last executing test programs: 2m36.727682074s ago: executing program 4 (id=2799): unshare(0x2c060000) unshare(0x24020400) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x7) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="c422f941255169000048b8f3ffffff000000000f23d80f21f835000000800f23f8410f01d1c744240004280000c7442402638c5303c7442406000000000f011424c744240006010000c744240200000000ff1c2466b814000f00d0650f01c4b9800000c00f3235004000000f300fc7ad8b00000048b8c6000000000000000f23c00f21f83502000f000f23f8", 0x8c}], 0x1, 0x3b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r8, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000002280)="9c1b84", 0x3}], 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000140)) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x554, 0x2400) ioctl$BLKGETDISKSEQ(r10, 0x80081280, &(0x7f0000000040)) 2m36.584334288s ago: executing program 4 (id=2801): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private0, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@local}}, &(0x7f0000000100)=0x115) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) io_setup(0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) shutdown(r4, 0x1) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r4, r5, 0x0, 0xffffffff004) (async, rerun: 64) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) (async, rerun: 64) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m35.064227559s ago: executing program 4 (id=2809): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000020690780a210104ac1414aa44140601ffffffffffffaa7ee000000200008001070d09904b30ad2bb75f7e1e5d00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffffffff"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000400", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2m34.798746775s ago: executing program 4 (id=2812): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x160, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x2, 0x1, 0x3, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ']'}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x85, 0x29, 0xf7}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@mdlm_detail={0xd2, 0x24, 0x13, 0x6, "72dea816c9a1c8ca33d6325012760bf870ae121405186fe44b6b39690ed2fcaef16294902bd2aaa9211c89d892dbc2a0bc1d783356861c3915e007965414e218f9f2aa76df9a78318fb1b0c53635859f7a0f64ea43a5502ad9d4b43bd152d9090e7738401a0536114f41af450e5845716b02aafe2b81f3101064da3a64804f6343295fce93a3cd929ed506a2d9af440995edb974eea9307a12a5554535dd8769177f4217954f4917d0b158d5c92ac598448882f1ba3e243b5b42e570684408de4441bb784f3ece405122833d827f"}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4}, @country_functional={0xe, 0x24, 0x7, 0x2, 0x2, [0x8, 0x400, 0x2, 0xaf83]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x450, 0x5b, 0x9, 0x83}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x9, 0xd}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x40, 0xff, 0x7, 0x20, 0x6}, 0x1be, &(0x7f0000000400)={0x5, 0xf, 0x1be, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x9, 0x0, 0x9, [0xff0000, 0x21, 0xf, 0x30, 0xff0000]}, @generic={0xf5, 0x10, 0xa, "9bf3ac2a7367147298775164ae663625acc3878a64b8c0bc9ad0943f72e72709071eb0331803b05cfe5311c1366371dbeadb3653a628e96aa40f04519ab32da42145498be4777be77426c71a74111c18b5a2f863fc9a13bb238a779e5dac6126e9c79aa78543c9ef5270d95cd932520339aceeec5f67ad8da7d59ce3a6f9b0344f192440eab9c70bf26ac26b248345d34abb3390ac2fa3df6d1ff1a1915880ecebd223d071ca34e9fc169e610a24ef1c54c0eb015ce0526a52dc8ce541bc13cd8a00821d4d7af5d1ea8eccd900d97b6cfdf86aded3571b53f7398db246693ee3339b9f6198662b3a90cfafa9c82e2a2213f5"}, @generic={0xa4, 0x10, 0xb, "6c60efcc37267108e2a39cc2dce1b9da23540c19bb489cd1d034948ae657892ec69b7c7e178ffb76ed4c23a94142ae550eb87ace2a0c797062b8115c456cd54e91df028885f5186c5bf61df7cd6b4bd44f82625d4e4d325bbe153ca0ee19e373423b0a4ec9ad1103ec65a4e006243465c6f19cacd98cdbd326fe077387945340b1b6a1db0b83c2bea0ea4068945f17140fbb41a6bfd81d103e312e444b0c531cda"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x60, &(0x7f00000005c0)=@string={0x60, 0x3, "4daf963d9e26f480c637498f6dbad064c400a0bc6c7ecbd4aa006cde8fdfe1d041725f666db952c043bb197bbff2cb3746585a7be6ce04b399bb28cc92f6a91f1e341071ee21c316a97c7f2a416cad77092fec52d5a0beb8ddec96f93338"}}, {0xc4, &(0x7f0000000640)=@string={0xc4, 0x3, "820b0d1099c10c91017209b6e38808c2270843af24fcc4dbe260a19c18d8b04105df0563e099af6ba4d6179de875b33ce571640d2c7ec2a7bb4e4f20fa14cb2db23568abc0422157b42876ff88e4443cb9e56f67559855b3e941de86317c5013879035d8f1a141737670988e511e649ca1f5c9a438d8c4b5e1ab8c063e01b8d085e86402e71a13b6f65ff912461329d2386f1b66a96e6f4ae01d669c22a9aa2cc0331b364f089aeae73e6ab9815ca509d321b53d84a0e1ec2011291440142eb35310"}}, {0xb7, &(0x7f0000000740)=@string={0xb7, 0x3, "27ae3a18cc7b3e497dcf1a3502515f4b70770a33a000dc84ff524bc53e51f288f86d05e30022a2d9c2fda1306290b21c979668524e12de77acf22b03f137aae3a7f94156e5359489d83f095f97f25256d4da1b01f427045e7edaacb6d51caffe7730d9dbcb806f70f403393e6db8a94ad8929f407678354fa1eecdb5210dd55ba9e4bbb0117535d59ae5cdb2a1c89b8c7a47c8bd0b199c4bc126f69309c4736f549e50bb12121abb62a89cb557d0546fb9d16fec5e"}}, {0x67, &(0x7f0000000800)=@string={0x67, 0x3, "a74bf604821f0702d12f510d45189a4724a5d37a43046f9f08cf62bbef2f3de0941e0dbe9ec807bcbc7c3cdb7cd8c397c30f347656409dd147fceb2bd05d6163c93e38e7a7d9307a6ec8f337271cb39bc30694c14c6a3209ab71f9b9b7bba7dddde62e44bd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xa, 0xe3, {0xe3, 0x22, "107953e126d60c1e77a3784caf9881bc0c55e413d8d036c705d6fb37a57718e9b29511ee56dbf3bf5e4bb7d9559285d9d049b9a0fd6bd1749f8da40474276031cf53c757bde0ac23f03e7e8e41a256e0c6b2483fdeeee8bafb098c1df0dbc33b8aa81d7bbad273efa2a50de92e39422dc0384b36fff1572aebcafd6887a219386903db5ea7868a475b65384518af033001e1aebd207f720859e4c8f9590d7f3a8626c65431456243d3747a9a7a8d7413371ebaa6fe5bc20cf829d61f54450c67f8811147b795797defc1fe04bf07dd207f9ee65b1954fa7529d48320ac6b96a966"}}, &(0x7f0000000a00)={0x0, 0x3, 0x37, @string={0x37, 0x3, "0bffcae47a164c0295ee2c0250eb66fab7947ad94d903fc19def3d6aafa2d24914e91f59f95b7af17ddbf7f26673f24fea4d32a656"}}, &(0x7f0000000a40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x6, 0x4000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x1, 0xd0}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x6, 0x7, "7d43d348", "cd15915f"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x7e, 0x8f, 0xe, 0x4, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b40)={0x0, 0x5, 0xb, "f4a7ddf4c996acfbd51ac7"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x64}, &(0x7f0000000c00)={0x20, 0x0, 0x4}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000d00)={0x40, 0xb, 0x2, '#\n'}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @random="57129c5dc4b5"}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "4b82"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x12}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x24}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r3 = dup(r0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000004}) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000001000)={0x200, 0x7}) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x62f71000) 2m31.667811715s ago: executing program 4 (id=2830): memfd_create(&(0x7f0000000000)='l2\xaa*\xaa\xaa\xabI\xf9\xbf\x83f|\xc3\x86\x15\xac\xbb\xed\xbf%\xd8\xee)\x17\xaa\x0f\xaalR\x96\xe6!\xd7k\x02o\xffSE', 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') fchdir(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 2m31.544250745s ago: executing program 4 (id=2831): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x420140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fallocate(r6, 0x11, 0x600, 0x400000000007c000) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x50}], 0x0, 0x74, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x40004) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) 2m22.242815297s ago: executing program 0 (id=2863): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) (async) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000380), 0x0, 0x0, 0x0, 0xc04c840}, 0x4000890) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000001}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e1e}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_io_uring_setup(0x4737, &(0x7f0000000480)={0x0, 0x9485, 0x20, 0x0, 0x18b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, 0x0) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x0, 0xd, 0x0, 0x3}, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) gettid() (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r6], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r7, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback, 0x10000}, 0x1c) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r9, 0x40045565, 0x400000223) (async) shutdown(r8, 0x1) 2m21.939838688s ago: executing program 0 (id=2865): unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x40000000015, 0x5, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000001c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) socket(0x40000000015, 0x5, 0x0) epoll_create1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r5, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4000000004, {0x5, 0x3, 0x6, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x1006, 0x8, 0x100000000000, 0xb, 0x81, 0x8, 0x2, 0x2008, 0x4000, 0xe44, 0x0, 0x0, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.149668897s ago: executing program 0 (id=2870): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 2m19.512541814s ago: executing program 0 (id=2871): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000000000000600", [0x0, 0x2000000000001]}}) 2m18.935094786s ago: executing program 0 (id=2872): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002c00)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000002800)=0xfffffffffffffe6a) sendmmsg$unix(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="deb264961afbfe302704c3182866aac8fe066600dffd2f5ba8bd704438f5f119f4ac487acef452c8575e5a9c59c4ff0930dcb40b6c29b07edfc7b1cf33b7eab89b8dc6ef141c2d16af383304b2ce270294f25e045e04faa7771359064b9ef0b9556dbe94391a6133b6d8efc199570ee00d2dc14b8e60ce8618b0ade015b632e91c295c53092c4a58119ac65085ff8b61614601ea713d2cc3ed42265d24e19919e23a17d8340d4c139bca4465e35bb0a5a528e949c0cfae38c549e448efbf", 0xbe}, {&(0x7f00000000c0)="e96d7c6f288859f8c4be03399e8f724b154c963c509a305a012ee6ebb2ccdbdebf438f8023a5632f372bf286188247b74d3f9ab1564138e83f8a", 0x3a}, {&(0x7f00000003c0)="42e659c0b38485c5cbba7623550b077e9126c8583b71164bfc0c944829cf6764e5c4e14e912155b568b57790a8d117a71a0d3d6baac4a5c400388d", 0x3b}, {&(0x7f0000000400)="dff878c742521ff37bc91f6d6b433fde602bd8d688429a1bb608f1c509b056a3077bb5627124465f55c87282247f46cb5574d09452eaa02aa7c6c7", 0x3b}, {&(0x7f0000000440)="10a4513114f8f8d82adff4925805164561f132a0119a172c131c8e05c8a43f094ed98e0269df1bc7e68c6945cb93354de8c25e48a4222e2e08f22e0daec8e3f8aad9bd0f4267c6fc9c402d5d51a3694a6cc4bfef311d312929ab4c970832cdbabcec46b0eb8349c46a7a245080a0157ee4948b23028c9671e94ae784fdda3907ccb4aef5f32559e5c3ae6a74562f3cb08b605d5918ad", 0x96}, {&(0x7f0000002600)="ba9cb43df4c1e08cff7fd3625e01ce8242dbbaa344e1b840dd88a71946b696d87ef7a81b70c49c35c9200f8436f8a44e5374c46e69e512035f6ae18793d31f5b65af777ba545ec39e4b5b4e9b689ecd8b517b43918c9ccc87e0ab244b469d825255c84231a4095c47ec1468ec4419b656f1ef98e1e87ae336969503b45d4ace49608a51137cdc81494a91d59ad27dd1b2739bb1b78dc720e01a7b505fed279cc459064ec43a78f5333614f01f990edc2420d904164a0d3b94431cbf04f9487482aa1fbe36954162b827af1d84e468d7c33", 0xd1}, {&(0x7f0000002700)="1acc930b42ecd1114dc94bafdbb850146ee23cdb0976243ce5c7ad4a1e57349899a57e6daf105e9a984d422f837e19ac1b7920f87a1fc64e5396cc5b41e2240e36b980e3c59e0e45ae744e64bf9376ebfe450f9f2c8f5482f705f92658a19c0b4aa8f08fbce2a2573c84383fffa9b5fc56a96f25d29aacc7e15487a4e12a7b32f1c99bf8406247dab20ec45eee0114c1ce61f39c2fe2ef762502faf97adac43a9aabe966dc25db54cb30ec600a331f311b7736e91262e1177e97f4a0606028137d7b0ca675bf81f3e1efc2f8d1302a8025283316167d5d18762218d8210d02e611c3ed5ba9a831e354e430176908d4", 0xef}], 0x7, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x38, 0x880}}, {{&(0x7f0000002a00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a80)="e1cfbd1666e5e4b76a51e47f7cc078a7d8ea56dbf0756d29768a928f73dfc9890f1416017c2aa42b4f92e01869ef430ddd9f77445274a43db1d5c7b02248e6a973ffe4380634cf822cb25927c0254140966870f4d1569a7814c5a6dc80", 0x5d}], 0x1, &(0x7f0000002b40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20000000}}], 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000002840)=@x86={0x3, 0xc, 0xb4, 0x0, 0x2, 0x5, 0x2, 0xe0, 0x58, 0x5, 0xfd, 0x2, 0x0, 0x1, 0x4, 0x3, 0xb, 0x40, 0xd, '\x00', 0x3, 0x1}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r10, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) 2m18.500513566s ago: executing program 0 (id=2874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r6}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000340)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r6, 0x2}, 0x8) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r11, 0x0, 0x201f00) 2m16.240110126s ago: executing program 32 (id=2831): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x420140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fallocate(r6, 0x11, 0x600, 0x400000000007c000) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x50}], 0x0, 0x74, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x40004) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) 2m2.8773638s ago: executing program 33 (id=2874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r6}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000340)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r6, 0x2}, 0x8) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r11, 0x0, 0x201f00) 1m56.415617474s ago: executing program 5 (id=2927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m56.203740537s ago: executing program 5 (id=2929): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4953e8ffffff000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="040042"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x1, 0x1b, 0x2, 0x5, 0x6a, 0x600, 0x5}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x401, 0x8004, 0x10000, 0x5, 0x81, 0x6, 0x0, r6}, 0x20) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000002019b3eeaf00000000e0000300000090780064ff58"], 0x0) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000001380)='coredump_filter\x00') writev(r10, &(0x7f0000004600)=[{&(0x7f0000003280)='0', 0x1}, {0x0, 0x2}], 0x2) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) mkdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240206000547ba07240106040210090582090004"], 0x0) 1m54.225013772s ago: executing program 5 (id=2933): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501", @ANYRES32=r0], 0x0) 1m52.528375203s ago: executing program 5 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m52.330677068s ago: executing program 5 (id=2939): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000000)=0x9, 0x9, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) (async) mbind(&(0x7f000024c000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0x1, 0x5, 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="02080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000008a2570368c930000000000000000", @ANYRES32=0x0, @ANYBLOB="212544992894d6c5786348b611032eebcfbe0f0cc4ca59789927f75bf0dc6f3e23806a5c78233db664f876d59abf16362d8234b4f449b0"], 0x96) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000007, 0x4c831, 0xffffffffffffffff, 0x1000000) 1m51.898828702s ago: executing program 5 (id=2941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f0000000140)='net/bnep\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m35.985996401s ago: executing program 34 (id=2941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f0000000140)='net/bnep\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 51.197350531s ago: executing program 3 (id=3114): syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r3], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xff, 0x0, 0x4, 0xff, 0x80}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xab, &(0x7f0000000300)=@string={0xab, 0x3, "068b07aa322261f205df44465011fd3c77a68973e39dc388f74aaea912329e1002e9874c3330a2ff08a8e8298358ad9dc50778ffbaf6ecb18ed894317459bdcc980b8601f67282fee8fcfd0110a9f8dfab632cd33d78c2d83f7a2356fa21c9b513ac8ce5dbc97d96c1a5c2916c15283f83de9a5508247b37745bd0be5dcf1c6a33203d4f33b171564049d0e676b1ea898db7381ea0fdb13e3885a9e92921991577e92f4ef30fc49123"}}, {0xd8, &(0x7f00000003c0)=@string={0xd8, 0x3, "c1197a612245993227985a23b7ae273997e4a72fb4a7eeb02ac4b66e27e736ae0739c1c75be383d313acebfe61120f5a2db16c2388b97c0b79de9499fb9629fca0cfc68755d317789526a0c451d4e3df87ab015048b36e926ba4321d0d455aa7a56d4d3c4b42f79edb628bd4e0c4a8717b3fba524fb525252fcafff61df51c3dae22e6020e634516ae0d02b80c66c315cf8644f13c38e307752b64e7987b571da768b051c7a47a2709ddaa4c46b31d7db29aa3763c854250f0b6742a2bc5ca3e0c955729ec38d7b8b299932e42044825fea75d130449"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2bf2b99da7398606b0"}}, {0xf9, &(0x7f00000004c0)=@string={0xf9, 0x3, "c6db619d12439162fe615ade34a7d5ab0ca1f8eedd028113e9d7392f7ff45dd40979fcd16f8b0ab897d04f0bd680d1813b2ccf81ab740833bf87c28f52705424e65f5ad8c6e2a9b9c522885731c7ac964a635b9a8422c2ecd96332ff43f97d4e24802795f7e1347e0b4ca8e582e354872aadca27e036ab6ecc3c3c0bd73dd9bd49f0f9b63a47382ce41a1e4dd30b4d4f721f9767897d7370a42f36e4ad749b073899c7202c6ac9728f39e3b6e5b4bb287cbdafdabfd82328e085a5da68f15fc67d7ff8892cd4eccb3bc03eb807d0ddf9adf4b8fcfac7dc1a0fbdef9396c41ab92a412de9202305d9e70023d43ef8684e0f7fde7620687a"}}, {0xf8, &(0x7f00000006c0)=@string={0xf8, 0x3, "c55df5c2c4afd513bf3ff2f8e6862fd63dc2b93ae4d162629385c5904bfa5f5ceede9fb4566fcdcc2b56c4595364fa902aa0be12e8b505e1ac3909a17a3d93e178eca811041ac62489d0ef40a71a5880ed228dbe57069ca90c7753fff90ef26fcde2b23623029c793b81d400255f0c1c29649293c60db0768807a6c5a2ab699b878aa56e028ccf0fc1125e43c9eff3eb3210d5be6579a4a1a4ea71fce353410584811286103a7a7aeb5d91205ca29148f407a24c735c22819d38e3a806293579dfe2558aef031282f1386d49c9a4d779be48790bc8cdc8acf8be4091fd58cd8313af764b46e940faf398a33ea6e49eb43b07405a747c"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44b}}, {0xa6, &(0x7f00000007c0)=@string={0xa6, 0x3, "41bb361787bb744ee21cdb2c7c07b5eb0df6c6b51d5dce1faa2e5a6a22eb359907ddba8fa33a9840127a6c903a58ccac530e7c467bce7e90c05a68ad536a11a23db965eca334a87f98299eeb4f6e181e102ad0289ddb4ce3c17d5a6e539ab9a3afed9dda526154ed2716a28dbfd71cf0797bbc95bed85e8f8b1186399b0cc2de1f0292bf3e96f1b7401b590be09bd10e7b84ca451dcb8b7f465b8735bb1ebf526a844ea4"}}]}) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c080) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000040000000000008100000001800018014000200776c616e30000000000000000000000008000c0003000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 49.359620142s ago: executing program 6 (id=3118): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x488, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/226, 0xe2}], 0x2, &(0x7f0000000200)=""/75, 0x4b}, 0x7ff}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000800)=""/233, 0xe9}], 0x3, &(0x7f0000000900)=""/122, 0x7a}}, {{&(0x7f0000000980)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000001b00)=""/173, 0xad}, {&(0x7f0000001bc0)=""/135, 0x87}, {&(0x7f0000001c80)=""/183, 0xb7}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x9, &(0x7f0000002e00)=""/183, 0xb7}, 0x8000}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/247, 0xf7}], 0x1, &(0x7f0000003000)=""/132, 0x84}, 0x4}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x6, 0x55, &(0x7f0000000580)=""/85, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2800000, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000010080), 0x0) unshare(0x8000280) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) 49.259338414s ago: executing program 3 (id=3119): unshare(0x8000000) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_clone(0x800, &(0x7f00000000c0)="5a7a8d93d505622170a4ac04", 0xc, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c8ca7efa3ba156dc36986d5b149f7ee412bc2997919cc4a8da5e45abf66332246d5707f1a8e4a1b719d04aac8d4aa8db18873b2ab6bcf346a17db8212daf29254bf6c006dc5ce95a27ecb3eac2a7add2d9d3955fcd7359ec56aae51d112585681d5740168aa4c7770705fb864c67f2a9c00fb8c182d813b6e4affd60e57abbc42fee72a57d6f1ec5ee307ec3beafbc2593e90d86e0") syz_emit_ethernet(0x1d1, &(0x7f00000007c0)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "ea0c97", 0x197, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, {[@routing={0x87, 0x6, 0x0, 0x3, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}]}, @dstopts={0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0xac}, @generic={0xfa, 0x1f, "b0911f7eb65390375302df44b286872a21d8b2780f71e236ed82698c74c802"}]}, @fragment={0x6c, 0x0, 0x9, 0x0, 0x0, 0x4, 0x66}, @fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x6, 0x68}, @routing={0x32, 0x8, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}]}, @dstopts={0xc7, 0x5, '\x00', [@ra, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @mcast2}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x87, 0x0, 0x80, 0x0, 0x0, 0x1, 0x65}, @hopopts={0x2b, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x5, [0x81, 0xffff, 0xfff, 0x81, 0xd, 0x2, 0xfffffffffffffff9]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e24, 0x4e1f, 0x41424344, r0, 0x0, 0x0, 0x13, 0x4, 0x4, 0x0, 0x75e, {[@generic={0x13, 0x4, "db20"}, @exp_smc={0xfe, 0x6}, @nop, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "6e456c16f3f8bdb91db30ceed64f86e7"}, @exp_fastopen={0xfe, 0x7, 0xf989, "ef1787"}, @window={0x3, 0x3, 0x3}, @fastopen={0x22, 0x4, "e501"}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x1fd}]}}, {"abf5ef"}}}}}}}, 0x0) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x3, 0xfffb, 0xc00}], 0x2, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402749377", @ANYRES16=0x0], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1103af5a368f6dc9ba00"/21]}, {0x0, 0x0}, {0x57, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4001}}]}) 48.359393982s ago: executing program 6 (id=3120): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301b90000b92975cbf50000009500000000400000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 48.202819978s ago: executing