last executing test programs: 20m19.804643597s ago: executing program 32 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0xa4, 0x29, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r7, &(0x7f0000000100)=""/83, 0x53) syz_usb_connect(0x0, 0x73, &(0x7f00000000c0)=ANY=[], 0x0) getdents(r7, &(0x7f0000000000)=""/116, 0x74) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r8, 0x0, 0x0, 0x0], 0x4, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x3, r8}) 18m48.162658943s ago: executing program 33 (id=169): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40900}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) socket$inet_tcp(0x2, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 17m56.800427635s ago: executing program 34 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000008c0)={&(0x7f0000000900)=[{0x8021, 0x400, 0x50, &(0x7f0000000440)="bb90191e89268a492c7e9d2c7c4345d99c96db76832e8600d5ac67d5feb479f44ad1e9dcec4d95681a25124a6d8b43016abbb09eaca5577e5fb280d893bc75e0f6b2c0fa9722d6a0c6cb442de783a4b9"}, {0x3, 0x2810, 0x0, 0x0}, {0xde, 0x2000, 0xf, &(0x7f0000000300)="24d245fd3abecf6ae09a33930030a3"}, {0x9, 0x8612, 0x0, 0x0}, {0x800, 0x1200, 0xf, &(0x7f00000006c0)="99eb190df487f8b5b2eba6d0622dbc"}, {0xb4, 0x7401, 0x0, 0x0}], 0x6}) fcntl$setpipe(r2, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x5) io_setup(0x95, &(0x7f0000000040)=0x0) io_submit(r11, 0x0, 0x0) r12 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be83", 0x20, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r12}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 17m48.041541085s ago: executing program 35 (id=248): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2d, 0x2, 0x0) r1 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15m34.262472618s ago: executing program 36 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = syz_io_uring_setup(0x3ab6, 0x0, 0x0, &(0x7f0000000340)) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c, 0x0, r4}) 13m13.573353492s ago: executing program 37 (id=496): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x19, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c) io_submit(r5, 0x4, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f0000000100)="21812a818bb99326cf9aa78dfc4f0ac4f5dc12092e7faa139e2597dba850b86ad2211de9fb71c95a1a2af2f99d02ec6f0187233f2bad639e36338893", 0xb7f40, 0x3000000000000000}]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 13m12.704246058s ago: executing program 38 (id=509): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x48113, r0, 0x233b8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000ac0)=@overlay={0x4, 0x5, 0x4, 0x100, 0xaa, {}, {0x5, 0xc, 0x2, 0x68, 0x3, 0xe, "d74dcf2f"}, 0x0, 0x3, {}, 0x200}) 10m48.229097784s ago: executing program 5 (id=617): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) 10m46.838791823s ago: executing program 5 (id=618): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 10m39.840793244s ago: executing program 5 (id=623): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) 10m32.185059683s ago: executing program 5 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 10m30.660067512s ago: executing program 5 (id=633): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x19, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c) io_submit(0x0, 0x0, &(0x7f0000000780)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 10m30.275433298s ago: executing program 5 (id=634): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xff8c) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000960000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x6}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) 10m29.82739708s ago: executing program 39 (id=634): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xff8c) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000960000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x6}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) 6m34.66721574s ago: executing program 9 (id=400): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc) 6m34.188479945s ago: executing program 9 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 6m32.61820805s ago: executing program 9 (id=799): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xff8c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) 6m16.883984997s ago: executing program 40 (id=799): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xff8c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) 6m3.182488789s ago: executing program 8 (id=842): open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2f, &(0x7f0000002c00)={{0x12, 0x1, 0x201, 0x36, 0x8c, 0xda, 0x10, 0x413c, 0x81ba, 0x403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x8, 0xe, 0xa0, 0xc, [{{0x9, 0x4, 0xe8, 0x3, 0x1, 0x2, 0x6, 0x0, 0xd, [], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x3, 0xa, 0x1, [@generic={0x2, 0xc}]}}]}}]}}]}}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) socket$alg(0x26, 0x5, 0x0) fanotify_init(0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) epoll_create1(0x0) epoll_create1(0x0) pipe2$9p(&(0x7f0000000180), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m2.447540199s ago: executing program 8 (id=843): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c2454", 0xae, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6m0.572316404s ago: executing program 8 (id=845): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000960000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x6}) open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) 5m57.720820961s ago: executing program 8 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 5m56.516523735s ago: executing program 8 (id=852): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r4}, 0x38) 5m54.559324314s ago: executing program 8 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004881, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='@', 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x6, "42cbf017c075dd2a90e900000000000000000100", 0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 5m54.130173899s ago: executing program 41 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004881, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='@', 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x6, "42cbf017c075dd2a90e900000000000000000100", 0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m54.255516706s ago: executing program 4 (id=1136): r0 = socket$kcm(0x29, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = dup3(0xffffffffffffffff, r4, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) pipe(&(0x7f0000000140)) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x50) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602030405060708090a0b0c0d0e0f101dfcff291516171819"], 0x48, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2m51.399940807s ago: executing program 4 (id=1140): rseq(0x0, 0x0, 0x400000003, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471", 0x36}], 0x1) open$dir(0x0, 0x1, 0x19d) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb82", 0x9d, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000015c0)={0x19c, 0x1e, 0x400, 0x70bd28, 0x25dfdbfb, {0xf}, [@generic, @generic="1d550bdaa8e72eafe6291b2dfebc83fb57c251bad314a9cf570642f5382c5bf8e650ebb75255f73bb31ea81f17008ed6e8e3a3f2737c5de492ed49a2ccf6a6f4193d790bd6f67610eeccf1a7e40b3872107fca40", @nested={0x4, 0x3b}, @nested={0xd4, 0x6e, 0x0, 0x1, [@generic="d07dd1d7c6c789ab39d31da1dd0586b2c3fc7617425394fc658a3b91d0fcbe262adb3a8cee6ac47c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfb63a7a050f9935e5563285451eacec7ed39a84a5298e70f37285255ebdba3b140b589bec086db6e691e4", @nested={0x4, 0xc4}, @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x2}, @generic="3cee8c9c04f49c2c55435a3f003ea5954b65915c8f38deb04d14b4db673118cc58f94e021d868ec673f4df80de08b7ac44a29e1dbeee9b998908cdea5c15262c64cfebd53c0fef1e4a8f92ff0c70f4163b58f18c60f8c95f7cf608"]}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x32}]}, @generic="ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb"]}, 0x19c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m47.3562526s ago: executing program 4 (id=1146): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$inet6(0xa, 0x80003, 0xff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000, 0xfffffffffffff000}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r1], 0x90}}, 0x0) 2m45.909330128s ago: executing program 4 (id=1150): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) process_vm_writev(0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000000b00)=""/19, 0x13}, {&(0x7f0000000b40)=""/209, 0xd1}, {&(0x7f0000000c40)=""/244, 0xf4}], 0x6, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 2m45.227479351s ago: executing program 4 (id=1151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 2m43.902070069s ago: executing program 4 (id=1152): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$inet6(0xa, 0x80003, 0xff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000, 0xfffffffffffff000}) r1 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r1], 0x90}}, 0x0) 2m28.47501111s ago: executing program 42 (id=1152): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$inet6(0xa, 0x80003, 0xff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000, 0xfffffffffffff000}) r1 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r1], 0x90}}, 0x0) 1m57.601981462s ago: executing program 1 (id=1211): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x200, 0x1d2) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20010000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi5\x00', 0xc00000, 0x0) ioctl$COMEDI_RANGEINFO(r7, 0x80106408, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x5, @remote, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="ab", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x2}], 0x10}}], 0x2, 0x448d4) 1m56.577189043s ago: executing program 1 (id=1212): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004851) setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)="0100000000", 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000140)={0xc, r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x4, 0xa2, 0x0, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x11b, 0x1, 0xf, 0x3, 0x26f}}}, 0x3a) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) socket$qrtr(0x2a, 0x2, 0x0) 1m55.348672261s ago: executing program 1 (id=1213): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffefe, 0x3000c044, 0x0, 0xfffe, 0x6, 0x0, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) 1m54.458205126s ago: executing program 1 (id=1214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 1m53.375262751s ago: executing program 1 (id=1215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r7, 0x402, 0x20) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1m51.49974458s ago: executing program 1 (id=1220): syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xffffffff, 0xb, 0x7, 0x8, 0x5, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) 1m49.916667917s ago: executing program 43 (id=1220): syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xffffffff, 0xb, 0x7, 0x8, 0x5, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) 2.904200396s ago: executing program 6 (id=1689): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113, 0x4}}, 0x20) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.701895634s ago: executing program 2 (id=1692): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x11, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 2.52036045s ago: executing program 6 (id=1696): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e018") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.480604014s ago: executing program 2 (id=1697): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0x3, 0x8, 0x4000005, 0x0, 0x8, 0x8000000000000001, 0x6, 0x2, 0x300, 0x200004, 0x1], 0x10000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x40, 0xb6, '\x00', 0x5}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.36215473s ago: executing program 3 (id=1699): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 2.314117196s ago: executing program 6 (id=1700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x1, 0x0}, &(0x7f0000000100)=0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x22a00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x410080, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.313781259s ago: executing program 2 (id=1701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b\x00\x00'], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) 2.139362205s ago: executing program 6 (id=1703): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2.067522589s ago: executing program 3 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1.970346199s ago: executing program 0 (id=1705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 1.951447816s ago: executing program 6 (id=1706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 1.899931327s ago: executing program 3 (id=1707): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x11, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 1.868998827s ago: executing program 0 (id=1708): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x5) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) 1.712505628s ago: executing program 0 (id=1709): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.608126137s ago: executing program 3 (id=1710): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r1 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r1, &(0x7f00000001c0), 0x7) 1.573320153s ago: executing program 0 (id=1711): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c491}, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01", 0x1, 0x2a25}]) 1.261793214s ago: executing program 0 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) 1.17736457s ago: executing program 7 (id=1714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x1, 0x0}, &(0x7f0000000100)=0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x22a00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x410080, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 999.786355ms ago: executing program 7 (id=1715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@newtaction={0x88, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_mirred={0x70, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0x6, 0x98, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 989.515527ms ago: executing program 0 (id=1716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x1, 0x0}, &(0x7f0000000100)=0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x22a00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x410080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 951.233522ms ago: executing program 6 (id=1717): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d", 0xffe) 822.927984ms ago: executing program 7 (id=1718): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 697.253889ms ago: executing program 7 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 491.371407ms ago: executing program 3 (id=1720): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 384.744655ms ago: executing program 2 (id=1721): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000700)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x18}, 0xc000) 247.266547ms ago: executing program 2 (id=1722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@newtaction={0x118, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_mirred={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0x6, 0x98, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x2e, 0x6, "cc81c7e04bd8de9bfd134ac033898f89eb6191b423db628fbaf263ee7f1fd41315f5ff44c44f55265e55"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x64, 0x1, [@m_simple={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x30, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 198.475009ms ago: executing program 7 (id=1723): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@newtaction={0xe8, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_mirred={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0x6, 0x98, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x2e, 0x6, "cc81c7e04bd8de9bfd134ac033898f89eb6191b423db628fbaf263ee7f1fd41315f5ff44c44f55265e55"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x34, 0x1, [@m_simple={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 21.121678ms ago: executing program 2 (id=1724): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x4000000057, 0xef1f}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.026408ms ago: executing program 3 (id=1725): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 0s ago: executing program 7 (id=1726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1103.174661][ T5967] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1103.174691][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.174710][ T5967] usb 1-1: Product: syz [ 1103.174723][ T5967] usb 1-1: Manufacturer: syz [ 1103.174731][ T5967] usb 1-1: SerialNumber: syz [ 1103.203770][ T5967] usb 1-1: config 0 descriptor?? [ 1103.205097][T12135] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1103.416885][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 1103.629652][ T5971] usb 3-1: USB disconnect, device number 22 [ 1104.334342][T11867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1105.389102][T11867] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1105.389133][T11867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.414018][T11867] usb 4-1: config 0 descriptor?? [ 1107.181461][T11867] ath6kl: Unsupported hardware version: 0xfe7e9c2 [ 1107.183436][T11867] ath6kl: Failed to init ath6kl core: -22 [ 1107.184904][T11867] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1109.248631][T12121] usb 4-1: USB disconnect, device number 8 [ 1109.841446][T12121] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1110.281141][T12121] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1110.281163][T12121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1110.281178][T12121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1110.293675][T12121] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1110.293706][T12121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.293726][T12121] usb 4-1: Product: syz [ 1110.293740][T12121] usb 4-1: Manufacturer: syz [ 1110.293755][T12121] usb 4-1: SerialNumber: syz [ 1110.382210][T12121] usb 4-1: config 0 descriptor?? [ 1110.455857][T12189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.717471][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 1112.120577][ T5971] usb 1-1: USB disconnect, device number 5 [ 1113.713485][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 1115.543737][T12121] usb 4-1: USB disconnect, device number 9 [ 1115.955824][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.955866][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.332159][ T5971] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1116.491422][T12121] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1116.738551][T12121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1116.738584][T12121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.782865][T12121] usb 4-1: config 0 descriptor?? [ 1116.805668][ T5971] usb 1-1: device descriptor read/all, error -71 [ 1118.477806][T12121] ath6kl: Unsupported hardware version: 0xfe7e9c2 [ 1118.530304][T12121] ath6kl: Failed to init ath6kl core: -22 [ 1118.530659][T12121] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1118.889282][T12262] siw: device registration error -23 [ 1119.833893][ T5971] usb 4-1: USB disconnect, device number 10 [ 1120.172228][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1120.321378][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 1120.324048][ T5910] usb 1-1: config 8 has an invalid interface number: 159 but max is 0 [ 1120.324076][ T5910] usb 1-1: config 8 has no interface number 0 [ 1120.324100][ T5910] usb 1-1: config 8 interface 159 has no altsetting 0 [ 1120.325893][ T5910] usb 1-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 1120.325910][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.325921][ T5910] usb 1-1: Product: syz [ 1120.325929][ T5910] usb 1-1: Manufacturer: syz [ 1120.325937][ T5910] usb 1-1: SerialNumber: syz [ 1121.184214][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 1121.193002][ T5910] gspca_sonixj: reg_w1 err -71 [ 1121.193088][ T5910] sonixj 1-1:8.159: probe with driver sonixj failed with error -71 [ 1121.219764][ T5910] usb 1-1: USB disconnect, device number 8 [ 1122.084883][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 1123.431503][ T5910] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1123.614055][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1123.614099][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.614139][ T5910] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1123.614163][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.674761][ T5910] usb 4-1: config 0 descriptor?? [ 1124.409304][ T5910] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1124.409339][ T5910] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1124.409361][ T5910] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1124.409385][ T5910] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1124.409409][ T5910] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 1124.410172][ T5910] elan 0003:04F3:0755.000F: failed to start in urb: -90 [ 1124.457890][ T5910] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1125.027007][ T6039] usb 4-1: USB disconnect, device number 11 [ 1125.255711][T12338] fido_id[12338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1125.334487][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.335166][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.403274][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'. [ 1126.403309][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'. [ 1127.327593][T12325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.384919][T12325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.181506][T11867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1128.372552][T11867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1128.372590][T11867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1128.372619][T11867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1128.454785][T11867] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1128.454809][T11867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.454820][T11867] usb 1-1: Product: syz [ 1128.454828][T11867] usb 1-1: Manufacturer: syz [ 1128.454836][T11867] usb 1-1: SerialNumber: syz [ 1128.530519][T11867] usb 1-1: config 0 descriptor?? [ 1128.596878][T12363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1129.003030][T12363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1129.165368][T12351] erspan0: entered promiscuous mode [ 1129.187562][T12351] ip6gretap0: entered promiscuous mode [ 1129.228111][T12351] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1129.228130][T12351] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1129.425617][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.478890][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.478981][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.479017][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.283921][ T6039] usb 1-1: USB disconnect, device number 9 [ 1131.911496][ T6039] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1131.941518][T12121] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1132.093809][T12121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1132.093846][T12121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.093883][T12121] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1132.093907][T12121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.141854][T12121] usb 5-1: config 0 descriptor?? [ 1132.432916][ T6039] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1132.432943][ T6039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1132.432971][ T6039] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1132.687041][ T6039] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1132.687073][ T6039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.687094][ T6039] usb 1-1: Product: syz [ 1132.687109][ T6039] usb 1-1: Manufacturer: syz [ 1132.687124][ T6039] usb 1-1: SerialNumber: syz [ 1132.693836][ T6039] usb 1-1: config 0 descriptor?? [ 1132.697706][T12396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1132.958756][T12121] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 1132.958794][T12121] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 1132.958821][T12121] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 1132.958848][T12121] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 1132.958873][T12121] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 1132.959801][T12121] elan 0003:04F3:0755.0010: failed to start in urb: -90 [ 1132.967255][T12396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1133.033669][T12366] netlink: 'syz.4.1053': attribute type 21 has an invalid length. [ 1133.033785][T12366] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 1133.033802][T12366] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1053'. [ 1133.107621][T12121] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1133.402031][T12121] usb 5-1: USB disconnect, device number 18 [ 1133.527005][T12407] fido_id[12407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1133.737120][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 1133.737139][ T37] audit: type=1326 audit(1768372265.460:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.783028][ T37] audit: type=1326 audit(1768372265.520:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.783865][ T37] audit: type=1326 audit(1768372265.520:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.785105][ T37] audit: type=1326 audit(1768372265.520:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.785153][ T37] audit: type=1326 audit(1768372265.520:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.786560][ T37] audit: type=1326 audit(1768372265.520:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.786603][ T37] audit: type=1326 audit(1768372265.520:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.786643][ T37] audit: type=1326 audit(1768372265.520:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354382f749 code=0x7ffc0000 [ 1133.787209][ T37] audit: type=1326 audit(1768372265.520:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354382df90 code=0x7ffc0000 [ 1133.787247][ T37] audit: type=1326 audit(1768372265.520:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12411 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354382df90 code=0x7ffc0000 [ 1134.803275][ T5967] usb 1-1: USB disconnect, device number 10 [ 1134.854605][ T6039] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1135.105525][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1135.105561][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.105599][ T6039] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1135.105623][ T6039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.197707][ T6039] usb 3-1: config 0 descriptor?? [ 1135.973465][ T6039] usbhid 3-1:0.0: can't add hid device: -71 [ 1135.973595][ T6039] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1135.999457][ T6039] usb 3-1: USB disconnect, device number 23 [ 1137.801458][T11869] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1138.051391][T11869] usb 5-1: Using ep0 maxpacket: 16 [ 1139.608067][T11869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1139.608868][T11869] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1139.608889][T11869] usb 5-1: can't read configurations, error -71 [ 1140.590716][T12499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 1140.590753][T12499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 1140.632819][T12499] erspan0: entered promiscuous mode [ 1140.642540][T12499] syz_tun: entered promiscuous mode [ 1140.659642][T12499] debugfs: 'hsr1' already exists in 'hsr' [ 1140.659664][T12499] Cannot create hsr debugfs directory [ 1140.659735][T12499] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1140.659746][T12499] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1141.221407][ T5971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1141.371533][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 1141.389312][ T5971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1141.390416][ T5971] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1141.390451][ T5971] usb 5-1: can't read configurations, error -71 [ 1141.712226][T11867] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1141.883480][T11867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1141.883517][T11867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.883558][T11867] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1141.883581][T11867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.899001][T11867] usb 3-1: config 0 descriptor?? [ 1142.643976][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 1142.698693][T11867] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1142.698731][T11867] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1142.698759][T11867] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1142.698787][T11867] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1142.698814][T11867] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1142.730685][T11867] elan 0003:04F3:0755.0011: failed to start in urb: -90 [ 1142.735167][T11867] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1142.912519][T12121] usb 3-1: USB disconnect, device number 24 [ 1143.311183][T12534] fido_id[12534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1148.404737][T11869] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1148.555880][T11869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1148.555915][T11869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.555954][T11869] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1148.555978][T11869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.565627][T11869] usb 4-1: config 0 descriptor?? [ 1148.830577][T11869] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 1148.830616][T11869] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 1148.830642][T11869] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 1148.830669][T11869] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 1148.830696][T11869] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 1148.856235][T11869] elan 0003:04F3:0755.0012: failed to start in urb: -90 [ 1148.864869][T11869] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1148.952484][T11861] usb 4-1: USB disconnect, device number 12 [ 1149.244334][T12607] fido_id[12607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1154.661400][ T6039] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1154.828696][ T6039] usb 4-1: Using ep0 maxpacket: 16 [ 1154.840478][ T6039] usb 4-1: config 8 has an invalid interface number: 159 but max is 0 [ 1154.840510][ T6039] usb 4-1: config 8 has no interface number 0 [ 1154.840542][ T6039] usb 4-1: config 8 interface 159 has no altsetting 0 [ 1154.877896][ T6039] usb 4-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 1154.877928][ T6039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.877948][ T6039] usb 4-1: Product: syz [ 1154.877959][ T6039] usb 4-1: Manufacturer: syz [ 1154.877967][ T6039] usb 4-1: SerialNumber: syz [ 1155.899368][ T6039] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 1155.901063][ T6039] gspca_sonixj: reg_w1 err -71 [ 1155.901118][ T6039] sonixj 4-1:8.159: probe with driver sonixj failed with error -71 [ 1155.931199][ T6039] usb 4-1: USB disconnect, device number 13 [ 1157.701408][T11861] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1157.928862][T11861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1157.928899][T11861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.928937][T11861] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1157.928959][T11861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.958347][T11861] usb 5-1: config 0 descriptor?? [ 1158.247164][T11861] elan 0003:04F3:0755.0013: unknown main item tag 0x0 [ 1158.247200][T11861] elan 0003:04F3:0755.0013: unknown main item tag 0x0 [ 1158.247226][T11861] elan 0003:04F3:0755.0013: unknown main item tag 0x0 [ 1158.247251][T11861] elan 0003:04F3:0755.0013: unknown main item tag 0x0 [ 1158.247276][T11861] elan 0003:04F3:0755.0013: unknown main item tag 0x0 [ 1158.248209][T11861] elan 0003:04F3:0755.0013: failed to start in urb: -90 [ 1158.358860][T11861] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1158.403856][T11861] usb 5-1: USB disconnect, device number 23 [ 1158.617079][T12737] fido_id[12737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1158.881393][T11861] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1158.991405][ T5119] Bluetooth: hci5: command 0x0406 tx timeout [ 1159.038534][T11861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.038555][T11861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.038577][T11861] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1159.038590][T11861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.105324][T11861] usb 1-1: config 0 descriptor?? [ 1159.662986][T11861] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 1159.663012][T11861] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 1159.663027][T11861] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 1159.663043][T11861] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 