, 0x2c9c, 0x3, 0x9, 0x1084, 0xffffffff, 0x8, 0x41, 0xffffff81, 0x3, 0xffff203a, 0xb, 0x80000000, 0x6, 0x5, 0xa, 0xffff9113, 0x1fc00000, 0x9, 0x5, 0x9c0, 0x4cd, 0x5, 0x5, 0x9, 0x0, 0x2, 0x5, 0x1, 0x1, 0x76, 0xffff0001, 0x2, 0x6, 0x9, 0x0, 0x5, 0x0, 0x80000001, 0x7fff, 0x3ff, 0x8, 0x0, 0x41a, 0x9, 0x7fffffff, 0xfffffffb, 0x5, 0xdd, 0x7ff, 0x3, 0x0, 0x1ff, 0x4, 0x5, 0xfff, 0x1, 0x5, 0x7ff, 0x967, 0x9, 0xffffffff, 0x2, 0x1, 0xd, 0x3, 0x6]}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x82, 0x96f, 0x3, 0xbed8, 0x4, 0x8, 0xffffffff, 0x4, 0x8000, 0xb, 0x58d, 0x1, 0x9, 0x0, 0x10000, 0x3, 0x400, 0x8, 0x1, 0x2, 0x40, 0xf, 0x7, 0x7f, 0x8, 0xa7, 0x87b, 0x7ff, 0x12, 0x4, 0x8, 0xa4, 0xffffffff, 0x9, 0x2dac, 0x0, 0x9, 0x5, 0xe, 0x9, 0x9, 0x9, 0x20000000, 0x3, 0x4, 0x557, 0xb, 0x4, 0x6, 0x440, 0x3, 0x5a, 0x2, 0x25d, 0x3, 0xb8c, 0x9, 0x10001, 0x8, 0x200, 0x3ff, 0xfe6, 0x0, 0x3, 0x1, 0x200000, 0x6, 0x5, 0x7, 0x400, 0x10001, 0x5, 0x8, 0x1, 0x200, 0x8, 0x2, 0x80, 0xa7e, 0x7a03, 0x0, 0x3, 0x4, 0x1, 0xffffff7c, 0x0, 0x4, 0x8a5, 0x80, 0x9, 0x7, 0xa6ba, 0x0, 0x4, 0xb, 0x6, 0xec, 0x8, 0xffffffff, 0x4, 0x3, 0x0, 0xe86, 0xeb, 0x9, 0x6, 0x2, 0x2, 0x9, 0x38000, 0x1c82, 0x7, 0x1ff, 0x8, 0x1, 0x2f4f0b4e, 0x91, 0xfffffff7, 0x8, 0x0, 0x2, 0xffffffc0, 0x401, 0x5, 0x5a, 0x800, 0x7a5, 0x0, 0xb, 0x8, 0x7, 0x5, 0xdd63, 0xa, 0x1d5a6f98, 0x7, 0x3ff80, 0x9, 0x996, 0x7fffffff, 0x800, 0x6, 0x2, 0x8, 0x7, 0x0, 0x8, 0x0, 0x401, 0x1, 0x3a, 0x9, 0x6, 0x2, 0x80000000, 0x2, 0xfffffffc, 0x4, 0xf, 0x74, 0xe97a441c, 0x2, 0x8, 0x5, 0x2, 0x2, 0x0, 0x1, 0x2, 0x0, 0x3, 0x9, 0x40, 0x4, 0x80000001, 0x3, 0x40, 0x4, 0x5, 0x2, 0x7ff, 0x8, 0x9, 0x6, 0x0, 0x6, 0x9, 0xda9, 0xad, 0xd108, 0x6, 0x5, 0x7, 0xfffffff7, 0x1, 0x3, 0x1, 0xa, 0x80000001, 0x5, 0x1, 0x3ff0, 0x7, 0x1000, 0x78bb, 0x2, 0x960, 0xe, 0xc, 0x2, 0x3, 0x2, 0x35, 0xaf60, 0x3, 0x1000000, 0x0, 0x3, 0xb0f, 0x40, 0x101, 0x2, 0x26, 0x6, 0x2, 0x2, 0x6, 0x3, 0x7, 0x10001, 0x9, 0x3, 0x9d, 0x1, 0x10000, 0x4, 0x6, 0x0, 0x7, 0x6, 0x0, 0x80000001, 0x8, 0x10, 0xbab6d2a, 0x2, 0x10001, 0x7, 0x101, 0x0, 0x4, 0x2, 0x4, 0x9, 0x401]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x800, 0x0, 0x0, 0x1}, {0x59, 0x2, 0x4, 0x2ff, 0x1, 0x80}, 0x0, 0x5, 0x29f0a20, 0x5, 0x2}}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xfffffffb, 0x25f, 0xfffffff7, 0x1, 0x2, 0x6, 0x40, 0x171, 0x3, 0x7fffffff, 0x2f90872f, 0x0, 0x0, 0x8, 0x4, 0x9, 0x8001, 0x6, 0x1, 0x4, 0x2, 0x10000, 0x8, 0x200, 0xc3ef, 0x7fff, 0x81, 0x2, 0x3c, 0xcc700, 0x9, 0x8, 0x7, 0x8, 0x9, 0x9, 0x3, 0x5a, 0x39f, 0x2, 0xfa3, 0x3ff, 0x0, 0x5, 0xfffffff8, 0xc00, 0x4e4, 0x101, 0x1d, 0x7fff, 0x5, 0xb4, 0x20000, 0x8, 0x0, 0x5, 0x7, 0x4, 0xbbf4, 0x3, 0x8, 0x1000, 0x6, 0x9, 0x8001, 0x1, 0x9, 0x2, 0x2c, 0x3d, 0x1, 0x9, 0x2, 0xff, 0x1, 0x6, 0x400, 0xe, 0xbe41, 0xe5, 0xd63, 0x0, 0x0, 0x9, 0x7f, 0x5, 0x6, 0x2, 0x810, 0x5, 0x587, 0x8, 0x7, 0x2, 0x6, 0x4, 0x62f8, 0x8, 0x8, 0x6, 0x33e, 0x13d, 0x2, 0xcca3, 0xee42, 0x4, 0xb85, 0x5, 0x7, 0x100000, 0x4, 0x200, 0x4, 0x1, 0x5, 0x1, 0x3, 0x4e7, 0x7f, 0x6, 0x4, 0x5, 0xfffffffe, 0x8, 0x0, 0xe0, 0xe, 0x3ff, 0x400, 0x8, 0x0, 0x5, 0x6, 0x4, 0x3, 0x3, 0x10001, 0x0, 0x8, 0x40, 0x5, 0x8, 0x7, 0x5, 0x36, 0x4, 0x5, 0x2, 0x6, 0x9, 0x6, 0xff, 0x0, 0x3ff, 0x8, 0x6, 0x8, 0x0, 0x8c0, 0x6, 0x83, 0x3, 0x400, 0x5, 0x7ff, 0x9, 0xc, 0x2, 0x0, 0x7, 0x200, 0x5, 0x7ff, 0x0, 0x40, 0x4, 0x1, 0x1ff, 0x12000, 0x7, 0x9, 0x3, 0x80000000, 0x2, 0x51b, 0x9, 0x7fffffff, 0x3, 0x2, 0xc25, 0x7, 0x5, 0x8, 0x26, 0x1, 0x4, 0xb, 0xb, 0x10, 0x8001, 0x30f3000, 0x401, 0x3, 0x6, 0x80000001, 0x400, 0x6, 0x8, 0x73af, 0xb7, 0x7, 0x5, 0x7, 0x101, 0x400, 0x5, 0x8, 0x2, 0x6, 0x1511, 0x81, 0x9, 0x37f300, 0x1, 0xfffffffa, 0x11c0000, 0x679590e6, 0x2, 0x700d, 0x2, 0xfffffff9, 0x2, 0x80000001, 0x1, 0xc4, 0xfffffff8, 0x8, 0x5, 0x9, 0x2, 0xfffffff7, 0x3eb92aca, 0x9d49, 0x9, 0x8000, 0x1, 0x6, 0x0, 0xfffffffa, 0x7, 0xfffffff8, 0x2, 0x7, 0x0, 0x10000]}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x80000001, 0x0, 0x0, 0x5, 0x8, 0x304, 0x3, 0x3, 0x2, 0x3, 0x431, 0x2402, 0x9, 0xb, 0x4, 0x3, 0x2, 0x81, 0x7, 0x1, 0x70, 0x800, 0x18, 0x5, 0xfffffffc, 0x5, 0x3, 0xffffffff, 0x0, 0x1000, 0x6, 0x5, 0x9, 0x48f, 0x2, 0x0, 0x7, 0x55cf, 0x1, 0xf42, 0x2, 0x1000, 0xf, 0x2, 0x9, 0x5, 0x3, 0x1, 0x3, 0x2, 0xfffffff8, 0x7b69, 0x3, 0x0, 0x9, 0xfffffffc, 0xd14, 0x5, 0x6, 0x7ff, 0xe, 0x7, 0x9, 0x8, 0x1, 0x3, 0x4, 0x10000, 0x5, 0x9, 0xffffffff, 0x240, 0x4, 0xef00, 0xffffffff, 0x5, 0xa, 0x1, 0x6, 0xed3, 0x4, 0x6, 0x3, 0x7, 0x7f, 0x6, 0xfffffffa, 0x9, 0x4, 0x8, 0xfb, 0x9, 0xe4a, 0x9, 0x3, 0x8, 0x1, 0xc6, 0x2, 0x1, 0x9, 0x97e2, 0x5, 0xc49, 0xffffffff, 0x3, 0x8001, 0x15, 0x2, 0x5, 0x9, 0x58f, 0x1, 0x1, 0x7, 0x3, 0xa078, 0x5, 0x800, 0x2, 0xd79, 0x1, 0x9, 0x8, 0x7, 0x8, 0x8, 0x5, 0x8001, 0xaf0, 0x6, 0x7, 0x1000, 0x9, 0x21, 0x0, 0x180000, 0xb6, 0x3, 0x4, 0x2, 0xb6, 0x7, 0x1000, 0x5, 0xffffffff, 0x70f, 0xfb, 0xd01d, 0x923, 0x5, 0x7, 0xa4, 0x2, 0x6800, 0x5, 0x9, 0x6, 0x1, 0x7e, 0xb, 0x100, 0x0, 0x800, 0x9, 0xfffffff2, 0x30a, 0x2, 0x5, 0x2, 0x0, 0xd43, 0x3, 0xa, 0x9, 0x401, 0x8000, 0x9, 0x3, 0x1000, 0x7, 0x6, 0x6, 0x7, 0x51, 0x0, 0xf, 0x4, 0x5, 0x60000000, 0x0, 0x1, 0xffffffff, 0x0, 0x7, 0x24000000, 0xfff, 0x3e0cc8de, 0x1ff, 0x4, 0x3, 0x7, 0x7fff, 0x3, 0x0, 0x4, 0x93, 0xfff, 0x4, 0x6, 0x1, 0x4a8e89c9, 0x8001, 0x5, 0x4, 0x9, 0x8, 0x10, 0x200, 0x3, 0x1, 0x4, 0x4, 0x1, 0x1, 0xd8a, 0xf, 0x1, 0x8, 0xe, 0xf269, 0x2, 0x10000, 0x8, 0xffffffff, 0x8, 0xfffffff9, 0x3, 0x2, 0x6, 0xc0d, 0x6, 0x0, 0x2, 0x3, 0x2, 0x7f, 0xf2, 0x1, 0x20d1, 0xb4, 0x1, 0x7fff, 0xfffffffc, 0x9]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_RTAB={0x404, 0x4, [0x4, 0x2, 0x0, 0x285, 0x5, 0x1a, 0x9, 0x0, 0x1, 0x7, 0xfffffffd, 0xf5, 0x1b4f0512, 0x6, 0x7, 0x7873, 0x1, 0xffffffc0, 0x10001, 0xa2f5, 0x7, 0x6, 0x8, 0x3ff, 0x2, 0x1ff, 0x81, 0x1, 0x9, 0x7, 0x9, 0xffff8001, 0x4, 0xa3f, 0x5, 0x8, 0x9, 0x80000001, 0x88e, 0x8, 0x6, 0x8, 0x2, 0x4, 0x3ff, 0xb9, 0x9, 0x1, 0xdd4, 0x4, 0x0, 0x4, 0xd, 0xb, 0x5a0, 0x6, 0xffffffff, 0x7a, 0x4, 0xfffffffe, 0x6, 0xffff, 0xe, 0x9, 0xff, 0x2, 0xffff, 0x6, 0x7, 0x9, 0x6500, 0x3, 0x40, 0xe2, 0x10001, 0x81, 0x4, 0x1, 0xa, 0x33e, 0x9, 0x0, 0x9, 0x1, 0x6, 0x1, 0x9, 0x4, 0x0, 0x0, 0x3, 0x4, 0xffffffd0, 0x10, 0xe, 0x2, 0xff, 0x5c, 0x6, 0x2, 0x0, 0x0, 0x7, 0x2, 0x1, 0x2, 0x0, 0x5, 0x2, 0xffff8000, 0x401, 0x2, 0x2, 0x7, 0x80000000, 0x7ff, 0x0, 0x9, 0x8000, 0x4, 0x176d, 0x8, 0x9, 0x8, 0x4, 0x0, 0x400, 0x9d, 0x9, 0x6, 0x81, 0x2120, 0x5, 0x8000, 0x7, 0xffffffff, 0x3, 0x4, 0x30, 0x2, 0x2, 0x4, 0x5, 0x6, 0x5, 0x1, 0x0, 0x80000000, 0x5, 0x8, 0x4, 0x7, 0x7, 0x101, 0x10, 0x9, 0x101, 0x1000, 0x0, 0x1, 0x4, 0xffffffff, 0x1000, 0xd, 0xffffffff, 0x5, 0x6, 0xe2, 0x9, 0xffffffff, 0x7, 0xc0000000, 0x3, 0x10001, 0x3, 0xffffff80, 0xef72, 0xb, 0xfffffffd, 0xf9f, 0x1c0, 0x8, 0x7b6, 0x3, 0x2, 0x2, 0x800, 0x4, 0x1ff, 0x2, 0xde9, 0x8fc5, 0x8001, 0x2, 0x6, 0x1000, 0xb, 0x7, 0x0, 0x10000, 0x9, 0x5, 0xd, 0x0, 0x7, 0x4, 0x100010, 0x1fd, 0x400, 0x8, 0x200, 0x2, 0x6, 0x3, 0x2, 0x3, 0x1, 0x1, 0x7fff, 0xc3d, 0x401, 0x0, 0x8, 0x6, 0xffffffff, 0x2, 0x9, 0x2, 0x1, 0x7, 0x7f, 0x6, 0x41, 0x0, 0x1ff, 0x3, 0xcce2, 0x80000000, 0xb5, 0x9, 0x4, 0x1, 0xa1ea, 0x4, 0x8001, 0x800, 0x2, 0xe, 0x4, 0x5, 0x5, 0x2, 0xfffffff8, 0xfffffffc, 0x9, 0x1]}]}}]}, 0x18cc}}, 0x40004) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4081, 0xff1}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000002c0)=""/181, 0xb5}], 0x4}, 0x3}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xd, 0x40, 0x6, 0x8}]}) r9 = getpgid(0x0) sched_setscheduler(r9, 0x1, &(0x7f0000000180)=0x6) (async) sched_setscheduler(r9, 0x1, &(0x7f0000000180)=0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x7, 0x80, 0x0, 0x3}, {0x40, 0x3, 0x7}, {0x4, 0x1, 0x2, 0x6}, {0x1000, 0x5, 0x7, 0xfffff867}, {0x0, 0x6, 0x2, 0xff}]}, 0x8) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x7, 0x80, 0x0, 0x3}, {0x40, 0x3, 0x7}, {0x4, 0x1, 0x2, 0x6}, {0x1000, 0x5, 0x7, 0xfffff867}, {0x0, 0x6, 0x2, 0xff}]}, 0x8) 10.174946217s ago: executing program 1 (id=268): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendfile(r0, r2, 0x0, 0x20000023894) close(r0) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) 9.383520751s ago: executing program 5 (id=270): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r4 = gettid() tkill(r4, 0x7) socket$kcm(0x29, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x12, r7, 0xd8, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) syz_clone3(&(0x7f00000006c0)={0x10020400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x12}, &(0x7f00000005c0)=""/131, 0x83, &(0x7f0000000540)=""/14, &(0x7f0000000680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f00000007c0)={0x80, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000001c0), {0x40}, &(0x7f0000000200)=""/14, 0xe, &(0x7f0000000240)=""/188, &(0x7f0000000740)=[r3, r4, r5, r6, 0xffffffffffffffff, r7, r8, r9], 0x8, {r10}}, 0x58) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1, 0x9, 0x800ed0, 0x1, 0x17, 0x2865, 0x9, 0xe7, 0x56bf, 0x5, 0x3, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.052371258s ago: executing program 0 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003", @ANYBLOB="801cfc1936"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={0x14c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff9}, @WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4dfbb0d216891c5ec9f34b0613648e7761c1eccd4b484a760116c7ca3bb3edbe"}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a500000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) r9 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000780)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r6, 0x22d2, 0x20, 0x0, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) recvmmsg(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x89bc}], 0x2, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ef000/0x3000)=nil, 0x3000, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x10008) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a67}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x118}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48051}, 0x20008040) 7.791742256s ago: executing program 1 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0xb516, 0xc2de, 0x8, 0x0, 0x0) r5 = mq_open(&(0x7f0000000680)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+\xbb \xcb\be\xf4\x87\xedl\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\xb0\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x9avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3M\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc1m\x17\b\xe4\xb1b\x13\xc74Z#E\x91\xbe\x93\x0f\xaf\xa7\xf9\"\x02\xb2\x12\xc5A\x1e\xe2\xe1\x13\xfey8\xe1\xa8Zu\xf1\x0f\x1dC)T)Z\xec\x1d_)?\xbab\xda\xec\x81\xf7\x97\x1f\xc5\xa1T\xb9\x9e\xa3\xe1\x901[\xfa_Y\xa2\x1f\x1c\x7f\xf0\x0eW(\xdf\xc2\xc0p\xb2\xe4\xe4\xcd\'\x03\xaf\x8d\x1c_\xde\xa6\x9cV\x98\x06\x1e4R\xa0\xc9\xcfC\xf8\xaf\x14P\x15]\xa9#/w\x0elPo\x9c\x8c$\xb2t\b\x9atA1\xa6y\xd0\x19\x9e\x96\xaa\xb5\t\xe6cR~?\xb4T\xc0\xa1\xb2\x8a\xef\xc2|\x18p\x1f\xb7\xf5\xb5\x11{h\x8e\xab\b\x8e)\xc1\x12N\xea\x1a\x9e\xcf\x1f\xe5\xac\x9d\xb0?\xe1*D\xe3\a\x9b\x1el\xa6\xf2.VA\xc5\xef\x8a\xf2R\xd0\x9cu\xdat.U\x8c\xc1m\x14S\x8c%ll\x01\x82\xcc\x88a,n\xf9\xd0F\\', 0x42, 0xa8, 0x0) r6 = epoll_create(0x5) mq_notify(r5, &(0x7f0000000400)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x10}) r7 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, 0x0, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{}], 0xa, "4ace"}, 0xe) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x6, @empty, 0xff}, 0x1c) fcntl$dupfd(r10, 0x406, r10) socket$nl_netfilter(0x10, 0x3, 0xc) 7.210803824s ago: executing program 0 (id=278): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000008c0)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000b80)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x2, 0x5, 0x8, 0x1, {0xffff58ae, 0xb, 0x8, 0x7, 0xf4f9, 0x5, 0x8000, 0xa03b, 0x4954, 0x7, 0x4, 0x0, 0x80000001, 0x9db, "3b524a30f295b4a65d987ad6edf609e070ab033a7aad7f9540d4e3b591ef22f9"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x5, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x82, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x4, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0003}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xc7, 0x41, 0x40, 0x41e, 0x4053, 0xe656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x71, 0xc1}}]}}]}}, 0x0) 7.027779243s ago: executing program 2 (id=280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xb, "4fdb"}, @global=@item_012={0x2, 0x1, 0xa, "0200"}]}}, 0x0}, 0x0) (rerun: 32) 6.730062027s ago: executing program 5 (id=281): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="b0", 0x1}], 0x1, 0x7ffffffe, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x6fb5, 0x20480080000005, 0x9, 0xfc, 0x400000000000006, 0x2, 0x1041, 0x80b, 0x0, 0x32a, 0xffffffffffffffff, 0x8000000fffffffa, 0x4, 0x10000, 0x4000000000800005, 0x6a], 0xdddd1000, 0x41012}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x58, 0x1c, 0x29, 0x8, 0xb57, 0x8528, 0x6d39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x0, 0xb, [{{0x9, 0x4, 0xc8, 0x2, 0x1, 0x3, 0x1, 0x2, 0x3, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x0, 0x8}}]}}]}}]}}, 0x0) 5.682492381s ago: executing program 5 (id=282): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$vhost_msg_v2(r2, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x874fd42a7836ef68, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x250}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r7}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40, 0x0, 0x0, {}, {}, {}, {0x3ff}}}}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) syz_fuse_handle_req(r0, &(0x7f0000010240)="82e45d8ce3e0c0eabeadc1cd11ffbf3033f6bcf7a1756d3615fd6fdb19d6861ff3ac6046c41ca61c40b20366a70cca9986b426c0b160f88b546467f5169b5e57d1ad2b8fb72489ec67597e26dfa3cecdf4217a1a4226329725bea664f0f09f24cc0248d2a3a7076bf554afd4ebe433d8ab59a07641f0beaa409c2a92f4e6d3a5da1b40045976a5f7e1539c2df0dc9eae532d8b9cc050ef0ff108738010bcb91a7c5beed30a1d21435c305f80f1c21395262e65d7552027ff0778bda4707e0a08f4e4feaa556620b7c36c746535c97d1ee7809aca36094d492e3af6f173eb721929b50a14d26785199801a7e7358f678e3e13a5079515d255f9920596b39e8da78cfad73421bd7ac794dd691e8673c86b68d4b2e1a6cda03ec0dd4bead152edbd9448be2afa5cc7f7f60d1c5177f55457daddd86cfd999b3d62eb7355507f5b5e0ebf17d4e32132c17bd9ccb5c9b7b24b695b81ca1535f03f93e3352e16701dcc7b957ceeb0da0fb336fb5b537a80b02710d12431e57a60109a2a1cba9068f58d190f8eaae0849a5b2e2a1d03a4d40edacee7d4a17de1fbfc0354d3ef1fdb01e03b31c06a0d4221a66316a6de7f26ba0286074ff43bacfa697b4cbcff1a0ab77cd8f9a2610b60a1d9bb58b7c6696662a5f6b9eb035b907693e4139d84781b7d2327a371bbab8b3a3a7b0d62871ec03818686fca0cbb477018c26d0d275cdc77e362acf13233c263e455b4442d35e14fde38b027b2e131f6a3fc5156e5d9177ed68a7ecefdf8ca8a74539f94061ba4738fa7b2826c31a41c9ce5d66a1e2f076e85af23e14fb99174ed546fcc97b40b77819d1524d16110030520ff51530329d8342fc7e764abd520aeec55b0472ed6a151c2388c1d631d1025b1a5d7752a009fa3d47017e84d8b96a0c39d90c4c75b017b413fcf400ad810efbf951f349f032cdf87f9778bc606cd6255827ab393eea8f601b64b03903fda47650a7b97cf1f4a8605ced9f39b4218efbd2a20a8e34de363d5786fe351c90ae175e5ebabac3d0c3cc136bd4479018758e781418e6117cad151b33f320c9a9a2b43ee8d7243d7dab4745643d52adc8acd4922eeffea6f729e12c88347535bc16b5c1259b5ac3fea44c3365a7d1901e9ba1070b78baf57366657244805064613b9ae499007f18ebd9d45b1c655d4b6beb49d8cbda0ae9696ad98552a76658be76e805905803642b3047c7449458fdbd898e28a1ed8c6cb954009e1a88e314b14e08c3740829a1b9435998162877a2b140732cdf64f6a7f577a81acdd1582e8c9f98c37f2e04323b9103b5914b3623c9a8bc88c4ae9eb514e963b09c48cc1b64561458bb19123b1ba248c7da4fbde9ff31043c05ef5187f465b5829ffbf6dfc52b219dae5b010d8dbfc7264225068ec25380c93e98f80bb17da2495d73a2575fe8aacbb70616a63f70502121e4c742d41fe42e9cc0c99fdda60bcc44b7e822446061905210809a1eb4a97b4298fa7f5347dc413d9c21c0ee5e0fdae39b60d8f95cecdaef530a72c7b5e09c8e0f49040818fc610d0aec729a7250c0fbe829c44cf8122abb3197c267af8598a885e39c86f3c22c5873b618521ebb5a4272a76857fd4e9396ff8ef45a11fbfd7dfa158bcbf687f203d5c260dab3be71cee932b96c7f9dd9dec2657d904079d62fb96a6f7d61d6859cea7ecbba457255f2a75c36542ba8a19df4d12c4867e5d226d7062e16532b7f6d2df67c5027d5c199b0818efc5a4b61b3589f5b8231acb6f124d4a049d164fa99ead0b12541d3c41a42d2978dbe5cd2cc78992ac9a9fd49b219d41f3d7530d266e03501359f9bc4d16ae8b4e75a609bd819b2be384df2e95b7e6c09a13033139ad0556ed04c1c207987a59b2d7aa62afbf86ff284ba616baf3b3b794e87d4f0e3d564771fdcc1248faec8f2b6cc47d53831486a2de1c7c50e5e85f271118a310aa9e89efc48cc1ddd1dcb9fa33cc4f7b7b337b4ccae4221021402c603f9045a0c51e4f25abf94408dde6e76c756eb110282feae4aaf0edae71c34ae94b65869b3d9abced869c5dc7d961228e6556776eda04ea9fbf21cc6ea4b9519bfe2545a9f1a618a705906006b19fbb76c2f169f7796cfbfbfb9bffbea016332df6f871ad6aa0084d32a4c6a985943614fd294d428ae1d0c522907650f40669c303a3721715b3dae142d6a89928e25487541ddfbeb792b40b37e5766149f44e7f5fb86768b3991b723edc082e5424e3134d2cdd16eabede31e97625e55700677eeae33d4c3e3f4117036f3ceef51928b51f9438bf70a7b93e7700df30946f1ad02aaeae4a601c1260029ae0c7ce670ca52d2a1dc519b43f75395c41ea6d78d1ee78f7df283e9741612cc7935cc62ed0c22e0d3e3bd06c4bca84b4c124fc6d2768fb3b7f82bff059920ab700ab300e07196b6d103ab5bac136e6e026e526122991ca881cffa93b8a0b8b74c6f3991b3fd170e75eb4a1e1ecbac7c4673fa7095b7bde4112a7539f7aa736e3b7ee52cbadfa27d4955ed3c17a0c55cf06c23f2c8b0c3266831cea779c751c47efa0c6b76cac7e8ebc51652877615fa0f816098ac4bab90b13b19e1f58b68894fe126962e3132315d39cf1a8513e8c0a4c1b7c9f29802a9cd67cc4f6d1334e26b7ca1280794264b81005d5d1ecdcb7d80b5d8c370c00092cbba7c3c0ba1238334df5df20bd9077346c2fe68b00963f313098ae8f0220a85e64cbcb6fa14336fc64d965c62aa899dba79faf3ec08c08438286107ec3b8407e1c7b9218de489796fdbc118c99942d798e0396459238ae8607e6948f3519320e7dbbd83ea986c3a7bef7c1e00d5d5e1a049732258754f0ae84e734c67b7f61b68823d3f00797b30bcc45268f76d0e990523ad63e842598239129b19db5f860ad6fd2f98faf00a8b297e02361baf163aad45d21d4175c97e9b6945a17526ad1c337aef87dd07df1bfa6aab5c50086ac22038c1e9a1a535288529e289c8fd90b95c23e3df9f683e253b3d2afb2b426a978df615d94bbf3c3c477acd07c447ce6d6d026b8b0b22fb26071333fe1be611de8eb723977cbf2f8ae9497e92d9f1c48de9c1fc802fe3e73486085bd91a34f4c86754e8aaaa08bb95be2bbd9cc45158cd727e5def055c3fc4431789f3934e34d793d8c234b56554876c7912b2c5dc442dbc4ee20a8a595d28f4ed64da034624450d4966f17b3e3e204922b6f93ce86543d42422f7487b41c830a4b160488aa8c9ff158901ebb8b4c7530c9b34df8710b6812112a2fd18edd99cfc137b9b7206570e8258dbac695e1cf98bdf34df3857a7fa97e99acdfa2d15ddc50b09ae8c3523078d88fe438974159ff4eb41040dfc8bec9572c994251360977a56ad597b7ada1f395ffb7054b53e916f3ff3bbee68d2d94c9d8fa0ad83bb3653d633d28c20ba327354f301111cfab767bbd039b776d319a8a91922e5486f6c1fef9cd41c2311c7b8dc819408a48c063dc25e611ceec230239455bddefb17125f43b520fa9cd9ddcfdb7cacc0d9b08a2beafac393d100820014cdd5e8f89966ca6b2e9bcd4f8af0aaa7a203fe5c70327fc6650c1ddc1a81ba006115be9e046ddf7f19a3b6861fcddf180ef018ff79e0a1ac9dabdc928a81b83716e665222493142564ce125ea9a6ca956bd677f14e47f63506dd2e92fe32bc0633640893d9fc65a9e01aa519f7e17dba32000cf50554410162b194a79da534bc9977ceba20e9e25dd2ae02a6f1af9a095b0beda75c73329421fcdf7651d74ec24aeb8aefeeac93a54b92d2290618ab59def57a1c1f247c054b6a8fa86425120b31fae02d175552b40be8a489a70bdb924ace580ddd894e99b89a74d58f45ab987be9d23defc92138ed90dbb46cb8460ce004ea1b3291df6707fcff57f9ec395ad69f97f6d0d3ce19f6d0d5726fb7b5a7818cf563d1e2d56d4510605b394cfd2ad785eb22e2788e48e0a9f0e6336f7a64aa69c1545c202b7c437afc73f88e2