last executing test programs: 11m14.634177678s ago: executing program 32 (id=1123): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x4000) 9m21.472083394s ago: executing program 33 (id=1625): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x106) sendfile(r1, r0, 0x0, 0x53d3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x70051b8, "8f5151239582"}}) 4m30.624953831s ago: executing program 34 (id=2913): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000280)={0x10, 0x0, r6}, 0x10) splice(r3, 0x0, r5, 0x0, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x208005, r8}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r13, 0x4068aea3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m24.010911786s ago: executing program 6 (id=3086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10004095) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x1e, 0x1, 0x0) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}], 0x1, 0x0, 0x0) shutdown(r5, 0x2) 3m23.035060074s ago: executing program 6 (id=3092): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create(0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/slab', 0x0, 0x0) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000002}) sendto$inet6(r0, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) 3m22.768922748s ago: executing program 6 (id=3094): io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r0, 0x81, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x989680}) r1 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000100)) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10) io_setup(0x4, &(0x7f0000000140)=0x0) io_destroy(r2) openat$misdntimer(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_destroy(r0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0xa0400) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000200)={@my=0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x3, @private0, 0x8}}, 0xd8, 0x6}, &(0x7f0000000300)=0x88) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r6, 0x7, 0x20}, &(0x7f0000000380)=0xc) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000003c0)={0x62, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x2, 'nq\x00', 0x0, 0x4, 0x50}, 0x2c) io_setup(0x9, &(0x7f0000000400)=0x0) shutdown(r3, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000440), 0x1, 0x10000) r9 = dup(r1) poll(&(0x7f0000000480)=[{r1, 0x9040}, {r8, 0xc}, {r3}, {r4, 0x4000}, {0xffffffffffffffff, 0x440}, {r9, 0x80}], 0x6, 0x9) io_setup(0x0, &(0x7f00000004c0)) r10 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000500), 0x400, 0x0) io_submit(r7, 0x4, &(0x7f00000017c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x8, r10, &(0x7f0000000540)="212117b4ead6442d17693ce30c0b8e7751525adde82a8d6e1540b4114ae50f395d742e68143fc5d56eaa1b746a370a323421e599966c8362474dfc7687316356df341a526039747742bcc2044bdabc5ee15e46c9efdf1215d9481f9db377192ae7d9013332e2e0a185c0c40e8d3e6b7b086f237bc8a738e9f89387a43c8849c3b07a3b13c99ddf49285cbf45c6d0c09dbaa14f4b90cba367ca400169b68df8f6a07881", 0xa3, 0x0, 0x0, 0x2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x8, 0xe, r9, &(0x7f0000000640)="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", 0x1000, 0x4, 0x0, 0x2, r3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2, r8, &(0x7f0000001680), 0x0, 0x4, 0x0, 0x0, r3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x81, r8, &(0x7f0000001700)="fcf09da3af8a4625405d34f9d62abc3874ba1ffb79c77a8966764542f2ff2ffc167f98069d75fea6ef36ef3dcfc620ffb6a22f9bdf21b0fb22b88e00d2b97a8aecc37cdf31bbc6f81ef599", 0x4b, 0x80, 0x0, 0x3, r9}]) r11 = syz_open_dev$sndmidi(&(0x7f0000001800), 0x28b, 0x500) r12 = syz_open_dev$dmmidi(&(0x7f0000001b40), 