program 6 (id=3121): ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000700)={{0x0, 0x2, 0xf6c, 0x0, 0x7}, 0xfffffffffffffd69, 0x800000000000019, 0x2}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) msgsnd(0x0, 0x0, 0xfd1, 0x0) msgctl$IPC_RMID(0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000005c0)={0x0, 0xd, 0x100, "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"}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="00140000000097abed8a7e6847b073668d3123ddc48a8b8ba85f763221ffd860a6d96882d46ee8f6403be4d29a8330e352a1921412c4141e235e860c8d34b50412710e3d9fe71d8e5c7f9f9fc20c48010d7e6411be11b7f92f858a6e6464e746bddbe2fc8d1b664b8d58db83b2b00f4eb7d7c5e3c8552634d1a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000001a6b4263"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x209, 0x1, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x0, 0x0, 0x0, "b68c52d2ba3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x1f, {0x1f, 0x28, "e8fef509b1e98877aa762af46daabc89d492771fba3ee6d0429ccf8b9e"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0004000000000000effc"]}, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x20, 0x32, 0xf6, "f5c6584b8973bfa55a84f3d3b9de968e0b4c24fcb3b0a597d4c9bee933fae22742d195db6e719d7c38e4425faec46370c9e5221009c57759d670a3b7ecabf76c919418913c0cfe846cb9d651fad306a847bb4f75ce37a505f288d994a483f5886b154bcf162aeba57f107c90a9a53a419d8b725386ba55a54946e4d2db8d1983f3467fe60c24d5f63bc2844fb24f83dd988ad01e196becf1eb91fbbe348d4a3f4a4f355eb7d3402f96d9a79c9373b92ec378593af61d3cb1309bc4da82f44f0d5b7c1aeddb622b95f69eb801c730a196de3c8768277a303bc73c7841066fbb34c46f3bffc85a85d80e84b2a22b620abdb2a9336225a0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd4}, &(0x7f0000000340)={0xc0, 0x5, 0x6, "7536f0d8d1db"}, &(0x7f0000000540)=ANY=[@ANYBLOB="4005060000003513e8e40ff2"]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000700)={{0x0, 0x2, 0xf6c, 0x0, 0x7}, 0xfffffffffffffd69, 0x800000000000019, 0x2}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) msgsnd(0x0, 0x0, 0xfd1, 0x0) (async) msgctl$IPC_RMID(0x0, 0x0) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x43, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000005c0)={0x0, 0xd, 0x100, "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"}, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="00140000000097abed8a7e6847b073668d3123ddc48a8b8ba85f763221ffd860a6d96882d46ee8f6403be4d29a8330e352a1921412c4141e235e860c8d34b50412710e3d9fe71d8e5c7f9f9fc20c48010d7e6411be11b7f92f858a6e6464e746bddbe2fc8d1b664b8d58db83b2b00f4eb7d7c5e3c8552634d1a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000001a6b4263"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x209, 0x1, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x0, 0x0, 0x0, "b68c52d2ba3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x1f, {0x1f, 0x28, "e8fef509b1e98877aa762af46daabc89d492771fba3ee6d0429ccf8b9e"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0004000000000000effc"]}, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x20, 0x32, 0xf6, "f5c6584b8973bfa55a84f3d3b9de968e0b4c24fcb3b0a597d4c9bee933fae22742d195db6e719d7c38e4425faec46370c9e5221009c57759d670a3b7ecabf76c919418913c0cfe846cb9d651fad306a847bb4f75ce37a505f288d994a483f5886b154bcf162aeba57f107c90a9a53a419d8b725386ba55a54946e4d2db8d1983f3467fe60c24d5f63bc2844fb24f83dd988ad01e196becf1eb91fbbe348d4a3f4a4f355eb7d3402f96d9a79c9373b92ec378593af61d3cb1309bc4da82f44f0d5b7c1aeddb622b95f69eb801c730a196de3c8768277a303bc73c7841066fbb34c46f3bffc85a85d80e84b2a22b620abdb2a9336225a0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd4}, &(0x7f0000000340)={0xc0, 0x5, 0x6, "7536f0d8d1db"}, &(0x7f0000000540)=ANY=[@ANYBLOB="4005060000003513e8e40ff2"]}) (async) 47.62194566s ago: executing program 3 (id=3122): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async, rerun: 32) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) pipe(&(0x7f0000000080)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x235, 0xffffffffffffffff, 0x4, {0x2, 0xe0a}, 0xff}, 0x1) (async, rerun: 32) sigaltstack(&(0x7f0000000e80)={&(0x7f0000000e40)=""/29, 0x1, 0x1d}, &(0x7f0000000f80)={&(0x7f0000000ec0)=""/147, 0x0, 0x93}) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x6, 0x0, 0xfffffffd}]}, 0x10) 45.263603924s ago: executing program 3 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 44.939832762s ago: executing program 6 (id=3127): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="66646566f30f444cb30f5ba4000166b8555f713a0f23c00f21f86635010001000f23f80fb6fd66b8d4cc00000f23c80f21f866350000d0000f23f8baf80c66b8804a878a66efbafc0c66ed0f67c7d9ec66b9c609000066b8a366000066ba000000000f300f23f6", 0x67}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) shutdown(r2, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "29469d6b", "5350b7add205a3ec"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x304}, "6267f7c617b7173d", "a13657003489a3937e8f98416853229b", "0b380abb", "f1d5d80c5c62962c"}, 0x28) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x224103, 0x0) fanotify_mark(r6, 0x2, 0x1000, r6, 0x0) (async, rerun: 32) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000480)={0x4}) (rerun: 32) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000097}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB='\x00'/11], &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 44.823526178s ago: executing program 3 (id=3128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r7 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) (async, rerun: 32) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) 44.483922798s ago: executing program 6 (id=3129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}]}}]}, 0xa4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f0000000800)={0x8, {"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", 0x1000}}, 0x1006) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f0000005540)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0xeeef0000, 0x2}}, "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", "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 42.735115523s ago: executing program 3 (id=3131): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f000008f000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) r5 = dup(r4) write(r5, &(0x7f00000001c0)="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", 0x800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000d001) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r6, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000233000/0x4000)=nil, 0x4000, &(0x7f0000000280)='$\x00') sendmmsg(r6, 0x0, 0x0, 0xf5) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x30}], 0x1, 0x2140, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x40804) connect$can_bcm(r5, &(0x7f00000009c0), 0x10) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x1, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CT={0x28, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @NFQA_PAYLOAD={0x1e, 0xa, "4f8cecea66ab93fd9c98889f8567e6bb36c3a6dc00d122cbbc20"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x81}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x2894) mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1002, 0x1, 0x8012, r0, 0x83000000) r8 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r8, 0xc028aa05, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x4000, 0x3}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @x25={0x3, 0xff, 0x27, "8c368b3e19560230f7d0cd497ca623946e5d1aae5a137353e12fd205bb642ae46756dee213373011f2639e4d664c7926d2fb30feef586fa3bf61f4da58b06d96f80a9709"}}, 0x47) 41.520475114s ago: executing program 6 (id=3135): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000003c0)={0x6, 0x8, 0xfffffffd, 0xd, 0xcf}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) prctl$PR_MCE_KILL_GET(0x22) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="07000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000040000600a000000e21a771dfd80ed01ddcf6d9ee50c93c7a675a63d2430a6ed5c983a7ce914c970c4d857613b3c6e95442bf686fa4d4fb784000000000000000000000000000000e40d8b962068e7b9bf81c9a2a352ae8ba52a31664fbda320cfd3e9218a6bf48a4ec3457ddbafd202fba672dfa16729859604000000d02aee961fa1d25fb7ff7bc7b3d3cb795f7d47db04d900031e5c4c361ca0eaa23f8047f3b702413f1c80be5d0a1b7b7848935d668d7becf6bb393137ecd4d688a9092058f76da18e935f50e038005e0edea3f642541b660b80a26b51be0ec6945c75b728e6c2b5b8c1921680e29af245309234088d757a5d459161d2341c795ee330fbd7557111e9e4cb9873a9c77cf91a85a17834a71965fe89b41a31691683605b730090adb90b48e03d317d266830b9d61cc9777ac82cd67b4de645c5cea6b9c1a921c22f28ff1f7bd011d8aa7d738fa5ad047c7a80a598db937a44e63ca1fbbe6ef748763e425d3c0414bc57d00e85781a"], 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRESHEX=r0, @ANYBLOB="000000060000000000000000000000001d596f948552f3536b08bb60e7528d5ac1652908127d7a5b6ebb02ec33f49e7eb3446210cc5deeb7d1cb0b98596ba1cbb7a708ae3c21075b6eac307079fb8c12c94c6905f3402f174745f4e95ae6773a534eedd6a58fe739cf67275e61574db2e8173934d1531ee3d298c49ed90238815500def137b8ad133d5b3164dad416a429ceff82405eb15d4ca396e5c25da42ba447f115695f98052ff90d0f8ac49561e4d648bab74fdb960000000000"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) r7 = dup(r5) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$TIOCSBRK(r7, 0x5427) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYBLOB="7e16a437f3a2eb5fd6b78c03a6f758324b961ebc21278d6d6ebd09478b054a8794d1da949e70ba738fa278c9982f30b453f57ff102589501c1cf5b57e9f991ac259cf16ae0c7afef2e816940dd4fe999579ab42fad38731b6e4cf4b9e8afce", @ANYRESHEX=r8, @ANYRES64=r2], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x240008c0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @win={{0x8000, 0x6, 0x9, 0x4}, 0x9, 0x11, &(0x7f0000000100)={{0xfffff800, 0x6, 0x19cb7df7, 0x1}}, 0x3, 0x0, 0xa}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ff8}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 26.989826651s ago: executing program 35 (id=3131): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f000008f000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) r5 = dup(r4) write(r5, &(0x7f00000001c0)="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", 0x800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000d001) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r6, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000233000/0x4000)=nil, 0x4000, &(0x7f0000000280)='$\x00') sendmmsg(r6, 0x0, 0x0, 0xf5) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x30}], 0x1, 0x2140, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x40804) connect$can_bcm(r5, &(0x7f00000009c0), 0x10) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x1, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CT={0x28, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @NFQA_PAYLOAD={0x1e, 0xa, "4f8cecea66ab93fd9c98889f8567e6bb36c3a6dc00d122cbbc20"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x81}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x2894) mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1002, 0x1, 0x8012, r0, 0x83000000) r8 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r8, 0xc028aa05, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x4000, 0x3}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @x25={0x3, 0xff, 0x27, "8c368b3e19560230f7d0cd497ca623946e5d1aae5a137353e12fd205bb642ae46756dee213373011f2639e4d664c7926d2fb30feef586fa3bf61f4da58b06d96f80a9709"}}, 0x47) 26.25880624s ago: executing program 36 (id=3135): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000003c0)={0x6, 0x8, 0xfffffffd, 0xd, 0xcf}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) prctl$PR_MCE_KILL_GET(0x22) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="07000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRESHEX=r0, @ANYBLOB="000000060000000000000000000000001d596f948552f3536b08bb60e7528d5ac1652908127d7a5b6ebb02ec33f49e7eb3446210cc5deeb7d1cb0b98596ba1cbb7a708ae3c21075b6eac307079fb8c12c94c6905f3402f174745f4e95ae6773a534eedd6a58fe739cf67275e61574db2e8173934d1531ee3d298c49ed90238815500def137b8ad133d5b3164dad416a429ceff82405eb15d4ca396e5c25da42ba447f115695f98052ff90d0f8ac49561e4d648bab74fdb960000000000"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) r7 = dup(r5) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$TIOCSBRK(r7, 0x5427) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYBLOB="7e16a437f3a2eb5fd6b78c03a6f758324b961ebc21278d6d6ebd09478b054a8794d1da949e70ba738fa278c9982f30b453f57ff102589501c1cf5b57e9f991ac259cf16ae0c7afef2e816940dd4fe999579ab42fad38731b6e4cf4b9e8afce", @ANYRESHEX=r8, @ANYRES64=r2], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x240008c0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @win={{0x8000, 0x6, 0x9, 0x4}, 0x9, 0x11, &(0x7f0000000100)={{0xfffff800, 0x6, 0x19cb7df7, 0x1}}, 0x3, 0x0, 0xa}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ff8}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 12.861776744s ago: executing program 1 (id=3194): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf8, 0x18c, 0x203, 0xf8, 0x19030000, 0x1e8, 0x2e0, 0x2e0, 0x1e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}}, 0x0) 11.146968381s ago: executing program 1 (id=3197): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40003) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9, {0x3, 0x8, 0x9, 0x200}}) fstat(0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) 9.547180545s ago: executing program 1 (id=3208): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) setitimer(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xc, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = userfaultfd(0x801) (rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) (async, rerun: 32) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (rerun: 32) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 9.522341072s ago: executing program 9 (id=3209): socket(0x840000000002, 0x3, 0xfa) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169b82, 0x189) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) recvfrom$inet6(r3, &(0x7f0000000380)=""/228, 0xe4, 0x20, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @empty, 0x7}, 0x1c) io_uring_enter(r6, 0x47bc, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.684785058s ago: executing program 2 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) write$sequencer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES16=r0], 0x10) 7.299130586s ago: executing program 2 (id=3213): mmap$IORING_OFF_SQ_RING(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2400000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="3c258bcf800703e9679e7f489bf9a39668932902f62ee45e8ba485ace86a1bcc5b7d8d2d4dafeb8a41312491985d1ec20b081859a12033323cc865fa63798bc7b47094164ccf6159d1f83f000a549eeb9ae28da36922ad92f0e921c2d60d43511f4b35a73fc84633e1bf487cc3dadf9aeb1d913a", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x1, 0x4004011) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000001c001a800800028004000180100002800c00018008001b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 7.251233395s ago: executing program 1 (id=3214): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000001440)=""/103, 0x67}, {&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000001580)=""/74, 0x4a}, {&(0x7f0000001600)=""/111, 0x6f}, {&(0x7f0000001680)=""/20, 0x14}], 0x7, &(0x7f0000000440)=""/159, 0x9f}, 0x9}, {{&(0x7f0000001880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001800)=""/42, 0x2a}, {&(0x7f0000001900)=""/19, 0x13}, {&(0x7f0000001940)=""/99, 0x63}, {&(0x7f00000019c0)=""/135, 0x87}, {&(0x7f0000001a80)=""/48, 0x30}, {&(0x7f0000001ac0)=""/123, 0x7b}, {&(0x7f0000001b40)=""/99, 0x63}], 0x7, &(0x7f0000001c40)=""/91, 0x5b}, 0x9}], 0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0xfffffffffffffffb, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x2, 0xf8, 0x74, 0x3}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4689300000ba005d4c44460a66000000000000000000b924c8bcecc48c388470097e5ecdb344b0f506106a3d190352fa99982530712319961e0bb0837b5feb3939daeee576576dd2e2ca4a38ed503d50e9a11809b2b7945b68d6bf02d673d7183f6f16a297249b6c889978e2c2920cf89c472f2b230daa8f2b266bdb04090000000000000043be6a31766d4ed5c05bcf3e2f25803b5471953a86c8f4de582d25c49ec1053322aed9494c00afec6f32f75f20942b7e4aba1fdeaeecb838be458b4518e5aba0929cdbea", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0002000000"], 0x30}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'bond0\x00', @multicast}) readv(r3, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x801) 7.156254208s ago: executing program 8 (id=3215): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000020690780a210104ac1414aa44140601ffffffffffffaa7ee000000200008001070d09904b30ad2bb75f7e1e5d00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffffffff"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000ffee00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.452486312s ago: executing program 8 (id=3216): unshare(0x4020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) unshare(0x4020400) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xba35}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x411, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4) unshare(0x4020400) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) (async) unshare(0x4020400) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xba35}}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x411, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4) (async) 6.275917378s ago: executing program 9 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x6, 0x2, 0x34424752, 0x3, 0x10003, 0x7b, 0xa, 0x7, 0x0, 0x1, 0x0, 0x2}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x4010) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x200, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 5.815059008s ago: executing program 9 (id=3218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000240)) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) (async) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000080)) (async, rerun: 64) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x400, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0111"], 0xfdef) (async, rerun: 32) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) r7 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) (async) r8 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x40a0, 0x4) (async, rerun: 64) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a00)="e03f0300", 0x4}, {&(0x7f0000000400)="ae20ff0cef8704836d89126863b55997", 0x10}], 0x2}, 0x140408c4) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000c40fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) 5.663064654s ago: executing program 8 (id=3219): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_freeze_timeout', 0x400000, 0x40) sendmmsg$alg(r3, &(0x7f0000000ac0), 0x4924924924926af, 0x40468d4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0xa341, 0x1e0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x12, 0x0, "bd0f57b95912a2d6f0fcf0bb4abbb178157feb85d2678664c6c977f463a0993f886324ea4846e1b71534d3245ff3a9421805772d88611095303bef2fff4c308c2fd95411d08191c026fbcdd440df9f58"}, 0xd8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4.448599951s ago: executing program 2 (id=3220): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) io_uring_enter(r1, 0x2bf2, 0x44e8, 0x10, &(0x7f00000000c0)={[0x100000000000]}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x11) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0xfffffffffdfffffb, 0x400, 0x0, 0xfbfffffffffffffd, 0xfffffffffffffffd, 0xffffffbb}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 4.203360766s ago: executing program 8 (id=3221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40004) syz_usb_connect(0x0, 0x225, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x213, 0x2, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x6, 0x75, 0x90, 0x7d, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x2, 0x4}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x1, 0x8, [@generic={0x9c, 0x6, "908fc75fdae81f85dfd3f6a9231db34ddfadf5e32bdf8e452647187afec36d35e1088fe9384845cb61b6502205ccec0e10f7a3e2a8005a99a74208f052a9dcd832e4df827353916e71fab21f017e9aa51370501ae59db6686d1418eceabb8c72a745483c90f46e494de2392fa04dd59522112ca8a38e41870053ef09fb859ab48e042ddc6d393d3dd2b92171131fd28cc657f2cab9bb54666751"}, @generic={0x9, 0x21, "8fdb437917743e"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xe1, 0x7, 0xf, [@generic={0xdf, 0x22, "8240baa88005f0dc574dd9037677f30cca12524c5ba6e99982a9a084aefff24a49abe17176eca7630e012341b2b6e74b7651af4b73c1a48d3a0d15594c438445162951bec0cd847bc70357c725b85390c57b8b17d133085b470ab0e95097af5f3c542f720acfaf3cf6bfd383d6c4664c9b29dcf921429a37f8f297e34865f8a1402a40127d530df459e35b6fd6c7d53d29670509aeeb1e980cfe058df3229cd341480beaf1220cf2737a7e6dc28409ec18cdda7f5d4a1c5dc96a573b2a53cc7b7a4d3ad8dac4b7fa9093199a9c6bd4fd8e0e77fa7fdd1215db1c612ee2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6d, 0x74a6}]}}, {{0x9, 0x5, 0xd, 0x2a, 0x8, 0x6, 0x7f, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xf8, 0x1f}}]}}, {{0x9, 0x4, 0x59, 0x2, 0x1, 0x96, 0x2d, 0x13, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0xb, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x20008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 4.129418837s ago: executing program 9 (id=3222): syz_usb_connect(0x5, 0x5a, &(0x7f0000000280)=ANY=[], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000040)="5ab80bacfd6c94373f8c9f73587d1f6b24562d", 0x13, 0x7, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000140)="a677bc176513d6b89da165ffbe25892d96dfcd0dbb8dfcdbf6bd0775a7f221c022bd24009c5422f6639ffb0e7d1b2814283dd6daeac4d65d913430b20bf203025d3b4f8be6f5c6", 0x47, 0x4, 0x0, 0x3}]) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) syz_usb_connect(0x5, 0x5a, &(0x7f0000000280)=ANY=[], 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000040)="5ab80bacfd6c94373f8c9f73587d1f6b24562d", 0x13, 0x7, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000140)="a677bc176513d6b89da165ffbe25892d96dfcd0dbb8dfcdbf6bd0775a7f221c022bd24009c5422f6639ffb0e7d1b2814283dd6daeac4d65d913430b20bf203025d3b4f8be6f5c6", 0x47, 0x4, 0x0, 