1159.663058][T11861] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 1159.663577][T11861] elan 0003:04F3:0755.0014: failed to start in urb: -90 [ 1159.666380][T11861] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1159.712645][T11861] usb 1-1: USB disconnect, device number 11 [ 1160.103364][T12752] fido_id[12752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1161.781117][T12121] IPVS: starting estimator thread 0... [ 1161.797863][T12786] input: syz0 as /devices/virtual/input/input8 [ 1161.881525][T12790] IPVS: using max 16 ests per chain, 38400 per kthread [ 1162.021440][ T6039] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1162.183706][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1162.183741][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.183778][ T6039] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1162.183800][ T6039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.189388][ T6039] usb 3-1: config 0 descriptor?? [ 1162.455837][ T6039] elan 0003:04F3:0755.0015: failed to start in urb: -90 [ 1162.462590][ T6039] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1162.518611][ T6039] usb 3-1: USB disconnect, device number 25 [ 1162.841687][T12804] fido_id[12804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1163.141401][ T6039] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1163.296231][ T6039] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1163.296251][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.363613][ T6039] usb 5-1: config 0 descriptor?? [ 1165.142803][ T6039] ath6kl: Unsupported hardware version: 0xfe7e9c2 [ 1165.143854][ T6039] ath6kl: Failed to init ath6kl core: -22 [ 1165.152013][ T6039] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1165.393339][T11869] usb 5-1: USB disconnect, device number 24 [ 1169.121997][T12877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1127'. [ 1170.371049][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 1170.371085][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 1170.398251][T12891] erspan0: entered promiscuous mode [ 1170.411640][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 1170.480759][T12891] ip6gretap0: entered promiscuous mode [ 1170.491082][T12891] debugfs: 'hsr1' already exists in 'hsr' [ 1170.491112][T12891] Cannot create hsr debugfs directory [ 1170.491203][T12891] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1170.491222][T12891] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1177.423797][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.423868][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.485310][ T9042] Bluetooth: hci4: command 0x0406 tx timeout [ 1180.942084][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1146'. [ 1180.942131][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1146'. [ 1182.261633][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1182.261653][ T37] audit: type=1326 audit(1768372313.990:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.261697][ T37] audit: type=1326 audit(1768372314.000:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.265998][ T37] audit: type=1326 audit(1768372314.000:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266032][ T37] audit: type=1326 audit(1768372314.000:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266055][ T37] audit: type=1326 audit(1768372314.000:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266078][ T37] audit: type=1326 audit(1768372314.000:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266100][ T37] audit: type=1326 audit(1768372314.000:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266122][ T37] audit: type=1326 audit(1768372314.000:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266146][ T37] audit: type=1326 audit(1768372314.000:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033938f749 code=0x7ffc0000 [ 1182.266170][ T37] audit: type=1326 audit(1768372314.000:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13041 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033938df90 code=0x7ffc0000 [ 1185.972886][ T6039] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1186.179337][ T6039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1186.179373][ T6039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.179413][ T6039] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1186.179462][ T6039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.185052][ T6039] usb 4-1: config 0 descriptor?? [ 1187.004272][ T6039] hid_parser_main: 5 callbacks suppressed [ 1187.004298][ T6039] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1187.004328][ T6039] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1187.004354][ T6039] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1187.004380][ T6039] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1187.004407][ T6039] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1187.005458][ T6039] elan 0003:04F3:0755.0016: failed to start in urb: -90 [ 1187.010867][ T6039] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1187.368972][ T6039] usb 4-1: USB disconnect, device number 14 [ 1190.731730][T13128] input: syz0 as /devices/virtual/input/input9 [ 1191.877742][T13149] syz.0.1164 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1192.521499][ T5971] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1192.734532][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1192.734564][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1192.734580][ T5971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1192.741871][ T5971] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1192.741900][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.741920][ T5971] usb 3-1: Product: syz [ 1192.741934][ T5971] usb 3-1: Manufacturer: syz [ 1192.741948][ T5971] usb 3-1: SerialNumber: syz [ 1192.807172][ T5971] usb 3-1: config 0 descriptor?? [ 1192.807986][T13157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1193.272369][ T6039] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1193.558420][ T6039] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1193.558456][ T6039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1193.558483][ T6039] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1193.571806][ T6039] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1193.571826][ T6039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.571838][ T6039] usb 4-1: Product: syz [ 1193.571846][ T6039] usb 4-1: Manufacturer: syz [ 1193.571854][ T6039] usb 4-1: SerialNumber: syz [ 1193.599092][ T6039] usb 4-1: config 0 descriptor?? [ 1193.604688][T13164] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1193.814289][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 1197.000492][ T5971] usb 3-1: USB disconnect, device number 26 [ 1199.064030][ T6039] usb 4-1: USB disconnect, device number 15 [ 1199.171367][T11066] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1199.382117][T11066] usb 1-1: Using ep0 maxpacket: 32 [ 1199.392365][T13165] udevd[13165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1199.409640][T11066] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1199.409668][T11066] usb 1-1: config 0 has no interface number 0 [ 1199.409715][T11066] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1199.423557][T11066] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1199.423588][T11066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.423609][T11066] usb 1-1: Product: syz [ 1199.423624][T11066] usb 1-1: Manufacturer: syz [ 1199.423639][T11066] usb 1-1: SerialNumber: syz [ 1199.441020][T11066] usb 1-1: config 0 descriptor?? [ 1199.567426][T11066] smsc75xx v1.0.0 [ 1199.688743][T13165] udevd[13165]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.602144][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.605342][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.709888][ T9042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1201.727328][ T9042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1201.728804][ T9042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1201.732725][ T9042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1201.737742][ T9042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.661818][T10776] syz_tun (unregistering): left promiscuous mode [ 1203.703239][T13221] lo speed is unknown, defaulting to 1000 [ 1203.883961][ T9042] Bluetooth: hci0: command tx timeout [ 1204.567899][T11066] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1204.567920][T11066] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1204.567931][T11066] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1204.568102][T11066] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1204.655255][T11066] usb 1-1: USB disconnect, device number 12 [ 1205.965736][ T9042] Bluetooth: hci0: command tx timeout [ 1206.955895][T13221] chnl_net:caif_netlink_parms(): no params data found [ 1207.636384][ T12] bridge_slave_1: left allmulticast mode [ 1207.636406][ T12] bridge_slave_1: left promiscuous mode [ 1207.636564][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.774777][ T12] bridge_slave_0: left allmulticast mode [ 1207.774807][ T12] bridge_slave_0: left promiscuous mode [ 1207.775160][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.061384][ T9042] Bluetooth: hci0: command tx timeout [ 1210.111638][ T9042] Bluetooth: hci0: command tx timeout [ 1210.177418][ T12] erspan0 (unregistering): left promiscuous mode [ 1214.605649][T11066] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1215.029619][T11066] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1215.029640][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1215.029656][T11066] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1215.079958][T11066] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.079978][T11066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.079989][T11066] usb 3-1: Product: syz [ 1215.079997][T11066] usb 3-1: Manufacturer: syz [ 1215.080005][T11066] usb 3-1: SerialNumber: syz [ 1215.090234][T11066] usb 3-1: config 0 descriptor?? [ 1215.103799][T13338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1215.509900][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.543786][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 1215.546627][T13337] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1215.572158][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.622538][ T12] bond0 (unregistering): Released all slaves [ 1216.607578][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1195'. [ 1216.701399][T11869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1216.713134][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.713454][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.713697][T13221] bridge_slave_0: entered allmulticast mode [ 1216.716171][T13221] bridge_slave_0: entered promiscuous mode [ 1216.765122][T13358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1216.765981][T13362] bond1: entered promiscuous mode [ 1216.766006][T13362] bond1: entered allmulticast mode [ 1216.777758][T13364] dummy0: entered promiscuous mode [ 1216.784439][T13364] dummy0: entered allmulticast mode [ 1216.785143][T13364] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1216.785834][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.786122][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.786326][T13221] bridge_slave_1: entered allmulticast mode [ 1216.794721][T13221] bridge_slave_1: entered promiscuous mode [ 1217.038534][T11869] usb 4-1: Using ep0 maxpacket: 32 [ 1217.078260][T11869] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1217.078290][T11869] usb 4-1: config 0 has no interface number 0 [ 1217.078333][T11869] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1217.093964][T11869] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1217.093997][T11869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.094021][T11869] usb 4-1: Product: syz [ 1217.094036][T11869] usb 4-1: Manufacturer: syz [ 1217.094052][T11869] usb 4-1: SerialNumber: syz [ 1217.099634][T11869] usb 4-1: config 0 descriptor?? [ 1217.105055][T11869] smsc75xx v1.0.0 [ 1217.662501][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.663384][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.336805][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.399833][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.681628][T11066] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1218.974261][T11066] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1218.974296][T11066] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1218.974324][T11066] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1219.038241][T11066] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1219.038273][T11066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.038293][T11066] usb 1-1: Product: syz [ 1219.038308][T11066] usb 1-1: Manufacturer: syz [ 1219.038321][T11066] usb 1-1: SerialNumber: syz [ 1219.056613][T11066] usb 1-1: config 0 descriptor?? [ 1219.057828][T13372] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1219.275238][ T6039] usb 3-1: USB disconnect, device number 27 [ 1219.309725][T13221] team0: Port device team_slave_0 added [ 1219.335589][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 1219.340329][T13372] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1219.389602][T13221] team0: Port device team_slave_1 added [ 1220.305876][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.306024][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.306084][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.358541][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.358559][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.358593][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.389804][T11869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 1222.389837][T11869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 1222.391395][T11869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1222.391769][T11869] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -110 [ 1222.842964][T11867] usb 4-1: USB disconnect, device number 16 [ 1223.055226][T11066] usb 1-1: USB disconnect, device number 13 [ 1223.764201][T13221] hsr_slave_0: entered promiscuous mode [ 1223.765423][T13221] hsr_slave_1: entered promiscuous mode [ 1223.765966][T13221] debugfs: 'hsr0' already exists in 'hsr' [ 1223.765982][T13221] Cannot create hsr debugfs directory [ 1224.422651][T13417] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 1224.498659][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 1224.658023][T13417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.919434][T13423] bond2: (slave dummy0): making interface the new active one [ 1224.922041][T13423] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1225.031398][T11867] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1225.182608][ T12] hsr_slave_0: left promiscuous mode [ 1225.203068][T11867] usb 3-1: Using ep0 maxpacket: 32 [ 1225.225412][ T12] hsr_slave_1: left promiscuous mode [ 1225.227107][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.244969][T11867] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1225.244998][T11867] usb 3-1: config 0 has no interface number 0 [ 1225.245067][T11867] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1225.249532][T11867] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1225.249560][T11867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.249579][T11867] usb 3-1: Product: syz [ 1225.249593][T11867] usb 3-1: Manufacturer: syz [ 1225.249608][T11867] usb 3-1: SerialNumber: syz [ 1225.256161][T11867] usb 3-1: config 0 descriptor?? [ 1225.269200][T11867] smsc75xx v1.0.0 [ 1225.342913][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.168050][T11867] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1229.168071][T11867] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1229.168083][T11867] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1229.168251][T11867] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1229.223618][T11867] usb 3-1: USB disconnect, device number 28 [ 1230.421445][T12121] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1230.610404][T12121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1230.610439][T12121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.610473][T12121] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1230.610494][T12121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.643802][T12121] usb 3-1: config 0 descriptor?? [ 1231.007224][T12121] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 1231.007263][T12121] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 1231.007290][T12121] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 1231.007315][T12121] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 1231.007341][T12121] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 