0xffffffff, 0x220c40) io_submit(r2, 0x6, &(0x7f0000001e80)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x5, r5, &(0x7f0000001840)="ab6ffef6d68ad17ec0e00a531db02700db39d8232b32a58fbbfe511c10037b462e2516f80dda99bbb815e3df744ccc849114f5f459a9ba94572a383033e4b28dc591785759f4bc0999c0f019728239da1b6128cbc1960632dc7e536eca13e31e16fbecdbb4a7a80935aa04c3ac2edb075b74a8295304cf256bfabe2ea91632104561d00f517dc72589a253e259f8", 0x8e, 0x0, 0x0, 0x0, r10}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0xfff9, r5, &(0x7f0000001940)="4025b43b06df8bc916d50963897aa8423dc530743fa8ed3c8043f18967998921129e507a342396766b084e8e8e6e1521d8ba3833ef1055eac7af5e7cd553aae4680321ee53c42620482705e2d7b6fcbd6bc3382667de2e49dde1376bc90024531d195fb0a86b2bb212e3801e13fc1b0ea5dd72f0fc991a7d25d7182d835e3a2499", 0x81, 0x80000001, 0x0, 0x2, r3}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x8, 0x7, r11, &(0x7f0000001a40)="be2c585c506fd8b31df0749fa018545e303dc3b88ddb3e9a8e5f9dee42596d7c22c123e5160591d080ddd61afa8b4d80b4c1f4c51f85cdd00996c441e2a9380df1066ebeb81d223796ad221a8116ff67c8ca3f3fa090a6d4b73cdeed1e83a7c6c76566116fffb5b6864e49c38384f46fbdc72ba6b9819bed6b7c5971216e37ff1fb88d876971f25c966abef0bd2a4e37d1d4dcf0c1f0e30f65519b22f9b58466aa61221787b2ede06c60c148b768c79a69d21432b2e3de", 0xb7, 0x6, 0x0, 0x1, r9}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x3, 0x2, r12, &(0x7f0000001b80)="7f03e8e6166d528740d7baccc2b3aac28c19668fe1578a01e02ad6043a01771ae7477975284a9d524893547e6e", 0x2d, 0x4, 0x0, 0x2, r10}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x3, 0x5, r10, &(0x7f0000001c00)="eaf9a18b057735fe9f2dfa53a37fe7e7aac551d87ae80dc826df1b6ff0b86ae1956bb074b4f85ff693ca5640cd19a96edf0b3e404dd55203a2de70abfac365da65889fd4f1130927e028ef090584a4729ae8d3f161d27b1a3536c48c5e9d29f6137b04b675c34bc25fab055f994654db9f205fb49618369af3606f59de068c6c4c1e22e1a88f4a68c8e224623896a17347e60b41cf44e83517f87a7555614b75393f4d48883f5d40104131c61e5e5288a2c81a2f3352a52052d3200245c616beb2f2e99e", 0xc4, 0xf, 0x0, 0x4, r10}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x2, 0x1, r10, &(0x7f0000001d40)="0213466f7175c0c1dd005cea8f24babe9484a77483c58e1918749c9d1791ffa5184e52fe5d37175c0cc2264454b176692a6735a301dc92d6cf707266eb8d4bcff2eb44137f183593382e3baf15d4048fb8fb3cb0d07719b87b82fc9d1f4cf60c941f2647f1ba49452535186f9f0fcf4ef1fec1fcfe29f2700c29acc90252ff3947d0b7cf68cc8b3fffd6768d8bdb0e073aa4d1f38027e7666ffe5ea9b58da0994d74b700b4f93f29589156574b5cdcf23e9dba7da3db986ce9fd631aabad0ad1f7", 0xc1, 0x1}]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000002280)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000022c0)=0x0) sendmsg$unix(r3, &(0x7f0000002900)={&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001f40)="64c45067aecd19c1ffd598e7c64054a556b99f4cdb48d524c77633766a906ae6c3072bb57aac8f8554ef82162f5587e312481ed717b751d76481209d0e03641d181bf99e73a1519376bfff96cb748682b5ae54567bc2c3856024f152b71618f75f767acd2f6f9b9f079c7a3c240c8a341e15604dc97138de4b0b75c0d6e58e3f1e7c657c9d2824c42c0a344c219b9439312ccffb69481af8dc1618dedc6befe25c51a2945c3db64a5f30da9a0d0f36e635aedfe1b4cdd9b1600bdc83429e7bea4c41d586fe7ea7a0a9c02d9ca609b97de49bf3792a48ad2f570c74d47f090179c163fc7967d02171559357710d0a444a2f2bb056c6", 0xf5}, {&(0x7f0000002040)="34ceaf45ed673fb2e6fbcadd976df47ba4b05d6a17e9d3b896d70c3673ef9d5eaa35ed91613b95b6f0ccf2df9924d11582088775a831afc8384caaf4d0aadfe22a74415637319b4ef9d0fa10c0b504339e0b5fbb5c510536713c3757ef21beb9174c140b7779192d03fd6a1acf19012534108b9b84b22fada4d7a22b75d8a45da21ae3e9ae99cc4b111e714bdced2bf672cfb3e9439c74a858921902932f27cadc7b5c32aa59b2f146f353144f1abe8323444cbbe0b9fec5b1ccc4087fea88853d", 