0x3}]) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) (async) 4.026080353s ago: executing program 7 (id=3223): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000fe0100", [0x8, 0xffffffff9673e35d]}}) 3.735277968s ago: executing program 1 (id=3224): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x50}, 0x44014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) getpgid(r3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00') read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6}, 0x10) close(0x3) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000)=0xfff, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r8 = socket$inet(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x23) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfd000/0x400000)=nil) 3.415611863s ago: executing program 2 (id=3225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) (async) socket$kcm(0x21, 0x2, 0x2) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r4, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000080)) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000200)={[{0x800, 0x101, 0x6, 0x6, 0x33, 0x4, 0x4, 0x9, 0x37, 0x7, 0x9, 0x7, 0xd6e2}, {0x81, 0x2, 0xff, 0x1, 0x80, 0x5, 0x80, 0x4, 0xff, 0x8, 0x6, 0x6a, 0xe7f}, {0x101, 0x8, 0x1, 0xf, 0x4, 0x50, 0x0, 0x1, 0x34, 0x1, 0x0, 0x4, 0x7fffffff}], 0x7}) (async) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) 3.337190946s ago: executing program 7 (id=3226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000400000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.04767424s ago: executing program 7 (id=3227): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x47, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0xfffffffffffffffd, 0x3, 0x4, 0x0, 0x8], 0x5000, 0x400}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.716188401s ago: executing program 7 (id=3228): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa9]}, 0x8) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x2}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x5}) r1 = memfd_secret(0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x114012, r0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0xa4) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x14, 0x0, r3, 0x0, &(0x7f0000000180)='./file0\x00', 0x100}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)={'L-', 0xab4e}, 0x16, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x77359400}, {r4, r5/1000+60000}}) syz_io_uring_setup(0x1bfd, &(0x7f0000000340)={0x0, 0x7923, 0x4, 0x3, 0xfe}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xd, 0x0, 0x0, 0x3, &(0x7f0000000440)="936b43431b4e984687ad4574cf370d73aec776f4af374a4f6d669237f60d202d20111ee2e4b9d21542f4a72d641bd233976daa6b07438ce725c16ba2d2d2bbc029d5a3acdb5d0298af94d1f5cbff6da667fe141d451a4cf339aac11c0255a875ba61a35ad15a01da43d766e6a52b6d9d1e2b3866a56cd2426b6f536016ee2e3434c16e0c99706d6a8bdda2a2e9523eb83cb9a4744caffb730ae373383f406b", 0x8, 0x0, 0x1, {0x0, r7}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000540)={0x5, 0x7, 0x0, 'queue0\x00', 0x45}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000600)={0x87, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x0, 0x400, 0x52}, 0x2c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000680)={r8, r9+10000000}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000006c0), 0x4) ioctl$KVM_NMI(r1, 0xae9a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700)={0x3, 'veth1_to_bond\x00', {0x40}, 0x9}) add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="7ac670d76beb42f3fa5e7d53f2497876ea55a33b4664a471269861e7ea1085bf9cc233b8341eb94316ea85d03d31bf3726fd28b492bafb51512542089c2d8dd7df33f5ac0d4915eb6b789b82f532a666f8942ecc507b271050254aca7b177d96d9be45fc7abd0305d3af956ed135fe17d59374f6c5574cc437cc66af3eab382a15fae548f75748c0f100d64580408849a47093f6ccc9b722f890a9d4f10a5582c5bd2a9145bd57ee4448846a6c805f1d457cf3c99b5ddbba871bcb6cc067118bb495934338f4774e0dc069bdd03ce1225f0c6e3137a473", 0xd7, 0xfffffffffffffff8) nanosleep(&(0x7f00000008c0)={0x77359400}, &(0x7f0000000900)) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000940)={0x98, 0x2, 0x280000000, 0x1000, 0x8, 0x75, 0x1, 0x3d}, &(0x7f0000000980)={0x0, 0x8, 0x2, 0x5, 0x7d94502b, 0xfff, 0x9, 0x401}, &(0x7f00000009c0)={0x8, 0x6, 0x10000, 0x5, 0xd87, 0x10001, 0xffffffffffffff3e, 0x1}, &(0x7f0000000a40)={r10, r11+10000000}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x7]}, 0x8}) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) getsockname$packet(r12, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000bc0)={0xe46, 0x28, [0xfffffff8, 0x9, 0xfffffff7, 0x5a8d, 0x8000, 0x64f, 0x40, 0x4, 0x0, 0x8]}) pselect6(0x40, &(0x7f0000000c00)={0x2, 0x6, 0x3, 0xfff, 0x94, 0x8, 0x4, 0x7}, &(0x7f0000000c40)={0x9, 0x5c0, 0x2, 0x7, 0x1, 0x3, 0x64e, 0x7}, &(0x7f0000000c80)={0xfffffffffffffff9, 0x5, 0x805, 0x3, 0x2, 0x8609, 0xff, 0x11}, &(0x7f0000000cc0), &(0x7f0000000d40)={&(0x7f0000000d00)={[0x9f]}, 0x8}) 2.636837299s ago: executing program 8 (id=3229): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x400) close(r0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') fcntl$setstatus(r3, 0x4, 0x40800) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xf5ffffb, 0x7, 0x1000, r3, 0x0, &(0x7f0000000080)={0x9a0917, 0x0, '\x00', @value64=0xfffffffffffff800}}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 2.123717302s ago: executing program 8 (id=3230): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) write$tun(r0, &(0x7f0000000a00)=ANY=[], 0x8a) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, 0x0, 0x20000000, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES8=r4, @ANYRES32=r1], 0x0) 2.070879215s ago: executing program 1 (id=3231): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r3) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffd, 0x3}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x3, [0x5, 0x9, 0x9]}}) r7 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x185877a4, 0x10200}) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000000480)="9d67ffbcb1c4c8c9fb2f947d83591c0a2e1899a890d800a74f5c0e9588d4e0b7ce430ec420753c7b9e829afc15f9735d9638b1b8643f28e2ac6c961b17937b80fdec861ea1cfff66cc898d9b91c001dc85", 0x51}], 0x3}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 1.893122287s ago: executing program 2 (id=3232): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x2f}, @in=@local, 0x800, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x2000000000000b}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x3502, 0x1, 0x3, 0x0, 0x6, 0xfffffffd}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x94, 0x75, 0xee, 0x20, 0x595a, 0x1, 0x422c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xa0, 0xe0, 0xf, [{{0x9, 0x4, 0x47, 0xa, 0x2, 0x57, 0xa9, 0xe0, 0x9, [], [{{0x9, 0x5, 0x2, 0x8, 0x20, 0x17, 0x5, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6, 0x2}}]}}]}}]}}, 0x0) 1.74336028s ago: executing program 7 (id=3233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) syz_io_uring_setup(0x462d, &(0x7f0000000480)={0x0, 0x5a90, 0x10100, 0xfffffffd, 0x307, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = io_uring_setup(0xc2b, &(0x7f0000000080)={0x0, 0xd16a, 0x100, 0x2, 0x2e9, 0x0, r1}) io_uring_enter(r4, 0x3659, 0x51e3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2a, 0x2, 0x0) accept4(r5, 0x0, 0x0, 0x0) 917.40085ms ago: executing program 9 (id=3234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) rename(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x80, 0x0) fanotify_init(0x200, 0x0) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400000000000000ffff0000ff", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060018000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 693.720292ms ago: executing program 7 (id=3235): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) io_uring_enter(r1, 0x2bf2, 0x44e8, 0x10, &(0x7f00000000c0)={[0x100000000000]}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x11) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0xfffffffffdfffffb, 0x400, 0x0, 0xfbfffffffffffffd, 0xfffffffffffffffd, 0xffffffbb}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 282.763971ms ago: executing program 9 (id=3236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x202300) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000003c0)={0x8000, 0x3}) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r2, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000063c0)="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", 0x381}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x20041000) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000009c0)=""/4091, 0xffb}], 0x1}, 0x12143) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x594a469fe5931bf3}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x400, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x4d6, 0x32}, 0x0, @in6=@empty}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x33}, 0x2, @in=@broadcast, 0x0, 0x7}]}]}, 0x1bc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x124, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x124}}, 0x4040050) 0s ago: executing program 2 (id=3237): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000020690780a210104ac1414aa44140601ffffffffffffaa7ee000000200008001070d09904b30ad2bb75f7e1e5d00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffffffff"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000fffd00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) kernel console output (not intermixed with test programs): ep0 maxpacket: 32 [ 844.982613][T16298] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 845.023011][T16298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.050377][T16298] usb 2-1: config 0 descriptor?? [ 845.110704][T16866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 845.297075][T16298] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 845.366046][T16298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.463556][T16298] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 845.470755][T16298] usb 2-1: media controller created [ 845.530012][T16872] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 845.570547][T16872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 845.583085][T16872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2942'. [ 845.595444][T16298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.224171][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2946'. [ 846.423344][ T5918] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 846.598383][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.662708][ T5918] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 846.686112][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.767598][ T5918] usb 4-1: config 0 descriptor?? [ 847.083731][T16298] az6027: usb out operation failed. (-71) [ 847.102220][T16298] az6027: usb out operation failed. (-71) [ 847.153668][T16298] stb0899_attach: Driver disabled by Kconfig [ 847.159737][T16298] az6027: no front-end attached [ 847.159737][T16298] [ 847.256614][T16298] az6027: usb out operation failed. (-71) [ 847.263794][T16298] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 847.276875][T16298] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 847.299738][T16298] dvb-usb: schedule remote query interval to 400 msecs. [ 847.308608][T16298] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 847.466215][T16298] usb 2-1: USB disconnect, device number 67 [ 847.573025][T16693] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 847.836096][T16693] usb 3-1: Using ep0 maxpacket: 16 [ 847.846443][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 847.861788][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 847.893348][T16693] usb 3-1: config 0 has no interfaces? [ 847.922038][T16298] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 847.955220][ T5918] usb 4-1: USB disconnect, device number 57 [ 848.005427][T16693] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 848.052548][T16693] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 848.060592][T16693] usb 3-1: Manufacturer: syz [ 848.135687][T16693] usb 3-1: config 0 descriptor?? [ 848.495237][T16899] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 850.133831][ T799] usb 3-1: USB disconnect, device number 50 [ 850.281284][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.329423][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.364285][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.393075][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.437321][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.503743][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.512172][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.572618][ T799] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 850.580852][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.634423][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2952'. [ 850.651232][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.679232][T16918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2952'. [ 850.693405][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.742051][T16918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2952'. [ 850.742527][ T799] usb 3-1: Using ep0 maxpacket: 32 [ 850.762679][ T799] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 850.770870][ T799] usb 3-1: config 0 has no interface number 0 [ 850.791168][ T799] usb 3-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 850.803329][ T799] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.815726][ T799] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 850.825721][ T799] usb 3-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 850.864098][T16918] geneve2: entered promiscuous mode [ 850.871197][ T799] usb 3-1: config 0 interface 12 has no altsetting 0 [ 850.910767][ T799] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 850.956329][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.042803][ T799] usb 3-1: Product: syz [ 851.064072][ T799] usb 3-1: Manufacturer: syz [ 851.070899][ T799] usb 3-1: SerialNumber: syz [ 851.085967][ T799] usb 3-1: config 0 descriptor?? [ 851.105491][ T799] f81534 3-1:0.12: unsupported endpoint max packet size [ 851.222021][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2954'. [ 851.376229][ T5915] usb 3-1: USB disconnect, device number 51 [ 851.496754][T16931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2955'. [ 851.506641][T16931] openvswitch: netlink: Flow key attr not present in new flow. [ 851.781532][T16935] binder: 16934:16935 ioctl c0306201 200000000040 returned -14 [ 851.816880][T16935] binder: 16934:16935 ioctl 40044591 0 returned -22 [ 851.868936][T16937] input: syz0 as /devices/virtual/input/input86 [ 851.893987][ T5918] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 852.058077][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.077548][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 852.093851][ T5918] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 852.108066][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.119045][ T5918] usb 4-1: Product: syz [ 852.125253][ T5918] usb 4-1: Manufacturer: syz [ 852.130190][ T5918] usb 4-1: SerialNumber: syz [ 852.141131][ T5918] usb 4-1: config 0 descriptor?? [ 852.264295][T16693] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 852.426261][T16693] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 852.444454][T16693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.462966][T16693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 852.471198][T16693] usb 3-1: SerialNumber: syz [ 852.851634][T16946] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2960'. [ 853.141965][T16941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.158436][T16941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.199567][T16693] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 853.244764][T16693] usb 3-1: USB disconnect, device number 52 [ 853.376114][ T5836] IPVS: starting estimator thread 0... [ 853.482540][T16952] IPVS: using max 37 ests per chain, 88800 per kthread [ 854.700395][ T5918] usb 4-1: USB disconnect, device number 58 [ 855.082783][ T5918] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 855.285674][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.302299][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.327756][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2968'. [ 855.327853][ T5918] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 855.351485][ T5918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 855.363057][ T5918] usb 2-1: Manufacturer: syz [ 855.379036][ T5918] usb 2-1: config 0 descriptor?? [ 855.741241][T16976] loop2: detected capacity change from 0 to 7 [ 855.750036][T16976] loop2: p4 [ 855.771042][T16976] loop2: partition table partially beyond EOD, truncated [ 855.797878][T16976] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 855.814228][ T5918] hid_parser_main: 48 callbacks suppressed [ 855.814243][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 855.871055][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 855.901553][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 855.944967][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 855.999892][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 856.007334][T15547] udevd[15547]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 856.034482][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 856.041304][ T5918] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 856.082715][ T5918] pyra 0003:1E7D:2CF6.002E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 856.911199][ T5918] pyra 0003:1E7D:2CF6.002E: couldn't init struct pyra_device [ 856.978836][ T5918] pyra 0003:1E7D:2CF6.002E: couldn't install mouse [ 856.997773][ T5918] pyra 0003:1E7D:2CF6.002E: probe with driver pyra failed with error -32 [ 858.109157][T16298] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 858.302518][T16298] usb 4-1: Using ep0 maxpacket: 16 [ 858.308926][ T5918] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 858.405456][T16298] usb 4-1: config 0 has no interfaces? [ 858.432437][T16298] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.441980][T16298] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 858.460723][T16298] usb 4-1: Manufacturer: syz [ 858.478201][T16298] usb 4-1: config 0 descriptor?? [ 858.483289][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 858.534431][ T5918] usb 3-1: config 6 has an invalid interface number: 96 but max is 0 [ 858.539793][ T5836] usb 2-1: USB disconnect, device number 68 [ 858.548882][ T5918] usb 3-1: config 6 has no interface number 0 [ 858.555099][ T5918] usb 3-1: too many endpoints for config 6 interface 96 altsetting 194: 108, using maximum allowed: 30 [ 858.566313][ T5918] usb 3-1: config 6 interface 96 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 858.592423][ T5918] usb 3-1: config 6 interface 96 has no altsetting 0 [ 858.602214][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=5c00, bcdDevice=ba.fb [ 858.611475][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.632566][ T5918] usb 3-1: Product: syz [ 858.642526][ T5918] usb 3-1: Manufacturer: syz [ 858.647144][ T5918] usb 3-1: SerialNumber: syz [ 859.005347][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 859.256283][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2979'. [ 859.660757][ T5918] usb 3-1: USB disconnect, device number 53 [ 859.860513][T17021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.202996][ T5918] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 860.458912][ T5918] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.470055][ T5918] usb 3-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 860.485020][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 860.501979][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 37184, setting to 1024 [ 860.594065][ T5918] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 860.622954][ T5918] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 860.632172][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 860.640381][ T5918] usb 3-1: Product: syz [ 860.652579][ T5918] usb 3-1: Manufacturer: syz [ 860.858787][T17022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 861.055451][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 861.142009][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 861.256425][ T5918] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 861.316468][ T5893] usb 4-1: USB disconnect, device number 59 [ 861.348026][ T5918] usb 3-1: USB disconnect, device number 54 [ 861.544255][T17031] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2984'. [ 861.557894][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.569167][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.577446][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.597004][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.609061][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 862.790874][T17036] chnl_net:caif_netlink_parms(): no params data found [ 863.221601][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.236695][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.252650][T17036] bridge_slave_0: entered allmulticast mode [ 863.265876][T17036] bridge_slave_0: entered promiscuous mode [ 863.280800][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.303449][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.323690][T17036] bridge_slave_1: entered allmulticast mode [ 863.350594][T17036] bridge_slave_1: entered promiscuous mode [ 863.474176][T17070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2991'. [ 863.498879][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.545159][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.667177][ T5830] Bluetooth: hci6: command tx timeout [ 863.667955][T17036] team0: Port device team_slave_0 added [ 863.741092][T17036] team0: Port device team_slave_1 added [ 863.889429][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.918419][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.990964][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.030232][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.038143][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.066811][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.231926][T17073] random: crng reseeded on system resumption [ 864.501918][T17036] hsr_slave_0: entered promiscuous mode [ 864.512265][T17036] hsr_slave_1: entered promiscuous mode [ 864.520973][T17036] debugfs: 'hsr0' already exists in 'hsr' [ 864.527154][T17036] Cannot create hsr debugfs directory [ 865.042513][ T5836] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 865.412686][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 865.446362][ T5836] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 865.484790][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.546897][ T5836] usb 2-1: Product: syz [ 865.551107][ T5836] usb 2-1: Manufacturer: syz [ 865.628785][ T5836] usb 2-1: SerialNumber: syz [ 865.677452][ T5836] usb 2-1: config 0 descriptor?? [ 865.752517][ T5830] Bluetooth: hci6: command tx timeout [ 865.778862][ T5836] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 865.833094][ T5836] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 866.512601][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 866.512619][ T30] audit: type=1326 audit(1765995785.032:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.1.