bbe2d6b3fed42816a954fdbd0a4266353ecfc8c3afc9e9db5d6eb3102400af898c52fc533a0f62bbcd0484cf1639047a9bd8171a238dcfca36ed6c87ff8fe2c1464f2bd51d535ba15b159fd6a5ea6a33e3698422c861d3d85173d59bec93822b24d0673e9b7344896be2fa4033684d4201a6eb44997d96a8bc87483fa7a239df23617d9228fe9e42f75a3d79fa2afe1be104ebb6f05bd0c4093c819d520664c7ea5266fd1b8a547efebf324055ee4b895a708c0af00cf5ef914f4dc09ae8da955d5ad8d98a54196681339942da98a7d412c6be7bc92ae388f9e53be57a88c1860deca76c554dff1c2723151438212e2297eced03a7739204adcba0d88b3165703c0127964e866bb63d0ad3e07d651b869986afe34f0676e7c5568d3bce136367821c2d574c46358f8d472b8809d40a5a04ac91e21a3e375f221dc56190bf55a480ac3301fb696bc7bcd028d4e8fb6cd4413551bbccbb5d756a36d268fe4e05eda452d0d7441292152f9d55fa8686ff2c82e138e75280f3a8d9d8b4e47016940da638e775823843f146be3299de26b9158344624de27d43af59237387f3d47e49e47881d759fffaf5a1331dab0c6cff045d9a114173e3bd7dc11e8d2aa6726338ae08293b09dbd62f444b7d7051fb7290334db17a9b7c9cd9bb38db94c81deac7883274c14c3f7f0fc9b86f837feb467baabad2274a2ee1e8b7b1ca626c2c7ce8a9568911e2a305a69287d85b1f57b6c63e3d50c84a77a46127bddac85f1c28b13303802e515c4258863363e562ca8fbde09aeb84946a748b63df4d303b9da4dd077c0b441042c61bee2dbcd3c5c7b7fcee27494847bd6c238bf37ff01371dd28b618e84f8ff5d206c968f3ddab658444bc6c157fa02eedf084e2ae7afb35108b7e7e3473f6b53cc0ac5ea7cb1e74912fe5be530a03520279deb3453129c0e70065ae197fa03d1e9fc5f8fa19715d0862b2689b49382cd74b6976cf093e8f9724d5c4d9acb5b76c285fbb5fc093f3b564df994dc2b89f8493b78c8b25128bdb96f2b0dfda7839bf9434f9b2d6bec738cccc74e8641d1d03894b4a55c18ae3b330cd11b8eeb29eace0a8eaf21f51b8b5d6583661791dd79397f6e0477244f9ed14201717db1d63de2695c1ffb46107f03b77f27e495834e53c3ec118de6d24509caa870741d294879baf78f386526ac03cc9f580b2b7a34674e78e0548042a37f4fd16bd98cfb274a92d5ed4fd552ff776ae65fc375606dc985d57a4c2f10ecc0660eac362c5d6bd7b37af6bb74e068f143710604fb12d155edd71c0388a741911dc19c04e746e19bf4a07882e2c96952835b66ae53bfdb389d59861f868774bacb48240e05bcb4107e9be7155903dbb19050eac2c2da8604601149fcfd728005c9dc60ed0fafc90ca51e926694bcca05fda55fdc257bce918b8a780a5ab3d101d454d4b42631712a4bd68f5622e8ae811cbde522bd16f1c6eff35159892b4f063df81726a54f307d7e37350996eb68a2061d291b258b93d9a5f7155c8d24bcf786decb3cb88d843aef4ae4598cab49ffa567cae516fb37c3f4c79db60b2ce536a9252066256bd49d8fcbfea24a0bbf076314edf071074139c67072733197ee02a792e944d94985f62cbc13c078c80ccaca14b6f58cd3a62215a85dfa755f2e39791435471917849038b9a458500427008392662070be091a4b2caf79c9f09be4b411e06f9db0d037df2c9750c5eedbb0819ca02e10e49bcc5e997386c8ba0c839983a81a2e169680ca4a9e0bd446858e61af0d01122fd766f7e961a502a32cd060ef4d59d00765bae11b2c1f203b39fc386e097846e3b627b1b8c7233f1c6aebed6a48b07e33e987c295ef6a98b4719d0fd2d442a0ad887be646e9863244a4d7cd140ac0aec174e71931147148f0a179bed5651d1e88b628ff84a70d07c7de46d0b0e6b61f01c9425293e982d1968a5aba1f4cc233ae9553fb944322e1e8dcf118d4929fc6bee9ba85d67bc883b09ba581df878ed8279d49d24e49faa2bdc1c7634a98c41ec54d5119a4e0b3212152ead8c11f50c14d7ed309191e24ab037366d1ef6be32b97f8abf0387c74dcc96806db13d565c00b7a661d5968b671a2af41bf3dc2cc8b7ccc4f475554f87721bb40049f98933d0f7c8467e65e26b325d7a3400da3e45803bbdc07607c447e6bf5b02bd78da109ab400304772ab2a6a4e5f5345c6c1f34fb0424b3a8de20271ade0b4cc82d0b8af43859991c92dced18ca3b6960cfd3e269ba3d8a88bd8e330c5a927d2cf0304c6d630061914b7f251a0285ce93898b5e8fb301ff7eeac9e5a658eb04c5e393dd00c8a935b3fd62ae20acc842d135f211741c139b30adda0e5a9ae31e41ffb81b6a888fa1ab32f8ed30a822844d1c400c5c628c94c6a7d6a5ecbd773f3e3fbfcf56993228a75afbe016580c10092744cca5eb0e9f07cb68305a1ae67bcfdfecea7cd1cf1c72abae0cbadc1fa9c458bebf45f1a7222129e17e7e7d795676234f90219ed1f7955fca47a56b246439e6b1bab1afa54e0c3eae2ada265b35b62e2492512e0708a6da46451a40b9c21c372b51e9e31f2f9bc7e09172556781d48a7d03c0b762ce372f96da33ae778ee4d25b22218502a42718772372973bea6671e1f3c9d0a226fc2db0316fdcbb71ba76d037b218541b8db06baa5f163ae3d80bc07f04b774bab6a219e6409236555d8651d7b6989b4f251e86272fbdacab1713d69f99eff25a74c6d02ea322680719129e898041a1c0c61c8bf99eaa56f7e95a2ad8c28552113bc3af9e74339e2825e44eb198a8ebd6023a3c826a61121b6ccb6ae351f9e692d22aad511d5b33bb1e5fa69bd4276795884b2f6ea8505def314320d65c9fd3f57c2bcc9f3035d0b3ff4a4214dd82b876e85870ebaa8033e5839aa80f2984b8ce5c30d9b1ae31084a919959bc9afd2e4f751bb70fad212bcda781f726cc4ff0789842399340b4149554a105e9c01ffeb8133f96c89583a30727880f5aaea5ece8f24dcb9cfb15e7399e4ac9f5bf95d8129340ac1c371008830f5b708b77b51ccb3630571090545a974fe740cb83396b1d88d6c934c45bdefe72690156001031a7e2020b9ee15b271d6afb064059d77a7b080309ec7945af84f7496efbec90a3330c4531960c1478fa8174a8aa9bc474d0fc05a955f76f38641bb9b14f8a41eeafc374e85d2f32b3e3415edcdf0f65852730bc38f7ebf06985aac67b011463d902d881386006dad4aafb715f8d38d934aa9d42c1a95cb7751ee3af09a8ae1fab5fd1d4488743b6a04d1cc8574dea2813b089c46133cc84bcc82a8e83c68e5a19a0eb231861dbcccae02656314d287372219279c0b800ba1a8ac8a4313788a2079407ed773c33b9e7ecfdd932c10a43e3e927a07895b3564b9d67b2ed1b13b6ae7efce985c66cf0d224ca2abd6a6e96d4b89326d1c965f7e63f21cceb0182e607a24d2fb10cd33bdac3d0cd8b22db02b468b069257e361d458d8f5ceed0110c0e66a8c84469b934b769fbc781110430ac30f377ef90bc4708410651f3bd62008f3b7315fbf9e82db485ea6d9177e8158103be49ac081adbddcb0727fe76cf01c009ee10dadc2a43f7829839400b52c624af1f548ad71a6dc2ce05265a12028aea606e4ce145ecfaef9b032260a24199e5bd8a1e66b2e855c20d0877bbb947d0caf5eb37158e8ef04fcb27c11a57edf5ffa1ec1a81c0c239bbfc23473c9ded0c78ee4d6f1900ede17e09c51ab91eba3118effc88d921cc77af6b8795d86c45b3124029f15216d6cb90ed26b16f881841f6139aa3e932e788be89a6c15189ba6f0f6cfadcca127d7a9d3ad037b6bb1181ae2ad1e3f846808642f25be02839d8c7fba6b68bf620941d56d3d859429e75f91e91a754d47b79b1c7c6c57c42f8d620fbd2714a887fe506ee4828472d76f6cd2e08124c4ab045b72c36eefbb3919829bd7305c9e88d6341e948c61d68485e397cc81ce7fd5411c9c8fedc07353c9bf5f930e450fa96fb83585442bdd0e5d6875be6661792d8b5155efb54c471fae43039b932727b85e59c49136be546cb2edcf80ba2143ef17ef885ea9192d23ecbb6f8d833247a889b96d4b77d72d4656711a716210f0865b8530051b8dec3673e5590fab435001ce87cb4bc33eee3c2946963ac049b351eab8383cb7bba77fde221e2e136b305c4ffa268e4dfe80e79fd2c90a1d6bb84dacc880565df116f3f5d2915b60859102c00787330db8ea1228dbcb113572f21b976efaabe86c574565514680b7b2d1b416c5bd681e172d6b18faad98f094313fe77cb3600051348a06d0e7f6b37d3491dec207afcf47a2e9ea44c927ddc3b381eaaa8df7895a4ed89445c9025805141a688d923b4b65d18496d3836fca8d3f1a6ddf3c45eb6366b32f665c2defc52117b0669ab4958e64c6a007533f802de7a8661b367403b5a6c15cceee6d61c7ce05945767b1e23d19e24f4e066183ccdfb94e66e64d9ddd794e6f0517205531244e56097fe03841971150124032b091ae7f862aa89cd23ff983b935f6f5ee32a19b41eeb4eab8c860265e3e1d3cf0bb873d7feabae9c3c0c85eb76660ade00efbc72bc3a91da80983019707609123ee18aec93afe3fad6a3faf6d5900cdb04a945f87517dcd17ff65d9ca85b2802af646ff2da2ad58d4332fc81209f17d45bc355817915061637bbde6a321b29515f2019d9a42f22c6ed1ca3f7669ff34909c25bdc2bf17cb7c1d843637262fe378a64dcbb6840aff9210945fe6a591aa8373153e6bdbc4bfca5d3bd6200247de51b3712673222a09a351c87d483cde849c1eb5bddc84b0c2d6da3a2ba4f49a6f3ce19c102230e654725690e2a2afe114a792754e7183eb2a797aecd7b7e5c37e82cf5fafa0acf8342c7f60465454add359d74a0cd84abcde5a27abab7188b6b0163122b88bc94c5d03e6eb4ce2cecca06e376310f6ed3532c1f0071ed0d1d8c3bdd195574d5bc9c4aa943ff6e6f0170cd473efe6359586c17d9ca668f60494c116639c7e17c08d3488be7e44fce8b3c5eb5b5295fa5331fb57551bcf9bdb130fe9fd09e12197e7ad52796fb3b8357c131ba6f5c1a42175ffe559e3f21a417a34a782b8bc2bbd6b0037d463e9877ea7e796495a649174ed2816c07cac5a943e813eb4b2fcba1f3cc411ffe842a607f9fa5b86454fe87ad2f951453bb2c11164bb4750a09f686a7c391d24b3cf706df6f37550fc059eb56c32b944da27b5251eaca2e6ade32daec9d68de02d1b3d1312b244a3e60f163b608dc29046014da8932d004080b1280fbfbf9300e9077a5ff61778e536b610f27b2f9b1dc83b9be8304f6c4ef1b177dc3bd3103a3f7624e8f22df4e21fec60cc3c010642a58f082723c89e82f27611dd315900771f609eecf982f3b7ffdd6cccab46fce9e4dd821924a3817398d280b53df4bc1fb4d336fb89f31ee4c435a5cbb490b6d57b06bb19c6a0013355bffca260226a2408514c1b0f2b7e3ce1400ea88a82ff9dad2d6e3affd1dddc4987063ecdc25c46888eb54b11833e730dc98e0b80a040cfe58b63599d0eed5c23df91dba740cb1c84b11cc146f4586d0d625f8035f956a15beaf5a0516f9ac31cb28aa8b4fe434da3c1cc46cfa21fb72518bff16e9334c9b64e1e84f16366b5c95931404404df8a0d8f3e2b2c304bb6fe5d35d8d2959ace2c8dfb15cf32f815f558e7f746ed852cff6beb7dfcd7e1e19c62356207b44efc12f65be76774fc5392c098580068816789fae4b5fb7c9fe98fcbc1cdbb8b81ab2390e9549c0fb316708aa7b92aaf2de835c7ab4eb993dbe5848fbfb6e8fee5c33e84a50ebf47c4b43b11916e905f24f6cc62f7d2259a14f11a8b548264debf118dfe55e0dc268f1bbaf9009cdc13407de1a9152200eb2d307244db373924177816246ac85bfb8148552f6176b8d219b0829dc0e06cb8b5e31ec80107da8d99af0f9ff397f5ee76102a3820ca806ccdba8be2699c87e8b8f527ad2777d1cbbfbffafd550ac80d56d2b4e037fbb680921c0b5c56177f4deaac05b2d4043a95491a3dcfa0a2e77480ec5666c7b212efba4d9d9dfbf2084483f41a940d532a00316053b59009299ebe8fc4ca11ff3995947b184f0a6e9aab18e363a8fbf9e6c2f8c769d6a277e3fcbd209ab7db808c4f8c6ab39df0df6c15f4eacd817d23e9c6ccf624d1afdb9e26e1cc97fb6cfa89f839243a626d973cb429e4a09cddcd7096a2ca86d4891a9ac41d07672b6885db6456de712beb4e63cfdd8ff927c6ace3d9fc255b64c23ac6815ec602f3f9192cf644cc4b4d1ff3bc79e0457dfafa16066fa895b73db687806eec0aa21a6b612a45b1a2005bba02c2742a585138e1aa4c7f0a7ae7fa1d686e64c5027d2decf43a2e11474db049678e0680649c42ebb89bf74f78a86eb6f3266ca90d8c978d7b4405b2cecc5990e7963fe18d4eb5e7fcab69911538933d4d61a207a0a7a43cc2526d4ed52120fb5fac4956e3a783bc7f936d5e4aca36d4fcd20161e13d94e940fdc64d0656a702cfa72fb2bb7ed090ad16271db8f7aeb2bf12642aea43b479c4116ff3cc610f4eacb37f087e2fcc5e73aed7f44b1a964ad40c3807bba539f4de36f2fe2bc56a8a85973aadacd329f824115c107a6f5b80885e16e64e1aa0e1f15b10c232ec07b37ccea266e356c1a9e11711b98250f05bde3a802e1c570f698a762b6575f7af10dc21955f0695f69ccf40e9563fa1553c96285290e55252d4bebe8dfdeb23fd1c1d539c9438465865261951a6286bb879a4620f4ed593fdb8a38bb5a7d216684f22abdb4fc8d58d9e6709deb5c16ebff086d50c500bc66e80676978231cf8a230c4361a982f4dce1c0e8d112c48d2772bc36d021c0ac3df7f73ff268a69a7204e5349bcae6693119823d647e18ad5f749e943281b09224582a29dd075bb56f3a1bb049659447e5108a3c443cf4681f119784b720fcd4940cc980842530c9b2404e57f241c6a64a032dba02fba670267e16e81545b4764aeaa85749dc6c3175f3bec9d5201b3d097c4cbb72706e6039be351a2b06efddfc2bb33d95135f4e5be8898936465ceb835ddd92118f6eb4a81c9aba03e9cc732fe7c783497c8c86a8ca39f6606e1890d18feb797bab25950e638e39fb262962b3f71921c5d1ef2758bab351e4255ccd08d14bf12334a5e0fcdefd09098e6f2e240efc9adba81b51c28c2b3fb0065a144a719cce773f30b16150a9e29fb1c155d3ac3563c9e597af91bdfb9caed67b84dae971b6a4f9e32d85d1374c0f3c93bfe218ddd298816ade466dfdf2825b56abf09422e0b2ee6ad4e9340025e0c3601e9bb135a111218f1677d51c5c2a155b75105c05f06678d1d426f21d6e6e10659ff4ee130a1ee36110f0437899d3410d918f55cc0ad9256be72ca1f4d50c73d4467495bd53aaaf367f5524896d1aa2e9eca3d366a0acd9d4f8a2f9295d19a1f0a07ad1314cc2044bb55d40661e64eea70f12b238dd444113723ea1401b64c55fc29ee0959c85aec9f60036206850595b958d42189a3d6e06fe3d16ae6b64c5faddc39188aea78a8420d20a91165", 0x2000, &(0x7f0000022f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000022e00)={0x20, 0x0, 0x7, {0xffff0001, 0x4, 0x0, 0x3}}, 0x0}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00c', @ANYRES16=0x0, @ANYBLOB="010025bd70007ddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d300000f5fe0b00040000000600110000000000080013000b0000000500140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x44050}, 0xc080) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905"], 0x0) 5.670941618s ago: executing program 1 (id=283): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80204) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) inotify_init1(0x80000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000002bd3dc2bea3a8bf5070c0000002807"], 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) 5.514670334s ago: executing program 0 (id=284): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20004001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRESOCT, @ANYRESHEX=0x0], 0x0) 3.852616747s ago: executing program 2 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x108}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x88) lseek(r1, 0x10fd, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0xa0200, 0x1c1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x3, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r3, &(0x7f0000000380)=""/55, 0x37) 3.694032427s ago: executing program 3 (id=288): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 3.69309832s ago: executing program 2 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000b01010000000000000004006212080800024000000500"/41], 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000090102000000c40000000000000000080005400000001cc9e47fb740d10e023bbbcd75de3f58581e0d35a310d349fba2111433ae6dacf35f3a0f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) r5 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) (async) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async) fchdir(0xffffffffffffffff) (async) r8 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r8, &(0x7f0000000040)='./file0\x00', 0x48) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x2, @private0, 0x4800}, 0x7a) setsockopt$inet6_int(r10, 0x84, 0x2, 0x0, 0x0) (async) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, &(0x7f0000000200)='./file0\x00') (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 3.549679137s ago: executing program 3 (id=290): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x4, 0x4, 0x3}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000004780)={'dummy0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x7, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0, 0x1000000]}}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r8, @ANYRES32=0x0], 0xec}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) 3.43930435s ago: executing program 2 (id=291): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270021004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c400050200000000000000000002d58838000391000000"], 0xfd6c) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) syz_open_dev$dri(&(0x7f0000000040), 0x62, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r5, &(0x7f0000000180)="282fa8e2", 0x4, 0x15}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.654064558s ago: executing program 3 (id=292): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r2, 0x541b, 0x0) ioctl(r2, 0x5451, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0xc010) unshare(0x4000100) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40055}, 0x24008804) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0)={r5}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x40808c4) r6 = socket(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1200ffffe5000040f30455070000000010010902240001000040b109040000010300010009210101000122050009058103ff030c0000"], 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x400c810) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000ba7a0000160000fdffffff9500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x28) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x4003) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 2.353828683s ago: executing program 1 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1c, &(0x7f0000004100)={[{0x18, 0x4e00, "102fcc0d18aba7b6baafb912b8daa50795d1cde543c1f4db"}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f00000000c0)="a4f4de87c6e89abd7ae7e6b8550f9923917c9d38e14418e7c765214e9ace3100b34d00f9bf2b7ed43e9c00", 0x2b}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc6c}], 0x7}}], 0x1, 0x8800) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x144, &(0x7f00000002c0)={[{0x79, 0x4e00, "1471a7bfa0136bcf00e9f626d7d4ce2892e9cea4c91ea9f4fd7e3907569e0a9d954ec75e5106d184b9a828eb46c437a16ed7c399bd35fe988c753491ec8d1810ecb2854326873526122e5a0b34aff38e84b5fd84975b90f3b433c54278aa1de5ad36569060a6aed2698f64003c4d83bd82d1ece2851a58a5db"}, {0xbd, 0x4e00, "21e56cfd5ec53b60f3f087cdb7cec27c806652410dd571c1601f7bec642a8b8bffa3f59bf5559945537e384cdb108defabdac8361b455fbc725541594dd94f04307104817089bb66fd3f51ebe7c30d008d68830f02118f2ac1e18e09aad5a2f008964bfeced2faf09dba002787b3fb13c83c8c9e29dde9f02a186ec15e52bb3bf8c9f8e8f1f2697df79e1e02a34bee9a5cad8daa78c580c318b6993991b3905677808e4bb2a36fd8ba45f76411caf38c519312b00ee7189a0a59b1e3c5"}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@bridge_getneigh={0x58, 0x1e, 0x1, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0xc008, 0x2800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "6c1c3be992660100000000000000004d"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.35310114s ago: executing program 5 (id=294): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000008c0)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x5, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x82, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x4, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0003}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xc7, 0x41, 0x40, 0x41e, 0x4053, 0xe656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x71, 0xc1}}]}}]}}, 0x0) 2.198384053s ago: executing program 0 (id=295): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pipe(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) fanotify_init(0x200, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000340)={'custom1\x00'}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.130959042s ago: executing program 2 (id=296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000071c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00140b000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.140055888s ago: executing program 3 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x101001a, &(0x7f0000000580)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r11}}, 0xfa, 0x0, 0x0) setuid(r11) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 798.583109ms ago: executing program 3 (id=298): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f00000027c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202240, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000244000/0xa000)=nil, 0xa000, 0x1000008, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x71a2, 0xfa13, 0xfffffffb}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) epoll_create(0x10000e9) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) r8 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 438.080453ms ago: executing program 5 (id=299): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, &(0x7f0000000000)={0x40, 0x14, 0xf801, 0x220}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x2000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x0, 0x3, 0x54}, @IFLA_GENEVE_TTL_INHERIT={0x0, 0xc, 0x1}]}}}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 381.769107ms ago: executing program 0 (id=300): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYBLOB="b547d4922d2339ce54"]) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x140942, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') getdents(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x96}, 0x40000) (rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x74}}, 0x20000001) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffff}}, 0xe4) (async) connect$inet6(r7, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) 101.929742ms ago: executing program 3 (id=301): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x7ff}]}, 0x18, 0x1) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, r4}, 