1231.008260][T12121] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 1231.015219][T12121] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1231.027210][T13453] netlink: 'syz.2.1210': attribute type 21 has an invalid length. [ 1231.472224][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1231.762286][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1235.748579][T13453] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 1235.748596][T13453] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1210'. [ 1235.881725][T12121] usb 3-1: USB disconnect, device number 29 [ 1236.164063][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 1237.521443][T12121] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1237.682740][T12121] usb 4-1: Using ep0 maxpacket: 32 [ 1237.695570][T12121] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1237.695589][T12121] usb 4-1: config 0 has no interface number 0 [ 1237.695619][T12121] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1237.740281][T12121] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1237.740312][T12121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.740332][T12121] usb 4-1: Product: syz [ 1237.740346][T12121] usb 4-1: Manufacturer: syz [ 1237.740361][T12121] usb 4-1: SerialNumber: syz [ 1237.763886][T12121] usb 4-1: config 0 descriptor?? [ 1237.880783][T12121] smsc75xx v1.0.0 [ 1238.599428][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.600376][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.847721][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.847763][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.923083][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.950712][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.981417][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1239.008091][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1239.011009][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1240.300096][T13504] lo speed is unknown, defaulting to 1000 [ 1241.133934][ T9042] Bluetooth: hci1: command tx timeout [ 1241.449880][T12121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1241.449910][T12121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1241.449929][T12121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1241.450212][T12121] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1241.555682][T12121] usb 4-1: USB disconnect, device number 17 [ 1241.684613][ T12] IPVS: stop unused estimator thread 0... [ 1242.424529][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 1243.068044][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.210564][ T9042] Bluetooth: hci1: command tx timeout [ 1243.928772][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.559685][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.717066][T13504] chnl_net:caif_netlink_parms(): no params data found [ 1245.026657][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.138022][T13221] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1245.235041][ T9042] Bluetooth: hci1: command tx timeout [ 1245.437618][T13221] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1245.630032][T13221] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1245.739108][T13221] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1246.331652][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.331790][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.331969][T13504] bridge_slave_0: entered allmulticast mode [ 1246.333663][T13504] bridge_slave_0: entered promiscuous mode [ 1246.335897][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.339745][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.339950][T13504] bridge_slave_1: entered allmulticast mode [ 1246.343029][T13504] bridge_slave_1: entered promiscuous mode [ 1246.754503][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.783812][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.311605][ T9042] Bluetooth: hci1: command tx timeout [ 1247.367180][T13504] team0: Port device team_slave_0 added [ 1247.398770][T13504] team0: Port device team_slave_1 added [ 1247.410059][ T12] bridge_slave_1: left allmulticast mode [ 1247.410088][ T12] bridge_slave_1: left promiscuous mode [ 1247.414373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.493813][ T12] bridge_slave_0: left allmulticast mode [ 1247.493833][ T12] bridge_slave_0: left promiscuous mode [ 1247.494005][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.901520][ T5971] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1250.085375][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1250.085411][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.085446][ T5971] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1250.085471][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.109391][ T5971] usb 4-1: config 0 descriptor?? [ 1250.539099][ T5971] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 1250.539137][ T5971] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 1250.539163][ T5971] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 1250.539188][ T5971] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 1250.539214][ T5971] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 1250.540147][ T5971] elan 0003:04F3:0755.0018: failed to start in urb: -90 [ 1250.547811][ T5971] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1250.629723][T12121] usb 4-1: USB disconnect, device number 18 [ 1250.696740][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 1250.734722][T13609] fido_id[13609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1253.066483][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.132072][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.230883][ T12] bond0 (unregistering): Released all slaves [ 1254.184450][ T12] bond1 (unregistering): Released all slaves [ 1255.091929][ T12] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1255.137470][ T12] bond2 (unregistering): Released all slaves [ 1255.910595][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.910613][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.910638][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.914677][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.914694][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.914727][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.151367][T12121] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1256.361452][T12121] usb 3-1: Using ep0 maxpacket: 32 [ 1256.399150][T12121] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1256.399178][T12121] usb 3-1: config 0 has no interface number 0 [ 1256.399226][T12121] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1256.480457][T12121] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1256.480477][T12121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.480488][T12121] usb 3-1: Product: syz [ 1256.480496][T12121] usb 3-1: Manufacturer: syz [ 1256.480504][T12121] usb 3-1: SerialNumber: syz [ 1256.496932][T12121] usb 3-1: config 0 descriptor?? [ 1256.679438][T12121] smsc75xx v1.0.0 [ 1256.909847][T13504] hsr_slave_0: entered promiscuous mode [ 1256.920502][T13504] hsr_slave_1: entered promiscuous mode [ 1256.922080][T13504] debugfs: 'hsr0' already exists in 'hsr' [ 1256.922106][T13504] Cannot create hsr debugfs directory [ 1257.323544][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.325413][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.645343][T13221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.800897][T13221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.043360][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.043454][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.077217][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.079658][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.565673][T12121] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1260.565693][T12121] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1260.565704][T12121] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1260.567693][T12121] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1260.651473][T12121] usb 3-1: USB disconnect, device number 30 [ 1261.490478][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1261.528464][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1261.571608][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1261.609547][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1261.720465][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1262.475540][T13660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1248'. [ 1262.570082][T13661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1248'. [ 1262.638794][T13660] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1262.669800][T13660] bond1 (unregistering): Released all slaves [ 1262.807777][T13661] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1262.912450][T13661] bond1 (unregistering): Released all slaves [ 1263.080625][T13656] lo speed is unknown, defaulting to 1000 [ 1263.871428][ T5119] Bluetooth: hci3: command tx timeout [ 1264.931857][T13504] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1265.285041][T13504] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1265.478613][T13504] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1265.591147][T13685] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1265.905743][ T5989] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.905821][T13504] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1265.951535][ T5119] Bluetooth: hci3: command tx timeout [ 1266.302264][ T5989] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.452330][ T5989] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.485165][ T5989] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.029616][T13731] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 1268.031512][ T5119] Bluetooth: hci3: command tx timeout [ 1268.129773][T13729] tipc: Started in network mode [ 1268.129806][T13729] tipc: Node identity 4e6f1797c7b, cluster identity 4711 [ 1268.136917][T13729] tipc: Enabled bearer , priority 0 [ 1268.218979][T13731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.233059][T13733] bond1: (slave dummy0): making interface the new active one [ 1268.234537][T13733] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1268.235020][T13656] chnl_net:caif_netlink_parms(): no params data found [ 1268.321189][T13734] tipc: Resetting bearer [ 1268.464055][T13723] tipc: Disabling bearer [ 1268.715031][T13744] input: syz1 as /devices/virtual/input/input10 [ 1268.884730][ T12] hsr_slave_0: left promiscuous mode [ 1268.923254][ T12] hsr_slave_1: left promiscuous mode [ 1268.924415][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.924440][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.983032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.983060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.032867][ T12] batman_adv: batadv0: Removing interface: team0 [ 1269.152717][ T12] veth1_macvtap: left promiscuous mode [ 1269.152826][ T12] veth0_macvtap: left promiscuous mode [ 1269.153073][ T12] veth1_vlan: left promiscuous mode [ 1269.153238][ T12] veth0_vlan: left promiscuous mode [ 1270.128916][ T5119] Bluetooth: hci3: command tx timeout [ 1271.922144][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1272.203255][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1274.941432][T11867] lo speed is unknown, defaulting to 1000 [ 1274.941462][T11867] infiniband syz: ib_query_port failed (-19) [ 1275.521469][T11066] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1275.631701][T13656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.633823][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.634080][T13656] bridge_slave_0: entered allmulticast mode [ 1275.636785][T13656] bridge_slave_0: entered promiscuous mode [ 1275.679280][T13656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.680992][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.682039][T13656] bridge_slave_1: entered allmulticast mode [ 1275.689855][T13656] bridge_slave_1: entered promiscuous mode [ 1275.712008][T11066] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1275.712047][T11066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.712070][T11066] usb 4-1: Product: syz [ 1275.712086][T11066] usb 4-1: Manufacturer: syz [ 1275.712102][T11066] usb 4-1: SerialNumber: syz [ 1275.717475][T11066] usb 4-1: config 0 descriptor?? [ 1275.975106][T11066] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 1275.975143][T11066] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1275.975176][T11066] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 1276.017016][T11066] usb 4-1: USB disconnect, device number 19 [ 1276.294414][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.304383][T13656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.318642][T13656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.522974][T13656] team0: Port device team_slave_0 added [ 1276.531070][T13656] team0: Port device team_slave_1 added [ 1276.545640][ T12] IPVS: stop unused estimator thread 0... [ 1276.778535][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.896139][T13656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.896155][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.896175][T13656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.911537][T11867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1276.913107][T13656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.913121][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.913148][T13656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.939847][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.940741][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.980995][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.981156][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.062423][T11867] usb 4-1: Using ep0 maxpacket: 16 [ 1277.070901][T11867] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.070937][T11867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1277.070971][T11867] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1277.070995][T11867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.083823][T11867] usb 4-1: config 0 descriptor?? [ 1277.407313][T13656] hsr_slave_0: entered promiscuous mode [ 1277.409629][T13656] hsr_slave_1: entered promiscuous mode [ 1277.412406][T13656] debugfs: 'hsr0' already exists in 'hsr' [ 1277.412643][T13656] Cannot create hsr debugfs directory [ 1277.549274][T11867] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1277.927579][ T6039] usb 4-1: USB disconnect, device number 20 [ 1278.721975][T13832] syzkaller0: entered promiscuous mode [ 1278.722002][T13832] syzkaller0: entered allmulticast mode [ 1279.021361][T11869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1279.171373][T11869] usb 1-1: Using ep0 maxpacket: 16 [ 1279.173443][T11869] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.173483][T11869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1279.173511][T11869] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1279.173524][T11869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.178637][T11869] usb 1-1: config 0 descriptor?? [ 1279.562398][ T8676] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1279.628864][T11869] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1279.725258][ T8676] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1279.725322][ T8676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.748838][ T8676] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1279.749069][ T8676] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1279.749090][ T8676] usb 3-1: Manufacturer: syz [ 1279.828296][ T8676] usb 3-1: config 0 descriptor?? [ 1279.888327][T13842] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1279.889816][T11119] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.889855][T11119] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.906541][T11119] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.911518][T11119] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.046139][ T6039] usb 1-1: USB disconnect, device number 14 [ 1280.239512][ T8676] rc_core: IR keymap rc-hauppauge not found [ 1280.239533][ T8676] Registered IR keymap rc-empty [ 1280.297954][ T8676] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1280.300546][ T8676] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 1280.336050][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1280.401724][ T6039] usb 3-1: USB disconnect, device number 31 [ 1280.482469][ T12] bridge_slave_1: left allmulticast mode [ 1280.482498][ T12] bridge_slave_1: left promiscuous mode [ 1280.482743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.582713][ T12] bridge_slave_0: left allmulticast mode [ 1280.582733][ T12] bridge_slave_0: left promiscuous mode [ 