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc77298f749 code=0x0 [ 866.515363][T17036] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 866.588965][T17036] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 866.620071][T17036] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 866.688903][T17036] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 866.960408][T17036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.989372][T17036] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.020458][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.027622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.048208][T17110] loop2: detected capacity change from 0 to 7 [ 867.221694][T17110] loop2: [ 867.231695][T17110] loop2: partition table partially beyond EOD, truncated [ 867.246494][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.253616][ T7599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.572057][T17036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.699975][T17117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3000'. [ 867.737473][ T30] audit: type=1326 audit(1765995786.262:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 867.824500][ T5830] Bluetooth: hci6: command tx timeout [ 867.846295][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.918200][ T30] audit: type=1326 audit(1765995786.262:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 867.940874][ T30] audit: type=1326 audit(1765995786.312:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.000592][ T30] audit: type=1326 audit(1765995786.312:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.049427][ T30] audit: type=1326 audit(1765995786.312:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.072524][ T30] audit: type=1326 audit(1765995786.322:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.095600][ T30] audit: type=1326 audit(1765995786.322:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.121389][ T30] audit: type=1326 audit(1765995786.322:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.198167][T17121] €Â: renamed from vlan1 (while UP) [ 868.246964][ T30] audit: type=1326 audit(1765995786.322:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa412f8f749 code=0x7ffc0000 [ 868.459127][T17122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'. [ 868.566651][T17036] veth0_vlan: entered promiscuous mode [ 868.588351][T17126] FAULT_INJECTION: forcing a failure. [ 868.588351][T17126] name failslab, interval 1, probability 0, space 0, times 0 [ 868.618793][T17126] CPU: 1 UID: 0 PID: 17126 Comm: syz.6.3004 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.618828][T17126] Tainted: [L]=SOFTLOCKUP [ 868.618836][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.618848][T17126] Call Trace: [ 868.618855][T17126] [ 868.618863][T17126] dump_stack_lvl+0x189/0x250 [ 868.618891][T17126] ? __pfx____ratelimit+0x10/0x10 [ 868.618919][T17126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.618940][T17126] ? __pfx__printk+0x10/0x10 [ 868.618969][T17126] ? __pfx___might_resched+0x10/0x10 [ 868.618990][T17126] ? fs_reclaim_acquire+0x7d/0x100 [ 868.619014][T17126] should_fail_ex+0x414/0x560 [ 868.619046][T17126] should_failslab+0xa8/0x100 [ 868.619070][T17126] __kmalloc_cache_noprof+0x84/0x700 [ 868.619089][T17126] ? __request_module+0x2a5/0x5d0 [ 868.619116][T17126] __request_module+0x2a5/0x5d0 [ 868.619142][T17126] ? __pfx___request_module+0x10/0x10 [ 868.619165][T17126] ? __up_read+0x25d/0x670 [ 868.619188][T17126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 868.619225][T17126] ctrl_getfamily+0x217/0x590 [ 868.619253][T17126] ? __nla_parse+0x40/0x60 [ 868.619273][T17126] ? __pfx_ctrl_getfamily+0x10/0x10 [ 868.619300][T17126] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 868.619325][T17126] genl_family_rcv_msg_doit+0x215/0x300 [ 868.619349][T17126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 868.619388][T17126] genl_rcv_msg+0x60e/0x790 [ 868.619411][T17126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.619428][T17126] ? __pfx_ctrl_getfamily+0x10/0x10 [ 868.619467][T17126] netlink_rcv_skb+0x208/0x470 [ 868.619491][T17126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.619509][T17126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 868.619547][T17126] ? down_read+0x274/0x2e0 [ 868.619566][T17126] ? genl_rcv+0xd/0x40 [ 868.619584][T17126] genl_rcv+0x28/0x40 [ 868.619599][T17126] netlink_unicast+0x82f/0x9e0 [ 868.619627][T17126] ? __pfx_netlink_unicast+0x10/0x10 [ 868.619649][T17126] ? netlink_sendmsg+0x642/0xb30 [ 868.619671][T17126] ? skb_put+0x11b/0x210 [ 868.619694][T17126] netlink_sendmsg+0x805/0xb30 [ 868.619726][T17126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.619752][T17126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 868.619777][T17126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 868.619794][T17126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.619819][T17126] __sock_sendmsg+0x21c/0x270 [ 868.619854][T17126] __sys_sendto+0x3bd/0x520 [ 868.619876][T17126] ? __pfx___sys_sendto+0x10/0x10 [ 868.619915][T17126] ? exc_page_fault+0x82/0x100 [ 868.619937][T17126] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 868.619966][T17126] __x64_sys_sendto+0xde/0x100 [ 868.619988][T17126] do_syscall_64+0xfa/0xf80 [ 868.620007][T17126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.620025][T17126] ? clear_bhb_loop+0x60/0xb0 [ 868.620044][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.620060][T17126] RIP: 0033:0x7f55339915dc [ 868.620075][T17126] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 868.620090][T17126] RSP: 002b:00007f5534865ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 868.620109][T17126] RAX: ffffffffffffffda RBX: 00007f5534865fc0 RCX: 00007f55339915dc [ 868.620122][T17126] RDX: 000000000000001c RSI: 00007f5534866010 RDI: 0000000000000004 [ 868.620133][T17126] RBP: 0000000000000000 R08: 00007f5534865f14 R09: 000000000000000c [ 868.620144][T17126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 868.620155][T17126] R13: 00007f5534865f68 R14: 00007f5534866010 R15: 0000000000000000 [ 868.620183][T17126] [ 868.980116][T17036] veth1_vlan: entered promiscuous mode [ 869.010447][T17036] veth0_macvtap: entered promiscuous mode [ 869.019732][T17036] veth1_macvtap: entered promiscuous mode [ 869.037447][T17036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.047920][T17036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.094901][ T5836] usb 2-1: USB disconnect, device number 69 [ 869.229697][T14325] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.282704][T14325] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.310371][T14325] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.356344][T17131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.365280][T14325] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.407849][T17131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.576035][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.623523][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.763234][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.789461][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.902943][ T5830] Bluetooth: hci6: command tx timeout [ 870.072900][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.079318][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.173732][ T5836] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 870.252764][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3009'. [ 870.342639][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 870.375128][ T5836] usb 2-1: config 0 has no interfaces? [ 870.396943][ T5836] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=ec.3c [ 870.434713][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.443219][ T5836] usb 2-1: Product: syz [ 870.447405][ T5836] usb 2-1: Manufacturer: syz [ 870.472848][ T5836] usb 2-1: SerialNumber: syz [ 870.497873][ T5836] usb 2-1: config 0 descriptor?? [ 870.628432][T17152] loop2: detected capacity change from 0 to 7 [ 870.644844][T15371] loop2: [ 870.648666][T15371] loop2: partition table partially beyond EOD, truncated [ 870.660920][T17152] loop2: [ 870.699235][T17152] loop2: partition table partially beyond EOD, truncated [ 870.720257][ T5836] usb 2-1: USB disconnect, device number 70 [ 870.765923][T17153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 870.781758][T17153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 870.790970][T17153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 870.810749][T17153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 870.820645][T17153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 871.098847][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3012'. [ 871.181790][T17157] syz_tun: entered promiscuous mode [ 871.218814][T17157] syz_tun: left promiscuous mode [ 871.620263][T17164] FAULT_INJECTION: forcing a failure. [ 871.620263][T17164] name failslab, interval 1, probability 0, space 0, times 0 [ 871.671141][T17164] CPU: 1 UID: 0 PID: 17164 Comm: syz.1.3014 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.671175][T17164] Tainted: [L]=SOFTLOCKUP [ 871.671183][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.671194][T17164] Call Trace: [ 871.671202][T17164] [ 871.671210][T17164] dump_stack_lvl+0x189/0x250 [ 871.671236][T17164] ? __pfx____ratelimit+0x10/0x10 [ 871.671264][T17164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.671286][T17164] ? __pfx__printk+0x10/0x10 [ 871.671317][T17164] ? __pfx___might_resched+0x10/0x10 [ 871.671336][T17164] ? fs_reclaim_acquire+0x7d/0x100 [ 871.671360][T17164] should_fail_ex+0x414/0x560 [ 871.671392][T17164] should_failslab+0xa8/0x100 [ 871.671416][T17164] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 871.671434][T17164] ? __kasan_kmalloc+0x93/0xb0 [ 871.671454][T17164] ? __request_module+0x2c1/0x5d0 [ 871.671475][T17164] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 871.671496][T17164] kstrdup+0x42/0x100 [ 871.671517][T17164] __request_module+0x2c1/0x5d0 [ 871.671544][T17164] ? __pfx___request_module+0x10/0x10 [ 871.671566][T17164] ? __up_read+0x25d/0x670 [ 871.671588][T17164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 871.671634][T17164] ctrl_getfamily+0x217/0x590 [ 871.671662][T17164] ? __nla_parse+0x40/0x60 [ 871.671682][T17164] ? __pfx_ctrl_getfamily+0x10/0x10 [ 871.671709][T17164] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 871.671734][T17164] genl_family_rcv_msg_doit+0x215/0x300 [ 871.671757][T17164] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 871.671795][T17164] genl_rcv_msg+0x60e/0x790 [ 871.671818][T17164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.671834][T17164] ? __pfx_ctrl_getfamily+0x10/0x10 [ 871.671872][T17164] netlink_rcv_skb+0x208/0x470 [ 871.671897][T17164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.671915][T17164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.671952][T17164] ? down_read+0x274/0x2e0 [ 871.671975][T17164] ? genl_rcv+0xd/0x40 [ 871.671992][T17164] genl_rcv+0x28/0x40 [ 871.672006][T17164] netlink_unicast+0x82f/0x9e0 [ 871.672034][T17164] ? __pfx_netlink_unicast+0x10/0x10 [ 871.672056][T17164] ? netlink_sendmsg+0x642/0xb30 [ 871.672076][T17164] ? skb_put+0x11b/0x210 [ 871.672098][T17164] netlink_sendmsg+0x805/0xb30 [ 871.672129][T17164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.672155][T17164] ? aa_sock_msg_perm+0xf1/0x1b0 [ 871.672180][T17164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.672197][T17164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.672221][T17164] __sock_sendmsg+0x21c/0x270 [ 871.672251][T17164] __sys_sendto+0x3bd/0x520 [ 871.672273][T17164] ? __pfx___sys_sendto+0x10/0x10 [ 871.672314][T17164] ? exc_page_fault+0x82/0x100 [ 871.672338][T17164] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 871.672369][T17164] __x64_sys_sendto+0xde/0x100 [ 871.672391][T17164] do_syscall_64+0xfa/0xf80 [ 871.672410][T17164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.672427][T17164] ? clear_bhb_loop+0x60/0xb0 [ 871.672448][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.672465][T17164] RIP: 0033:0x7fc7729915dc [ 871.672481][T17164] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 871.672497][T17164] RSP: 002b:00007fc77390cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 871.672516][T17164] RAX: ffffffffffffffda RBX: 00007fc77390cfc0 RCX: 00007fc7729915dc [ 871.672530][T17164] RDX: 000000000000001c RSI: 00007fc77390d010 RDI: 0000000000000004 [ 871.672542][T17164] RBP: 0000000000000000 R08: 00007fc77390cf14 R09: 000000000000000c [ 871.672553][T17164] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 871.672564][T17164] R13: 00007fc77390cf68 R14: 00007fc77390d010 R15: 0000000000000000 [ 871.672593][T17164] [ 872.278919][T17155] chnl_net:caif_netlink_parms(): no params data found [ 872.511234][T17177] loop5: detected capacity change from 0 to 7 [ 872.617581][T17177] Dev loop5: unable to read RDB block 7 [ 872.676645][T17177] loop5: unable to read partition table [ 872.697457][T17177] loop5: partition table beyond EOD, truncated [ 872.743537][T17177] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 872.862695][ T5830] Bluetooth: hci7: command tx timeout [ 872.972230][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.057906][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.079621][T17155] bridge_slave_0: entered allmulticast mode [ 873.090008][T17155] bridge_slave_0: entered promiscuous mode [ 873.103277][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.112010][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.147303][T17155] bridge_slave_1: entered allmulticast mode [ 873.169221][T17155] bridge_slave_1: entered promiscuous mode [ 873.186818][T17194] loop2: detected capacity change from 0 to 7 [ 873.214928][T17194] loop2: [ 873.237946][T17194] loop2: partition table partially beyond EOD, truncated [ 873.253465][T17191] fuse: Bad value for 'fd' [ 873.271541][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 873.910308][T17155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.944667][T17155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.114265][T17155] team0: Port device team_slave_0 added [ 874.194999][T17155] team0: Port device team_slave_1 added [ 874.494358][T17155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.570171][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.748576][T17155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.934414][T17155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.942500][ T5830] Bluetooth: hci7: command tx timeout [ 874.943307][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.043354][T17155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.229755][T17208] FAULT_INJECTION: forcing a failure. [ 875.229755][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 875.287701][T17208] CPU: 1 UID: 0 PID: 17208 Comm: syz.2.3025 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.287728][T17208] Tainted: [L]=SOFTLOCKUP [ 875.287736][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.287746][T17208] Call Trace: [ 875.287753][T17208] [ 875.287762][T17208] dump_stack_lvl+0x189/0x250 [ 875.287788][T17208] ? __pfx____ratelimit+0x10/0x10 [ 875.287816][T17208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.287834][T17208] ? __pfx__printk+0x10/0x10 [ 875.287864][T17208] ? __pfx___might_resched+0x10/0x10 [ 875.287882][T17208] ? fs_reclaim_acquire+0x7d/0x100 [ 875.287907][T17208] should_fail_ex+0x414/0x560 [ 875.287937][T17208] should_failslab+0xa8/0x100 [ 875.287960][T17208] __kmalloc_cache_noprof+0x84/0x700 [ 875.287977][T17208] ? trace_kmalloc+0x1f/0xb0 [ 875.287991][T17208] ? call_usermodehelper_setup+0x8e/0x270 [ 875.288006][T17208] ? __kasan_kmalloc+0x93/0xb0 [ 875.288029][T17208] call_usermodehelper_setup+0x8e/0x270 [ 875.288045][T17208] ? __pfx_free_modprobe_argv+0x10/0x10 [ 875.288070][T17208] __request_module+0x38f/0x5d0 [ 875.288097][T17208] ? __pfx___request_module+0x10/0x10 [ 875.288120][T17208] ? __up_read+0x25d/0x670 [ 875.288142][T17208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 875.288177][T17208] ctrl_getfamily+0x217/0x590 [ 875.288203][T17208] ? __nla_parse+0x40/0x60 [ 875.288221][T17208] ? __pfx_ctrl_getfamily+0x10/0x10 [ 875.288247][T17208] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 875.288272][T17208] genl_family_rcv_msg_doit+0x215/0x300 [ 875.288295][T17208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 875.288332][T17208] genl_rcv_msg+0x60e/0x790 [ 875.288355][T17208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.288371][T17208] ? __pfx_ctrl_getfamily+0x10/0x10 [ 875.288410][T17208] netlink_rcv_skb+0x208/0x470 [ 875.288433][T17208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.288451][T17208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.288489][T17208] ? down_read+0x274/0x2e0 [ 875.288506][T17208] ? genl_rcv+0xd/0x40 [ 875.288523][T17208] genl_rcv+0x28/0x40 [ 875.288538][T17208] netlink_unicast+0x82f/0x9e0 [ 875.288566][T17208] ? __pfx_netlink_unicast+0x10/0x10 [ 875.288588][T17208] ? netlink_sendmsg+0x642/0xb30 [ 875.288609][T17208] ? skb_put+0x11b/0x210 [ 875.288638][T17208] netlink_sendmsg+0x805/0xb30 [ 875.288668][T17208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.288693][T17208] ? aa_sock_msg_perm+0xf1/0x1b0 [ 875.288718][T17208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.288735][T17208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.288759][T17208] __sock_sendmsg+0x21c/0x270 [ 875.288789][T17208] __sys_sendto+0x3bd/0x520 [ 875.288810][T17208] ? __pfx___sys_sendto+0x10/0x10 [ 875.288849][T17208] ? exc_page_fault+0x82/0x100 [ 875.288869][T17208] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 875.288894][T17208] __x64_sys_sendto+0xde/0x100 [ 875.288912][T17208] do_syscall_64+0xfa/0xf80 [ 875.288929][T17208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.288947][T17208] ? clear_bhb_loop+0x60/0xb0 [ 875.288968][T17208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.288983][T17208] RIP: 0033:0x7fa412f915dc [ 875.288998][T17208] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 875.289014][T17208] RSP: 002b:00007fa413e81ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 875.289034][T17208] RAX: ffffffffffffffda RBX: 00007fa413e81fc0 RCX: 00007fa412f915dc [ 875.289048][T17208] RDX: 000000000000001c RSI: 00007fa413e82010 RDI: 0000000000000004 [ 875.289060][T17208] RBP: 0000000000000000 R08: 00007fa413e81f14 R09: 000000000000000c [ 875.289072][T17208] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 875.289082][T17208] R13: 00007fa413e81f68 R14: 00007fa413e82010 R15: 0000000000000000 [ 875.289111][T17208] [ 876.289759][T17155] hsr_slave_0: entered promiscuous mode [ 876.362192][T17155] hsr_slave_1: entered promiscuous mode [ 876.401679][T17155] debugfs: 'hsr0' already exists in 'hsr' [ 876.432299][T17210] GUP no longer grows the stack in syz.2.3027 (17210): 200000004000-200000005000 (200000001000) [ 876.447050][T17155] Cannot create hsr debugfs directory [ 876.503746][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.2.3027 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.503768][T17210] Tainted: [L]=SOFTLOCKUP [ 876.503774][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.503783][T17210] Call Trace: [ 876.503788][T17210] [ 876.503795][T17210] dump_stack_lvl+0x189/0x250 [ 876.503818][T17210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.503835][T17210] ? __pfx__printk+0x10/0x10 [ 876.503852][T17210] ? find_vma+0xe7/0x160 [ 876.503882][T17210] __get_user_pages+0x2465/0x29f0 [ 876.503914][T17210] ? __gup_longterm_locked+0xc63/0x1660 [ 876.503933][T17210] ? down_read_killable+0x1bc/0x350 [ 876.503953][T17210] __gup_longterm_locked+0xde4/0x1660 [ 876.503975][T17210] ? try_grab_folio_fast+0x1bf/0x6a0 [ 876.504001][T17210] ? gup_fast_fallback+0x1b82/0x22d0 [ 876.504021][T17210] gup_fast_fallback+0x1d6b/0x22d0 [ 876.504058][T17210] ? __pfx_gup_fast_fallback+0x10/0x10 [ 876.504075][T17210] ? __mutex_lock+0x335/0x1350 [ 876.504095][T17210] ? is_valid_gup_args+0x11f/0x200 [ 876.504115][T17210] ? get_user_pages_fast+0x4d/0xb0 [ 876.504134][T17210] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 876.504155][T17210] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 876.504174][T17210] ? wait_for_space+0x248/0x2d0 [ 876.504193][T17210] iov_iter_get_pages2+0x5e/0xa0 [ 876.504212][T17210] __se_sys_vmsplice+0x548/0x10d0 [ 876.504243][T17210] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 876.504261][T17210] ? __pfx_futex_wait+0x10/0x10 [ 876.504326][T17210] ? do_syscall_64+0xbe/0xf80 [ 876.504342][T17210] do_syscall_64+0xfa/0xf80 [ 876.504357][T17210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.504370][T17210] ? clear_bhb_loop+0x60/0xb0 [ 876.504386][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.504399][T17210] RIP: 0033:0x7fa412f8f749 [ 876.504411][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.504422][T17210] RSP: 002b:00007fa413e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 876.504436][T17210] RAX: ffffffffffffffda RBX: 00007fa4131e5fa0 RCX: 