0x94) (async) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 101.167955ms ago: executing program 5 (id=302): utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xffffffffffffffff}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14.259486ms ago: executing program 2 (id=303): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="47f4b824fb02d786d72434870f239af6091f6cd23a3122c855fee46e88a3434e1251e2d51aba2923f9b0e718204c2789af3f93194bcaf769d51e7948a5596db4329a82d07d74bf5c16bf1f4f0689ddebc9d36f11ff335c1932"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x80000000}, @l2tp={0x2, 0x0, @multicast2}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) r6 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r6, 0x0, r6}, &(0x7f0000000480)=""/69, 0x45, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x87fccb036a23481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5e85cdacaaef4699, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @value=r7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000200", @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000010017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de1566b586d8d5a64939122b453dee777d1a50225d484ac0c4500f82020c0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 1 (id=304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYBLOB="3d03"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r9, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x1, 0x3, 0x10}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): _0: entered promiscuous mode [ 90.707929][ T5848] hsr_slave_1: entered promiscuous mode [ 90.714332][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 90.720073][ T5848] Cannot create hsr debugfs directory [ 90.766068][ T5849] hsr_slave_0: entered promiscuous mode [ 90.772402][ T5849] hsr_slave_1: entered promiscuous mode [ 90.778789][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.784583][ T5849] Cannot create hsr debugfs directory [ 90.910054][ T5851] hsr_slave_0: entered promiscuous mode [ 90.916502][ T5851] hsr_slave_1: entered promiscuous mode [ 90.922864][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 90.928645][ T5851] Cannot create hsr debugfs directory [ 91.408791][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.428086][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.439985][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.458548][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.524360][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.538493][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.551589][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.576512][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.671831][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.684544][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.696811][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.729643][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.801376][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.811734][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.837237][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.847392][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.903812][ T52] Bluetooth: hci1: command tx timeout [ 91.904635][ T5843] Bluetooth: hci2: command tx timeout [ 91.909609][ T52] Bluetooth: hci0: command tx timeout [ 91.915215][ T5833] Bluetooth: hci3: command tx timeout [ 91.936913][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.984538][ T52] Bluetooth: hci4: command tx timeout [ 91.995867][ T115] cfg80211: failed to load regulatory.db [ 92.012422][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.038888][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.054206][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.067223][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.077988][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.110514][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.117857][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.162054][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.170921][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.178112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.267516][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.299098][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.315222][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.322389][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.350129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.357349][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.410272][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.486416][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.513548][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.540098][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.547304][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.558657][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.565796][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.592226][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.599735][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.611100][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.618340][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.679186][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.707114][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.735146][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.786007][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.830433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.837651][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.854285][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.861445][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.890381][ T5848] veth0_vlan: entered promiscuous mode [ 92.955258][ T5848] veth1_vlan: entered promiscuous mode [ 92.981991][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.021719][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.038354][ T5846] veth0_vlan: entered promiscuous mode [ 93.110163][ T5848] veth0_macvtap: entered promiscuous mode [ 93.119387][ T5846] veth1_vlan: entered promiscuous mode [ 93.136682][ T5848] veth1_macvtap: entered promiscuous mode [ 93.189941][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.211618][ T5849] veth0_vlan: entered promiscuous mode [ 93.218502][ T5847] veth0_vlan: entered promiscuous mode [ 93.236447][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.249147][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.270127][ T5847] veth1_vlan: entered promiscuous mode [ 93.295364][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.305475][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.317401][ T5849] veth1_vlan: entered promiscuous mode [ 93.334986][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344787][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.384465][ T5846] veth0_macvtap: entered promiscuous mode [ 93.402403][ T5846] veth1_macvtap: entered promiscuous mode [ 93.455288][ T5847] veth0_macvtap: entered promiscuous mode [ 93.523968][ T5847] veth1_macvtap: entered promiscuous mode [ 93.538163][ T5849] veth0_macvtap: entered promiscuous mode [ 93.550599][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.565672][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.580852][ T5851] veth0_vlan: entered promiscuous mode [ 93.583162][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.623587][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.640585][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.642102][ T5851] veth1_vlan: entered promiscuous mode [ 93.652844][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.657842][ T5849] veth1_macvtap: entered promiscuous mode [ 93.694725][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.707112][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.732175][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.750234][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.754711][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776884][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.793807][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.853816][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.863368][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.920731][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.965910][ T5851] veth0_macvtap: entered promiscuous mode [ 93.984038][ T5843] Bluetooth: hci1: command tx timeout [ 93.984056][ T5833] Bluetooth: hci0: command tx timeout [ 93.984094][ T5833] Bluetooth: hci2: command tx timeout [ 93.989629][ T52] Bluetooth: hci3: command tx timeout [ 94.007270][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.018907][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.054803][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.064095][ T52] Bluetooth: hci4: command tx timeout [ 94.071581][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.105065][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.115188][ T5851] veth1_macvtap: entered promiscuous mode [ 94.170835][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180684][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.220744][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.244769][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.248632][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.266725][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311499][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.360175][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388349][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399264][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.399903][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.419510][ T5930] loop9: detected capacity change from 0 to 7 [ 94.433551][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.436547][ T5883] loop9: [ 94.445158][ T5883] loop9: partition table partially beyond EOD, truncated [ 94.452244][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.452263][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.475417][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.487869][ T5930] loop9: [ 94.490980][ T5930] loop9: partition table partially beyond EOD, truncated [ 94.602125][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.618904][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.754958][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.773311][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.789144][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797859][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.928570][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.956824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.058221][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.091818][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.183597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.433084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.442419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.483024][ T5946] binder: 5941:5946 ioctl 5419 800000c0 returned -22 [ 95.500446][ T30] audit: type=1326 audit(1761687129.641:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 95.503764][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.576594][ T30] audit: type=1326 audit(1761687129.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 95.592377][ T5946] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 95.666239][ T30] audit: type=1326 audit(1761687129.651:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 95.778938][ T5836] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.826495][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.842696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.878964][ T5836] usb 1-1: Product: syz [ 95.912772][ T30] audit: type=1326 audit(1761687129.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 95.934913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.944123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.966570][ T5836] usb 1-1: Manufacturer: syz [ 95.972775][ T30] audit: type=1326 audit(1761687129.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 95.997340][ T30] audit: type=1326 audit(1761687129.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 96.019420][ T30] audit: type=1326 audit(1761687129.851:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 96.041909][ T30] audit: type=1326 audit(1761687129.871:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 96.067738][ T52] Bluetooth: hci3: command tx timeout [ 96.074478][ T5833] Bluetooth: hci1: command tx timeout [ 96.079948][ T5839] Bluetooth: hci0: command tx timeout [ 96.085488][ T5839] Bluetooth: hci2: command tx timeout [ 96.116314][ T5836] usb 1-1: SerialNumber: syz [ 96.133243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.145484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.156074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.164961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.182864][ T5843] Bluetooth: hci4: command tx timeout [ 96.194258][ T5951] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.265893][ T5836] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.301110][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.363480][ T5951] usb 5-1: device descriptor read/64, error -71 [ 96.632712][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.763586][ T5951] usb 5-1: device descriptor read/64, error -71 [ 96.886233][ T5951] usb usb5-port1: attempt power cycle [ 97.017816][ T5944] usb 1-1: USB disconnect, device number 2 [ 97.232771][ T5951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.303212][ T5951] usb 5-1: device descriptor read/8, error -71 [ 97.427358][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 97.457171][ T9] ath9k_htc: Failed to initialize the device [ 97.512647][ T5944] usb 1-1: ath9k_htc: USB layer deinitialized [ 97.573274][ T5951] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.603896][ T5956] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.637501][ T5951] usb 5-1: device descriptor read/8, error -71 [ 97.753222][ T5951] usb usb5-port1: unable to enumerate USB device [ 97.783179][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 97.795093][ T5956] usb 2-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 97.806636][ T5956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 97.816494][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.832119][ T5956] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 97.842166][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.843829][ T5972] fuse: Bad value for 'user_id' [ 97.854385][ T5956] usb 2-1: config 0 descriptor?? [ 97.872857][ T5972] fuse: Bad value for 'user_id' [ 97.880326][ T5836] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.045775][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.054530][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 98.066030][ T5836] usb 4-1: config 7 has an invalid interface number: 180 but max is 0 [ 98.074674][ T5836] usb 4-1: config 7 has no interface number 0 [ 98.080977][ T5836] usb 4-1: config 7 interface 180 has no altsetting 0 [ 98.090905][ T5836] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 98.101749][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.110063][ T5836] usb 4-1: Product: syz [ 98.114473][ T5836] usb 4-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓ [ 98.139296][ T5836] usb 4-1: SerialNumber: syz [ 98.392241][ T5836] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 98.400987][ T5836] gspca_topro: reg_w err -71 [ 98.401453][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 98.430079][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.440885][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.442635][ T5836] gspca_topro: Sensor soi763a [ 98.465973][ T5836] usb 4-1: USB disconnect, device number 2 [ 99.576928][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 99.952853][ T5944] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.000849][ T6008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.112726][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 100.145932][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 100.155835][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.170089][ T5944] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 100.180413][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.192241][ T5944] usb 4-1: Product: syz [ 100.196660][ T5944] usb 4-1: Manufacturer: syz [ 100.201729][ T5944] usb 4-1: SerialNumber: syz [ 100.285032][ T5944] usb 4-1: config 0 descriptor?? [ 100.293737][ T5944] hub 4-1:0.0: bad descriptor, ignoring hub [ 100.300834][ T5944] hub 4-1:0.0: probe with driver hub failed with error -5 [ 100.313898][ T5944] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 100.359344][ T5956] usb 2-1: string descriptor 0 read error: -71 [ 100.418480][ T5956] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.430477][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.455213][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.481072][ T5956] usb 2-1: USB disconnect, device number 2 [ 100.571559][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.598818][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 100.621260][ T6006] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 100.650336][ T9] usb 3-1: can't read configurations, error -71 [ 100.837085][ T5920] usb 4-1: USB disconnect, device number 3 [ 100.923234][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.082747][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 101.208338][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 101.232103][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 101.268570][ T30] audit: type=1326 audit(1761687135.411:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.292390][ T30] audit: type=1326 audit(1761687135.