0xc1}, {&(0x7f0000002140)="192544c91e63e98ef689d169695c488c53b9b73465cf3d72a54a75b435c9e6758e6152fea319b462193a17fc2156ce70d2a9fc7285ea10c57bbad05bb8254a26dada96844a06a23de1a2d50bfbd8a0a2c6154fa622e45a7493240e8dc818675d1f1028fc11272e6382cfcc8f9c47ef6b343dd3029fed300c8b472ea20d48103220ac0d00d86eb4bc6179a8139e0ff250b7e38b2accb745865cac0e4cc827fde5567e4669fbc2a4e62508e3bd8eb034db4bcc1e6fe6a34a4563a43ec89c6887f52cee98f3b5cf8c1cd7045df84c2431133f357cde942ff588032ec59078936dc1eca8b98cc351318ca4e4c29e8adc", 0xee}], 0x3, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r10, r13]}}, @rights={{0x14, 0x1, 0x1, [r4, r3]}}, @cred={{0x18, 0x1, 0x2, {r14}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r12, r8, 0xffffffffffffffff, r11, r4, r5, r5, 0xffffffffffffffff, r10]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0xbc, 0x4040880}, 0x48d0) 3m22.366106258s ago: executing program 6 (id=3096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xb6a5, 0x4000, 0x0, 0x9e}, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000000c0)={0x3}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f00000001c0)=""/39, 0x27) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getdents(r8, &(0x7f0000000180)=""/64, 0x40) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 3m19.200288986s ago: executing program 6 (id=3107): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x8002, 0x0, 0x400, 0x0, 0x0, 0xfffffffa}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = userfaultfd(0x80001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68a84a752fd81137e2fa5c02ed8360a66024083aa62a648c08528c0f44b196b0318c1eaf291b43da024d5c27b257d8a7d1fd1943706c05f4cf07b445924776a235cd1945a04c09cee4f2ecc3b6bd", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00ff0f0000060016003c9700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000280)=0xfffffffd, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24040000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r5, 0xfffffffffffffff8, {0x0, r7}, 0x69, 0xb, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000100)=0xa995000, 0x0, 0x4) 3m18.397296818s ago: executing program 6 (id=3113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x10000042, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x2) mount$fuse(0x0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x4, &(0x7f00000007c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000080)=0x2, 0x4) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f00000000c0)={0x2d}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x50, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="50bb2d2672d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50"]}]}, 0x50}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3m17.916715172s ago: executing program 35 (id=3113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x10000042, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x2) mount$fuse(0x0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x4, &(0x7f00000007c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000080)=0x2, 0x4) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f00000000c0)={0x2d}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x50, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="50bb2d2672d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50"]}]}, 0x50}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m53.84847933s ago: executing program 1 (id=3196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000005100)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x202400) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000840)={@void, @val={0x5, 0x0, 0xf27, 0x200, 0x3, 0x5}, @mpls={[], @ipv6=@generic={0x3, 