00007fa412f8f749 [ 876.504446][T17210] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 876.504455][T17210] RBP: 00007fa413013f91 R08: 0000000000000000 R09: 0000000000000000 [ 876.504463][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.504471][T17210] R13: 00007fa4131e6038 R14: 00007fa4131e5fa0 R15: 00007fa41330fa28 [ 876.504492][T17210] [ 876.814584][T17218] loop5: detected capacity change from 0 to 7 [ 876.975698][T17218] Dev loop5: unable to read RDB block 7 [ 876.996774][T17218] loop5: unable to read partition table [ 877.041119][ T5830] Bluetooth: hci7: command tx timeout [ 877.061023][T17218] loop5: partition table beyond EOD, truncated [ 877.115150][T17218] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 878.007798][T17249] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3033'. [ 878.856146][ T3766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.005138][ T3766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.088030][ T3766] bond0 (unregistering): Released all slaves [ 879.103963][ T5830] Bluetooth: hci7: command tx timeout [ 879.119053][ T3766] bond1 (unregistering): Released all slaves [ 879.133607][T17258] FAULT_INJECTION: forcing a failure. [ 879.133607][T17258] name failslab, interval 1, probability 0, space 0, times 0 [ 879.200000][T17258] CPU: 1 UID: 0 PID: 17258 Comm: syz.2.3036 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.200029][T17258] Tainted: [L]=SOFTLOCKUP [ 879.200036][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 879.200048][T17258] Call Trace: [ 879.200056][T17258] [ 879.200064][T17258] dump_stack_lvl+0x189/0x250 [ 879.200091][T17258] ? __pfx____ratelimit+0x10/0x10 [ 879.200126][T17258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.200147][T17258] ? __pfx__printk+0x10/0x10 [ 879.200176][T17258] ? __pfx___might_resched+0x10/0x10 [ 879.200197][T17258] ? fs_reclaim_acquire+0x7d/0x100 [ 879.200223][T17258] should_fail_ex+0x414/0x560 [ 879.200255][T17258] should_failslab+0xa8/0x100 [ 879.200279][T17258] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 879.200308][T17258] ? __alloc_skb+0x255/0x430 [ 879.200326][T17258] ? napi_skb_cache_get+0x4a5/0x780 [ 879.200343][T17258] ? napi_skb_cache_get+0x151/0x780 [ 879.200367][T17258] __alloc_skb+0x255/0x430 [ 879.200388][T17258] ? __pfx___alloc_skb+0x10/0x10 [ 879.200413][T17258] ? netlink_ack_tlv_len+0x6c/0x210 [ 879.200439][T17258] netlink_ack+0x146/0xa50 [ 879.200459][T17258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.200492][T17258] netlink_rcv_skb+0x28c/0x470 [ 879.200516][T17258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.200535][T17258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.200573][T17258] ? down_read+0x274/0x2e0 [ 879.200592][T17258] ? genl_rcv+0xd/0x40 [ 879.200610][T17258] genl_rcv+0x28/0x40 [ 879.200625][T17258] netlink_unicast+0x82f/0x9e0 [ 879.200654][T17258] ? __pfx_netlink_unicast+0x10/0x10 [ 879.200677][T17258] ? netlink_sendmsg+0x642/0xb30 [ 879.200698][T17258] ? skb_put+0x11b/0x210 [ 879.200721][T17258] netlink_sendmsg+0x805/0xb30 [ 879.200753][T17258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.200779][T17258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 879.200805][T17258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 879.200822][T17258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.200846][T17258] __sock_sendmsg+0x21c/0x270 [ 879.200876][T17258] __sys_sendto+0x3bd/0x520 [ 879.200898][T17258] ? __pfx___sys_sendto+0x10/0x10 [ 879.200940][T17258] ? exc_page_fault+0x82/0x100 [ 879.200963][T17258] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 879.200995][T17258] __x64_sys_sendto+0xde/0x100 [ 879.201018][T17258] do_syscall_64+0xfa/0xf80 [ 879.201038][T17258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.201056][T17258] ? clear_bhb_loop+0x60/0xb0 [ 879.201078][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.201095][T17258] RIP: 0033:0x7fa412f915dc [ 879.201118][T17258] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 879.201134][T17258] RSP: 002b:00007fa413e81ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 879.201152][T17258] RAX: ffffffffffffffda RBX: 00007fa413e81fc0 RCX: 00007fa412f915dc [ 879.201165][T17258] RDX: 000000000000001c RSI: 00007fa413e82010 RDI: 0000000000000004 [ 879.201176][T17258] RBP: 0000000000000000 R08: 00007fa413e81f14 R09: 000000000000000c [ 879.201187][T17258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 879.201196][T17258] R13: 00007fa413e81f68 R14: 00007fa413e82010 R15: 0000000000000000 [ 879.201218][T17258] [ 880.230568][T17269] loop2: detected capacity change from 0 to 7 [ 880.239426][T17269] loop2: p4 [ 880.242811][T17269] loop2: partition table partially beyond EOD, truncated [ 880.250363][T17269] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 880.462234][T15547] udevd[15547]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 880.693657][ T3766] bond2 (unregistering): Released all slaves [ 880.743750][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 881.005759][ T7356] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 881.176344][ T7356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.257120][ T7356] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 881.314445][ T7356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.334454][ T3766] bond3 (unregistering): Released all slaves [ 881.359751][ T7356] usb 3-1: config 0 descriptor?? [ 881.404114][ T7356] pwc: Askey VC010 type 2 USB webcam detected. [ 881.842293][ T7356] pwc: recv_control_msg error -32 req 02 val 2b00 [ 881.867398][ T7356] pwc: recv_control_msg error -32 req 02 val 2700 [ 881.886144][ T7356] pwc: recv_control_msg error -32 req 02 val 2c00 [ 881.924664][ T7356] pwc: recv_control_msg error -32 req 04 val 1000 [ 881.943030][ T3766] bond4 (unregistering): Released all slaves [ 881.957597][ T7356] pwc: recv_control_msg error -32 req 04 val 1300 [ 881.973589][ T7356] pwc: recv_control_msg error -32 req 04 val 1400 [ 881.980696][ T7356] pwc: recv_control_msg error -32 req 02 val 2000 [ 881.989864][ T7356] pwc: recv_control_msg error -32 req 02 val 2100 [ 881.997976][ T7356] pwc: recv_control_msg error -32 req 04 val 1500 [ 882.013037][ T7356] pwc: recv_control_msg error -32 req 02 val 2500 [ 882.020170][ T7356] pwc: recv_control_msg error -32 req 02 val 2400 [ 882.027561][ T7356] pwc: recv_control_msg error -32 req 02 val 2600 [ 882.037495][ T7356] pwc: recv_control_msg error -32 req 02 val 2900 [ 882.046842][ T7356] pwc: recv_control_msg error -32 req 02 val 2800 [ 882.083106][ T7356] pwc: recv_control_msg error -32 req 04 val 1100 [ 882.110199][ T7356] pwc: recv_control_msg error -32 req 04 val 1200 [ 882.126916][ T7356] pwc: Registered as video103. [ 882.164282][ T7356] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input88 [ 882.607603][ T3766] bond5 (unregistering): Released all slaves [ 882.826971][ T3766] bond6 (unregistering): Released all slaves [ 882.869905][ T3766] bond7 (unregistering): Released all slaves [ 883.067934][ T3766] bond8 (unregistering): Released all slaves [ 883.320976][ T3766] bond9 (unregistering): Released all slaves [ 883.380287][T17238] macvtap1: entered promiscuous mode [ 883.415494][T17238] macvtap1: entered allmulticast mode [ 883.436202][T17238] dummy0: entered promiscuous mode [ 883.459035][T17238] dummy0: entered allmulticast mode [ 883.514245][T17238] team0: Device macvtap1 failed to register rx_handler [ 883.540942][T17238] dummy0: left allmulticast mode [ 883.565358][T17238] dummy0: left promiscuous mode [ 883.644596][T17278] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 883.684755][ T3766] : left promiscuous mode [ 883.763740][T10891] usb 3-1: USB disconnect, device number 55 [ 883.946468][ T3766] tipc: Left network mode [ 883.989576][ T3766] IPVS: stopping backup sync thread 7216 ... [ 884.039799][T17292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3046'. [ 884.335731][T17304] sctp: [Deprecated]: syz.1.3048 (pid 17304) Use of int in maxseg socket option. [ 884.335731][T17304] Use struct sctp_assoc_value instead [ 884.612975][ T3766] hsr_slave_0: left promiscuous mode [ 884.629256][ T3766] hsr_slave_1: left promiscuous mode [ 884.641325][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.654894][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.777116][ T3766] pimreg (unregistering): left allmulticast mode [ 884.896763][ T3766] pim6reg9 (unregistering): left allmulticast mode [ 885.222902][T17313] loop2: detected capacity change from 0 to 7 [ 885.231000][T17313] loop2: p4 [ 885.239738][T17313] loop2: partition table partially beyond EOD, truncated [ 885.336218][T17313] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 885.499988][T15547] udevd[15547]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 886.427708][ T3766] team0 (unregistering): Port device team_slave_1 removed [ 886.527280][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 886.527361][ T30] audit: type=1326 audit(1765995805.052:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.6.3056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f553398f749 code=0x0 [ 886.824243][ T3766] team0 (unregistering): Port device team_slave_0 removed [ 886.957841][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3058'. [ 887.270847][T17323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.309903][T17340] FAULT_INJECTION: forcing a failure. [ 887.309903][T17340] name failslab, interval 1, probability 0, space 0, times 0 [ 887.384063][T17340] CPU: 0 UID: 0 PID: 17340 Comm: syz.6.3059 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.384092][T17340] Tainted: [L]=SOFTLOCKUP [ 887.384099][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.384110][T17340] Call Trace: [ 887.384118][T17340] [ 887.384126][T17340] dump_stack_lvl+0x189/0x250 [ 887.384154][T17340] ? __pfx____ratelimit+0x10/0x10 [ 887.384183][T17340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.384204][T17340] ? __pfx__printk+0x10/0x10 [ 887.384242][T17340] should_fail_ex+0x414/0x560 [ 887.384274][T17340] should_failslab+0xa8/0x100 [ 887.384298][T17340] kmem_cache_alloc_noprof+0x88/0x710 [ 887.384327][T17340] ? skb_clone+0x212/0x3a0 [ 887.384358][T17340] skb_clone+0x212/0x3a0 [ 887.384384][T17340] __netlink_deliver_tap+0x404/0x850 [ 887.384419][T17340] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.384443][T17340] netlink_deliver_tap+0x19c/0x1b0 [ 887.384467][T17340] netlink_sendskb+0x68/0x140 [ 887.384490][T17340] netlink_unicast+0x397/0x9e0 [ 887.384508][T17340] ? __asan_memcpy+0x40/0x70 [ 887.384532][T17340] ? __pfx_netlink_unicast+0x10/0x10 [ 887.384568][T17340] netlink_rcv_skb+0x28c/0x470 [ 887.384593][T17340] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.384612][T17340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.384652][T17340] ? down_read+0x274/0x2e0 [ 887.384670][T17340] ? genl_rcv+0xd/0x40 [ 887.384688][T17340] genl_rcv+0x28/0x40 [ 887.384702][T17340] netlink_unicast+0x82f/0x9e0 [ 887.384731][T17340] ? __pfx_netlink_unicast+0x10/0x10 [ 887.384754][T17340] ? netlink_sendmsg+0x642/0xb30 [ 887.384775][T17340] ? skb_put+0x11b/0x210 [ 887.384799][T17340] netlink_sendmsg+0x805/0xb30 [ 887.384831][T17340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.384859][T17340] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.384884][T17340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.384905][T17340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.384930][T17340] __sock_sendmsg+0x21c/0x270 [ 887.384980][T17340] __sys_sendto+0x3bd/0x520 [ 887.385006][T17340] ? __pfx___sys_sendto+0x10/0x10 [ 887.385057][T17340] ? exc_page_fault+0x82/0x100 [ 887.385084][T17340] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 887.385122][T17340] __x64_sys_sendto+0xde/0x100 [ 887.385149][T17340] do_syscall_64+0xfa/0xf80 [ 887.385173][T17340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.385194][T17340] ? clear_bhb_loop+0x60/0xb0 [ 887.385220][T17340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.385241][T17340] RIP: 0033:0x7f55339915dc [ 887.385261][T17340] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 887.385279][T17340] RSP: 002b:00007f5534865ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 887.385302][T17340] RAX: ffffffffffffffda RBX: 00007f5534865fc0 RCX: 00007f55339915dc [ 887.385318][T17340] RDX: 000000000000001c RSI: 00007f5534866010 RDI: 0000000000000004 [ 887.385333][T17340] RBP: 0000000000000000 R08: 00007f5534865f14 R09: 000000000000000c [ 887.385344][T17340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 887.385353][T17340] R13: 00007f5534865f68 R14: 00007f5534866010 R15: 0000000000000000 [ 887.385377][T17340] [ 888.184767][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3061'. [ 888.877779][T17363] binder: BINDER_SET_CONTEXT_MGR already set [ 888.878645][T17360] input: syz1 as /devices/virtual/input/input89 [ 888.888849][T17363] binder: 17359:17363 ioctl 4018620d 200000000040 returned -16 [ 889.259388][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 889.542513][ T5836] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 889.693157][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 889.703722][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.789667][T17374] 8021q: adding VLAN 0 to HW filter on device bond12 [ 889.842741][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.863058][ T5836] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 889.873372][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.897213][ T5836] usb 2-1: config 0 descriptor?? [ 890.033662][T17353] netlink: 'syz.6.3062': attribute type 2 has an invalid length. [ 890.051508][ T3766] IPVS: stop unused estimator thread 0... [ 890.226718][T17353] @„;: entered promiscuous mode [ 890.399267][ T5836] zeroplus 0003:0C12:0030.002F: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 890.431323][ T5836] zeroplus 0003:0C12:0030.002F: no inputs found [ 890.617525][ T5836] usb 2-1: USB disconnect, device number 71 [ 890.653933][T17155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 890.695345][T17384] fido_id[17384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 890.712700][T17155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 890.770332][T17155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 890.806165][T17391] binder: BINDER_SET_CONTEXT_MGR already set [ 890.828193][T17155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 890.852952][T17391] binder: 17389:17391 ioctl 4018620d 2000000000c0 returned -16 [ 891.201145][T17155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.281385][T17155] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.321492][T14967] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.328618][T14967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.419682][T14967] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.426911][T14967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.704049][T10891] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 891.799308][T17155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.866356][T10891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.882951][T10891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.915375][T10891] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 891.930018][T10891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.950473][T10891] usb 3-1: config 0 descriptor?? [ 892.110543][T17155] veth0_vlan: entered promiscuous mode [ 892.182032][T17155] veth1_vlan: entered promiscuous mode [ 892.295303][ T30] audit: type=1326 audit(1765995810.822:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.7.3071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f627e78f749 code=0x0 [ 892.441930][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.455093][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.462212][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.476618][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.477072][T17155] veth0_macvtap: entered promiscuous mode [ 892.486163][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.490235][T17423] fuse: Bad value for 'group_id' [ 892.497552][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.512642][T10891] aureal 0003:0755:2626.0030: unknown main item tag 0x0 [ 892.551528][T10891] aureal 0003:0755:2626.0030: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 892.619590][T17155] veth1_macvtap: entered promiscuous mode [ 892.652113][T17263] usb 3-1: USB disconnect, device number 56 [ 892.658258][T17423] fuse: Bad value for 'group_id' [ 892.741909][T17426] fido_id[17426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 892.774540][T17155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.788909][T17155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.847074][ T6134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.917333][ T6134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.972333][ T6134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.981534][ T6134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.618856][T14967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.652077][T14967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.786501][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.806447][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.858682][T16694] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 894.025451][T16694] usb 2-1: device descriptor read/64, error -71 [ 894.273034][T16694] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 894.383933][ T7356] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 894.424789][T16694] usb 2-1: device descriptor read/64, error -71 [ 894.546069][T16694] usb usb2-port1: attempt power cycle [ 894.555972][ T7356] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.568808][ T7356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 894.587086][ T7356] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 894.609817][ T7356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.646345][ T7356] usb 4-1: config 0 descriptor?? [ 894.913055][T16694] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 894.954042][T16694] usb 2-1: device descriptor read/8, error -71 [ 895.130397][ T7356] usbhid 4-1:0.0: can't add hid device: -71 [ 895.169575][ T7356] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 895.222115][ T7356] usb 4-1: USB disconnect, device number 60 [ 895.228213][T16694] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 895.287765][T16694] usb 2-1: device descriptor read/8, error -71 [ 895.403009][T16694] usb usb2-port1: unable to enumerate USB device [ 895.454595][T17263] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 895.627953][T17263] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 895.643288][T17263] usb 3-1: config 0 has no interface number 0 [ 895.659922][T17263] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 895.667089][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 895.699512][T17263] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 895.745199][T17263] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 895.786675][T17263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.851291][T17263] usb 3-1: Product: syz [ 895.877729][T17263] usb 3-1: Manufacturer: syz [ 895.882337][T17263] usb 3-1: SerialNumber: syz [ 895.909541][T17263] usb 3-1: config 0 descriptor?? [ 895.959383][T17472] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 895.972113][T17263] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 896.042188][T17263] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 896.360516][T17472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.378005][T17472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.432897][T17263] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 896.445145][T17472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.584511][T17472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.602463][T17263] usb 4-1: Using ep0 maxpacket: 16 [ 896.618682][T17263] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 896.631333][T17263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 896.644731][T17263] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 896.656143][T17263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.664972][T17263] usb 4-1: Product: syz [ 896.669286][T17263] usb 4-1: Manufacturer: syz [ 896.676761][ T5915] usb 3-1: USB disconnect, device number 57 [ 896.719180][T17263] usb 4-1: SerialNumber: syz [ 896.781245][T17263] usb 4-1: config 0 descriptor?? [ 896.814607][T17263] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 896.854230][T17263] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 897.252552][T16694] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 897.454204][T17263] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 897.462685][T16694] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 897.472141][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.485436][T17263] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 897.516199][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.537085][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.547719][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.564563][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.579061][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.600169][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.610157][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.628598][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.639330][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.649124][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.660487][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.669463][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.681400][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.694601][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.704124][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.718194][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.730608][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.751505][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.761179][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.773620][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.782213][T16694] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 