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.315065][ T30] audit: type=1326 audit(1761687135.411:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.371389][ T30] audit: type=1326 audit(1761687135.411:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.393353][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.401030][ T5836] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 101.451494][ T30] audit: type=1326 audit(1761687135.411:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.482265][ T30] audit: type=1326 audit(1761687135.411:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.482383][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.555037][ T30] audit: type=1326 audit(1761687135.411:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.577168][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.629864][ T5836] usb 1-1: Product: syz [ 101.690873][ T6035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.702478][ T5836] usb 1-1: Manufacturer: syz [ 101.711771][ T5836] usb 1-1: SerialNumber: syz [ 101.759025][ T5836] usb 1-1: config 0 descriptor?? [ 101.759134][ T30] audit: type=1326 audit(1761687135.411:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.841158][ T30] audit: type=1326 audit(1761687135.411:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 101.863104][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.873872][ T5836] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 101.913640][ T30] audit: type=1326 audit(1761687135.411:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 102.020740][ T1165] usb 1-1: Failed to submit usb control message: -71 [ 102.050057][ T1165] usb 1-1: unable to send the bmi data to the device: -71 [ 102.058657][ T5836] usb 1-1: USB disconnect, device number 3 [ 102.082824][ T1165] usb 1-1: unable to get target info from device [ 102.124041][ T1165] usb 1-1: could not get target info (-71) [ 102.130144][ T1165] usb 1-1: could not probe fw (-71) [ 102.358219][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.536490][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.662259][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.809122][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.243752][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.331042][ T12] bridge_slave_1: left allmulticast mode [ 103.348322][ T12] bridge_slave_1: left promiscuous mode [ 103.371149][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.433826][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.471641][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.482318][ T12] bridge_slave_0: left allmulticast mode [ 103.528314][ T12] bridge_slave_0: left promiscuous mode [ 103.534110][ T5920] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 103.544952][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.553023][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.614117][ T5920] usb 2-1: config 0 descriptor?? [ 103.732716][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.907490][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.942730][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.970482][ T10] usb 3-1: Product: syz [ 104.012602][ T10] usb 3-1: Manufacturer: syz [ 104.017607][ T10] usb 3-1: SerialNumber: syz [ 104.052078][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.055159][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.084103][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.092088][ T5836] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.135427][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.164751][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.173563][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.187802][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.196536][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.204571][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.213895][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.222235][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.242650][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.255971][ T5920] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 104.274705][ T5920] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 104.383102][ T5920] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 104.863379][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.985955][ T5920] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 105.010450][ T5920] usb 2-1: USB disconnect, device number 3 [ 105.065935][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.092766][ T5944] usb 4-1: config 0 has no interfaces? [ 105.155474][ T5944] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.186958][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.207292][ T5944] usb 4-1: config 0 descriptor?? [ 105.282260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.303103][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.323574][ T12] bond0 (unregistering): Released all slaves [ 105.661148][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.686988][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.744699][ T5836] usb 3-1: Service connection timeout for: 257 [ 105.782046][ T5836] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 105.837758][ T5836] ath9k_htc: Failed to initialize the device [ 105.852139][ T5836] usb 3-1: ath9k_htc: USB layer deinitialized [ 105.903204][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 106.332595][ T5843] Bluetooth: hci3: command tx timeout [ 106.445096][ T9] usb 3-1: USB disconnect, device number 4 [ 106.606889][ T6102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.42'. [ 106.895504][ T5944] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.982366][ T6108] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 107.047538][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.092586][ T5944] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 107.112781][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.134646][ T5944] usb 2-1: config 0 descriptor?? [ 107.173357][ T5944] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 107.213236][ T12] hsr_slave_0: left promiscuous mode [ 107.347692][ T12] hsr_slave_1: left promiscuous mode [ 107.364070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.371848][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.385011][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.431891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.456470][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.472731][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.489636][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.493347][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.524952][ T5183] bcm5974 2-1:0.0: could not read from device [ 107.569177][ T5183] bcm5974 2-1:0.0: could not read from device [ 107.600448][ T12] veth1_macvtap: left promiscuous mode [ 107.617066][ T12] veth0_macvtap: left promiscuous mode [ 107.640783][ T12] veth1_vlan: left promiscuous mode [ 107.651032][ T12] veth0_vlan: left promiscuous mode [ 107.708101][ T5183] bcm5974 2-1:0.0: could not read from device [ 107.732725][ T5944] usb 2-1: USB disconnect, device number 4 [ 107.774977][ T6014] bcm5974 2-1:0.0: could not read from device [ 107.806191][ T5183] bcm5974 2-1:0.0: could not read from device [ 107.891526][ T6014] udevd[6014]: Error opening device "/dev/input/event4": No such device [ 107.921322][ T6014] udevd[6014]: Unable to EVIOCGABS device "/dev/input/event4" [ 107.941039][ T6014] udevd[6014]: Unable to EVIOCGABS device "/dev/input/event4" [ 107.960472][ T6014] udevd[6014]: Unable to EVIOCGABS device "/dev/input/event4" [ 107.981204][ T6014] udevd[6014]: Unable to EVIOCGABS device "/dev/input/event4" [ 108.220520][ T6134] loop6: detected capacity change from 0 to 7 [ 108.239319][ T6134] Dev loop6: unable to read RDB block 7 [ 108.245137][ T6134] loop6: unable to read partition table [ 108.251325][ T6134] loop6: partition table beyond EOD, truncated [ 108.259233][ T6134] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 108.393131][ T5843] Bluetooth: hci3: command tx timeout [ 108.890156][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.947270][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.470018][ T6116] pim6reg1: entered promiscuous mode [ 109.475600][ T6116] pim6reg1: entered allmulticast mode [ 109.590082][ T6142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.606106][ T6142] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.645065][ T6142] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.665898][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 109.696332][ T6142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.711935][ T6142] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.803792][ T6142] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.817311][ T6142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.857809][ T6142] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.875551][ T6142] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.946957][ T6142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.981079][ T6142] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.009684][ T6142] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.067169][ T6142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.096480][ T6142] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.171304][ T6142] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.327421][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.339329][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.347511][ T6079] bridge_slave_0: entered allmulticast mode [ 110.369231][ T6079] bridge_slave_0: entered promiscuous mode [ 110.392042][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.418684][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.445634][ T6079] bridge_slave_1: entered allmulticast mode [ 110.477187][ T6079] bridge_slave_1: entered promiscuous mode [ 110.548742][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.606130][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.647831][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.841771][ T6079] team0: Port device team_slave_0 added [ 110.867405][ T6079] team0: Port device team_slave_1 added [ 110.887866][ T10] usb 4-1: USB disconnect, device number 4 [ 111.094040][ T6184] loop6: detected capacity change from 0 to 7 [ 111.121463][ T6184] Dev loop6: unable to read RDB block 7 [ 111.140639][ T6184] loop6: unable to read partition table [ 111.154595][ T6184] loop6: partition table beyond EOD, truncated [ 111.157615][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.164559][ T6184] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 111.172863][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.225964][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.240062][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.251722][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.280950][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.451534][ T6079] hsr_slave_0: entered promiscuous mode [ 111.475359][ T6079] hsr_slave_1: entered promiscuous mode [ 111.498883][ T6079] debugfs: 'hsr0' already exists in 'hsr' [ 111.518945][ T6079] Cannot create hsr debugfs directory [ 111.573984][ T1211] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.663090][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.767208][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.795271][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 111.836120][ T1211] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 111.854072][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.877890][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 111.888183][ T1211] usb 3-1: Product: syz [ 111.900685][ T1211] usb 3-1: Manufacturer: syz [ 111.905936][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.932615][ T1211] usb 3-1: SerialNumber: syz [ 111.947236][ T1211] r8152-cfgselector 3-1: Unknown version 0x0000 [ 111.962359][ T1211] r8152-cfgselector 3-1: config 0 descriptor?? [ 111.987547][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.142750][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 112.529509][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 113.378133][ T6232] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 113.396163][ T6079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.415789][ T6079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.466935][ T6079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.485050][ T6079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.705662][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.743183][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.743863][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.774162][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.781516][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.798924][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.806298][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.823214][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.981310][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.989758][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.063874][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.071508][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 114.071527][ T30] audit: type=1326 audit(1761687148.221:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.0.69" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5539 code=0x0 [ 114.103405][ T6079] veth0_vlan: entered promiscuous mode [ 114.130724][ T6079] veth1_vlan: entered promiscuous mode [ 114.135503][ T6254] loop6: detected capacity change from 0 to 7 [ 114.156862][ T6254] Dev loop6: unable to read RDB block 7 [ 114.188565][ T6254] loop6: unable to read partition table [ 114.197574][ T6254] loop6: partition table beyond EOD, truncated [ 114.208890][ T6079] veth0_macvtap: entered promiscuous mode [ 114.220780][ T6079] veth1_macvtap: entered promiscuous mode [ 114.227018][ T6254] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 114.236849][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 114.289631][ T5920] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 114.294625][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.319227][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.368726][ T3557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.403010][ T3557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.432457][ T3557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.492773][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.686952][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.723118][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.971097][ T6274] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.74'. [ 115.149013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.204661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.816767][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.827980][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.903262][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.062785][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.143262][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.246253][ T30] audit: type=1326 audit(1761687150.401:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.3.79" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 116.291304][ T5920] usb 2-1: config 0 has no interfaces? [ 116.297373][ T6302] Zero length message leads to an empty skb [ 116.303654][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 116.355513][ T5836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.364347][ T5920] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 116.408712][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.492969][ T5920] usb 2-1: Product: syz [ 116.497347][ T5920] usb 2-1: Manufacturer: syz [ 116.501988][ T5920] usb 2-1: SerialNumber: syz [ 116.512602][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 116.523181][ T5836] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 116.533278][ T5836] usb 3-1: config 0 has no interface number 0 [ 116.539540][ T5836] usb 3-1: config 0 interface 200 has no altsetting 0 [ 116.555067][ T5836] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 116.565400][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.582720][ T5836] usb 3-1: Product: syz [ 116.592643][ T5836] usb 3-1: Manufacturer: syz [ 116.592868][ T5920] usb 2-1: config 0 descriptor?? [ 116.602612][ T5836] usb 3-1: SerialNumber: syz [ 116.650526][ T5836] usb 3-1: config 0 descriptor?? [ 116.881190][ T5836] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input7 [ 116.913145][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.926291][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.104734][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.117583][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.141474][ T5836] usb 3-1: USB disconnect, device number 6 [ 117.390905][ T6274] veth0_vlan: left promiscuous mode [ 117.406023][ T6274] veth0_vlan: entered promiscuous mode [ 117.439406][ T6310] loop6: detected capacity change from 0 to 7 [ 117.448448][ T5883] Dev loop6: unable to read RDB block 7 [ 117.456168][ T5883] loop6: unable to read partition table [ 117.661153][ T5883] loop6: partition table beyond EOD, truncated [ 117.712873][ T6310] Dev loop6: unable to read RDB block 7 [ 117.799155][ T6310] loop6: unable to read partition table [ 117.810571][ T6310] loop6: partition table beyond EOD, truncated [ 117.821894][ T6310] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 118.394890][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 118.395957][ T6316] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.552857][ T6316] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.620303][ T5836] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 118.802630][ T6322] netlink: 56 bytes leftover after parsing attributes in process `syz.2.86'. [ 119.004916][ T5944] usb 2-1: USB disconnect, device number 5 [ 119.012449][ T5836] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.021978][ T5836] usb 6-1: config 179 has no interface number 0 [ 119.049790][ T5836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 119.106552][ T5836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 119.147275][ T5836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 119.168440][ T5836] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.191249][ T5836] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.214454][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.281950][ T5836] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.319405][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 119.350020][ T5836] usb 6-1: Product: syz [ 119.366709][ T1211] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.384461][ T6317] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 119.417182][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.430192][ T5836] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 119.441571][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 119.467452][ T6337] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 119.490489][ T6337] syzkaller1: entered promiscuous mode [ 119.496897][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.514353][ T6337] syzkaller1: entered allmulticast mode [ 119.529101][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.542719][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 119.545406][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 119.557183][ T1211] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 119.557227][ T1211] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.557266][ T1211] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 119.557293][ T1211] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 119.557320][ T1211] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.557347][ T1211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.559701][ T1211] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.571215][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.587228][ T1211] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.668644][ T5956] usb 4-1: Product: syz [ 119.678341][ T5956] usb 4-1: Manufacturer: syz [ 119.685004][ T5956] usb 4-1: SerialNumber: syz [ 119.700218][ T1211] usb 1-1: Product: syz [ 119.714084][ T1211] usb 1-1: Manufacturer: syz [ 119.715236][ T5956] usb 4-1: config 0 descriptor?? [ 119.719227][ T1211] usb 1-1: SerialNumber: syz [ 119.745499][ T5956] adutux 4-1:0.0: interrupt endpoints not found [ 119.746625][ T1211] usb 1-1: config 0 descriptor?? [ 119.759180][ T6328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.788586][ T1211] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.830454][ T1211] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.037436][ T1211] usb 4-1: USB disconnect, device number 5 [ 120.464173][ T52] Bluetooth: hci3: command 0x0419 tx timeout [ 120.508557][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.530115][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.552754][ T6347] binder: binder_mmap: 6346 80000000-80003000 bad vm_flags failed -1 [ 120.742753][ T1211] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.822270][ T24] usb 6-1: USB disconnect, device number 2 [ 120.932705][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 120.966596][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 120.993151][ T1211] usb 3-1: can't read configurations, error -61 [ 121.152696][ T1211] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.332700][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 121.363124][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 121.375501][ T1211] usb 3-1: can't read configurations, error -61 [ 121.383748][ T1211] usb usb3-port1: attempt power cycle [ 121.734523][ T5944] usb 1-1: USB disconnect, device number 4 [ 121.744309][ T1211] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.758958][ T5944] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 121.806485][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 121.830516][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 121.840160][ T1211] usb 3-1: can't read configurations, error -61 [ 122.032613][ T1211] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.053341][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 122.068626][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 122.077985][ T1211] usb 3-1: can't read configurations, error -61 [ 122.125700][ T1211] usb usb3-port1: unable to enumerate USB device [ 122.240080][ T30] audit: type=1326 audit(1761687156.391:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.99" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x0 [ 122.282725][ T5956] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.495050][ T5956] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 122.510944][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.539155][ T5956] usb 4-1: config 0 descriptor?? [ 122.568621][ T5956] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 122.652155][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.100'. [ 122.750724][ T6389] veth3: entered promiscuous mode [ 122.759685][ T6389] veth3: entered allmulticast mode [ 122.998209][ T6390] veth3: entered promiscuous mode [ 123.004094][ T6390] veth3: entered allmulticast mode [ 123.120825][ T5956] gspca_zc3xx: reg_w_i err -110 [ 123.132691][ T5956] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 123.394836][ T9] usb 4-1: USB disconnect, device number 6 [ 124.307137][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.490683][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.531769][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.574820][ T9] usb 4-1: config 0 descriptor?? [ 124.605965][ T9] cp210x 4-1:0.0: cp210x converter detected [ 125.014246][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 125.028922][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.053662][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.222908][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.333451][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 125.390700][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.423080][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.452990][ T5836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.458090][ T5920] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 125.493108][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.512593][ T5920] usb 6-1: config 0 descriptor?? [ 125.514617][ T9] usb 4-1: USB disconnect, device number 7 [ 125.555205][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.596105][ T9] cp210x 4-1:0.0: device disconnected [ 125.602919][ T5836] usb 2-1: device descriptor read/64, error -71 [ 125.800467][ T6441] warning: `syz.5.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.872850][ T5836] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.013197][ T5836] usb 2-1: device descriptor read/64, error -71 [ 126.034279][ T5920] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 126.064140][ T5920] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 126.076020][ T5920] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 126.096656][ T5920] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 126.114873][ T5920] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 126.147284][ T5836] usb usb2-port1: attempt power cycle [ 126.156428][ T5920] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 126.243959][ T5920] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 126.253791][ T5920] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 126.274417][ T5920] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 126.283073][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.302233][ T1211] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.315168][ T6454] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 126.325836][ T5920] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 126.339104][ T6454] bond1 (unregistering): Released all slaves [ 126.367498][ T5920] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 126.479222][ T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 126.483477][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 126.497259][ T10] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 126.500958][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.520596][ T10] usb 1-1: Product: syz [ 126.525240][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.526204][ T1211] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 126.533224][ T10] usb 1-1: Manufacturer: syz [ 126.552316][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 126.572826][ T1211] usb 3-1: can't read configurations, error -61 [ 126.580273][ T10] usb 1-1: SerialNumber: syz [ 126.585870][ T5836] usb 2-1: device descriptor read/8, error -71 [ 126.602789][ T10] usb 1-1: config 0 descriptor?? [ 126.615961][ T10] ch341 1-1:0.0: ch341-uart converter detected [ 126.722640][ T1211] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.822638][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.847633][ T5836] usb 2-1: device descriptor read/8, error -71 [ 126.904419][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 126.916780][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.927785][ T1211] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 126.941488][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 126.955151][ T1211] usb 3-1: can't read configurations, error -61 [ 126.961844][ T1211] usb usb3-port1: attempt power cycle [ 126.976668][ T5836] usb usb2-port1: unable to enumerate USB device [ 127.022627][ T5920] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.180067][ T5920] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 127.194600][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.209963][ T5920] usb 4-1: config 0 descriptor?? [ 127.219948][ T5920] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 127.302859][ T1211] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.330793][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 127.349160][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.359796][ T1211] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 127.371743][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 127.381467][ T1211] usb 3-1: can't read configurations, error -61 [ 127.419553][ T5920] gspca_zc3xx: reg_w_i err -71 [ 127.432895][ T5920] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 127.459988][ T5920] usb 4-1: USB disconnect, device number 8 [ 127.516034][ T1211] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.543392][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 127.554420][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.571511][ T1211] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 127.593636][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 127.601426][ T1211] usb 3-1: can't read configurations, error -61 [ 127.608493][ T1211] usb usb3-port1: unable to enumerate USB device [ 128.039478][ T5836] usb 6-1: USB disconnect, device number 3 [ 128.090889][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 128.232196][ T6492] binder: 6491:6492 ioctl c0306201 80002800 returned -14 [ 128.411207][ T6500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.542833][ T10] usb 1-1: failed to send control message: -110 [ 128.549581][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 128.562708][ T5836] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.723410][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 128.738805][ T5836] usb 4-1: config 105 has an invalid interface number: 253 but max is 0 [ 128.749884][ T5836] usb 4-1: config 105 has no interface number 0 [ 128.759741][ T5836] usb 4-1: config 105 interface 253 altsetting 4 bulk endpoint 0xF has invalid maxpacket 16 [ 128.771347][ T5836] usb 4-1: config 105 interface 253 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 128.783435][ T5836] usb 4-1: config 105 interface 253 altsetting 4 endpoint 0x4 has invalid maxpacket 1816, setting to 64 [ 128.798599][ T5836] usb 4-1: config 105 interface 253 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 128.811981][ T5836] usb 4-1: config 105 interface 253 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 128.832583][ T5836] usb 4-1: config 105 interface 253 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 128.843975][ T5836] usb 4-1: config 105 interface 253 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 128.850075][ T1211] usb 1-1: USB disconnect, device number 5 [ 128.855439][ T5836] usb 4-1: config 105 interface 253 has no altsetting 0 [ 128.869641][ T5836] usb 4-1: New USB device found, idVendor=0403, idProduct=fc70, bcdDevice=83.eb [ 128.875930][ T1211] ch341 1-1:0.0: device disconnected [ 128.881461][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.894317][ T5836] usb 4-1: Product: syz [ 128.898809][ T5836] usb 4-1: Manufacturer: syz [ 128.921291][ T5836] usb 4-1: SerialNumber: syz [ 128.957842][ T6496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 129.016196][ T6516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.120'. [ 129.050104][ T6516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.120'. [ 129.189894][ T5836] ftdi_sio 4-1:105.253: FTDI USB Serial Device converter detected [ 129.218336][ T5836] ftdi_sio ttyUSB0: unknown device type: 0x83eb [ 129.228572][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.237515][ T5836] usb 4-1: USB disconnect, device number 9 [ 129.258871][ T5836] ftdi_sio 4-1:105.253: device disconnected [ 129.260516][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.382855][ T1211] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.452624][ T5944] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 129.543366][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 129.559886][ T1211] usb 1-1: config 222 has an invalid interface number: 31 but max is 0 [ 129.572629][ T1211] usb 1-1: config 222 has no interface number 0 [ 129.579073][ T1211] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 129.604545][ T5944] usb 3-1: device descriptor read/64, error -71 [ 129.613897][ T1211] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 129.625648][ T1211] usb 1-1: config 222 interface 31 has no altsetting 0 [ 129.639823][ T1211] usb 1-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 129.649496][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.657672][ T1211] usb 1-1: Product: syz [ 129.661957][ T1211] usb 1-1: Manufacturer: syz [ 129.666983][ T1211] usb 1-1: SerialNumber: syz [ 129.684376][ T6518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.854975][ T5944] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 129.997978][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 130.033036][ T5944] usb 3-1: device descriptor read/64, error -71 [ 130.033515][ T6551] trusted_key: syz.3.127 sent an empty control message without MSG_MORE. [ 130.113799][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.150820][ T5944] usb usb3-port1: attempt power cycle [ 130.297095][ T5920] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 130.307271][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.433807][ T5920] usb 6-1: config 0 descriptor?? [ 130.603572][ T5920] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 130.635144][ T1211] ldusb 1-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 130.672883][ T5944] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 130.687913][ T1211] usb 1-1: USB disconnect, device number 6 [ 130.713673][ T5944] usb 3-1: device descriptor read/8, error -71 [ 130.757110][ T1211] ldusb 1-1:222.31: LD USB Device #0 now disconnected [ 130.982947][ T5944] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 131.025193][ T5944] usb 3-1: device descriptor read/8, error -71 [ 131.133516][ T5920] gspca_zc3xx: reg_w_i err -110 [ 131.143253][ T5944] usb usb3-port1: unable to enumerate USB device [ 131.232193][ T5920] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 131.365073][ T5920] usb 6-1: USB disconnect, device number 4 [ 131.731232][ T6573] syzkaller0: entered promiscuous mode [ 131.790124][ T6573] syzkaller0: entered allmulticast mode [ 132.634005][ T6587] tipc: Started in network mode [ 132.643711][ T6587] tipc: Node identity 1efd53b89d31, cluster identity 4711 [ 132.653258][ T6587] tipc: Enabled bearer , priority 0 [ 132.670140][ T6587] syzkaller0: entered promiscuous mode [ 132.678783][ T6587] syzkaller0: entered allmulticast mode [ 132.690253][ T6586] syzkaller1: entered promiscuous mode [ 132.699246][ T6586] syzkaller1: entered allmulticast mode [ 132.794985][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.5.136'. [ 132.876186][ T6585] tipc: Resetting bearer [ 132.917940][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.925049][ T6585] tipc: Disabling bearer [ 132.958773][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965925][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223446][ T5920] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 133.283425][ T5944] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.359258][ T6609] syzkaller0: entered promiscuous mode [ 133.368959][ T6609] syzkaller0: entered allmulticast mode [ 133.392586][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 133.437237][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.444414][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 133.453300][ T5920] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 133.473621][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.485991][ T5944] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.495674][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.505751][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.524551][ T5920] usb 3-1: config 0 descriptor?? [ 133.541055][ T5944] usb 1-1: Product: syz [ 133.545975][ T5944] usb 1-1: Manufacturer: syz [ 133.550617][ T5944] usb 1-1: SerialNumber: syz [ 133.574096][ T5944] usb 1-1: config 0 descriptor?? [ 133.642621][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.672603][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 133.680402][ T24] usb 4-1: config 0 has no interfaces? [ 133.689983][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.699562][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.708271][ T24] usb 4-1: Manufacturer: syz [ 133.726548][ T24] usb 4-1: config 0 descriptor?? [ 133.799894][ T5944] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.819984][ T47] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 133.829515][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.848515][ T47] usb 6-1: config 0 descriptor?? [ 133.872200][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 134.012125][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.022452][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.034798][ T5920] vrc2 0003:07C0:1125.0003: fixing up VRC-2 report descriptor [ 134.089481][ T5920] input: HID 07c0:1125 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:07C0:1125.0003/input/input8 [ 134.235008][ T5920] vrc2 0003:07C0:1125.0003: input,hidraw0: USB HID v1.