0x6, "95f042", 0xcf, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @remote}, {[@fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x8, 0x64}, @routing={0x16, 0x0, 0x2, 0x36}, @hopopts={0x5c}, @hopopts={0x5e, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x1, 0x4c, "4e7a1e239856705edfb97df3ca910e717cfe69faf8845fc044abe55157e88803b505cd65adece6d848e167dd44113833387b28bd6b35fb203535a27a23b18baaa3f9911a5c67483517d7fd9f"}]}], "066dcdc3f8bf5e0ff9f469ce4c8d93777bbf44238371b17e47b06a81f58eaace969621b53666165bbb53df75e551b4e91aaab3223cb2dc19f54ab96a52a5c22260e6807127b10eec3b164a576becd6b936fb4d0207a56f"}}}}, 0x101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) pipe(&(0x7f0000000280)) r6 = socket$inet(0x2b, 0x801, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) write$binfmt_aout(r8, 0x0, 0xffffffdb) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x14, 0x7, 0xdc3c, 0x0, 0x81}, &(0x7f0000000440)=0x14) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x3, 0x4, 0xffffffff, 0x8, 0x2, 0xee4, 0x7, 0x7, 0x76, 0x6, 0x2, 0x7, 0x9, 0x5, 0x8], 0x80a0000, 0x141000}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(r9, 0x0, &(0x7f00000000c0)) 2m52.68297182s ago: executing program 1 (id=3199): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) (async) r1 = socket(0x11, 0xa, 0x80000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x3d, 0x6, 0x4, 0x4, 0x0, 0xc, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6]}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)=0x4, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000040)={0x1d, r6}, 0x10) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x79c301d0, 0x200) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000100)) (async) lsetxattr$security_ima(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)=@v1={0x2, "0e62"}, 0x3, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="ac1414aa7f0000010d00000000000000010000000000000010000000000000000200000089000000100000000000000001000000d6260000840000000000000007000000865900000000060ad425e24f9f6f58fc060207072f2c526e70030a45f52fea714d2d9602066027e12f020466a8060b946c6f958106b85051af12e3512057a8022e13e85eee49b6db077600091b5412304df9260106a418b441441c7411ac1e00010000000700000000000000017f00000100000003010100"], 0xcc}}, {{&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000440)="e317e717cde696333f117e4a86d12a387bd5d72047341ef7b99833bf7ba10a924fe7c9fbc277e4786986e2f69bd332e6a451493af995b5c4ded77ce26c47e77619f17be5b6da533bcdfcf434df3384179298527edf0fefbc3b74f4fd42c046e40d9e41b18550fe206d0bca88ec30df43ac96cdba43f05ced7aa462d6d0bc9231aea720dd2ac4d13d70db2b9110ab25f7fdbc4639dcf0320c1400d2cc56705a30c66c40c797b88a7eddc30d5ed91f4fcbe177b893d00460ac6ede1c25395dcabb47fb8edd2a364add8d1b6d17f9d06c0fb790585c3fb46ed4b2312bbadf", 0xdd}, {&(0x7f0000001480)="516440780ef8322841821a7dfba54b54ced175f05116a504c5706bb9ee79ef2676b3859298b143cf2386764af8dbda8940fdbe3bb8068b8828b2fafd0faa8d095262e9253633fab70d42e0ad486dfc42aed368d27ff83349edd679a7e876fa53ea31b5977c7a3e6f4db031b3ccb37a8ecd581830aff45d2faba21b47b274a85c430ca8aeaf5df5d376c3ca0cfd4dbe186874ed02f38b110710ecb84acaf837f8965596bcacd4aae9d27bec35eceebf6eb80345314f4eaf046810604bc35f57585541906b1c2b8fa164101805e0670595f39a91afee35b9b7fdfc379d7c084ba139522f503b096b6726dd2aa84ee6d52983d441840d14a8980b23417462bb5dda1f17b7398c9435fd4899b2382087da8b75f277d56ea364a2bec388d3ce4c9a335de07f35d4a237fdadc79f7fa14c6839dc51bafcb40ab4e8333fdb897b46d4018a270eef2569a430a0ddf333e415eb38fd2d1b93ff3ffa55b7f11f3425c94a271e880f809f64c9de1af388271597911674227a10361f4ebaf7287672bc33905ea5b56fe61646279d402aeda219ddad23311b2defe2ce54ae6baa8245ae07e00d00316