897.791971][T16694] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 897.805095][T16694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 897.825600][T16694] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 897.838922][T16694] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 897.850101][T16694] usb 2-1: Product: syz [ 897.854466][T16694] usb 2-1: Manufacturer: syz [ 897.860136][T16694] usb 2-1: SerialNumber: syz [ 897.871823][T16694] usb 2-1: config 0 descriptor?? [ 897.887535][T16694] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 898.133715][T17263] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 898.153895][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 898.165468][T16694] usb 2-1: USB disconnect, device number 76 [ 898.188390][T16694] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 898.351027][T17263] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 898.360563][T17263] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 898.370454][T17263] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 898.381847][T17263] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 898.392031][T17263] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 898.409136][T17499] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 898.508674][T17263] usb 4-1: USB disconnect, device number 61 [ 899.287639][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3089'. [ 899.855565][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 900.123468][T17538] @: renamed from vlan0 (while UP) [ 900.422550][ T5915] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 900.522763][T17135] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 900.613179][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 900.622687][ T5915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 900.656841][ T5915] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.728735][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 900.730082][T17135] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.749070][T17135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.757454][T17135] usb 3-1: Product: syz [ 900.762627][T17135] usb 3-1: Manufacturer: syz [ 900.769501][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.803840][ T5915] usb 4-1: Product: syz [ 900.814931][ T5915] usb 4-1: Manufacturer: syz [ 900.816069][T17135] usb 3-1: SerialNumber: syz [ 900.819574][ T5915] usb 4-1: SerialNumber: syz [ 901.247981][ T5915] usb 4-1: USB disconnect, device number 62 [ 901.254993][T17135] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 901.270916][T17135] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 901.318398][T17556] loop5: detected capacity change from 0 to 7 [ 901.333150][T17556] Dev loop5: unable to read RDB block 7 [ 901.338755][T17556] loop5: unable to read partition table [ 901.339123][T15547] udevd[15547]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.352135][T17556] loop5: partition table beyond EOD, truncated [ 901.367029][T17556] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 901.375611][T17135] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.440538][T17135] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 901.492784][T17135] usb 3-1: USB disconnect, device number 58 [ 901.974002][T17568] syzkaller1: entered promiscuous mode [ 901.979618][T17568] syzkaller1: entered allmulticast mode [ 901.997626][T17568] af_packet: tpacket_rcv: packet too big, clamped from 65058 to 3952. macoff=96 [ 902.285000][T17153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 902.300632][T17153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 902.310896][T17153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 902.331198][T17153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 902.339584][T17153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 902.710313][ T9785] bridge0: port 3(syz_tun) entered disabled state [ 902.740163][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 902.771940][ T9785] syz_tun (unregistering): left allmulticast mode [ 902.791643][ T9785] syz_tun (unregistering): left promiscuous mode [ 902.800811][ T9785] bridge0: port 3(syz_tun) entered disabled state [ 902.912572][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 902.931870][ T5915] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 902.953654][ T5915] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 902.967589][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 902.997785][ T5915] usb 2-1: config 1 has no interface number 0 [ 903.015554][ T5915] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 71, changing to 10 [ 903.037595][ T5915] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33028, setting to 1024 [ 903.054678][ T3665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.067776][ T5915] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 903.086112][ T3665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.100703][ T5915] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 903.121012][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.143763][T17135] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 903.148828][ T5915] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 903.215756][ T3665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.251624][ T3665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.299538][ T76] tipc: Resetting bearer [ 903.304710][T17135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.331536][T17575] chnl_net:caif_netlink_parms(): no params data found [ 903.353658][ T5915] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 903.379340][T17135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.410820][T17135] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.429980][T17135] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.453207][T17135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.460047][ T3665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.489233][T17135] usb 4-1: config 0 descriptor?? [ 903.507432][ T3665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.773087][ T3665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.785453][ T3665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.971870][T17135] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 903.972344][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.011152][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.036235][T17575] bridge_slave_0: entered allmulticast mode [ 904.060079][T17575] bridge_slave_0: entered promiscuous mode [ 904.141627][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.159305][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.169849][T17575] bridge_slave_1: entered allmulticast mode [ 904.179284][T17575] bridge_slave_1: entered promiscuous mode [ 904.296664][T16694] usb 4-1: USB disconnect, device number 63 [ 904.383739][T17153] Bluetooth: hci3: command tx timeout [ 904.413974][ T5915] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 904.416473][T17575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.441730][T17575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.665633][T17575] team0: Port device team_slave_0 added [ 904.742025][T17575] team0: Port device team_slave_1 added [ 904.766993][ T3665] bridge_slave_1: left allmulticast mode [ 904.783287][ T3665] bridge_slave_1: left promiscuous mode [ 904.803326][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.821876][ T3665] bridge_slave_0: left allmulticast mode [ 904.836929][ T3665] bridge_slave_0: left promiscuous mode [ 904.847124][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.908766][ T3665] tipc: Resetting bearer [ 905.263983][ T3766] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 905.562057][T17135] usb 2-1: USB disconnect, device number 77 [ 905.586344][T17135] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 906.344997][T17585] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 906.419855][ T3665] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 906.430444][ T3665] bridge0 (unregistering): left allmulticast mode [ 906.465598][T17153] Bluetooth: hci3: command tx timeout [ 906.528185][ T3665] bond1 (unregistering): (slave bridge1): Releasing active interface [ 906.564036][T17585] usb 4-1: unable to get BOS descriptor or descriptor too short [ 906.584775][T17585] usb 4-1: not running at top speed; connect to a high speed hub [ 906.606109][T17585] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 906.638905][T17585] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 906.651491][T17585] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 906.668930][ T3665] tipc: Disabling bearer [ 906.717073][T17585] usb 4-1: config 2 has no interface number 0 [ 906.749475][T17585] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 906.794506][T17585] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 906.853551][T17585] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 906.914581][T17585] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 906.971937][T17585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.000120][T17585] usb 4-1: Product: syz [ 907.012524][T17585] usb 4-1: Manufacturer: syz [ 907.037409][T17585] usb 4-1: SerialNumber: syz [ 907.201715][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.220653][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.273070][ T3665] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 907.297413][T17622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.308947][T17622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.330411][ T3665] bond0 (unregistering): Released all slaves [ 907.398237][T17585] usb 4-1: USB disconnect, device number 64 [ 907.589459][ T3665] bond1 (unregistering): Released all slaves [ 907.895280][ T3665] bond2 (unregistering): Released all slaves [ 908.110144][ T3665] bond3 (unregistering): Released all slaves [ 908.262758][T17585] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 908.307710][ T3665] bond4 (unregistering): Released all slaves [ 908.483425][T17585] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 908.499626][T17585] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 908.517324][T17585] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 908.530134][T17585] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 908.545574][T17153] Bluetooth: hci3: command tx timeout [ 908.555198][T17585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 908.567774][T17585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 908.596600][T17585] usb 4-1: language id specifier not provided by device, defaulting to English [ 908.615735][ T3665] bond5 (unregistering): Released all slaves [ 908.617826][T17585] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 908.638161][T17585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.673934][T17585] usb 4-1: Manufacturer: 媯輶쥭º [ 908.690319][T17585] usb 4-1: config 0 descriptor?? [ 908.705842][T17637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.718164][T17585] hub 4-1:0.0: bad descriptor, ignoring hub [ 908.734911][T17585] hub 4-1:0.0: probe with driver hub failed with error -5 [ 908.773443][T17585] input: 媯輶쥭º as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input90 [ 908.965229][T17585] usb 4-1: USB disconnect, device number 65 [ 909.069591][ T3665] bond6 (unregistering): Released all slaves [ 909.252320][ T3665] bond7 (unregistering): Released all slaves [ 909.437881][ T3665] bond8 (unregistering): Released all slaves [ 909.460464][ T3665] bond9 (unregistering): Released all slaves [ 909.711536][ T3665] bond10 (unregistering): Released all slaves [ 909.737918][ T3665] bond11 (unregistering): Released all slaves [ 910.007087][ T3665] bond12 (unregistering): Released all slaves [ 910.217236][ T3665] : left promiscuous mode [ 910.259375][T17575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.288082][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.317757][T17575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.332155][T17575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.341193][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.426201][T17575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.479897][ T3665] tipc: Disabling bearer [ 910.488879][ T3665] tipc: Disabling bearer [ 910.509143][ T3665] tipc: Left network mode [ 910.623031][ T5830] Bluetooth: hci3: command tx timeout [ 910.632027][ T3665] IPVS: stopping backup sync thread 11999 ... [ 910.921795][T17575] hsr_slave_0: entered promiscuous mode [ 910.967291][T17575] hsr_slave_1: entered promiscuous mode [ 910.983935][T17575] debugfs: 'hsr0' already exists in 'hsr' [ 911.013548][T17575] Cannot create hsr debugfs directory [ 912.047433][T10891] IPVS: starting estimator thread 0... [ 912.142693][T17668] IPVS: using max 43 ests per chain, 103200 per kthread [ 912.428029][ T3665] hsr_slave_0: left promiscuous mode [ 912.492818][ T3665] hsr_slave_1: left promiscuous mode [ 912.506979][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.551213][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.639033][ T3665] veth0_macvtap: left promiscuous mode [ 912.705221][ T3665] veth1_vlan: left promiscuous mode [ 912.710612][ T3665] @ÿ: left promiscuous mode [ 913.193227][ T3665] pimreg (unregistering): left allmulticast mode [ 913.343332][T17701] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 914.496020][T17703] loop6: detected capacity change from 0 to 524287999 [ 914.895859][T10891] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 915.057270][T10891] usb 4-1: device descriptor read/64, error -71 [ 915.322728][T10891] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 915.482492][T10891] usb 4-1: device descriptor read/64, error -71 [ 915.640188][T10891] usb usb4-port1: attempt power cycle [ 916.012557][T10891] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 916.044967][T10891] usb 4-1: device descriptor read/8, error -71 [ 916.312738][T10891] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 916.370977][T10891] usb 4-1: device descriptor read/8, error -71 [ 916.498127][T17729] syzkaller0: entered promiscuous mode [ 916.513119][T17729] syzkaller0: entered allmulticast mode [ 916.533745][T10891] usb usb4-port1: unable to enumerate USB device [ 916.630850][ T3665] IPVS: stop unused estimator thread 0... [ 916.897491][T17575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.995177][T17575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 917.038771][T17575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 917.074884][T17575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 917.537958][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.577546][T17758] fuse: Unknown parameter 't«ZIZ·›/Iö' [ 917.598262][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.650356][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.657558][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.725985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.733167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.071132][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.256429][T17575] veth0_vlan: entered promiscuous mode [ 918.306429][T17575] veth1_vlan: entered promiscuous mode [ 918.476570][T17575] veth0_macvtap: entered promiscuous mode [ 918.498618][T17575] veth1_macvtap: entered promiscuous mode [ 918.536699][T17575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.578500][T17575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.600819][T16910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.670128][T16910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.682545][T16910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.720629][T16910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.013430][ T3766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.037720][ T3766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.175948][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.224488][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.818312][T17783] : entered promiscuous mode [ 919.901359][T17788] netlink: 'syz.7.3142': attribute type 5 has an invalid length. [ 920.072279][T17788] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3142'. [ 920.911271][T17798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3143'. [ 921.642917][T10891] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 921.730071][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 921.786190][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 921.812616][T10891] usb 3-1: Using ep0 maxpacket: 8 [ 921.828871][T10891] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 921.847668][T10891] usb 3-1: config 0 has no interface number 0 [ 921.863911][T10891] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.886539][T10891] usb 3-1: New USB device found, idVendor=19d2, idProduct=1432, bcdDevice=e8.76 [ 921.895812][T10891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.908517][T10891] usb 3-1: Product: syz [ 921.920617][T10891] usb 3-1: Manufacturer: syz [ 921.926973][T10891] usb 3-1: SerialNumber: syz [ 921.935751][T10891] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 921.947922][T10891] usb 3-1: no configuration chosen from 1 choice [ 924.077793][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3150'. [ 924.405329][T10891] usb 3-1: USB disconnect, device number 59 [ 925.353077][ T5915] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 925.533662][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 925.563589][ T5915] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 925.571768][ T5915] usb 3-1: config 0 has no interface number 0 [ 925.578017][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 925.589090][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 925.612484][ T5915] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.623800][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 925.642536][ T5915] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 925.682547][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.713553][ T5915] usb 3-1: config 0 descriptor?? [ 925.765512][ T5915] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 926.454111][T10891] usb 3-1: USB disconnect, device number 60 [ 926.496931][T10891] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 926.710683][T17871] FAULT_INJECTION: forcing a failure. [ 926.710683][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 926.727030][T17871] CPU: 0 UID: 0 PID: 17871 Comm: syz.1.3156 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.727059][T17871] Tainted: [L]=SOFTLOCKUP [ 926.727066][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.727077][T17871] Call Trace: [ 926.727085][T17871] [ 926.727093][T17871] dump_stack_lvl+0x189/0x250 [ 926.727121][T17871] ? __pfx____ratelimit+0x10/0x10 [ 926.727150][T17871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.727172][T17871] ? __pfx__printk+0x10/0x10 [ 926.727203][T17871] ? __pfx___might_resched+0x10/0x10 [ 926.727222][T17871] ? fs_reclaim_acquire+0x7d/0x100 [ 926.727246][T17871] should_fail_ex+0x414/0x560 [ 926.727278][T17871] should_failslab+0xa8/0x100 [ 926.727302][T17871] __kmalloc_noprof+0xdf/0x800 [ 926.727321][T17871] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 926.727346][T17871] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 926.727372][T17871] genl_family_rcv_msg_doit+0xb8/0x300 [ 926.727396][T17871] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 926.727423][T17871] ? apparmor_capable+0x137/0x1a0 [ 926.727452][T17871] ? bpf_lsm_capable+0x9/0x20 [ 926.727473][T17871] ? security_capable+0x7e/0x2e0 [ 926.727500][T17871] genl_rcv_msg+0x60e/0x790 [ 926.727523][T17871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 926.727540][T17871] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 926.727581][T17871] netlink_rcv_skb+0x208/0x470 [ 926.727622][T17871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 926.727642][T17871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 926.727684][T17871] ? down_read+0x274/0x2e0 [ 926.727705][T17871] ? genl_rcv+0xd/0x40 [ 926.727724][T17871] genl_rcv+0x28/0x40 [ 926.727740][T17871] netlink_unicast+0x82f/0x9e0 [ 926.727770][T17871] ? __pfx_netlink_unicast+0x10/0x10 [ 926.727795][T17871] ? netlink_sendmsg+0x642/0xb30 [ 926.727818][T17871] ? skb_put+0x11b/0x210 [ 926.727855][T17871] netlink_sendmsg+0x805/0xb30 [ 926.727890][T17871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.727919][T17871] ? aa_sock_msg_perm+0xf1/0x1b0 [ 926.727945][T17871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 926.727963][T17871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.727989][T17871] __sock_sendmsg+0x21c/0x270 [ 926.728022][T17871] ____sys_sendmsg+0x505/0x820 [ 926.728051][T17871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.728102][T17871] ? import_iovec+0x74/0xa0 [ 926.728130][T17871] ___sys_sendmsg+0x21f/0x2a0 [ 926.728157][T17871] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.728189][T17871] ? rcu_read_lock_any_held+0xb3/0x120 [ 926.728245][T17871] ? __fget_files+0x2a/0x420 [ 926.728271][T17871] ? __fget_files+0x3a0/0x420 [ 926.728308][T17871] __x64_sys_sendmsg+0x19b/0x260 [ 926.728336][T17871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.728372][T17871] ? __pfx_ksys_write+0x10/0x10 [ 926.728396][T17871] ? do_syscall_64+0xbe/0xf80 [ 926.728423][T17871] do_syscall_64+0xfa/0xf80 [ 926.728445][T17871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.728466][T17871] ? clear_bhb_loop+0x60/0xb0 [ 926.728491][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.728511][T17871] RIP: 0033:0x7fc77298f749 [ 926.728530][T17871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.728548][T17871] RSP: 002b:00007fc77390e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.728581][T17871] RAX: ffffffffffffffda RBX: 00007fc772be5fa0 RCX: 00007fc77298f749 [ 926.728595][T17871] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 926.728608][T17871] RBP: 00007fc77390e090 R08: 0000000000000000 R09: 0000000000000000 [ 926.728620][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.728650][T17871] R13: 00007fc772be6038 R14: 00007fc772be5fa0 R15: 00007fc772d0fa28 [ 926.728684][T17871] [ 927.569177][T17878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.668550][T17878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.514628][ T5915] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 