1280.582915][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.823611][T13856] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1281.231447][T11867] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1281.447545][T11867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1281.447575][T11867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1281.447591][T11867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1281.447603][T11867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1281.450363][T11867] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1281.450381][T11867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.450392][T11867] usb 4-1: Product: syz [ 1281.450400][T11867] usb 4-1: Manufacturer: syz [ 1281.450408][T11867] usb 4-1: SerialNumber: syz [ 1281.459410][T11867] usb 4-1: config 0 descriptor?? [ 1281.531088][T11867] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1281.531103][T11867] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1281.534687][T11867] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1282.291419][ T6039] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1282.461421][ T6039] usb 1-1: device descriptor read/64, error -71 [ 1282.701873][ T6039] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1282.831675][ T6039] usb 1-1: device descriptor read/64, error -71 [ 1282.952586][ T6039] usb usb1-port1: attempt power cycle [ 1283.272093][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.301371][ T6039] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1283.323324][ T6039] usb 1-1: device descriptor read/8, error -71 [ 1283.363410][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.423588][ T12] bond0 (unregistering): Released all slaves [ 1283.571542][ T6039] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1283.592101][ T6039] usb 1-1: device descriptor read/8, error -71 [ 1283.701942][ T6039] usb usb1-port1: unable to enumerate USB device [ 1283.760076][T12121] usb 4-1: USB disconnect, device number 21 [ 1284.101422][ T12] hsr_slave_0: left promiscuous mode [ 1284.121835][ T12] hsr_slave_1: left promiscuous mode [ 1284.122724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.173364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.301536][T12121] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1284.497854][T12121] usb 3-1: Using ep0 maxpacket: 16 [ 1284.500834][T12121] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.500868][T12121] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1284.500895][T12121] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1284.500909][T12121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.514217][T12121] usb 3-1: config 0 descriptor?? [ 1284.928510][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1285.016352][T12121] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1285.172810][T11066] usb 3-1: USB disconnect, device number 32 [ 1285.182509][T13885] fido_id[13885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1285.262137][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1285.291376][T12121] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1285.461912][T12121] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1285.461969][T12121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.463476][T12121] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1285.463506][T12121] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1285.463522][T12121] usb 1-1: Manufacturer: syz [ 1285.470234][T12121] usb 1-1: config 0 descriptor?? [ 1285.561529][T12121] rc_core: IR keymap rc-hauppauge not found [ 1285.561552][T12121] Registered IR keymap rc-empty [ 1285.563111][T12121] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1285.566784][T12121] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 1285.680142][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1285.812043][T11867] usb 1-1: USB disconnect, device number 19 [ 1288.182180][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.321423][T12121] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1288.564973][T12121] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1288.565032][T12121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.566145][T12121] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1288.566178][T12121] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1288.566199][T12121] usb 3-1: Manufacturer: syz [ 1288.602406][T12121] usb 3-1: config 0 descriptor?? [ 1288.951435][T12121] rc_core: IR keymap rc-hauppauge not found [ 1288.951453][T12121] Registered IR keymap rc-empty [ 1288.952769][T12121] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1288.955235][T12121] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 1289.030799][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1289.060423][T12121] usb 3-1: USB disconnect, device number 33 [ 1289.579310][T13656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1289.736279][T13656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1289.835144][T13656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1289.984896][T13656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1290.671180][T13504] veth0_vlan: entered promiscuous mode [ 1290.759219][T13504] veth1_vlan: entered promiscuous mode [ 1291.035854][T13504] veth0_macvtap: entered promiscuous mode [ 1291.091980][T13504] veth1_macvtap: entered promiscuous mode [ 1291.298826][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.348117][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.459623][ T4994] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.460245][ T4994] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.460285][ T4994] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.460317][ T4994] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.623909][T13656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.069726][T13656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.203344][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.203436][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.243368][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.243573][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.250386][ T6573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.250407][ T6573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.634003][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.634024][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.271752][T11867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1293.483693][T11867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1293.483726][T11867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1293.483753][T11867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1293.541556][T11867] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1293.541587][T11867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.541606][T11867] usb 1-1: Product: syz [ 1293.541620][T11867] usb 1-1: Manufacturer: syz [ 1293.541642][T11867] usb 1-1: SerialNumber: syz [ 1293.544567][T11867] usb 1-1: config 0 descriptor?? [ 1293.762055][ T6039] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1293.786789][T13997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.005347][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 1294.009508][T13997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.061902][ T6039] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1294.061935][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1294.061962][ T6039] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1294.065118][ T6039] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1294.065146][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.065165][ T6039] usb 8-1: Product: syz [ 1294.065180][ T6039] usb 8-1: Manufacturer: syz [ 1294.065193][ T6039] usb 8-1: SerialNumber: syz [ 1294.180439][ T6039] usb 8-1: config 0 descriptor?? [ 1294.202840][T14005] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1295.182647][T11066] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1295.451383][T11066] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1295.451500][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1295.451568][T11066] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1295.477733][T11066] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1295.477801][T11066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.477813][T11066] usb 3-1: Product: syz [ 1295.477821][T11066] usb 3-1: Manufacturer: syz [ 1295.477830][T11066] usb 3-1: SerialNumber: syz [ 1295.486979][T11066] usb 3-1: config 0 descriptor?? [ 1295.492410][T14020] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1295.776782][T13656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.823495][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 1298.294786][ T6039] usb 8-1: USB disconnect, device number 8 [ 1298.320085][T13656] veth0_vlan: entered promiscuous mode [ 1298.453547][T13656] veth1_vlan: entered promiscuous mode [ 1298.734585][T13656] veth0_macvtap: entered promiscuous mode [ 1298.816777][T13656] veth1_macvtap: entered promiscuous mode [ 1299.022444][T13656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.081843][T13656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.128701][ T7500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.128969][ T7500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.129009][ T7500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.129035][ T7500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.196624][ T8676] usb 1-1: USB disconnect, device number 20 [ 1300.277811][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.277869][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.395119][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.395140][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.483306][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 1300.804870][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.804891][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.120493][T11066] usb 3-1: USB disconnect, device number 34 [ 1301.135168][T14068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1339'. [ 1301.511407][ T6039] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1301.734711][ T6039] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1301.734738][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.734749][ T6039] usb 8-1: Product: syz [ 1301.734757][ T6039] usb 8-1: Manufacturer: syz [ 1301.734765][ T6039] usb 8-1: SerialNumber: syz [ 1301.763848][T14078] udevd[14078]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1301.923217][ T6039] usb 8-1: config 0 descriptor?? [ 1302.350322][ T6039] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1302.350353][ T6039] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1302.350392][ T6039] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 1302.401851][ T6039] usb 8-1: USB disconnect, device number 9 [ 1303.269051][T14097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1303.841369][ T5967] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1303.893781][ T6039] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1303.951805][T11066] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1303.994465][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1303.994506][ T5967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1303.994532][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1303.994555][ T5967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1303.999389][ T5967] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1303.999419][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.999436][ T5967] usb 4-1: Product: syz [ 1303.999450][ T5967] usb 4-1: Manufacturer: syz [ 1303.999464][ T5967] usb 4-1: SerialNumber: syz [ 1304.079711][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1304.079740][ T6039] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1304.107626][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1304.107796][ T6039] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1304.109052][T11066] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1304.109106][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.110322][T11066] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1304.110345][T11066] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1304.110414][T11066] usb 3-1: Manufacturer: syz [ 1304.125029][ T6039] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1304.125061][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.125079][ T6039] usb 8-1: Product: syz [ 1304.125093][ T6039] usb 8-1: Manufacturer: syz [ 1304.125106][ T6039] usb 8-1: SerialNumber: syz [ 1304.175442][ T5967] usb 4-1: config 0 descriptor?? [ 1304.180168][T14126] tipc: Enabled bearer , priority 0 [ 1304.194336][T14124] tipc: Resetting bearer [ 1304.235577][ T5967] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1304.235600][ T5967] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1304.235687][ T5967] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1304.270003][ T6039] usb 8-1: config 0 descriptor?? [ 1304.282670][T11066] usb 3-1: config 0 descriptor?? [ 1304.297183][ T6039] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1304.297207][ T6039] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1304.297291][ T6039] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1304.392069][T14123] tipc: Disabling bearer [ 1304.411912][ T5971] usb 4-1: USB disconnect, device number 22 [ 1304.530690][ T6152] usb 8-1: USB disconnect, device number 10 [ 1304.564666][T11066] rc_core: IR keymap rc-hauppauge not found [ 1304.564687][T11066] Registered IR keymap rc-empty [ 1304.589784][T11066] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1304.606560][T11066] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 1304.623950][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1304.641923][T11066] usb 3-1: USB disconnect, device number 35 [ 1305.311407][ T6152] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1305.471416][ T6152] usb 4-1: Using ep0 maxpacket: 16 [ 1305.473984][ T6152] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.474019][ T6152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1305.474054][ T6152] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1305.474078][ T6152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.483721][ T6152] usb 4-1: config 0 descriptor?? [ 1305.593682][ T5967] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1305.623206][T14163] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1305.623402][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.623644][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.623681][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.623716][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.753506][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1305.753538][ T5967] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1305.753561][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1305.753584][ T5967] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1305.756654][ T5967] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1305.756684][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.756704][ T5967] usb 8-1: Product: syz [ 1305.756718][ T5967] usb 8-1: Manufacturer: syz [ 1305.756733][ T5967] usb 8-1: SerialNumber: syz [ 1305.837444][ T5967] usb 8-1: config 0 descriptor?? [ 1305.847577][ T5967] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1305.847600][ T5967] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1305.847686][ T5967] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1305.965371][ T6152] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1305.985336][T14174] tipc: Enabling of bearer rejected, failed to enable media [ 1306.095476][ T8676] usb 8-1: USB disconnect, device number 11 [ 1306.348382][ T6152] usb 4-1: USB disconnect, device number 23 [ 1307.081351][ T6152] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1307.265011][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1307.265042][ T6152] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1307.265068][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1307.265091][ T6152] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1307.272904][ T6152] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1307.272933][ T6152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.272953][ T6152] usb 3-1: Product: syz [ 1307.272967][ T6152] usb 3-1: Manufacturer: syz [ 1307.272981][ T6152] usb 3-1: SerialNumber: syz [ 1307.294664][ T6152] usb 3-1: config 0 descriptor?? [ 1307.299694][ T6152] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1307.299718][ T6152] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1307.299802][ T6152] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1307.584648][ T8676] usb 3-1: USB disconnect, device number 36 [ 1308.111608][T11066] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1308.213052][T14241] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1383'. [ 