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 134.290508][ T5920] usb 3-1: USB disconnect, device number 19 [ 134.368365][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 134.393968][ T47] gspca_zc3xx: reg_w_i err -110 [ 134.399302][ T47] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 134.662613][ T5920] usb 6-1: USB disconnect, device number 5 [ 135.058874][ T6624] binder: 6622:6624 unknown command 7388451 [ 135.078201][ T6624] binder: 6622:6624 ioctl c0306201 80000080 returned -22 [ 135.112670][ T5920] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 135.294207][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 135.306533][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.316960][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.325978][ T5920] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 135.339444][ T5920] usb 6-1: config 0 interface 0 has no altsetting 1 [ 135.377477][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 135.387002][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.400327][ T5920] usb 6-1: Product: syz [ 135.405857][ T5920] usb 6-1: Manufacturer: syz [ 135.410758][ T5920] usb 6-1: SerialNumber: syz [ 135.416969][ T5944] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 135.433327][ T5920] usb 6-1: config 0 descriptor?? [ 135.448021][ T5944] usb 1-1: USB disconnect, device number 7 [ 135.675331][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.689958][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.755224][ T5920] usb 6-1: USB disconnect, device number 6 [ 135.827059][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 135.830476][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.847038][ T6627] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 135.948046][ T6629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.107080][ T9] usb 4-1: USB disconnect, device number 10 [ 136.344917][ T5944] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 136.518939][ T5944] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.573782][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.603822][ T5944] usb 3-1: config 1 has no interface number 0 [ 136.610146][ T5944] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.631881][ T5944] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.646393][ T5944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.658617][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.667381][ T5944] usb 3-1: Product: syz [ 136.681971][ T5944] usb 3-1: Manufacturer: syz [ 136.692115][ T5944] usb 3-1: SerialNumber: syz [ 136.805883][ T5836] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.995742][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 137.018277][ T5836] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 137.032635][ T5836] usb 2-1: config 0 has no interface number 0 [ 137.038803][ T5836] usb 2-1: config 0 interface 200 has no altsetting 0 [ 137.052596][ T5836] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 137.062560][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.070561][ T5836] usb 2-1: Product: syz [ 137.076699][ T5836] usb 2-1: Manufacturer: syz [ 137.081414][ T5836] usb 2-1: SerialNumber: syz [ 137.089029][ T5836] usb 2-1: config 0 descriptor?? [ 137.132662][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.362414][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 137.375015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.397932][ T6666] fuse: Bad value for 'fd' [ 137.445600][ T9] usb 4-1: config 0 descriptor?? [ 137.483811][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 137.484454][ T5836] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input9 [ 137.504684][ T5836] usb 2-1: USB disconnect, device number 10 [ 137.649266][ T9] gspca_zc3xx: reg_w_i err -71 [ 137.649361][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 137.651339][ T9] usb 4-1: USB disconnect, device number 11 [ 139.222779][ T5944] cdc_ncm 3-1:1.1: bind() failure [ 139.272563][ T5944] usb 3-1: USB disconnect, device number 20 [ 139.455479][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.483457][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.562976][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 139.755493][ T5944] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 139.920138][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.166'. [ 139.942583][ T5944] usb 3-1: device descriptor read/64, error -71 [ 140.113109][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.185004][ T5944] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 140.282599][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 140.303288][ T24] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 140.345280][ T24] usb 6-1: config 0 has no interface number 0 [ 140.364537][ T24] usb 6-1: config 0 interface 200 has no altsetting 0 [ 140.380400][ T24] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 140.394591][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.404043][ T5944] usb 3-1: device descriptor read/64, error -71 [ 140.421329][ T24] usb 6-1: Product: syz [ 140.431136][ T24] usb 6-1: Manufacturer: syz [ 140.441248][ T24] usb 6-1: SerialNumber: syz [ 140.468023][ T24] usb 6-1: config 0 descriptor?? [ 140.574056][ T5944] usb usb3-port1: attempt power cycle [ 140.673541][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 140.806597][ T6726] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 140.815154][ T6726] lo: entered promiscuous mode [ 140.825110][ T6726] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.935148][ T24] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input10 [ 140.963638][ T5944] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 141.003337][ T5944] usb 3-1: device descriptor read/8, error -71 [ 141.025648][ T24] usb 6-1: USB disconnect, device number 7 [ 141.123386][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 141.236966][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.672579][ T5944] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 141.711364][ T5944] usb 3-1: device descriptor read/8, error -71 [ 141.711894][ T9] usb 4-1: config 0 descriptor?? [ 141.807620][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 141.913880][ T5944] usb usb3-port1: unable to enumerate USB device [ 142.133869][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.293510][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 142.309914][ T5906] usb 6-1: config 3 has an invalid interface number: 144 but max is 0 [ 142.347244][ T5906] usb 6-1: config 3 has no interface number 0 [ 142.363737][ T9] gspca_zc3xx: reg_w_i err -110 [ 142.369483][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 142.379931][ T5906] usb 6-1: config 3 interface 144 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 142.457236][ T6740] FAULT_INJECTION: forcing a failure. [ 142.457236][ T6740] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.521983][ T5906] usb 6-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=5c.1b [ 142.527255][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) [ 142.527280][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.527291][ T6740] Call Trace: [ 142.527298][ T6740] [ 142.527306][ T6740] dump_stack_lvl+0x189/0x250 [ 142.527336][ T6740] ? __pfx____ratelimit+0x10/0x10 [ 142.527359][ T6740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.527382][ T6740] ? __pfx__printk+0x10/0x10 [ 142.527401][ T6740] ? __might_fault+0xb0/0x130 [ 142.527437][ T6740] should_fail_ex+0x414/0x560 [ 142.527482][ T6740] _copy_from_iter+0x1de/0x1790 [ 142.527511][ T6740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.527537][ T6740] ? policy_nodemask+0x27c/0x720 [ 142.527561][ T6740] ? __pfx__copy_from_iter+0x10/0x10 [ 142.527586][ T6740] ? set_page_refcounted+0xa0/0x1e0 [ 142.527604][ T6740] ? page_copy_sane+0x4e/0x280 [ 142.527625][ T6740] copy_page_from_iter+0xdd/0x170 [ 142.527649][ T6740] tun_get_user+0x1d7b/0x3e90 [ 142.527678][ T6740] ? tun_get_user+0x6f6/0x3e90 [ 142.527706][ T6740] ? aa_file_perm+0x44d/0x1550 [ 142.527723][ T6740] ? __pfx_tun_get_user+0x10/0x10 [ 142.527742][ T6740] ? _parse_integer_limit+0x1ae/0x1f0 [ 142.527778][ T6740] ? __lock_acquire+0xab9/0xd20 [ 142.527802][ T6740] ? ref_tracker_alloc+0x318/0x460 [ 142.527817][ T6740] ? __lock_acquire+0xab9/0xd20 [ 142.527835][ T6740] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.527857][ T6740] ? tun_get+0x1c/0x2f0 [ 142.527883][ T6740] ? tun_get+0x1c/0x2f0 [ 142.527901][ T6740] ? tun_get+0x1c/0x2f0 [ 142.527926][ T6740] tun_chr_write_iter+0x113/0x200 [ 142.527949][ T6740] vfs_write+0x5c9/0xb30 [ 142.527978][ T6740] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.527999][ T6740] ? __pfx_vfs_write+0x10/0x10 [ 142.528033][ T6740] ? __fget_files+0x2a/0x420 [ 142.528058][ T6740] ksys_write+0x145/0x250 [ 142.528081][ T6740] ? exc_page_fault+0x82/0x100 [ 142.528104][ T6740] ? __pfx_ksys_write+0x10/0x10 [ 142.528137][ T6740] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 142.528161][ T6740] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.528186][ T6740] __do_fast_syscall_32+0xb6/0x2b0 [ 142.528211][ T6740] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.528237][ T6740] do_fast_syscall_32+0x34/0x80 [ 142.528260][ T6740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.528281][ T6740] RIP: 0023:0xf7fd5539 [ 142.528296][ T6740] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.528310][ T6740] RSP: 002b:00000000f54c6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 142.528330][ T6740] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 142.528343][ T6740] RDX: 000000000000002a RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 142.528353][ T6740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.528363][ T6740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.528374][ T6740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.528401][ T6740] [ 142.842742][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.886809][ T5906] usb 6-1: Product: syz [ 142.891166][ T5906] usb 6-1: Manufacturer: syz [ 142.896249][ T5906] usb 6-1: SerialNumber: syz [ 142.955592][ T5836] usb 4-1: USB disconnect, device number 12 [ 142.994121][ T5906] usb 6-1: bad CDC descriptors [ 143.205865][ T5906] usb 6-1: USB disconnect, device number 8 [ 143.223854][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 143.239998][ T6753] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 143.463741][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 143.481585][ T24] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 143.492849][ T24] usb 3-1: config 0 has no interface number 0 [ 143.498994][ T24] usb 3-1: config 0 interface 239 has no altsetting 0 [ 143.507905][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=6b.0e [ 143.509524][ T6763] fuse: Bad value for 'group_id' [ 143.517622][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.528860][ T24] usb 3-1: config 0 descriptor?? [ 143.537927][ T6763] fuse: Bad value for 'group_id' [ 143.592635][ T5836] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 143.744532][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.762585][ T5836] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 143.764706][ T24] usb 3-1: string descriptor 0 read error: -71 [ 143.799249][ T24] iowarrior 3-1:0.239: no interrupt-in endpoint found [ 143.816188][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.818239][ T24] usb 3-1: USB disconnect, device number 25 [ 143.896585][ T5836] usb 1-1: config 0 descriptor?? [ 144.134321][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.151351][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.153642][ T6774] FAULT_INJECTION: forcing a failure. [ 144.153642][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.173251][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.5.186 Not tainted syzkaller #0 PREEMPT(full) [ 144.173278][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.173288][ T6774] Call Trace: [ 144.173295][ T6774] [ 144.173303][ T6774] dump_stack_lvl+0x189/0x250 [ 144.173333][ T6774] ? __pfx____ratelimit+0x10/0x10 [ 144.173357][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.173382][ T6774] ? __pfx__printk+0x10/0x10 [ 144.173402][ T6774] ? __might_fault+0xb0/0x130 [ 144.173441][ T6774] should_fail_ex+0x414/0x560 [ 144.173474][ T6774] _copy_from_user+0x2d/0xb0 [ 144.173499][ T6774] cmsghdr_from_user_compat_to_kern+0x50b/0x800 [ 144.173534][ T6774] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 144.173566][ T6774] ____sys_sendmsg+0x20f/0x830 [ 144.173593][ T6774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.173631][ T6774] ___sys_sendmsg+0x21f/0x2a0 [ 144.173655][ T6774] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.173716][ T6774] ? __fget_files+0x2a/0x420 [ 144.173734][ T6774] ? __fget_files+0x3a0/0x420 [ 144.173763][ T6774] __sys_sendmsg+0x164/0x220 [ 144.173787][ T6774] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.173816][ T6774] ? __pfx_ksys_write+0x10/0x10 [ 144.173853][ T6774] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 144.173880][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.173908][ T6774] __do_fast_syscall_32+0xb6/0x2b0 [ 144.173935][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.173963][ T6774] do_fast_syscall_32+0x34/0x80 [ 144.173989][ T6774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.174012][ T6774] RIP: 0023:0xf706d539 [ 144.174029][ T6774] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.174045][ T6774] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 144.174065][ T6774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001600 [ 144.174079][ T6774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.174090][ T6774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.174101][ T6774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.174112][ T6774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.174142][ T6774] [ 144.643777][ T5836] usbhid 1-1:0.0: can't add hid device: -71 [ 144.650096][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.693541][ T5836] usb 1-1: USB disconnect, device number 8 [ 144.785029][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 144.801091][ T6783] process 'syz.2.189' launched '/dev/fd/5' with NULL argv: empty string added [ 145.122720][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.205906][ T6783] fuse: Bad value for 'fd' [ 145.332576][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 145.387886][ T5906] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 145.400007][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.427556][ T5906] usb 2-1: Product: syz [ 145.442299][ T5906] usb 2-1: Manufacturer: syz [ 145.447344][ T5906] usb 2-1: SerialNumber: syz [ 145.532303][ T6803] loop6: detected capacity change from 0 to 7 [ 145.543717][ T5906] usb 2-1: config 0 descriptor?? [ 145.547678][ T6803] Dev loop6: unable to read RDB block 7 [ 145.573213][ T6803] loop6: unable to read partition table [ 145.630099][ T6803] loop6: partition table beyond EOD, truncated [ 145.656608][ T6803] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 145.852776][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.872604][ T47] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 146.036940][ T47] usb 6-1: config 220 has an invalid descriptor of length 115, skipping remainder of the config [ 146.052576][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 146.058407][ T47] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 146.078372][ T47] usb 6-1: config 220 interface 0 has no altsetting 0 [ 146.078433][ T5836] usb 1-1: New USB device found, idVendor=1004, idProduct=65aa, bcdDevice=4f.75 [ 146.094903][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.096458][ T47] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 146.103568][ T5836] usb 1-1: Product: syz [ 146.124131][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.132957][ T47] usb 6-1: Product: syz [ 146.137365][ T47] usb 6-1: Manufacturer: syz [ 146.141346][ T5836] usb 1-1: Manufacturer: syz [ 146.152376][ T47] usb 6-1: SerialNumber: syz [ 146.157771][ T5836] usb 1-1: SerialNumber: syz [ 146.174708][ T5836] usb 1-1: config 0 descriptor?? [ 146.197596][ T5836] usb 1-1: bad CDC descriptors [ 146.242649][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.267076][ T6816] PKCS8: Unsupported PKCS#8 version [ 146.425494][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.426592][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 146.447801][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.460090][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.470165][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.496231][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.504919][ T5906] usb 4-1: Product: syz [ 146.509552][ T5906] usb 4-1: Manufacturer: syz [ 146.514578][ T5906] usb 4-1: SerialNumber: syz [ 146.550451][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 146.966249][ T5183] bcm5974 4-1:1.0: could not read from device [ 146.976798][ T5183] bcm5974 4-1:1.0: could not read from device [ 146.988686][ T5906] usb 4-1: USB disconnect, device number 13 [ 147.762130][ T5906] usb 2-1: USB disconnect, device number 11 [ 148.212717][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 148.370587][ T9] usb 1-1: USB disconnect, device number 9 [ 148.386773][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 148.419781][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.471919][ T5906] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.503599][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.529276][ T5906] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 148.540832][ T47] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 148.577254][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.601708][ T47] uvcvideo 6-1:220.0: No valid video chain found. [ 148.618909][ T5906] usb 2-1: config 0 descriptor?? [ 148.646229][ T47] usb 6-1: USB disconnect, device number 9 [ 148.671049][ T6825] FAULT_INJECTION: forcing a failure. [ 148.671049][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 148.683895][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.0.202 Not tainted syzkaller #0 PREEMPT(full) [ 148.683922][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.683933][ T6825] Call Trace: [ 148.683942][ T6825] [ 148.683951][ T6825] dump_stack_lvl+0x189/0x250 [ 148.683984][ T6825] ? __pfx____ratelimit+0x10/0x10 [ 148.684009][ T6825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.684035][ T6825] ? __pfx__printk+0x10/0x10 [ 148.684063][ T6825] ? skb_get_poff+0x11b/0x1b0 [ 148.684083][ T6825] ? __lock_acquire+0xab9/0xd20 [ 148.684107][ T6825] should_fail_ex+0x414/0x560 [ 148.684152][ T6825] should_failslab+0xa8/0x100 [ 148.684174][ T6825] kmem_cache_alloc_noprof+0x74/0x6e0 [ 148.684202][ T6825] ? skb_clone+0x212/0x3a0 [ 148.684221][ T6825] ? run_filter+0x23/0x270 [ 148.684254][ T6825] skb_clone+0x212/0x3a0 [ 148.684274][ T6825] ? packet_rcv+0x567/0x1730 [ 148.684303][ T6825] packet_rcv+0x65b/0x1730 [ 148.684337][ T6825] ? __pfx_packet_rcv+0x10/0x10 [ 148.684365][ T6825] __netif_receive_skb_core+0x3465/0x4380 [ 148.684403][ T6825] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.684429][ T6825] ? arch_stack_walk+0xfc/0x150 [ 148.684466][ T6825] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 148.684490][ T6825] ? stack_trace_save+0x9c/0xe0 [ 148.684514][ T6825] ? __pfx_stack_trace_save+0x10/0x10 [ 148.684541][ T6825] ? stack_depot_save_flags+0x40/0x860 [ 148.684576][ T6825] ? __lock_acquire+0xab9/0xd20 [ 148.684602][ T6825] ? netif_receive_skb+0x115/0x790 [ 148.684628][ T6825] ? netif_receive_skb+0x115/0x790 [ 148.684655][ T6825] __netif_receive_skb+0x72/0x380 [ 148.684686][ T6825] ? netif_receive_skb+0x115/0x790 [ 148.684710][ T6825] netif_receive_skb+0x1cb/0x790 [ 148.684733][ T6825] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 148.684756][ T6825] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.684787][ T6825] ? tun_rx_batched+0x160/0x730 [ 148.684814][ T6825] tun_rx_batched+0x1b9/0x730 [ 148.684836][ T6825] ? __lock_acquire+0xab9/0xd20 [ 148.684860][ T6825] ? __pfx_tun_rx_batched+0x10/0x10 [ 148.684887][ T6825] ? tun_get_user+0x272f/0x3e90 [ 148.684925][ T6825] tun_get_user+0x2b65/0x3e90 [ 148.684957][ T6825] ? tun_get_user+0x6f6/0x3e90 [ 148.684981][ T6825] ? tun_get_user+0x272f/0x3e90 [ 148.685009][ T6825] ? aa_file_perm+0x44d/0x1550 [ 148.685027][ T6825] ? __pfx_tun_get_user+0x10/0x10 [ 148.685062][ T6825] ? __lock_acquire+0xab9/0xd20 [ 148.685088][ T6825] ? ref_tracker_alloc+0x318/0x460 [ 148.685104][ T6825] ? __lock_acquire+0xab9/0xd20 [ 148.685133][ T6825] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.685158][ T6825] ? tun_get+0x1c/0x2f0 [ 148.685187][ T6825] ? tun_get+0x1c/0x2f0 [ 148.685208][ T6825] ? tun_get+0x1c/0x2f0 [ 148.685236][ T6825] tun_chr_write_iter+0x113/0x200 [ 148.685261][ T6825] vfs_write+0x5c9/0xb30 [ 148.685294][ T6825] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.685318][ T6825] ? __pfx_vfs_write+0x10/0x10 [ 148.685357][ T6825] ? __fget_files+0x2a/0x420 [ 148.685385][ T6825] ksys_write+0x145/0x250 [ 148.685410][ T6825] ? exc_page_fault+0x82/0x100 [ 148.685437][ T6825] ? __pfx_ksys_write+0x10/0x10 [ 148.685467][ T6825] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 148.685495][ T6825] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.685524][ T6825] __do_fast_syscall_32+0xb6/0x2b0 [ 148.685551][ T6825] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.685580][ T6825] do_fast_syscall_32+0x34/0x80 [ 148.685606][ T6825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.685629][ T6825] RIP: 0023:0xf7fd5539 [ 148.685647][ T6825] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.685663][ T6825] RSP: 002b:00000000f54c6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 148.685684][ T6825] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 148.685698][ T6825] RDX: 