928.672446][ T5915] usb 3-1: device descriptor read/64, error -71 [ 928.945647][ T5915] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 929.092876][ T5915] usb 3-1: device descriptor read/64, error -71 [ 929.206260][ T5915] usb usb3-port1: attempt power cycle [ 929.572452][ T5915] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 929.606323][ T5915] usb 3-1: device descriptor read/8, error -71 [ 929.684554][T17585] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 929.853908][T17585] usb 2-1: Using ep0 maxpacket: 16 [ 929.869727][T17585] usb 2-1: config 4 has an invalid interface number: 104 but max is 0 [ 929.878850][ T5915] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 929.888555][T17585] usb 2-1: config 4 has no interface number 0 [ 929.895811][T17585] usb 2-1: config 4 interface 104 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 929.913816][ T5915] usb 3-1: device descriptor read/8, error -71 [ 929.921590][T17585] usb 2-1: config 4 interface 104 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1023 [ 929.944177][T17585] usb 2-1: config 4 interface 104 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 929.965229][T17585] usb 2-1: config 4 interface 104 altsetting 6 endpoint 0xC has an invalid bInterval 144, changing to 7 [ 929.977802][T17585] usb 2-1: config 4 interface 104 has no altsetting 0 [ 929.993058][T17585] usb 2-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=1e.2c [ 930.005474][T17585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.015214][T17585] usb 2-1: Product: syz [ 930.024705][T17585] usb 2-1: Manufacturer: syz [ 930.029555][T17585] usb 2-1: SerialNumber: syz [ 930.053560][ T5915] usb usb3-port1: unable to enumerate USB device [ 930.061800][T17893] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 930.082573][T17893] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 930.707687][T17153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.821753][T17153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.854812][T17153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 930.868918][T17153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 930.877034][T17153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.362503][T17263] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 931.399465][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 931.417011][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 931.424922][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 931.434281][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 931.441851][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 931.507200][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.513596][T17263] usb 3-1: device descriptor read/64, error -71 [ 931.519901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.765205][T17263] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 931.943068][T17263] usb 3-1: device descriptor read/64, error -71 [ 932.027430][T17901] chnl_net:caif_netlink_parms(): no params data found [ 932.095952][T17263] usb usb3-port1: attempt power cycle [ 932.331370][T17585] usb 2-1: USB disconnect, device number 78 [ 932.492538][T17263] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 932.533259][T17263] usb 3-1: device descriptor read/8, error -71 [ 932.791678][T17263] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 932.853221][T17263] usb 3-1: device descriptor read/8, error -71 [ 932.904085][T17927] FAULT_INJECTION: forcing a failure. [ 932.904085][T17927] name failslab, interval 1, probability 0, space 0, times 0 [ 932.918158][T17927] CPU: 1 UID: 0 PID: 17927 Comm: syz.1.3169 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.918186][T17927] Tainted: [L]=SOFTLOCKUP [ 932.918193][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 932.918204][T17927] Call Trace: [ 932.918212][T17927] [ 932.918220][T17927] dump_stack_lvl+0x189/0x250 [ 932.918246][T17927] ? __pfx____ratelimit+0x10/0x10 [ 932.918274][T17927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.918296][T17927] ? __pfx__printk+0x10/0x10 [ 932.918324][T17927] ? __pfx___might_resched+0x10/0x10 [ 932.918344][T17927] ? fs_reclaim_acquire+0x7d/0x100 [ 932.918369][T17927] should_fail_ex+0x414/0x560 [ 932.918400][T17927] should_failslab+0xa8/0x100 [ 932.918424][T17927] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 932.918453][T17927] ? __alloc_skb+0x255/0x430 [ 932.918471][T17927] ? napi_skb_cache_get+0x4a5/0x780 [ 932.918489][T17927] ? napi_skb_cache_get+0x151/0x780 [ 932.918511][T17927] __alloc_skb+0x255/0x430 [ 932.918533][T17927] ? __pfx___alloc_skb+0x10/0x10 [ 932.918562][T17927] ovs_dp_cmd_new+0x167/0xaf0 [ 932.918600][T17927] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 932.918633][T17927] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 932.918659][T17927] genl_family_rcv_msg_doit+0x215/0x300 [ 932.918683][T17927] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 932.918714][T17927] ? bpf_lsm_capable+0x9/0x20 [ 932.918741][T17927] ? security_capable+0x7e/0x2e0 [ 932.918768][T17927] genl_rcv_msg+0x60e/0x790 [ 932.918791][T17927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 932.918808][T17927] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 932.918847][T17927] netlink_rcv_skb+0x208/0x470 [ 932.918871][T17927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 932.918890][T17927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 932.918928][T17927] ? down_read+0x274/0x2e0 [ 932.918948][T17927] ? genl_rcv+0xd/0x40 [ 932.918965][T17927] genl_rcv+0x28/0x40 [ 932.918980][T17927] netlink_unicast+0x82f/0x9e0 [ 932.919009][T17927] ? __pfx_netlink_unicast+0x10/0x10 [ 932.919031][T17927] ? netlink_sendmsg+0x642/0xb30 [ 932.919053][T17927] ? skb_put+0x11b/0x210 [ 932.919076][T17927] netlink_sendmsg+0x805/0xb30 [ 932.919108][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.919135][T17927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 932.919160][T17927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.919177][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.919202][T17927] __sock_sendmsg+0x21c/0x270 [ 932.919231][T17927] ____sys_sendmsg+0x505/0x820 [ 932.919258][T17927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.919287][T17927] ? import_iovec+0x74/0xa0 [ 932.919312][T17927] ___sys_sendmsg+0x21f/0x2a0 [ 932.919336][T17927] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.919362][T17927] ? rcu_read_lock_any_held+0xb3/0x120 [ 932.919411][T17927] ? __fget_files+0x2a/0x420 [ 932.919432][T17927] ? __fget_files+0x3a0/0x420 [ 932.919465][T17927] __x64_sys_sendmsg+0x19b/0x260 [ 932.919489][T17927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.919520][T17927] ? __pfx_ksys_write+0x10/0x10 [ 932.919542][T17927] ? do_syscall_64+0xbe/0xf80 [ 932.919565][T17927] do_syscall_64+0xfa/0xf80 [ 932.919584][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.919602][T17927] ? clear_bhb_loop+0x60/0xb0 [ 932.919624][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.919641][T17927] RIP: 0033:0x7fc77298f749 [ 932.919658][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.919674][T17927] RSP: 002b:00007fc77390e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.919692][T17927] RAX: ffffffffffffffda RBX: 00007fc772be5fa0 RCX: 00007fc77298f749 [ 932.919706][T17927] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 932.919718][T17927] RBP: 00007fc77390e090 R08: 0000000000000000 R09: 0000000000000000 [ 932.919729][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.919746][T17927] R13: 00007fc772be6038 R14: 00007fc772be5fa0 R15: 00007fc772d0fa28 [ 932.919776][T17927] [ 932.928659][T17901] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.222538][ T5830] Bluetooth: hci4: command tx timeout [ 933.343103][T17263] usb usb3-port1: unable to enumerate USB device [ 933.372674][T17901] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.380079][T17901] bridge_slave_0: entered allmulticast mode [ 933.389232][T17901] bridge_slave_0: entered promiscuous mode [ 933.502849][ T5830] Bluetooth: hci8: command tx timeout [ 933.509355][T17901] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.518253][T17901] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.540987][T17901] bridge_slave_1: entered allmulticast mode [ 933.553757][T17901] bridge_slave_1: entered promiscuous mode [ 933.982404][T17935] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 933.998367][T17901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.308183][T17901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.418569][T17909] chnl_net:caif_netlink_parms(): no params data found [ 934.650340][T17945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.706998][T17940] pimreg: entered allmulticast mode [ 934.745106][T17901] team0: Port device team_slave_0 added [ 934.838753][T17909] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.849200][T17909] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.861879][T17909] bridge_slave_0: entered allmulticast mode [ 934.888623][T17909] bridge_slave_0: entered promiscuous mode [ 934.926525][T17948] ip6gretap1: entered promiscuous mode [ 934.945802][T17901] team0: Port device team_slave_1 added [ 934.951622][T17909] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.959518][T17909] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.972786][T17909] bridge_slave_1: entered allmulticast mode [ 934.990227][T17909] bridge_slave_1: entered promiscuous mode [ 935.246303][T17953] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3173'. [ 935.432441][ T5830] Bluetooth: hci4: command tx timeout [ 935.582569][ T5830] Bluetooth: hci8: command tx timeout [ 935.818605][T17909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.831877][T17909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.843157][T17901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.850136][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.919142][T17901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.276491][T17901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.288534][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.315556][T17901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.347990][T17909] team0: Port device team_slave_0 added [ 936.389880][T17909] team0: Port device team_slave_1 added [ 936.673761][T17901] hsr_slave_0: entered promiscuous mode [ 936.708398][T17901] hsr_slave_1: entered promiscuous mode [ 936.754561][T17901] debugfs: 'hsr0' already exists in 'hsr' [ 936.760318][T17901] Cannot create hsr debugfs directory [ 936.822256][T17909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.841227][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.890334][T17909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.942973][T17909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.950684][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.979766][T17909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.187027][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'. [ 937.248156][T17971] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 937.263213][T17040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 937.338065][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'. [ 937.542600][ T5830] Bluetooth: hci4: command tx timeout [ 937.630733][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3178'. [ 937.662466][ T5830] Bluetooth: hci8: command tx timeout [ 937.742840][T17909] hsr_slave_0: entered promiscuous mode [ 937.753208][T17909] hsr_slave_1: entered promiscuous mode [ 937.759746][T17909] debugfs: 'hsr0' already exists in 'hsr' [ 937.855959][T17909] Cannot create hsr debugfs directory [ 938.116721][T17977] bond1: entered promiscuous mode [ 938.700216][T17901] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 938.730424][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 938.755046][T17901] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 939.152155][T17901] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 939.295033][T17901] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 939.590208][T17153] Bluetooth: hci4: command tx timeout [ 939.782556][T17153] Bluetooth: hci8: command tx timeout [ 940.030485][T17909] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 940.049390][T17909] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 940.080812][T17909] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 940.156400][T17909] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 940.387367][T17901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.462266][T17901] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.563820][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.570930][T14966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.635415][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.642609][T14966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.861516][T17909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.903186][T18012] loop2: detected capacity change from 0 to 7 [ 940.948872][T18012] loop2: [ 940.951888][T18012] loop2: partition table partially beyond EOD, truncated [ 940.985531][T17909] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.041145][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.048320][T10308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.208024][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.215274][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.258838][T17901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.467609][T17909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.609701][T17901] veth0_vlan: entered promiscuous mode [ 941.660565][T17909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.721473][T17901] veth1_vlan: entered promiscuous mode [ 941.864894][T17901] veth0_macvtap: entered promiscuous mode [ 941.889177][T17909] veth0_vlan: entered promiscuous mode [ 941.917593][T17901] veth1_macvtap: entered promiscuous mode [ 941.947329][T17909] veth1_vlan: entered promiscuous mode [ 941.949544][T18030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3188'. [ 941.978441][T18030] syz_tun: entered promiscuous mode [ 941.988604][T18030] syz_tun: left promiscuous mode [ 942.120738][T17901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.197339][T17901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.267092][T14325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.288852][T14325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.326286][T14325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.343076][T17909] veth0_macvtap: entered promiscuous mode [ 942.352034][T14325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.448539][T17909] veth1_macvtap: entered promiscuous mode [ 942.642484][T17909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.695602][T17909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.752189][T16525] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.808861][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.829062][T16525] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.839367][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.871475][T16525] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.904963][T16525] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.005535][ T6098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.044041][T16298] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 943.044160][ T6098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.140632][T16525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.163855][T16525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.231880][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.241140][ T5842] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 943.272581][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.282555][T16298] usb 2-1: Using ep0 maxpacket: 16 [ 943.302709][T16298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 943.332311][T16298] usb 2-1: config 1 has an invalid interface number: 26 but max is 1 [ 943.368197][T16298] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 943.397958][T16298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 943.433607][ T5842] usb 3-1: device descriptor read/64, error -71 [ 943.450676][T16298] usb 2-1: config 1 has no interface number 0 [ 943.471916][T16298] usb 2-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 943.488888][T16298] usb 2-1: config 1 interface 26 has no altsetting 0 [ 943.500903][T16298] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 943.515908][T16298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.526298][T16298] usb 2-1: Product: syz [ 943.531265][T16298] usb 2-1: Manufacturer: syz [ 943.537807][T16298] usb 2-1: SerialNumber: syz [ 943.673616][T17999] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 943.681165][ T5842] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 943.762612][ T7356] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 943.785256][T16298] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 943.798851][T16298] usb 2-1: 26:2 : does not exist [ 943.822784][ T5842] usb 3-1: device descriptor read/64, error -71 [ 943.823157][T17153] Bluetooth: hci1: command 0x0406 tx timeout [ 943.841603][T16298] usb 2-1: USB disconnect, device number 79 [ 943.863590][T17999] usb 9-1: Using ep0 maxpacket: 8 [ 943.895511][T17999] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 943.907224][T15371] udevd[15371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.931129][ T7356] usb 10-1: device descriptor read/64, error -71 [ 943.941239][T17999] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 943.950077][ T5842] usb usb3-port1: attempt power cycle [ 943.957401][T17999] usb 9-1: Product: syz [ 943.974187][T17999] usb 9-1: Manufacturer: syz [ 943.981882][T17999] usb 9-1: SerialNumber: syz [ 943.999598][T17999] usb 9-1: config 0 descriptor?? [ 944.017762][T17999] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 944.203174][ T7356] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 944.322519][ T5842] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 944.342624][ T7356] usb 10-1: device descriptor read/64, error -71 [ 944.363461][ T5842] usb 3-1: device descriptor read/8, error -71 [ 944.418132][T17999] input: gspca_zc3xx as /devices/platform/dummy_hcd.8/usb9/9-1/input/input91 [ 944.480606][ T7356] usb usb10-port1: attempt power cycle [ 944.624003][ T5842] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 944.712098][ T5842] usb 3-1: device descriptor read/8, error -71 [ 944.843868][ T5842] usb usb3-port1: unable to enumerate USB device [ 944.932957][ T7356] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 944.976879][ T7356] usb 10-1: device descriptor read/8, error -71 [ 945.252641][ T7356] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 945.293917][ T7356] usb 10-1: device descriptor read/8, error -71 [ 945.422777][ T7356] usb usb10-port1: unable to enumerate USB device [ 945.735177][T18056] tipc: Started in network mode [ 945.748625][T18056] tipc: Node identity c6b68b3b72c3, cluster identity 4711 [ 945.759580][T18056] tipc: Enabled bearer , priority 0 [ 945.774222][T18056] syzkaller0: entered promiscuous mode [ 945.780516][T18056] syzkaller0: entered allmulticast mode [ 945.853074][T18056] tipc: Resetting bearer [ 945.877380][T18055] tipc: Resetting bearer [ 945.921301][T18055] tipc: Disabling bearer [ 945.942838][T16298] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 946.092055][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 946.112650][T16298] usb 3-1: Using ep0 maxpacket: 16 [ 946.129975][T16298] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 946.157428][T16298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.169243][T16298] usb 3-1: Product: syz [ 946.174511][T16298] usb 3-1: Manufacturer: syz [ 946.179343][T16298] usb 3-1: SerialNumber: syz [ 946.181899][T18062] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 946.194607][T16298] usb 3-1: config 0 descriptor?? [ 946.203608][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3198'. [ 946.207445][T16298] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 946.221244][T18062] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3198'. [ 946.373824][T17999] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 946.467664][T17910] usb 9-1: USB disconnect, device number 2 [ 946.545495][T17999] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 946.586427][T17999] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 946.607988][T16298] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 946.627448][T16298] usb 3-1: USB disconnect, device number 73 [ 946.633449][T17999] usb 2-1: config 8 has no interface number 0 [ 946.643317][T17999] usb 2-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 946.659754][T17999] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 946.669004][T17999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.673835][T18071] : entered promiscuous mode [ 946.761850][T17999] usb 2-1: NFC: intf ffff88802718b000 id ffffffff8e93ee20 [ 946.803590][T18076] binfmt_misc: register: failed to install interpreter file ./file0 [ 946.958231][T17999] usb 2-1: USB disconnect, device number 80 [ 947.190624][T18073] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3201'. [ 947.225503][T18073] binder: 18072:18073 ioctl c0306201 200000000180 returned -14 [ 947.252143][T18073] binder_alloc: 18072: binder_alloc_buf, no vma [ 947.646949][ T5842] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 947.703066][T18097] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 947.710491][T18097] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 947.837022][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 947.856892][ T5842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 947.873233][ T5842] usb 3-1: config 1 has an invalid interface number: 26 but max is 1 [ 947.886619][ T5842] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 947.962077][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 948.047137][T17999] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 948.121866][ T5842] usb 3-1: config 1 has no interface number 0 [ 948.269262][ T5842] usb 3-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 948.286802][T17999] usb 10-1: config 0 has no interfaces? [ 948.298202][T17999] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 