1308.263396][T11066] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1308.263423][T11066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.306824][T11066] usb 1-1: config 0 descriptor?? [ 1308.331588][T11066] cp210x 1-1:0.0: cp210x converter detected [ 1308.391482][ T5971] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1308.564892][ T5971] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1308.564943][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1308.567549][ T5971] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1308.567626][ T5971] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1308.567652][ T5971] usb 4-1: Manufacturer: syz [ 1308.642580][ T5971] usb 4-1: config 0 descriptor?? [ 1308.672930][ T5971] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1308.740900][T11066] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1308.760436][T11066] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1308.760495][T11066] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1308.787742][T11066] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1308.812156][T11066] usb 1-1: USB disconnect, device number 21 [ 1308.844213][T13788] udevd[13788]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 1308.844365][T13788] udevd[13788]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1308.845854][T11066] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1308.846742][T11066] cp210x 1-1:0.0: device disconnected [ 1309.146318][T12121] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1309.291310][T12121] usb 3-1: Using ep0 maxpacket: 16 [ 1309.293564][T12121] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.293596][T12121] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1309.293630][T12121] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1309.293654][T12121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.299013][T12121] usb 3-1: config 0 descriptor?? [ 1309.781462][T12121] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1310.188789][T12121] usb 3-1: USB disconnect, device number 37 [ 1310.232226][T14286] fido_id[14286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1310.762215][T14308] lo speed is unknown, defaulting to 1000 [ 1310.766777][T14308] lo speed is unknown, defaulting to 1000 [ 1310.831806][T14308] lo speed is unknown, defaulting to 1000 [ 1311.179391][T14308] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1311.253297][T14308] lo speed is unknown, defaulting to 1000 [ 1311.256041][T14308] lo speed is unknown, defaulting to 1000 [ 1311.258758][T14308] lo speed is unknown, defaulting to 1000 [ 1311.261473][T14308] lo speed is unknown, defaulting to 1000 [ 1311.264569][T14308] lo speed is unknown, defaulting to 1000 [ 1311.445151][T12121] usb 4-1: USB disconnect, device number 24 [ 1311.806918][T11869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1312.011462][T12121] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1312.031333][T11869] usb 7-1: Using ep0 maxpacket: 32 [ 1312.040819][T11869] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1312.040847][T11869] usb 7-1: config 0 has no interface number 0 [ 1312.040874][T11869] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1312.066855][T11869] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1312.066889][T11869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.066910][T11869] usb 7-1: Product: syz [ 1312.066926][T11869] usb 7-1: Manufacturer: syz [ 1312.066940][T11869] usb 7-1: SerialNumber: syz [ 1312.115015][T11869] usb 7-1: config 0 descriptor?? [ 1312.120360][T11869] smsc75xx v1.0.0 [ 1312.191392][T12121] usb 1-1: Using ep0 maxpacket: 16 [ 1312.194845][T12121] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.194880][T12121] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1312.194971][T12121] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1312.194995][T12121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.277633][T12121] usb 1-1: config 0 descriptor?? [ 1312.593313][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.652222][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.916171][T12121] usbhid 1-1:0.0: can't add hid device: -71 [ 1312.916362][T12121] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1312.938102][T12121] usb 1-1: USB disconnect, device number 22 [ 1313.928302][T14357] siw: device registration error -23 [ 1314.775026][T14360] input: syz0 as /devices/virtual/input/input15 [ 1315.384423][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1414'. [ 1315.542911][T14370] veth3: entered promiscuous mode [ 1315.542937][T14370] veth3: entered allmulticast mode [ 1316.062105][T14373] ipvlan0: entered promiscuous mode [ 1316.062141][T14373] ipvlan0: entered allmulticast mode [ 1316.062156][T14373] veth0_vlan: entered allmulticast mode [ 1316.903309][ T5910] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1316.972351][T11869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1316.972383][T11869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1316.972411][T11869] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1316.972700][T11869] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1317.008151][T11869] usb 7-1: USB disconnect, device number 2 [ 1317.063750][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.063809][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1317.063839][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1317.073345][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1317.073374][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1317.073401][ T5910] usb 4-1: Manufacturer: syz [ 1317.113546][ T5910] usb 4-1: config 0 descriptor?? [ 1317.541322][T11066] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1317.683513][ T5971] usb 4-1: USB disconnect, device number 25 [ 1317.705734][T11066] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1317.705765][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.737300][T11066] usb 3-1: config 0 descriptor?? [ 1317.774537][T11066] cp210x 3-1:0.0: cp210x converter detected [ 1318.168087][T11066] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1318.201696][T11869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1318.242301][T11066] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1318.351855][T11869] usb 7-1: Using ep0 maxpacket: 16 [ 1318.353730][T11869] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.353765][T11869] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.353789][T11869] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1318.353819][T11869] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1318.353854][T11869] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1318.353878][T11869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.364655][T11869] usb 7-1: config 0 descriptor?? [ 1318.445129][T11867] usb 3-1: USB disconnect, device number 38 [ 1318.505078][T11867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1318.670674][T11867] cp210x 3-1:0.0: device disconnected [ 1319.012106][ T5971] usb 7-1: USB disconnect, device number 3 [ 1319.039540][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 1319.071457][T11066] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1319.091022][T14435] bond1: (slave dummy0): Releasing backup interface [ 1319.254474][T11066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.254503][T11066] usb 4-1: config 0 has no interfaces? [ 1319.259270][T11066] usb 4-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1319.259299][T11066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.259319][T11066] usb 4-1: Product: syz [ 1319.259334][T11066] usb 4-1: Manufacturer: syz [ 1319.259349][T11066] usb 4-1: SerialNumber: syz [ 1319.278509][T14435] dummy0: left promiscuous mode [ 1319.278737][T14435] dummy0: left allmulticast mode [ 1319.329388][T11066] usb 4-1: config 0 descriptor?? [ 1319.555199][T14424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.555700][T14424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.578731][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 1319.663527][T11066] usb 4-1: USB disconnect, device number 26 [ 1320.441318][T11867] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1320.563147][T14474] can0: slcan on ttyS3. [ 1320.606054][T11867] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1320.606084][T11867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.606101][T11867] usb 1-1: config 0 has no interface number 0 [ 1320.606131][T11867] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1320.606144][T11867] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.608564][T11867] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1320.608588][T11867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.608599][T11867] usb 1-1: Product: syz [ 1320.608606][T11867] usb 1-1: Manufacturer: syz [ 1320.608614][T11867] usb 1-1: SerialNumber: syz [ 1320.633809][T11867] usb 1-1: config 0 descriptor?? [ 1321.006333][T14471] can0 (unregistered): slcan off ttyS3. [ 1321.327894][ T5971] usb 1-1: USB disconnect, device number 23 [ 1321.401300][ T6152] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1321.554077][ T6152] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.554105][ T6152] usb 8-1: config 0 has no interfaces? [ 1321.556890][ T6152] usb 8-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1321.556920][ T6152] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.556941][ T6152] usb 8-1: Product: syz [ 1321.556956][ T6152] usb 8-1: Manufacturer: syz [ 1321.556970][ T6152] usb 8-1: SerialNumber: syz [ 1321.616188][ T6152] usb 8-1: config 0 descriptor?? [ 1321.862313][T14504] team_slave_0: entered promiscuous mode [ 1321.862373][T14504] team_slave_1: entered promiscuous mode [ 1321.866309][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1448'. [ 1321.866471][T14504] team_slave_0: left promiscuous mode [ 1321.866538][T14504] team_slave_1: left promiscuous mode [ 1321.966649][ T6152] usb 8-1: USB disconnect, device number 12 [ 1322.072956][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1453'. [ 1322.072995][T14532] veth1_macvtap: entered allmulticast mode [ 1322.754987][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1466'. [ 1322.760858][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1466'. [ 1322.931381][ T5971] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1323.081294][ T5971] usb 8-1: Using ep0 maxpacket: 32 [ 1323.084253][ T5971] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1323.084283][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.109865][ T5971] usb 8-1: config 0 descriptor?? [ 1323.151357][ T5967] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1323.159469][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 1323.187042][T14561] kvm_intel: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 1323.188326][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 1323.190778][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 1323.214289][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 1323.217413][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 1323.217696][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1323.220618][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 1323.254500][T14571] kvm: kvm [14569]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 1323.260798][T14561] kvm: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 1323.279791][T14571] kvm_intel: kvm [14569]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 1323.289213][T14571] kvm: kvm [14569]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 1323.291756][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1323.329523][ T5971] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1323.337309][T14561] kvm_intel: kvm [14557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 1323.355704][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1323.372207][ T5971] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1323.372318][ T5971] usb 8-1: media controller created [ 1323.420197][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.461118][T14571] kvm_intel: kvm [14569]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 1323.542611][ T5967] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1323.675909][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1323.693957][ T5971] az6027: usb out operation failed. (-71) [ 1323.711607][ T5971] az6027: usb out operation failed. (-71) [ 1323.711625][ T5971] stb0899_attach: Driver disabled by Kconfig [ 1323.711636][ T5971] az6027: no front-end attached [ 1323.711636][ T5971] [ 1323.712076][ T5971] az6027: usb out operation failed. (-71) [ 1323.712135][ T5971] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1323.763610][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 1323.794549][ T5967] usb usb1-port1: attempt power cycle [ 1323.800160][ T5971] dvb-usb: schedule remote query interval to 400 msecs. [ 1323.800184][ T5971] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1323.844726][ T5971] usb 8-1: USB disconnect, device number 13 [ 1324.135999][ T5971] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1324.181393][ T5967] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1324.205138][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1324.430974][T14608] loop8: detected capacity change from 0 to 8 [ 1324.441517][ T5967] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1324.465676][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1324.467201][T14608] Dev loop8: unable to read RDB block 8 [ 1324.467256][T14608] loop8: unable to read partition table [ 1324.467486][T14608] loop8: partition table beyond EOD, truncated [ 1324.475932][T14608] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1324.572173][ T5967] usb usb1-port1: unable to enumerate USB device [ 1324.649030][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1324.657898][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1324.866451][T14627] loop8: detected capacity change from 0 to 8 [ 1324.896556][T13788] Dev loop8: unable to read RDB block 8 [ 1324.896601][T13788] loop8: unable to read partition table [ 1324.896844][T13788] loop8: partition table beyond EOD, truncated [ 1324.951584][T14627] Dev loop8: unable to read RDB block 8 [ 1324.951627][T14627] loop8: unable to read partition table [ 1324.951852][T14627] loop8: partition table beyond EOD, truncated [ 1324.952525][T14627] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1325.371609][ T5971] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1325.523585][ T5971] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1325.523615][ T5971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.523633][ T5971] usb 8-1: config 0 has no interface number 0 [ 1325.523685][ T5971] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1325.523709][ T5971] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.526761][ T5971] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1325.526791][ T5971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.526812][ T5971] usb 8-1: Product: syz [ 1325.526828][ T5971] usb 8-1: Manufacturer: syz [ 1325.526843][ T5971] usb 8-1: SerialNumber: syz [ 1325.544566][ T5971] usb 8-1: config 0 descriptor?? [ 1325.789247][ T5971] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 1325.813151][ T5971] usb 8-1: USB disconnect, device number 14 [ 1325.974488][ T5967] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1326.126931][ T5967] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1326.126962][ T5967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.126985][ T5967] usb 7-1: config 0 has no interface number 0 [ 1326.127038][ T5967] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1326.127062][ T5967] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.129412][ T5967] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1326.129443][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.129465][ T5967] usb 7-1: Product: syz [ 1326.129481][ T5967] usb 7-1: Manufacturer: syz [ 1326.129497][ T5967] usb 7-1: SerialNumber: syz [ 1326.158169][ T5967] usb 7-1: config 0 descriptor?? [ 1326.267388][T14670] syzkaller0: entered promiscuous mode [ 1326.267414][T14670] syzkaller0: entered allmulticast mode [ 1326.616067][ T5967] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1326.633181][ T5967] usb 7-1: USB disconnect, device number 4 [ 1327.731412][T11861] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1327.891457][T11861] usb 3-1: device descriptor read/64, error -71 [ 1328.131541][T11861] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1328.291364][T11861] usb 3-1: device descriptor read/64, error -71 [ 1328.414925][T11861] usb usb3-port1: attempt power cycle [ 1328.771739][T11861] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1328.792103][T11861] usb 3-1: device descriptor read/8, error -71 [ 