000000000000002a RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 148.685710][ T6825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.685722][ T6825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.685732][ T6825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.685763][ T6825] [ 149.104254][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.551250][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 149.557446][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 149.568957][ T5906] usb 2-1: USB disconnect, device number 12 [ 149.849583][ T6851] loop6: detected capacity change from 0 to 7 [ 149.876380][ T6851] Dev loop6: unable to read RDB block 7 [ 149.882966][ T6851] loop6: unable to read partition table [ 149.889042][ T6851] loop6: partition table beyond EOD, truncated [ 149.896671][ T6851] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 150.065505][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 150.223463][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 150.240771][ T5906] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 150.359070][ T6856] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 150.370028][ T5906] usb 6-1: config 0 has no interface number 0 [ 150.395191][ T5906] usb 6-1: config 0 interface 125 has no altsetting 0 [ 150.424489][ T5906] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 150.434188][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.479565][ T5906] usb 6-1: Product: syz [ 150.494266][ T5906] usb 6-1: Manufacturer: syz [ 150.507460][ T5906] usb 6-1: SerialNumber: syz [ 150.581033][ T5906] usb 6-1: config 0 descriptor?? [ 150.808332][ T5906] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 151.118342][ T6872] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 151.209422][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.225459][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.281994][ T6876] lo: left promiscuous mode [ 151.284165][ T30] audit: type=1326 audit(1761687185.431:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 151.302900][ T6883] FAULT_INJECTION: forcing a failure. [ 151.302900][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.339915][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.344249][ T30] audit: type=1326 audit(1761687185.461:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 151.347713][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.392688][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 151.392719][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.392730][ T6883] Call Trace: [ 151.392738][ T6883] [ 151.392747][ T6883] dump_stack_lvl+0x189/0x250 [ 151.392778][ T6883] ? __pfx____ratelimit+0x10/0x10 [ 151.392802][ T6883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.392827][ T6883] ? __pfx__printk+0x10/0x10 [ 151.392859][ T6883] should_fail_ex+0x414/0x560 [ 151.392893][ T6883] _copy_to_user+0x31/0xb0 [ 151.392919][ T6883] simple_read_from_buffer+0xe1/0x170 [ 151.392952][ T6883] proc_fail_nth_read+0x1b3/0x220 [ 151.392979][ T6883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.393006][ T6883] ? rw_verify_area+0x2a6/0x4d0 [ 151.393030][ T6883] ? __lock_acquire+0xab9/0xd20 [ 151.393046][ T6883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.393071][ T6883] vfs_read+0x200/0xa30 [ 151.393095][ T6883] ? fdget_pos+0x247/0x320 [ 151.393117][ T6883] ? __pfx___mutex_lock+0x10/0x10 [ 151.393145][ T6883] ? __pfx_vfs_read+0x10/0x10 [ 151.393173][ T6883] ? __fget_files+0x2a/0x420 [ 151.393197][ T6883] ? __fget_files+0x3a0/0x420 [ 151.393215][ T6883] ? __fget_files+0x2a/0x420 [ 151.393244][ T6883] ksys_read+0x145/0x250 [ 151.393270][ T6883] ? exc_page_fault+0x82/0x100 [ 151.393296][ T6883] ? __pfx_ksys_read+0x10/0x10 [ 151.393326][ T6883] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 151.393365][ T6883] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.393395][ T6883] __do_fast_syscall_32+0xb6/0x2b0 [ 151.393424][ T6883] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.393453][ T6883] do_fast_syscall_32+0x34/0x80 [ 151.393480][ T6883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.393504][ T6883] RIP: 0023:0xf708d539 [ 151.393522][ T6883] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.393539][ T6883] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 151.393561][ T6883] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 151.393575][ T6883] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 151.393587][ T6883] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 151.393598][ T6883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.393610][ T6883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.393643][ T6883] [ 151.409762][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.488101][ T5906] ueagle-atm 6-1:0.125: usbatm_usb_probe: bind failed: -19! [ 151.488788][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.671976][ T5906] usb 6-1: USB disconnect, device number 10 [ 151.774818][ T6877] team0: Port device syz_tun added [ 151.787867][ T6891] loop6: detected capacity change from 0 to 7 [ 151.831998][ T6891] Dev loop6: unable to read RDB block 7 [ 151.842810][ T5906] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 151.884417][ T6891] loop6: unable to read partition table [ 151.902876][ T6891] loop6: partition table beyond EOD, truncated [ 151.911061][ T6891] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 151.940056][ T30] audit: type=1400 audit(1761687186.091:45): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=6894 comm="syz.3.224" [ 152.015871][ T5906] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 152.032735][ T5906] usb 6-1: config 0 has no interface number 0 [ 152.047277][ T5906] usb 6-1: config 0 interface 125 has no altsetting 0 [ 152.068903][ T5906] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 152.089995][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.102337][ T5906] usb 6-1: Product: syz [ 152.106945][ T5906] usb 6-1: Manufacturer: syz [ 152.117035][ T5906] usb 6-1: SerialNumber: syz [ 152.126094][ T5906] usb 6-1: config 0 descriptor?? [ 152.192666][ T5944] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 152.241314][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 152.392724][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 152.405968][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 152.413544][ T5944] usb 4-1: config 0 has no interfaces? [ 152.416459][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 152.434807][ T5944] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 152.435372][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.462769][ T9] usb 1-1: Product: syz [ 152.471556][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.485015][ T5944] usb 4-1: Product: syz [ 152.489308][ T5944] usb 4-1: Manufacturer: syz [ 152.513166][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.520665][ T5944] usb 4-1: SerialNumber: syz [ 152.521746][ T9] usb 1-1: Manufacturer: syz [ 152.527305][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.543953][ T5898] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 152.562125][ T9] usb 1-1: SerialNumber: syz [ 152.620497][ T5944] r8152-cfgselector 4-1: Unknown version 0x0000 [ 152.628566][ T5944] r8152-cfgselector 4-1: config 0 descriptor?? [ 152.721339][ T6907] binder: 6846:6907 ioctl c0306201 80000000 returned -14 [ 152.733345][ T5898] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 152.743961][ T5898] usb 2-1: config 0 has no interface number 0 [ 152.756123][ T5898] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.767531][ T5898] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 152.904449][ T5898] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 152.919224][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.935644][ T5898] usb 2-1: Product: syz [ 152.943130][ T5898] usb 2-1: Manufacturer: syz [ 152.950935][ T5898] usb 2-1: SerialNumber: syz [ 152.964877][ T5898] usb 2-1: config 0 descriptor?? [ 152.979984][ T6903] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 153.001892][ T5898] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 153.019051][ T9] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 153.360613][ T5898] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 153.518763][ T47] usb 1-1: USB disconnect, device number 10 [ 153.528779][ T47] usblp1: removed [ 153.736623][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 153.744680][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.773416][ T6918] tipc: Started in network mode [ 153.775011][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.782445][ T6918] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 153.799540][ T6918] tipc: Enabling of bearer rejected, failed to enable media [ 153.860901][ T5906] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 153.986805][ T47] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 154.142702][ T47] usb 4-1: device descriptor read/64, error -71 [ 154.162124][ T6927] netem: change failed [ 154.204380][ T6934] netlink: 'syz.5.234': attribute type 2 has an invalid length. [ 154.268527][ T6936] loop6: detected capacity change from 0 to 7 [ 154.277564][ T6936] Dev loop6: unable to read RDB block 7 [ 154.285376][ T6936] loop6: unable to read partition table [ 154.291262][ T6936] loop6: partition table beyond EOD, truncated [ 154.297566][ T6936] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 154.384977][ T47] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 154.413863][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 154.522660][ T47] usb 4-1: device descriptor read/64, error -71 [ 154.585589][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.595437][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 154.605675][ T10] usb 1-1: config 129 has an invalid interface number: 145 but max is 0 [ 154.616198][ T10] usb 1-1: config 129 has no interface number 0 [ 154.662146][ T47] usb usb4-port1: attempt power cycle [ 154.678777][ T5906] ueagle-atm 6-1:0.125: usbatm_usb_probe: bind failed: -19! [ 154.690322][ T10] usb 1-1: config 129 interface 145 has no altsetting 0 [ 154.710163][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 154.720572][ T5906] usb 6-1: USB disconnect, device number 11 [ 154.738581][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.746892][ T10] usb 1-1: Product: syz [ 154.751315][ T10] usb 1-1: Manufacturer: syz [ 154.756238][ T10] usb 1-1: SerialNumber: syz [ 154.989367][ T10] usb 1-1: USB disconnect, device number 11 [ 155.023426][ T47] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 155.054995][ T47] usb 4-1: device descriptor read/8, error -71 [ 155.165818][ T10] usb 2-1: USB disconnect, device number 13 [ 155.216167][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 155.312583][ T47] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 155.354561][ T47] usb 4-1: device descriptor read/8, error -71 [ 155.363667][ T5906] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 155.466145][ T47] usb usb4-port1: unable to enumerate USB device [ 155.472357][ T6962] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 155.479784][ T6962] syzkaller0: entered promiscuous mode [ 155.485488][ T6962] syzkaller0: entered allmulticast mode [ 155.522581][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 155.529793][ T5906] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 155.550911][ T5906] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.578261][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.591455][ T5906] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.601272][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.609814][ T5906] usb 6-1: Product: syz [ 155.615721][ T5906] usb 6-1: Manufacturer: syz [ 155.620432][ T5906] usb 6-1: SerialNumber: syz [ 155.732683][ T5944] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.741606][ T6967] loop6: detected capacity change from 0 to 7 [ 155.758849][ T5883] Dev loop6: unable to read RDB block 7 [ 155.766927][ T5883] loop6: unable to read partition table [ 155.774317][ T5883] loop6: partition table beyond EOD, truncated [ 155.783943][ T6967] Dev loop6: unable to read RDB block 7 [ 155.790571][ T6967] loop6: unable to read partition table [ 155.797179][ T6967] loop6: partition table beyond EOD, truncated [ 155.807449][ T6967] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 155.882657][ T5944] usb 2-1: device descriptor read/64, error -71 [ 156.036078][ T5906] usb 6-1: 0:2 : does not exist [ 156.122622][ T5944] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.176132][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 156.241013][ T5906] usb 6-1: USB disconnect, device number 12 [ 156.252875][ T5944] usb 2-1: device descriptor read/64, error -71 [ 156.263275][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 156.286731][ T6977] batadv1: entered promiscuous mode [ 156.383341][ T5944] usb usb2-port1: attempt power cycle [ 156.624430][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 156.692644][ T5898] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.742862][ T5944] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.767155][ T5944] usb 2-1: device descriptor read/8, error -71 [ 156.785611][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.805394][ T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 156.822813][ T10] usb 3-1: config 0 has no interface number 0 [ 156.829925][ T10] usb 3-1: config 0 interface 31 has no altsetting 0 [ 156.841973][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16 [ 156.854546][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.863301][ T10] usb 3-1: Product: syz [ 156.868369][ T10] usb 3-1: Manufacturer: syz [ 156.881233][ T10] usb 3-1: SerialNumber: syz [ 156.883426][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 156.900263][ T5898] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.922602][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.938060][ T10] usb 3-1: config 0 descriptor?? [ 156.946254][ T10] port100 3-1:0.31: NFC: Could not find bulk-in or bulk-out endpoint [ 156.951080][ T5898] usb 1-1: Product: syz [ 156.961920][ T5898] usb 1-1: Manufacturer: syz [ 156.971650][ T5898] usb 1-1: SerialNumber: syz [ 156.991642][ T5898] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.998714][ T5898] r8152-cfgselector 1-1: config 0 descriptor?? [ 157.024088][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 157.072899][ T5944] usb 2-1: device descriptor read/8, error -71 [ 157.169513][ T10] usb 3-1: USB disconnect, device number 26 [ 157.193036][ T5944] usb usb2-port1: unable to enumerate USB device [ 157.242839][ T47] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 157.438226][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.463981][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 157.478713][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 157.491767][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 157.502882][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.520414][ T47] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 157.524474][ T6995] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 157.530397][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 157.549109][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 157.558462][ T47] usb 4-1: Product: syz [ 157.558763][ T6995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.256'. [ 157.563076][ T47] usb 4-1: Manufacturer: syz [ 157.563097][ T47] usb 4-1: SerialNumber: syz [ 157.584279][ T47] usb 4-1: config 0 descriptor?? [ 157.585639][ T6995] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 157.817123][ T47] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 157.837463][ T47] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 158.017378][ T47] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 158.035553][ T47] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 158.063812][ T47] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 158.101123][ T7007] loop6: detected capacity change from 0 to 7 [ 158.111504][ T7007] Dev loop6: unable to read RDB block 7 [ 158.112995][ T10] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 158.117893][ T7007] loop6: unable to read partition table [ 158.135597][ T7007] loop6: partition table beyond EOD, truncated [ 158.147916][ T7007] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 158.222734][ T47] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 158.263434][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 158.438689][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.450092][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.465459][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.475785][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.490598][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.501028][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.531948][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.571587][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.608805][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.621549][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.637479][ T30] audit: type=1804 audit(1761687192.791:46): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.262" name="/newroot/50/file1" dev="tmpfs" ino=278 res=1 errno=0 [ 158.674014][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 158.724979][ T7017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.830623][ T47] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 158.850333][ T47] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 158.854765][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 158.890087][ T47] usb 4-1: USB disconnect, device number 19 [ 158.909213][ T10] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1136, setting to 64 [ 158.952607][ T10] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.966935][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 158.977824][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.013492][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.040410][ T10] usb 3-1: Product: 琘 [ 159.050506][ T10] usb 3-1: Manufacturer: ఇ [ 159.062745][ T10] usb 3-1: SerialNumber: ш [ 159.089446][ T7015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.099264][ T7015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.508010][ T10] usb 3-1: USB disconnect, device number 27 [ 159.545561][ T7028] syzkaller0: entered promiscuous mode [ 159.562300][ T7035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.582451][ T7028] syzkaller0: entered allmulticast mode [ 159.705158][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 159.824367][ T7035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.734571][ T5956] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 160.908015][ T5956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.919423][ T5956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 160.930534][ T5956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 160.941795][ T5956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.973891][ T5956] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.984144][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.992362][ T5956] usb 6-1: Product: syz [ 160.997868][ T5956] usb 6-1: Manufacturer: syz [ 