948.313600][ T5842] usb 3-1: config 1 interface 26 has no altsetting 0 [ 948.323287][T17999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.336312][ T5842] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 948.349289][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.360201][ T5842] usb 3-1: Product: syz [ 948.438080][T17999] usb 10-1: config 0 descriptor?? [ 948.457166][ T5842] usb 3-1: Manufacturer: syz [ 948.462324][ T5842] usb 3-1: SerialNumber: syz [ 948.734442][ T5842] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 948.741442][ T5842] usb 3-1: 26:2 : does not exist [ 948.827633][ T5842] usb 3-1: USB disconnect, device number 74 [ 949.184793][T15371] udevd[15371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.778896][T18115] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3212'. [ 949.851049][T18115] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.858609][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.975873][T18118] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3212'. [ 950.010741][T18118] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.017971][T18118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.025524][T18118] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.032701][T18118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.078079][T18118] bridge0: entered promiscuous mode [ 950.083666][T18118] bridge0: entered allmulticast mode [ 950.096922][T18118] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3212'. [ 950.270240][T18127] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 950.407799][T18124] loop2: detected capacity change from 0 to 7 [ 950.478513][T18124] loop2: [ 950.484836][T18124] loop2: partition table partially beyond EOD, truncated [ 950.510171][T18128] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 950.518055][T10891] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 950.722495][T10891] usb 2-1: Using ep0 maxpacket: 16 [ 950.729662][T10891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.759767][T10891] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 950.778027][T10891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.814717][T10891] usb 2-1: Product: syz [ 950.819387][T18126] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.826862][T18126] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.855144][ T5893] usb 10-1: USB disconnect, device number 6 [ 950.871297][T10891] usb 2-1: Manufacturer: syz [ 950.884328][T10891] usb 2-1: SerialNumber: syz [ 950.931513][T10891] usb 2-1: config 0 descriptor?? [ 951.075875][T10891] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 951.662531][T17999] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 951.909765][T18126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.035680][T18126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.152910][T16910] usb 2-1: Failed to submit usb control message: -110 [ 952.161650][T16910] usb 2-1: unable to send the bmi data to the device: -110 [ 952.170941][T16910] usb 2-1: unable to get target info from device [ 952.206497][T16910] usb 2-1: could not get target info (-110) [ 952.227835][T16910] usb 2-1: could not probe fw (-110) [ 952.597908][T18118] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.605253][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.643649][T18143] bond0: entered promiscuous mode [ 952.663889][T18143] bond_slave_0: entered promiscuous mode [ 952.688080][T18143] bond_slave_1: entered promiscuous mode [ 952.730214][T18143] bond0: entered allmulticast mode [ 952.765045][T18143] bond_slave_0: entered allmulticast mode [ 952.770904][T18143] bond_slave_1: entered allmulticast mode [ 952.808852][ T5925] usb 2-1: USB disconnect, device number 81 [ 952.818901][T14325] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.897850][T14325] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.999612][T14325] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.042785][T14325] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.200920][T18166] loop2: detected capacity change from 0 to 7 [ 953.215737][T18166] Dev loop2: unable to read RDB block 7 [ 953.224823][T18166] loop2: AHDI p1 p2 p3 [ 953.233049][T18166] loop2: partition table partially beyond EOD, truncated [ 953.243402][T18166] loop2: p1 start 1601398130 is beyond EOD, truncated [ 953.251865][T18166] loop2: p2 start 1702059890 is beyond EOD, truncated [ 953.274620][ T5925] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 953.453185][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 953.476163][ T5925] usb 9-1: unable to get BOS descriptor or descriptor too short [ 953.491505][ T5925] usb 9-1: config 1 has an invalid interface number: 26 but max is 1 [ 953.504347][ T5925] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 953.517993][T17999] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 953.525883][ T5925] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 953.540005][ T5925] usb 9-1: config 1 has no interface number 0 [ 953.546548][ T5925] usb 9-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 953.574963][ T5925] usb 9-1: config 1 interface 26 has no altsetting 0 [ 953.591932][ T5925] usb 9-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 953.608114][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.642919][ T5925] usb 9-1: Product: syz [ 953.647132][ T5925] usb 9-1: Manufacturer: syz [ 953.651715][ T5925] usb 9-1: SerialNumber: syz [ 953.673049][T17999] usb 10-1: device descriptor read/64, error -71 [ 953.804513][T17999] usb usb10-port1: attempt power cycle [ 953.913443][ T5925] usb 9-1: unknown interface protocol 0x7d, assuming v1 [ 953.921787][ T5925] usb 9-1: 26:2 : does not exist [ 953.968465][ T5925] usb 9-1: USB disconnect, device number 3 [ 954.047102][T15371] udevd[15371]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.183169][T17999] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 954.254773][T17999] usb 10-1: device descriptor read/8, error -71 [ 954.503519][T17999] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 954.553869][T17999] usb 10-1: device descriptor read/8, error -71 [ 954.679618][T17999] usb usb10-port1: unable to enumerate USB device [ 955.424207][T18203] netlink: 'syz.1.3231': attribute type 10 has an invalid length. [ 955.432543][T16693] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 955.506842][T18203] team0: Port device netdevsim0 added [ 955.572582][T16693] usb 9-1: device descriptor read/64, error -71 [ 955.627563][T18205] netlink: 'syz.1.3231': attribute type 10 has an invalid length. [ 955.745992][T18205] team0: Port device netdevsim0 removed [ 955.805919][T18205] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 955.813419][T16693] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 955.846291][T18205] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 955.891212][T18205] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 955.912483][T10898] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 955.968271][T16693] usb 9-1: device descriptor read/64, error -71 [ 956.072429][T10898] usb 3-1: Using ep0 maxpacket: 32 [ 956.083380][T16693] usb usb9-port1: attempt power cycle [ 956.194392][T10898] usb 3-1: config 4 has an invalid interface number: 71 but max is 0 [ 956.226300][T10898] usb 3-1: config 4 has no interface number 0 [ 956.251338][T10898] usb 3-1: config 4 interface 71 altsetting 10 endpoint 0x9 has invalid wMaxPacketSize 0 [ 956.274980][T10898] usb 3-1: config 4 interface 71 has no altsetting 0 [ 956.288115][T10898] usb 3-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=42.2c [ 956.312474][T10898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.320790][T10898] usb 3-1: Product: syz [ 956.325419][T10898] usb 3-1: Manufacturer: syz [ 956.330049][T10898] usb 3-1: SerialNumber: syz [ 956.512450][T18213] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3234'. [ 956.543138][T16693] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 956.563832][T10898] usb 3-1: USB disconnect, device number 75 [ 956.573431][T16693] usb 9-1: device descriptor read/8, error -71 [ 956.622043][T18213] syz_tun: entered promiscuous mode [ 956.683881][T18213] syz_tun: left promiscuous mode [ 956.823907][T16693] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 956.867010][T16693] usb 9-1: device descriptor read/8, error -71 [ 957.013774][T16693] usb usb9-port1: unable to enumerate USB device [ 957.108402][ T31] INFO: task syz.4.2831:16365 blocked for more than 143 seconds. [ 957.117196][ T31] Tainted: G L syzkaller #0 [ 957.125090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 957.135671][ T31] task:syz.4.2831 state:D stack:24472 pid:16365 tgid:16363 ppid:7193 task_flags:0x440040 flags:0x00080002 [ 957.148426][ T31] Call Trace: [ 957.151739][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 957.174496][ T31] __schedule+0x14bc/0x5000 [ 957.189569][ T31] ? __pfx___schedule+0x10/0x10 [ 957.203526][ T31] ? schedule+0x91/0x360 [ 957.203592][ T5925] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 957.207798][ T31] schedule+0x165/0x360 [ 957.207824][ T31] schedule_preempt_disabled+0x13/0x30 [ 957.207844][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 957.266432][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 957.272221][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 957.279951][ T31] ? page_cache_ra_order+0x37a/0xe50 [ 957.286958][ T31] ? rcu_is_watching+0x15/0xb0 [ 957.293074][ T31] down_read+0x99/0x2e0 [ 957.297271][ T31] page_cache_ra_order+0x37a/0xe50 [ 957.309472][T18221] loop2: detected capacity change from 0 to 7 [ 957.328899][T18221] loop2: [ 957.331916][T18221] loop2: partition table partially beyond EOD, truncated [ 957.373443][ T31] do_sync_mmap_readahead+0x394/0x870 [ 957.378895][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 957.427539][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 957.443228][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 957.448622][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 957.469507][ T31] filemap_fault+0x6ac/0x1290 [ 957.475951][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 957.481104][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 957.606466][ T31] __do_fault+0x138/0x390 [ 957.622557][ T31] do_pte_missing+0x6ad/0x3330 [ 957.627391][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 957.632591][ T31] handle_mm_fault+0x1b26/0x32b0 [ 957.637582][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 957.642946][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 957.652566][ T31] ? lock_mm_and_find_vma+0x9c/0x300 [ 957.660668][ T31] do_user_addr_fault+0x764/0x1380 [ 957.666208][ T31] exc_page_fault+0x82/0x100 [ 957.672129][ T31] asm_exc_page_fault+0x26/0x30 [ 957.677783][ T31] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 957.683747][ T31] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 957.705426][ T31] RSP: 0018:ffffc900050278b8 EFLAGS: 00050202 [ 957.711535][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000006e9f0 [ 957.733815][ T31] RDX: ffff888060c51e80 RSI: 0000000000000002 RDI: 00000000ffffffff [ 957.741820][ T31] RBP: ffffc90005027a30 R08: ffffc90005027667 R09: 1ffff92000a04ecc [ 957.757566][ T31] R10: dffffc0000000000 R11: fffff52000a04ecd R12: 0000000000000002 [ 957.794464][ T31] R13: dffffc0000000000 R14: 0000000000000000 R15: 000020000006e9c0 [ 957.820264][ T31] ____sys_recvmsg+0x2ab/0x460 [ 957.833443][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 957.845690][ T31] ? import_iovec+0x74/0xa0 [ 957.850258][ T31] ___sys_recvmsg+0x1b5/0x510 [ 957.856272][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 957.861545][ T31] ? __might_fault+0xb0/0x130 [ 957.867262][ T31] do_recvmmsg+0x307/0x770 [ 957.871782][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 957.878352][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 957.883676][ T31] __x64_sys_recvmmsg+0x190/0x240 [ 957.890273][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 957.898271][ T31] ? do_syscall_64+0xbe/0xf80 [ 957.905925][ T31] do_syscall_64+0xfa/0xf80 [ 957.910467][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.923163][ T31] ? clear_bhb_loop+0x60/0xb0 [ 957.927879][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.934019][ T31] RIP: 0033:0x7f8d23b8f749 [ 957.939683][ T31] RSP: 002b:00007f8d24a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 957.949331][ T31] RAX: ffffffffffffffda RBX: 00007f8d23de6090 RCX: 00007f8d23b8f749 [ 957.957421][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 957.967078][ T31] RBP: 00007f8d23c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 957.975395][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 957.983492][ T31] R13: 00007f8d23de6128 R14: 00007f8d23de6090 R15: 00007f8d23f0fa28 [ 957.993244][ T31] [ 958.013723][ T31] [ 958.013723][ T31] Showing all locks held in the system: [ 958.034802][ T31] 3 locks held by kworker/u8:1/13: [ 958.039966][ T31] #0: ffff888025072948 ((wq_completion)loop6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 958.050997][ T31] #1: ffffc90000127b80 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 958.064029][ T31] #2: ffff88814906aa28 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 958.074961][ T31] 1 lock held by khungtaskd/31: [ 958.079865][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 958.141083][ T31] 3 locks held by kworker/u8:3/49: [ 958.247647][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 958.312622][ T31] #1: ffffc90000ba7b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 958.366354][ T31] #2: ffffffff8f311c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 958.386077][ T31] 2 locks held by getty/5586: [ 958.390850][ T31] #0: ffff88802fecd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 958.413027][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 958.423526][ T31] 3 locks held by kworker/u9:3/5830: [ 958.428874][ T31] #0: ffff8880759d6148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 958.448556][ T31] #1: ffffc9000408fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 958.462559][ T31] #2: ffff88802fc5cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 958.475125][ T31] 5 locks held by kworker/1:8/5925: [ 958.480371][ T31] #0: ffff888142acf948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 958.492150][ T31] #1: ffffc900045bfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 958.504403][ T31] #2: ffff8880287c8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 958.514395][ T31] #3: ffff88802877e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 958.524750][ T31] #4: ffff888143767c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 958.537215][ T31] 1 lock held by udevd/15547: [ 958.541933][ T31] #0: ffff888140fae358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 958.604472][ T31] 1 lock held by syz.4.2831/16365: [ 958.612425][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 958.692424][ T31] 2 locks held by syz.4.2831/16367: [ 958.699192][ T31] 1 lock held by syz.0.2874/16542: [ 958.720355][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 958.731505][ T31] 3 locks held by kworker/0:4/16693: [ 958.739939][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 958.752816][ T31] #1: ffffc9000b967b80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 958.763525][ T31] #2: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 958.785678][ T31] 1 lock held by syz-executor/16723: [ 958.796445][ T31] #0: ffff888140fae358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 958.806060][ T31] 1 lock held by syz.5.2941/16876: [ 958.811240][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 958.824807][ T31] 1 lock held by syz.5.2941/16877: [ 958.829962][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 958.842241][ T31] 1 lock held by syz.5.2941/16883: [ 958.847637][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 958.932445][ T31] 1 lock held by syz.5.2941/16890: [ 958.937636][ T31] #0: ffff88814906abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 959.022771][ T31] 2 locks held by syz.1.3130/17699: [ 959.042482][ T31] #0: ffffffff8f311c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 959.092443][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 959.152620][ T31] 1 lock held by syz.3.3131/17703: [ 959.158864][ T31] #0: ffff888140fae358 (&disk->open_mutex){+.+.}-{4:4}, at: loop_reread_partitions+0x46/0xf0 [ 959.169415][ T31] 3 locks held by syz.1.3170/17934: [ 959.174686][ T31] #0: ffff88807d33cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 959.190867][T17153] Bluetooth: hci2: command 0x0406 tx timeout [ 959.197186][ T31] #1: ffff88807d33c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 959.206988][ T31] #2: ffffffff8f4836c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 959.219302][ T31] 4 locks held by syz.9.3236/18219: [ 959.239951][ T31] #0: ffff88804551cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 959.263478][ T31] #1: ffff88804551c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 959.274676][ T31] #2: ffffffff8f4836c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 959.285785][ T31] #3: ffff8880609a5338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 959.301470][ T31] 3 locks held by syz.2.3237/18221: [ 959.306781][ T31] #0: ffff888057b0cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 959.318830][ T31] #1: ffff888057b0c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 959.328700][ T31] #2: ffffffff8f4836c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 959.344220][ T31] [ 959.359046][ T31] ============================================= [ 959.359046][ T31] [ 959.370754][ T31] NMI backtrace for cpu 0 [ 959.370776][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 959.370804][ T31] Tainted: [L]=SOFTLOCKUP [ 959.370812][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.370825][ T31] Call Trace: [ 959.370835][ T31] [ 959.370844][ T31] dump_stack_lvl+0x189/0x250 [ 959.370884][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.370909][ T31] ? __pfx__printk+0x10/0x10 [ 959.370950][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 959.370980][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 959.371010][ T31] ? __pfx__printk+0x10/0x10 [ 959.371043][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.371095][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 959.371126][ T31] sys_info+0x135/0x170 [ 959.371149][ T31] watchdog+0xf95/0xfe0 [ 959.371182][ T31] ? watchdog+0x20a/0xfe0 [ 959.371217][ T31] kthread+0x711/0x8a0 [ 959.371248][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.371274][ T31] ? __pfx_kthread+0x10/0x10 [ 959.371302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.371333][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 959.371351][ T31] ? __pfx_kthread+0x10/0x10 [ 959.371378][ T31] ret_from_fork+0x599/0xb30 [ 959.371399][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 959.371429][ T31] ? __switch_to_asm+0x39/0x70 [ 959.371454][ T31] ? __switch_to_asm+0x33/0x70 [ 959.371480][ T31] ? __pfx_kthread+0x10/0x10 [ 959.371508][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.371554][ T31] [ 959.371563][ T31] Sending NMI from CPU 0 to CPUs 1: [ 959.537915][ C1] NMI backtrace for cpu 1 [ 959.537933][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.537958][ C1] Tainted: [L]=SOFTLOCKUP [ 959.537964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.537974][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 959.537995][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 959.538008][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 959.538023][ C1] RAX: 3f44da4e9f274b00 RBX: ffffffff81978fda RCX: 3f44da4e9f274b00 [ 959.538035][ C1] RDX: 0000000000000001 RSI: ffffffff8d7922ac RDI: ffffffff8bc08360 [ 959.538046][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 959.538058][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f821f70 [ 959.538069][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 959.538080][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 959.538093][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.538104][ C1] CR2: 00007fdf32777000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 959.538118][ C1] Call Trace: [ 959.538124][ C1] [ 959.538131][ C1] default_idle+0x13/0x20 [ 959.538149][ C1] default_idle_call+0x73/0xb0 [ 959.538168][ C1] do_idle+0x1ea/0x520 [ 959.538185][ C1] ? irqentry_exit+0x5ba/0x660 [ 959.538202][ C1] ? __pfx_do_idle+0x10/0x10 [ 959.538226][ C1] cpu_startup_entry+0x44/0x60 [ 959.538242][ C1] start_secondary+0x101/0x110 [ 959.538266][ C1] common_startup_64+0x13e/0x147 [ 959.538293][ C1] [ 959.794442][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 959.801345][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 959.812035][ T31] Tainted: [L]=SOFTLOCKUP [ 959.816374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.826437][ T31] Call Trace: [ 959.829726][ T31] [ 959.832666][ T31] dump_stack_lvl+0x99/0x250 [ 959.837273][ T31] ? __asan_memcpy+0x40/0x70 [ 959.841860][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.847069][ T31] ? __pfx__printk+0x10/0x10 [ 959.851683][ T31] vpanic+0x237/0x6d0 [ 959.855689][ T31] ? __pfx_vpanic+0x10/0x10 [ 959.860226][ T31] ? preempt_schedule_common+0x83/0xd0 [ 959.865702][ T31] panic+0xb9/0xc0 [ 959.869436][ T31] ? __pfx_panic+0x10/0x10 [ 959.873857][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 959.879245][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 959.885414][ T31] watchdog+0xfdf/0xfe0 [ 959.889588][ T31] ? watchdog+0x20a/0xfe0 [ 959.893925][ T31] kthread+0x711/0x8a0 [ 959.897999][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.902682][ T31] ? __pfx_kthread+0x10/0x10 [ 959.907280][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.912484][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 959.917711][ T31] ? __pfx_kthread+0x10/0x10 [ 959.922305][ T31] ret_from_fork+0x599/0xb30 [ 959.926897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 959.932013][ T31] ? __switch_to_asm+0x39/0x70 [ 959.936776][ T31] ? __switch_to_asm+0x33/0x70 [ 959.941539][ T31] ? __pfx_kthread+0x10/0x10 [ 959.946141][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.950932][ T31] [ 959.954348][ T31] Kernel Offset: disabled [ 959.958672][ T31] Rebooting in 86400 seconds..