1329.031649][T11861] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1329.052423][T11861] usb 3-1: device descriptor read/8, error -71 [ 1329.161970][T11861] usb usb3-port1: unable to enumerate USB device [ 1329.488200][T14751] kvm_pr_unimpl_wrmsr: 16 callbacks suppressed [ 1329.488222][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 1329.497777][T14751] kvm_intel: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 1329.498962][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 1329.499559][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 1329.506241][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 1329.507804][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 1329.507873][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1329.509413][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 1329.514345][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 1329.527826][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262 [ 1329.527903][T14751] kvm: kvm [14750]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1329.544528][T14751] kvm_intel: kvm [14750]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 1329.570142][T14761] siw: device registration error -23 [ 1330.171333][T11861] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1330.221346][T11869] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1330.324834][T11861] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1330.324863][T11861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.324885][T11861] usb 4-1: config 0 has no interface number 0 [ 1330.324934][T11861] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1330.324958][T11861] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.336801][T11861] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1330.336831][T11861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.336852][T11861] usb 4-1: Product: syz [ 1330.336867][T11861] usb 4-1: Manufacturer: syz [ 1330.336882][T11861] usb 4-1: SerialNumber: syz [ 1330.350625][T11861] usb 4-1: config 0 descriptor?? [ 1330.396949][T11869] usb 7-1: Using ep0 maxpacket: 32 [ 1330.426532][T11869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.426567][T11869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.426609][T11869] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1330.426634][T11869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.491301][T11869] usb 7-1: config 0 descriptor?? [ 1330.774946][T11861] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1330.816944][T11861] usb 4-1: USB disconnect, device number 27 [ 1330.906561][T11869] usbhid 7-1:0.0: can't add hid device: -71 [ 1330.906683][T11869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1330.921756][T11869] usb 7-1: USB disconnect, device number 5 [ 1331.001455][ T6152] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1331.165498][ T6152] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1331.165539][ T6152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.165562][ T6152] usb 3-1: Product: syz [ 1331.165577][ T6152] usb 3-1: Manufacturer: syz [ 1331.165592][ T6152] usb 3-1: SerialNumber: syz [ 1331.173507][ T6152] usb 3-1: config 0 descriptor?? [ 1331.722440][T11869] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1331.886892][T11869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.887012][T11869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1331.887043][T11869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1331.888594][T11869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1331.888672][T11869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1331.888696][T11869] usb 4-1: Manufacturer: syz [ 1331.930700][ T6152] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1331.930735][ T6152] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1331.930774][ T6152] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1331.973259][ T6152] usb 3-1: USB disconnect, device number 43 [ 1331.993176][T11869] usb 4-1: config 0 descriptor?? [ 1332.821452][ T6152] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1332.940750][T14854] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1332.973608][ T6152] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.973637][ T6152] usb 8-1: config 0 has no interfaces? [ 1332.977475][ T6152] usb 8-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1332.977499][ T6152] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.977509][ T6152] usb 8-1: Product: syz [ 1332.977518][ T6152] usb 8-1: Manufacturer: syz [ 1332.977526][ T6152] usb 8-1: SerialNumber: syz [ 1332.990487][ T6152] usb 8-1: config 0 descriptor?? [ 1333.154581][T14859] loop8: detected capacity change from 0 to 8 [ 1333.222457][T13788] Dev loop8: unable to read RDB block 8 [ 1333.222508][T13788] loop8: unable to read partition table [ 1333.222773][T13788] loop8: partition table beyond EOD, truncated [ 1333.231014][T14859] Dev loop8: unable to read RDB block 8 [ 1333.231054][T14859] loop8: unable to read partition table [ 1333.231433][T14859] loop8: partition table beyond EOD, truncated [ 1333.231459][T14859] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1333.272244][T14836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.272767][T14836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.284578][T14836] team_slave_0: entered promiscuous mode [ 1333.284628][T14836] team_slave_1: entered promiscuous mode [ 1333.286841][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1530'. [ 1333.286895][T14836] team_slave_0: left promiscuous mode [ 1333.286955][T14836] team_slave_1: left promiscuous mode [ 1333.356742][ T6152] usb 8-1: USB disconnect, device number 15 [ 1333.568251][T14875] loop8: detected capacity change from 0 to 8 [ 1333.575959][T13788] Dev loop8: unable to read RDB block 8 [ 1333.576004][T13788] loop8: unable to read partition table [ 1333.576230][T13788] loop8: partition table beyond EOD, truncated [ 1333.597785][T14875] Dev loop8: unable to read RDB block 8 [ 1333.597830][T14875] loop8: unable to read partition table [ 1333.598035][T14875] loop8: partition table beyond EOD, truncated [ 1333.598054][T14875] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1334.031338][ T6152] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1334.063541][T11869] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1334.156675][T14902] syz_tun: entered promiscuous mode [ 1334.157174][T14902] vlan2: entered promiscuous mode [ 1334.181310][ T6152] usb 3-1: Using ep0 maxpacket: 32 [ 1334.185072][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.185105][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.185142][ T6152] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1334.185166][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.190214][ T6152] usb 3-1: config 0 descriptor?? [ 1334.211292][T11869] usb 7-1: Using ep0 maxpacket: 32 [ 1334.213266][T11869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.213299][T11869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.213394][T11869] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1334.213412][T11869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.364797][T11869] usb 7-1: config 0 descriptor?? [ 1334.499217][ T5971] usb 4-1: USB disconnect, device number 28 [ 1334.738000][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1334.750669][ T6152] usbhid 3-1:0.0: can't add hid device: -71 [ 1334.750900][ T6152] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1334.782332][T11869] usbhid 7-1:0.0: can't add hid device: -71 [ 1334.782466][T11869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1334.809660][ T6152] usb 3-1: USB disconnect, device number 44 [ 1334.822297][T11869] usb 7-1: USB disconnect, device number 6 [ 1334.921263][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 1334.921279][ T37] audit: type=1804 audit(1768372466.640:778): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.1555" name="bus" dev="ramfs" ino=63203 res=1 errno=0 [ 1335.531872][T11861] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1335.593026][T14941] loop8: detected capacity change from 0 to 8 [ 1335.596341][T14941] Dev loop8: unable to read RDB block 8 [ 1335.596392][T14941] loop8: unable to read partition table [ 1335.596607][T14941] loop8: partition table beyond EOD, truncated [ 1335.596625][T14941] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1335.702725][T11861] usb 1-1: Using ep0 maxpacket: 16 [ 1335.705057][T11861] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.705099][T11861] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.705124][T11861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1335.705158][T11861] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1335.705182][T11861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.718985][T11861] usb 1-1: config 0 descriptor?? [ 1336.147989][T11861] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1336.281633][ T8212] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1336.360088][ T5971] usb 1-1: USB disconnect, device number 28 [ 1336.425174][T11861] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1336.445513][ T8212] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1336.445542][ T8212] usb 4-1: config 0 has no interface number 0 [ 1336.445590][ T8212] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1336.445617][ T8212] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1336.451329][ T8212] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1336.451360][ T8212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.451381][ T8212] usb 4-1: Product: syz [ 1336.451395][ T8212] usb 4-1: Manufacturer: syz [ 1336.451411][ T8212] usb 4-1: SerialNumber: syz [ 1336.468452][ T8212] usb 4-1: config 0 descriptor?? [ 1336.469326][T14960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1336.488396][ T8212] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1336.490258][ T8212] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1336.522180][ T8212] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1336.574165][T11861] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1336.574195][T11861] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.574216][T11861] usb 8-1: config 0 has no interface number 0 [ 1336.574264][T11861] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1336.574289][T11861] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1336.634571][T11861] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1336.634703][T11861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.634726][T11861] usb 8-1: Product: syz [ 1336.634742][T11861] usb 8-1: Manufacturer: syz [ 1336.634757][T11861] usb 8-1: SerialNumber: syz [ 1336.657000][T11861] usb 8-1: config 0 descriptor?? [ 1336.776916][ T6039] usb 4-1: USB disconnect, device number 29 [ 1336.836613][ T6039] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1336.865382][ T6039] cyberjack 4-1:0.69: device disconnected [ 1336.895373][T11861] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1336.939198][T11861] usb 8-1: USB disconnect, device number 16 [ 1337.011319][T11869] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1337.163359][T11869] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1337.163388][T11869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.163408][T11869] usb 3-1: config 0 has no interface number 0 [ 1337.163591][T11869] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1337.163616][T11869] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.166137][T11869] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1337.166167][T11869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.166187][T11869] usb 3-1: Product: syz [ 1337.166201][T11869] usb 3-1: Manufacturer: syz [ 1337.166215][T11869] usb 3-1: SerialNumber: syz [ 1337.253908][T11869] usb 3-1: config 0 descriptor?? [ 1337.301696][T11861] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1337.378743][T15001] vlan2: entered promiscuous mode [ 1337.378766][T15001] syz_tun: entered promiscuous mode [ 1337.460610][T11869] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1337.462892][T11861] usb 7-1: Using ep0 maxpacket: 16 [ 1337.465243][T11861] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.465275][T11861] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.465299][T11861] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1337.465332][T11861] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1337.465356][T11861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.474862][T11861] usb 7-1: config 0 descriptor?? [ 1337.534059][T11869] usb 3-1: USB disconnect, device number 45 [ 1337.959376][T11861] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1338.141309][T11861] usb 7-1: USB disconnect, device number 7 [ 1338.240411][T15022] loop5: detected capacity change from 0 to 7 [ 1338.290145][T15022] Dev loop5: unable to read RDB block 7 [ 1338.290187][T15022] loop5: AHDI p1 [ 1338.290222][T15022] loop5: partition table partially beyond EOD, truncated [ 1338.556901][T15032] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1590'. [ 1338.864019][T15049] vlan2: entered promiscuous mode [ 1338.864041][T15049] syz_tun: entered promiscuous mode [ 1339.204464][T11861] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1339.255363][T15068] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1604'. [ 1339.371358][T11861] usb 8-1: Using ep0 maxpacket: 16 [ 1339.378031][T11861] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.378066][T11861] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1339.378102][T11861] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1339.378127][T11861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.435552][T11861] usb 8-1: config 0 descriptor?? [ 1340.260605][T11861] usbhid 8-1:0.0: can't add hid device: -71 [ 1340.260723][T11861] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1340.292702][T11861] usb 8-1: USB disconnect, device number 17 [ 1340.713052][T15121] loop8: detected capacity change from 0 to 8 [ 1340.717342][T15121] Dev loop8: unable to read RDB block 8 [ 1340.717388][T15121] loop8: unable to read partition table [ 1340.717623][T15121] loop8: partition table beyond EOD, truncated [ 1340.718743][T15121] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1340.936063][T15129] loop5: detected capacity change from 0 to 7 [ 1340.959827][T13788] Dev loop5: unable to read RDB block 7 [ 1340.959855][T13788] loop5: AHDI p2 [ 1340.959887][T13788] loop5: partition table partially beyond EOD, truncated [ 1341.010808][T15129] Dev loop5: unable to read RDB block 7 [ 1341.010840][T15129] loop5: AHDI p2 [ 1341.010867][T15129] loop5: partition table partially beyond EOD, truncated [ 1341.333003][T15140] loop5: detected capacity change from 0 to 7 [ 1341.368105][T15140] Dev loop5: unable to read RDB block 7 [ 1341.368139][T15140] loop5: unable to read partition table [ 1341.368263][T15140] loop5: partition table beyond EOD, truncated [ 1341.368294][T15140] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1341.427183][T15141] vlan2: entered promiscuous mode [ 1341.808658][T15161] loop8: detected capacity change from 0 to 8 [ 1341.821821][T13788] Dev loop8: unable to read RDB block 8 [ 1341.821864][T13788] loop8: unable to read partition table [ 1341.822116][T13788] loop8: partition table beyond EOD, truncated [ 1341.858406][T15161] Dev loop8: unable to read RDB block 8 [ 1341.858451][T15161] loop8: unable to read partition table [ 1341.858678][T15161] loop8: partition table beyond EOD, truncated [ 1341.858697][T15161] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1342.159224][T15177] binder: 15176:15177 ioctl 4018620d 0 returned -22 [ 1343.016240][T15216] binder: 15214:15216 ioctl c0306201 0 returned -14 [ 1343.203328][ T6152] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1343.272683][T15225] vlan2: entered promiscuous mode [ 1343.272706][T15225] syz_tun: entered promiscuous mode [ 1343.352019][ T6152] usb 1-1: Using ep0 maxpacket: 16 [ 1343.366686][T15223] tipc: Started in network mode [ 1343.366714][T15223] tipc: Node identity 524a18a4974, cluster identity 4711 [ 1343.366893][T15223] tipc: Enabled bearer , priority 0 [ 1343.368192][ T6152] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.368223][ T6152] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.368245][ T6152] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1343.368273][ T6152] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1343.368308][ T6152] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1343.368331][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.450990][ T6152] usb 1-1: config 0 descriptor?? [ 1343.471344][T11869] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1343.621342][T11869] usb 4-1: Using ep0 maxpacket: 16 [ 1343.626002][T11869] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.626087][T11869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1343.626123][T11869] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1343.626148][T11869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.672462][T15242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'. [ 1343.725570][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 1343.744794][T15222] tipc: Disabling bearer [ 1343.748310][T11869] usb 4-1: config 0 descriptor?? [ 1343.894346][T15246] bond1: (slave dummy0): Releasing active interface [ 1344.111450][ T5967] usb 1-1: USB disconnect, device number 29 [ 1344.384690][T11869] usbhid 4-1:0.0: can't add hid device: -71 [ 1344.384808][T11869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1344.414205][T11869] usb 4-1: USB disconnect, device number 30 [ 1344.766532][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1680'. [ 1345.057746][T15302] vlan2: entered promiscuous mode [ 1346.031648][T11066] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1346.138718][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 1346.199274][T11066] usb 3-1: Using ep0 maxpacket: 32 [ 1346.201139][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.201256][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.201295][T11066] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1346.201314][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.208005][T11066] usb 3-1: config 0 descriptor?? [ 1346.357622][T15366] loop5: detected capacity change from 0 to 7 [ 1346.362757][T13847] Dev loop5: unable to read RDB block 7 [ 1346.362900][T13847] loop5: AHDI p1 [ 1346.363681][T13847] loop5: partition table partially beyond EOD, truncated [ 1346.415191][T15366] Dev loop5: unable to read RDB block 7 [ 1346.415223][T15366] loop5: AHDI p1 [ 1346.415251][T15366] loop5: partition table partially beyond EOD, truncated [ 1346.682133][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682173][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682201][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682228][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682254][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682282][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682309][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.682336][T11066] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1346.696397][T11066] savu 0003:1E7D:2D5A.