161.003307][ T5956] usb 6-1: SerialNumber: syz [ 161.021076][ T7060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.032009][ T5956] cdc_mbim 6-1:1.0: skipping garbage [ 161.237735][ T7060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.245387][ T7060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.590019][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.599073][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.690289][ T7050] tipc: Started in network mode [ 161.695597][ T7050] tipc: Node identity 22cde27438ea, cluster identity 4711 [ 161.713952][ T7050] tipc: Enabled bearer , priority 0 [ 161.738854][ T7054] syzkaller0: entered promiscuous mode [ 161.767798][ T7054] syzkaller0: entered allmulticast mode [ 161.801171][ T7062] tipc: Resetting bearer [ 161.914349][ T7062] tipc: Resetting bearer [ 161.931557][ T7062] tipc: Disabling bearer [ 162.257274][ T7060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 162.265309][ T7060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 162.279809][ T5956] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 162.284668][ T7083] loop4: detected capacity change from 0 to 7 [ 162.297887][ T6014] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 162.304985][ T6014] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 162.320775][ T6014] loop4: p2 start 4294901760 is beyond EOD, truncated [ 162.336269][ T6014] loop4: p3 start 4294836224 is beyond EOD, truncated [ 162.343592][ T6014] loop4: p4 size 327680 extends beyond EOD, truncated [ 162.355240][ T6014] loop4: p5 size 8323072 extends beyond EOD, truncated [ 162.367614][ T6014] loop4: p6 start 8192 is beyond EOD, truncated [ 162.376393][ T7068] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 162.385970][ T7068] bond1: peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 162.397277][ T7083] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 162.398540][ T7068] bond1: entered allmulticast mode [ 162.407313][ T7083] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 162.409634][ T7068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.419814][ T7083] loop4: p2 start 4294901760 is beyond EOD, truncated [ 162.429047][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.430863][ T7083] loop4: p3 start 4294836224 is beyond EOD, truncated [ 162.450953][ T7083] loop4: p4 size 327680 extends beyond EOD, truncated [ 162.461822][ T7083] loop4: p5 size 8323072 extends beyond EOD, truncated [ 162.474008][ T7083] loop4: p6 start 8192 is beyond EOD, truncated [ 162.595502][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 162.634028][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.664788][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.686606][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.727164][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.747558][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.785024][ T10] usb 2-1: config 0 descriptor?? [ 162.796581][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 162.808226][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.825210][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 163.152601][ T47] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.172614][ T5906] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 163.188910][ T7097] kvm: kvm [7096]: vcpu0, guest rIP: 0x7c Unhandled WRMSR(0xc1) = 0xb8fe [ 163.198015][ T7097] kvm: kvm [7096]: vcpu0, guest rIP: 0x7c Unhandled WRMSR(0xc2) = 0xb8fe [ 163.210068][ T7097] kvm: kvm [7096]: vcpu0, guest rIP: 0x7c Unhandled WRMSR(0x11e) = 0xb8fe [ 163.227295][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0004/input/input12 [ 163.252686][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.267791][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.303242][ T5898] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 163.318498][ T47] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 163.329338][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.334138][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 163.353947][ T47] usb 1-1: config 0 descriptor?? [ 163.361008][ T10] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 163.377880][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 163.379700][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.447004][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17433, setting to 1024 [ 163.482296][ T5906] usb 4-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 163.503470][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.512691][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 163.519188][ T10] usb 2-1: USB disconnect, device number 18 [ 163.527657][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.546201][ T5906] usb 4-1: config 0 descriptor?? [ 163.563606][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.575441][ T7094] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 163.586212][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.621670][ T5898] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 163.637102][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.660397][ T5898] usb 3-1: config 0 descriptor?? [ 163.912934][ T47] gspca_zc3xx: reg_w_i err -110 [ 163.917961][ T47] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 164.006796][ T5906] ezkey 0003:0518:0002.0005: hidraw0: USB HID v0.04 Device [HID 0518:0002] on usb-dummy_hcd.3-1/input0 [ 164.253650][ T5906] usb 4-1: USB disconnect, device number 20 [ 164.280453][ T5920] usb 1-1: USB disconnect, device number 13 [ 164.562642][ T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 164.638017][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.653689][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.692761][ T47] usb 2-1: device descriptor read/64, error -71 [ 164.943719][ T47] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 164.988722][ T7119] fuse: blksize only supported for fuseblk [ 165.012715][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.112612][ T47] usb 2-1: device descriptor read/64, error -71 [ 165.183058][ T5920] usb 1-1: device descriptor read/64, error -71 [ 165.223033][ T47] usb usb2-port1: attempt power cycle [ 165.422668][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 165.562618][ T5920] usb 1-1: device descriptor read/64, error -71 [ 165.569160][ T47] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.603558][ T47] usb 2-1: device descriptor read/8, error -71 [ 165.692974][ T5920] usb usb1-port1: attempt power cycle [ 165.751969][ T7121] loop8: detected capacity change from 0 to 8 [ 165.761114][ T7121] Dev loop8: unable to read RDB block 8 [ 165.767456][ T7121] loop8: unable to read partition table [ 165.775735][ T7121] loop8: partition table beyond EOD, truncated [ 165.783539][ T7121] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 165.852833][ T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 165.874806][ T47] usb 2-1: device descriptor read/8, error -71 [ 165.929552][ T5898] usbhid 3-1:0.0: can't add hid device: -71 [ 165.938436][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 165.955708][ T5898] usb 3-1: USB disconnect, device number 28 [ 165.990542][ T47] usb usb2-port1: unable to enumerate USB device [ 166.042988][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.074471][ T5920] usb 1-1: device descriptor read/8, error -71 [ 166.125842][ T7125] netlink: 96 bytes leftover after parsing attributes in process `syz.3.288'. [ 166.313321][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.346295][ T5920] usb 1-1: device descriptor read/8, error -71 [ 166.463785][ T5920] usb usb1-port1: unable to enumerate USB device [ 166.476192][ T7136] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 166.497805][ T7136] hub 9-0:1.0: USB hub found [ 166.504996][ T7136] hub 9-0:1.0: 1 port detected [ 167.353841][ T5956] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 167.403365][ T5956] wwan wwan0: port wwan0mbim0 attached [ 167.466480][ T5956] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 5e:ca:3f:a8:83:48 [ 167.933811][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 168.001954][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.005371][ T5906] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 168.027233][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.135533][ T7150] usb usb8: usbfs: process 7150 (syz.0.295) did not claim interface 0 before use [ 168.144963][ T5956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.145007][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.145028][ T5956] usb 2-1: Product: syz [ 168.145044][ T5956] usb 2-1: Manufacturer: syz [ 168.145060][ T5956] usb 2-1: SerialNumber: syz [ 168.184277][ T5956] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.245357][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.255754][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 168.273621][ T5906] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 168.378283][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.421982][ T5906] usb 3-1: config 0 descriptor?? [ 168.471449][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 168.698989][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.731389][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.760057][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.797900][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.820112][ T5898] usb 2-1: USB disconnect, device number 23 [ 168.954530][ T7162] fuse: Invalid uid '00000000000000001025' [ 168.963429][ T5906] gspca_nw80x: reg_r err -71 [ 168.978977][ T5906] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 168.993989][ T5906] usb 3-1: USB disconnect, device number 29 [ 169.427950][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 169.463519][ T10] ath9k_htc: Failed to initialize the device [ 169.491602][ T5898] usb 2-1: ath9k_htc: USB layer deinitialized [ 169.510290][ T7168] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.560419][ T7168] netlink: 72 bytes leftover after parsing attributes in process `syz.5.299'. [ 169.873090][ T5906] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 170.072616][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 170.080836][ T5906] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.091149][ T5906] usb 1-1: config 0 has no interface number 0 [ 170.163557][ T5906] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.177086][ T5906] usb 1-1: config 0 interface 85 has no altsetting 0 [ 170.205207][ T7192] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 170.212879][ T7192] macsec1: entered promiscuous mode [ 170.289012][ T7192] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 170.345266][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.361999][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.477086][ T5920] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 170.527211][ T5906] usb 1-1: Product: syz [ 170.535671][ T5906] usb 1-1: Manufacturer: syz [ 170.552602][ T5906] usb 1-1: SerialNumber: syz [ 170.574695][ T5906] usb 1-1: config 0 descriptor?? [ 170.789005][ C0] ------------[ cut here ]------------ [ 170.794750][ C0] WARNING: CPU: 0 PID: 15 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 170.804739][ C0] Modules linked in: [ 170.808874][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 170.818185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.828296][ C0] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 170.834954][ C0] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 bc 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 26 e5 4e 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 170.855659][ C0] RSP: 0018:ffffc900001473e0 EFLAGS: 00010246 [ 170.861737][ C0] RAX: ffffc90000147400 RBX: 000000000000000c RCX: 0000000000000000 [ 170.869878][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000147448 [ 170.878074][ C0] RBP: ffffc900001474c8 R08: ffffc90000147447 R09: 0000000000000000 [ 170.886144][ C0] R10: ffffc90000147420 R11: fffff52000028e89 R12: 0000000000000000 [ 170.894319][ C0] R13: 1ffff92000028e80 R14: 0000000000060820 R15: dffffc0000000000 [ 170.902315][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 170.911488][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.918203][ C0] CR2: 0000000080050018 CR3: 0000000022350000 CR4: 00000000003526f0 [ 170.926389][ C0] Call Trace: [ 170.929705][ C0] [ 170.932716][ C0] ? run_ksoftirqd+0x9b/0x100 [ 170.937437][ C0] ? kthread+0x711/0x8a0 [ 170.941711][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.948167][ C0] ? policy_nodemask+0x28b/0x720 [ 170.953329][ C0] alloc_pages_mpol+0x232/0x4a0 [ 170.958188][ C0] ___kmalloc_large_node+0x5f/0x1b0 [ 170.963502][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 170.969298][ C0] __kmalloc_node_track_caller_noprof+0x133/0x800 [ 170.975739][ C0] ? __alloc_skb+0x142/0x2d0 [ 170.980509][ C0] ? rcu_is_watching+0x15/0xb0 [ 170.985296][ C0] ? __alloc_skb+0x142/0x2d0 [ 170.990023][ C0] kmalloc_reserve+0x1b8/0x290 [ 170.994807][ C0] __alloc_skb+0x142/0x2d0 [ 170.999238][ C0] __netdev_alloc_skb+0x108/0x970 [ 171.004657][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 171.010236][ C0] ? rcu_is_watching+0x15/0xb0 [ 171.015205][ C0] rx_submit+0x100/0xab0 [ 171.019576][ C0] rx_alloc_submit+0xa6/0x140 [ 171.024799][ C0] usbnet_bh+0x9a5/0xd70 [ 171.029055][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 171.034999][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 171.040733][ C0] process_scheduled_works+0xae1/0x17b0 [ 171.046520][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.052564][ C0] ? assign_work+0x3a1/0x410 [ 171.057207][ C0] bh_worker+0x2b1/0x600 [ 171.061479][ C0] tasklet_action+0xc/0x70 [ 171.066035][ C0] handle_softirqs+0x286/0x870 [ 171.070807][ C0] ? run_ksoftirqd+0x9b/0x100 [ 171.075527][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 171.080808][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.086090][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.091297][ C0] run_ksoftirqd+0x9b/0x100 [ 171.095824][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 171.101029][ C0] smpboot_thread_fn+0x542/0xa60 [ 171.106085][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.111485][ C0] kthread+0x711/0x8a0 [ 171.115768][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.121227][ C0] ? __pfx_kthread+0x10/0x10 [ 171.125848][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.131034][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.136247][ C0] ? __pfx_kthread+0x10/0x10 [ 171.140830][ C0] ret_from_fork+0x4bc/0x870 [ 171.145431][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 171.150802][ C0] ? __switch_to_asm+0x39/0x70 [ 171.155587][ C0] ? __switch_to_asm+0x33/0x70 [ 171.160746][ C0] ? __pfx_kthread+0x10/0x10 [ 171.165354][ C0] ret_from_fork_asm+0x1a/0x30 [ 171.170211][ C0] [ 171.173421][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.180867][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 171.190136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.200269][ C0] Call Trace: [ 171.203541][ C0] [ 171.206463][ C0] dump_stack_lvl+0x99/0x250 [ 171.211051][ C0] ? __asan_memcpy+0x40/0x70 [ 171.215648][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.220863][ C0] ? __pfx__printk+0x10/0x10 [ 171.225560][ C0] vpanic+0x237/0x6d0 [ 171.229557][ C0] ? __pfx_vpanic+0x10/0x10 [ 171.234124][ C0] panic+0xb9/0xc0 [ 171.237853][ C0] ? __pfx_panic+0x10/0x10 [ 171.242269][ C0] __warn+0x31b/0x4b0 [ 171.246244][ C0] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 171.252251][ C0] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 171.258391][ C0] report_bug+0x2be/0x4f0 [ 171.262716][ C0] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 171.268689][ C0] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 171.274831][ C0] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 171.280816][ C0] handle_bug+0x84/0x160 [ 171.285404][ C0] exc_invalid_op+0x1a/0x50 [ 171.289907][ C0] asm_exc_invalid_op+0x1a/0x20 [ 171.294746][ C0] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 171.301413][ C0] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 bc 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 26 e5 4e 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 171.321370][ C0] RSP: 0018:ffffc900001473e0 EFLAGS: 00010246 [ 171.327441][ C0] RAX: ffffc90000147400 RBX: 000000000000000c RCX: 0000000000000000 [ 171.335415][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000147448 [ 171.343740][ C0] RBP: ffffc900001474c8 R08: ffffc90000147447 R09: 0000000000000000 [ 171.351878][ C0] R10: ffffc90000147420 R11: fffff52000028e89 R12: 0000000000000000 [ 171.360160][ C0] R13: 1ffff92000028e80 R14: 0000000000060820 R15: dffffc0000000000 [ 171.368258][ C0] ? run_ksoftirqd+0x9b/0x100 [ 171.373026][ C0] ? kthread+0x711/0x8a0 [ 171.377279][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.383622][ C0] ? policy_nodemask+0x28b/0x720 [ 171.388585][ C0] alloc_pages_mpol+0x232/0x4a0 [ 171.393518][ C0] ___kmalloc_large_node+0x5f/0x1b0 [ 171.398735][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 171.404371][ C0] __kmalloc_node_track_caller_noprof+0x133/0x800 [ 171.410783][ C0] ? __alloc_skb+0x142/0x2d0 [ 171.415373][ C0] ? rcu_is_watching+0x15/0xb0 [ 171.420249][ C0] ? __alloc_skb+0x142/0x2d0 [ 171.424943][ C0] kmalloc_reserve+0x1b8/0x290 [ 171.429715][ C0] __alloc_skb+0x142/0x2d0 [ 171.434233][ C0] __netdev_alloc_skb+0x108/0x970 [ 171.439475][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 171.445197][ C0] ? rcu_is_watching+0x15/0xb0 [ 171.449955][ C0] rx_submit+0x100/0xab0 [ 171.454281][ C0] rx_alloc_submit+0xa6/0x140 [ 171.459144][ C0] usbnet_bh+0x9a5/0xd70 [ 171.463408][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 171.469164][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 171.474907][ C0] process_scheduled_works+0xae1/0x17b0 [ 171.480886][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.487127][ C0] ? assign_work+0x3a1/0x410 [ 171.491711][ C0] bh_worker+0x2b1/0x600 [ 171.496054][ C0] tasklet_action+0xc/0x70 [ 171.500500][ C0] handle_softirqs+0x286/0x870 [ 171.505628][ C0] ? run_ksoftirqd+0x9b/0x100 [ 171.510338][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 171.515705][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.521269][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.526292][ C0] run_ksoftirqd+0x9b/0x100 [ 171.530889][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 171.536188][ C0] smpboot_thread_fn+0x542/0xa60 [ 171.541143][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 171.546170][ C0] kthread+0x711/0x8a0 [ 171.550260][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.555884][ C0] ? __pfx_kthread+0x10/0x10 [ 171.560911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.566206][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.571408][ C0] ? __pfx_kthread+0x10/0x10 [ 171.576012][ C0] ret_from_fork+0x4bc/0x870 [ 171.580612][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 171.585751][ C0] ? __switch_to_asm+0x39/0x70 [ 171.590623][ C0] ? __switch_to_asm+0x33/0x70 [ 171.595603][ C0] ? __pfx_kthread+0x10/0x10 [ 171.600374][ C0] ret_from_fork_asm+0x1a/0x30 [ 171.605313][ C0] [ 171.609210][ C0] Kernel Offset: disabled [ 171.613620][ C0] Rebooting in 86400 seconds..