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1346.887778][T11869] usb 3-1: USB disconnect, device number 46 [ 1346.923181][T15378] fido_id[15378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1346.935874][T15382] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1713'. [ 1347.287151][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1348.063967][T15392] ================================================================== [ 1348.063990][T15392] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 1348.064183][T15392] Read of size 1 at addr ffff8880553df200 by task syz.6.1717/15392 [ 1348.064200][T15392] [ 1348.064225][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.6.1717 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1348.064247][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1348.064265][T15392] Call Trace: [ 1348.064277][T15392] [ 1348.064285][T15392] dump_stack_lvl+0xe8/0x150 [ 1348.064345][T15392] print_report+0xca/0x240 [ 1348.064376][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.064398][T15392] kasan_report+0x118/0x150 [ 1348.064450][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.064477][T15392] ? __wake_up_common_lock+0x2f/0x1e0 [ 1348.064519][T15392] __kasan_check_byte+0x2a/0x40 [ 1348.064545][T15392] lock_acquire+0x84/0x340 [ 1348.064568][T15392] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1348.064591][T15392] ? reacquire_held_locks+0x104/0x190 [ 1348.064618][T15392] rt_spin_lock+0x88/0x3e0 [ 1348.064641][T15392] ? __wake_up_common_lock+0x2f/0x1e0 [ 1348.064664][T15392] ? __pfx_rt_spin_lock+0x10/0x10 [ 1348.064687][T15392] ? rt_spin_unlock+0x161/0x200 [ 1348.064711][T15392] ? __wake_up_common_lock+0x18a/0x1e0 [ 1348.064740][T15392] __wake_up_common_lock+0x2f/0x1e0 [ 1348.064762][T15392] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1348.064843][T15392] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1348.064861][T15392] snd_pcm_action+0x1f4/0x240 [ 1348.064911][T15392] loopback_trigger+0xb82/0x1b60 [ 1348.064960][T15392] ? rcu_is_watching+0x15/0xb0 [ 1348.064999][T15392] snd_pcm_do_start+0xb7/0x180 [ 1348.065018][T15392] snd_pcm_action+0xe7/0x240 [ 1348.065043][T15392] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1348.065092][T15392] ? __pfx_interleaved_copy+0x10/0x10 [ 1348.065112][T15392] ? __pfx_default_write_copy+0x10/0x10 [ 1348.065133][T15392] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1348.065154][T15392] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1348.065173][T15392] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1348.065196][T15392] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1348.065222][T15392] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1348.065292][T15392] snd_pcm_oss_write3+0x1bc/0x350 [ 1348.065321][T15392] snd_pcm_oss_sync1+0x345/0x760 [ 1348.065353][T15392] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1348.065376][T15392] ? __pfx_default_wake_function+0x10/0x10 [ 1348.065408][T15392] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1348.065427][T15392] ? lockdep_hardirqs_on+0x7b/0x110 [ 1348.065469][T15392] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1348.065487][T15392] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1348.065512][T15392] ? snd_pcm_oss_sync+0x286/0x9d0 [ 1348.065530][T15392] ? snd_pcm_format_set_silence+0x12f/0x2d0 [ 1348.065554][T15392] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1348.065576][T15392] snd_pcm_oss_release+0x102/0x250 [ 1348.065594][T15392] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1348.065613][T15392] __fput+0x45b/0xa80 [ 1348.065648][T15392] task_work_run+0x1d4/0x260 [ 1348.065675][T15392] ? __pfx_task_work_run+0x10/0x10 [ 1348.065711][T15392] exit_to_user_mode_loop+0xef/0x4e0 [ 1348.065741][T15392] ? rcu_is_watching+0x15/0xb0 [ 1348.065759][T15392] do_syscall_64+0x2c1/0xf80 [ 1348.065802][T15392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.065838][T15392] ? trace_irq_disable+0x37/0x100 [ 1348.065866][T15392] ? clear_bhb_loop+0x60/0xb0 [ 1348.065886][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.065905][T15392] RIP: 0033:0x7f7c0e38f749 [ 1348.065926][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.065942][T15392] RSP: 002b:00007ffe4d121bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1348.065963][T15392] RAX: 0000000000000000 RBX: 00007f7c0e5e7da0 RCX: 00007f7c0e38f749 [ 1348.065977][T15392] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1348.065989][T15392] RBP: 00007f7c0e5e7da0 R08: 000000000000682c R09: 000000054d121eef [ 1348.066008][T15392] R10: 00007f7c0e5e7cb0 R11: 0000000000000246 R12: 00000000001490c5 [ 1348.066022][T15392] R13: 00007f7c0e5e6090 R14: ffffffffffffffff R15: 00007ffe4d121d10 [ 1348.066045][T15392] [ 1348.066053][T15392] [ 1348.066058][T15392] Allocated by task 15393: [ 1348.066067][T15392] kasan_save_track+0x3e/0x80 [ 1348.066090][T15392] __kasan_kmalloc+0x93/0xb0 [ 1348.066112][T15392] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 1348.066145][T15392] snd_pcm_attach_substream+0x5b7/0xb30 [ 1348.066164][T15392] snd_pcm_open_substream+0xb6/0x2410 [ 1348.066186][T15392] snd_pcm_oss_open+0xf2a/0x1bd0 [ 1348.066201][T15392] chrdev_open+0x4cf/0x5e0 [ 1348.066216][T15392] do_dentry_open+0x7d0/0x1270 [ 1348.066233][T15392] vfs_open+0x3b/0x350 [ 1348.066248][T15392] path_openat+0x342a/0x3df0 [ 1348.066269][T15392] do_filp_open+0x1fa/0x410 [ 1348.066288][T15392] do_sys_openat2+0x121/0x200 [ 1348.066305][T15392] __x64_sys_openat+0x138/0x170 [ 1348.066323][T15392] do_syscall_64+0xec/0xf80 [ 1348.066339][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.066355][T15392] [ 1348.066360][T15392] Freed by task 15393: [ 1348.066370][T15392] kasan_save_track+0x3e/0x80 [ 1348.066390][T15392] kasan_save_free_info+0x46/0x50 [ 1348.066408][T15392] __kasan_slab_free+0x5c/0x80 [ 1348.066430][T15392] kfree+0x1bd/0x900 [ 1348.066449][T15392] snd_pcm_detach_substream+0x1e1/0x290 [ 1348.066475][T15392] snd_pcm_oss_release+0x184/0x250 [ 1348.066491][T15392] __fput+0x45b/0xa80 [ 1348.066508][T15392] task_work_run+0x1d4/0x260 [ 1348.066530][T15392] exit_to_user_mode_loop+0xef/0x4e0 [ 1348.066551][T15392] do_syscall_64+0x2c1/0xf80 [ 1348.066566][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.066583][T15392] [ 1348.066588][T15392] The buggy address belongs to the object at ffff8880553df000 [ 1348.066588][T15392] which belongs to the cache kmalloc-2k of size 2048 [ 1348.066604][T15392] The buggy address is located 512 bytes inside of [ 1348.066604][T15392] freed 2048-byte region [ffff8880553df000, ffff8880553df800) [ 1348.066624][T15392] [ 1348.066629][T15392] The buggy address belongs to the physical page: [ 1348.066645][T15392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x553d8 [ 1348.066660][T15392] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1348.066673][T15392] flags: 0x80000000000040(head|node=0|zone=1) [ 1348.066689][T15392] page_type: f5(slab) [ 1348.066703][T15392] raw: 0080000000000040 ffff88813ff27000 ffffea0001764000 dead000000000002 [ 1348.066721][T15392] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1348.066736][T15392] head: 0080000000000040 ffff88813ff27000 ffffea0001764000 dead000000000002 [ 1348.066748][T15392] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1348.066762][T15392] head: 0080000000000003 ffffea000154f601 00000000ffffffff 00000000ffffffff [ 1348.066774][T15392] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1348.066782][T15392] page dumped because: kasan: bad access detected [ 1348.066794][T15392] page_owner tracks the page as allocated [ 1348.066800][T15392] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5971, tgid 5971 (kworker/1:8), ts 428032494426, free_ts 428026247637 [ 1348.066827][T15392] post_alloc_hook+0x234/0x290 [ 1348.066846][T15392] get_page_from_freelist+0x28c0/0x2960 [ 1348.066859][T15392] __alloc_frozen_pages_noprof+0x181/0x370 [ 1348.066872][T15392] alloc_pages_mpol+0xd1/0x380 [ 1348.066884][T15392] allocate_slab+0x86/0x3b0 [ 1348.066898][T15392] ___slab_alloc+0xb10/0x13e0 [ 1348.066912][T15392] __slab_alloc+0xc6/0x1f0 [ 1348.066925][T15392] __kmalloc_node_track_caller_noprof+0x2bf/0x810 [ 1348.066944][T15392] kmalloc_reserve+0x136/0x290 [ 1348.066994][T15392] __alloc_skb+0x204/0x3a0 [ 1348.067008][T15392] mld_newpack+0x13c/0xc40 [ 1348.067062][T15392] add_grhead+0x5a/0x2a0 [ 1348.067073][T15392] add_grec+0x1452/0x1740 [ 1348.067084][T15392] mld_ifc_work+0x6ed/0xd60 [ 1348.067123][T15392] process_scheduled_works+0xad1/0x1770 [ 1348.067137][T15392] worker_thread+0x8a0/0xda0 [ 1348.067151][T15392] page last free pid 7785 tgid 7785 stack trace: [ 1348.067160][T15392] __free_frozen_pages+0xfe1/0x1170 [ 1348.067179][T15392] __put_partials+0x149/0x170 [ 1348.067192][T15392] __slab_free+0x2af/0x330 [ 1348.067207][T15392] qlist_free_all+0x97/0x100 [ 1348.067224][T15392] kasan_quarantine_reduce+0x148/0x160 [ 1348.067241][T15392] __kasan_slab_alloc+0x22/0x80 [ 1348.067259][T15392] __kmalloc_cache_noprof+0x18d/0x6d0 [ 1348.067277][T15392] ref_tracker_alloc+0x13b/0x450 [ 1348.067407][T15392] netdev_queue_update_kobjects+0x1ce/0x6b0 [ 1348.067461][T15392] netdev_register_kobject+0x258/0x310 [ 1348.067480][T15392] register_netdevice+0x125b/0x1a80 [ 1348.067536][T15392] veth_newlink+0x437/0xa60 [ 1348.067594][T15392] rtnl_newlink_create+0x310/0xb00 [ 1348.067651][T15392] rtnl_newlink+0x16e7/0x1c90 [ 1348.067666][T15392] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1348.067680][T15392] netlink_rcv_skb+0x208/0x470 [ 1348.067728][T15392] [ 1348.067732][T15392] Memory state around the buggy address: [ 1348.067742][T15392] ffff8880553df100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.067752][T15392] ffff8880553df180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.067763][T15392] >ffff8880553df200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.067771][T15392] ^ [ 1348.067779][T15392] ffff8880553df280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.067789][T15392] ffff8880553df300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1348.067798][T15392] ================================================================== [ 1348.067821][T15392] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1348.067839][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.6.1717 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1348.067859][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1348.067871][T15392] Call Trace: [ 1348.067879][T15392] [ 1348.067887][T15392] vpanic+0x1e0/0x670 [ 1348.067912][T15392] panic+0xb9/0xc0 [ 1348.067932][T15392] ? __pfx_panic+0x10/0x10 [ 1348.067954][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.067979][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.068000][T15392] check_panic_on_warn+0x89/0xb0 [ 1348.068039][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.068059][T15392] end_report+0x6f/0x140 [ 1348.068084][T15392] kasan_report+0x129/0x150 [ 1348.068109][T15392] ? rt_spin_lock+0x88/0x3e0 [ 1348.068135][T15392] ? __wake_up_common_lock+0x2f/0x1e0 [ 1348.068156][T15392] __kasan_check_byte+0x2a/0x40 [ 1348.068179][T15392] lock_acquire+0x84/0x340 [ 1348.068202][T15392] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1348.068223][T15392] ? reacquire_held_locks+0x104/0x190 [ 1348.068250][T15392] rt_spin_lock+0x88/0x3e0 [ 1348.068273][T15392] ? __wake_up_common_lock+0x2f/0x1e0 [ 1348.068296][T15392] ? __pfx_rt_spin_lock+0x10/0x10 [ 1348.068319][T15392] ? rt_spin_unlock+0x161/0x200 [ 1348.068344][T15392] ? __wake_up_common_lock+0x18a/0x1e0 [ 1348.068367][T15392] __wake_up_common_lock+0x2f/0x1e0 [ 1348.068390][T15392] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1348.068410][T15392] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1348.068428][T15392] snd_pcm_action+0x1f4/0x240 [ 1348.068454][T15392] loopback_trigger+0xb82/0x1b60 [ 1348.068474][T15392] ? rcu_is_watching+0x15/0xb0 [ 1348.068496][T15392] snd_pcm_do_start+0xb7/0x180 [ 1348.068515][T15392] snd_pcm_action+0xe7/0x240 [ 1348.068540][T15392] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1348.068566][T15392] ? __pfx_interleaved_copy+0x10/0x10 [ 1348.068587][T15392] ? __pfx_default_write_copy+0x10/0x10 [ 1348.068609][T15392] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1348.068631][T15392] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1348.068650][T15392] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1348.068674][T15392] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1348.068699][T15392] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1348.068735][T15392] snd_pcm_oss_write3+0x1bc/0x350 [ 1348.068764][T15392] snd_pcm_oss_sync1+0x345/0x760 [ 1348.068790][T15392] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1348.068811][T15392] ? __pfx_default_wake_function+0x10/0x10 [ 1348.068836][T15392] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1348.068855][T15392] ? lockdep_hardirqs_on+0x7b/0x110 [ 1348.068873][T15392] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1348.068892][T15392] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1348.068917][T15392] ? snd_pcm_oss_sync+0x286/0x9d0 [ 1348.068935][T15392] ? snd_pcm_format_set_silence+0x12f/0x2d0 [ 1348.068959][T15392] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1348.068982][T15392] snd_pcm_oss_release+0x102/0x250 [ 1348.069000][T15392] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1348.069019][T15392] __fput+0x45b/0xa80 [ 1348.069044][T15392] task_work_run+0x1d4/0x260 [ 1348.069071][T15392] ? __pfx_task_work_run+0x10/0x10 [ 1348.069100][T15392] exit_to_user_mode_loop+0xef/0x4e0 [ 1348.069123][T15392] ? rcu_is_watching+0x15/0xb0 [ 1348.069142][T15392] do_syscall_64+0x2c1/0xf80 [ 1348.069161][T15392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.069179][T15392] ? trace_irq_disable+0x37/0x100 [ 1348.069198][T15392] ? clear_bhb_loop+0x60/0xb0 [ 1348.069218][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.069236][T15392] RIP: 0033:0x7f7c0e38f749 [ 1348.069254][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.069270][T15392] RSP: 002b:00007ffe4d121bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1348.069292][T15392] RAX: 0000000000000000 RBX: 00007f7c0e5e7da0 RCX: 00007f7c0e38f749 [ 1348.069306][T15392] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1348.069319][T15392] RBP: 00007f7c0e5e7da0 R08: 000000000000682c R09: 000000054d121eef [ 1348.069333][T15392] R10: 00007f7c0e5e7cb0 R11: 0000000000000246 R12: 00000000001490c5 [ 1348.069347][T15392] R13: 00007f7c0e5e6090 R14: ffffffffffffffff R15: 00007ffe4d121d10 [ 1348.069370][T15392] [ 1348.069832][T15392] Kernel Offset: disabled