faf79d7047b8ef2e3531efddedc4ae08f9052619988c04e5e597cd465d96034e8fc0ba3897c005d45407e4876e9f0a7c06f7b0be7ca15590d5bc5274c1234344c1600ed5526c2c88524ce5c4bf737060c734097f6e50b89b4fa64e11883d1a4b16c49de52187336b5511f87b25a9666519329bfa149fe1b6609a97ab8a0f7b6ba0f8df9214166cc2261f31d177bab1573503a344fa5dbc9ecd8dc6c07af356a2fe532fee84204a157d45ae7558c91e2844da4933d5761cc97d23f20313d9d3ea5298c32683cd7d26f1bda701d19f89479609644698e4f85ad76a105bd08c9f9b513c179ef72406e736f4e97bcd15b64f028eca2ce504f3b27fc4da6e600861b406322dd8561f04c58cbb3aa498ee16804efa7ac21f252079acbc91850c80eff780c0a90d1e638f2012b0cf7623231786498f069d2351f1ca5f7b427a4baf698566fcc70de5e8ee0660aa88440b58621363fa212f565137a124f1c0655e24dcec3b948ea81c861f8bea1e9244fd08716d600bbf8e2bb29d48179b177df079c27d16dbfb960065a16204671ae10ab3b8966a84446b01e3e9d699e693ebf51cddb65af59a59c768205713bbfb2958b8476ef3dfada97f3664616b98fb7c275a3481c11e2d99186f01404b85a1aaba62f141314ccf0d526ff60a53d6774a47afa78c94d03cd421655ee054fc30a3f995a84f5691d766223b21cf8eeb5239846f96954169190d26f2e436e0c1239dfe42da1af40a21d323d5210807d94fed16816f0e9a454718b3be6da2fb0625b2fc4eb8810ae2c594bc90eae65be5e9d5508e8a15f7bde1806135f0cbebfd4624bd6d52387393d211f490811261412889140e6f6d1af17a78d8358f6ce304dfbe29fc2dc5e161be1724117c0513b754efeaf046f12e1a34574e3186e1400c22861d0af5c964c78a78476606772e66dbdc044df879f66959a6d72e7c4c138fbb536f758da4ea646508aa7ff3700d61cd735672f35e3381b4cf30a2a1b983541411259dbf4dc46d0832390a1561dad3312bba35de924a10dee323bf222c2995b7ff04f906dc8048253731de042c6e2bbcaba7404896a286806b866c409f053d60baf2a297eb7f8aacee7343bc616ae2c43767c23d2cb3b730a5a090fc22b5aedb217cafc905180e8beffdac19350d1b52063f9bea09bd2281bcb8c38811eb3551a6eb16cd8c94b1ead68564e86090b65bb62d1f11687aa16c3820f9560dcd9bf5b1772a9ebe5795c3899e08bf3c298499dc3f09f3ae968a7ecc7ab3418eb5d33d88130286908024b767a93ffbe66c92767e2586905cc63bd57051256c6721b6aad72476615c742788bff80edf914de3e509884c51b939790c719ec9fbed8eafb6ca7bd7d05359e30fe071cdfac9549ad2149ae80ad629bff318a7da6c29d8f5c43bdf62cc39268e7be0d70d85cc12cd71bd0be2af61c21a91ec9f623517e859450563eebf3c76403fffa1faddbc27f0b99815372468f9ad23c54d848407e70c8d8e9a69137e7982b48315a6ab5ff93cf912d1142c6dd544d2bd555c8c6e313dbf4b9be7eb40ab9488b3f7da83170d4d6ee61671bc1ef5adcf01c969abc931b44459f9073a05729c84800d52016dd71d890c32e63928f3aeae77380babaa325f37962af79afe915c2f2b6d65a99d749fb89e069d187e5e71b5289d9a0be7d3b2c723db87bf03f0984dca10e247cdb84a3fbee593d37c5dee9060e5877bb2a61d921ef5b602431af78030930acf1f94e38f91cac2c90e7d9e3a5e1208af3ac57710ef1f80b16fada4284a7eae519a80a4c1d889c7ecc2928025431f4349a95bce10e122899799c637134c6c82d24289b5dcab88673ce2ce3b0f60a243a451003c11df25c484f8c601ef6ccf62f66edb283837c468fb6d8f4865d84247c2c4e5b13c0e0be7f0aca60a8c148b5988fa99ede9569be47e8dd73bf01f10487988447df86188ae5d3ba9928c424575cb06bbf5ebbc2c3623edbca34225210974c71cb24f05bbfbeb41278f8e9c135140b8b594557732150158112318e7eee57784c2d63693a4d419ad3039483a8d860a9c9e3f68e442fcf029b55cd07ec376e00569ae0bb6e974423b1211683e6994b3a5373ff9c128e964a8dd89b40ae3d49974e2d26b92944163593324f5d39e1def0bdd4be54665afed77ab7324897fdb0573412b8bf64eeb2460ea2b302d51eee4978d30c7a92d8442d102c2a8b206686050e23070587358ca96d5de1b812e9d1cf8ebe240acc720aaaea8c91a87373b8ccf54af5407aa80a211ebfb393ce5d813d582676e47e0bb49c2c737e71b76c0716153def35d454b20f4de072ba209fdf4a188fe060d98bd0756d8cd57c9d6d98db213398486154fa49d60713667cbcc597e0405c51029d859c0960a3cd3e89fcf71f674eff15f1d65aceca9d700b271fc74c231bc4d1560f30f4b0f4b11a4295f3c40e28961eb7cf262c639ecddc0c4d4c722e2ba3e9d12ad45d9b098a03a054ee5f47ec614c8b3e7f5f4fcb521708d620e049b60723fbccfb1cae84d937d99f5b2ce947fb0ce24b3ee1ff94d356bb7a8bdcd80ea618a2267824f7a8c25b4cda18aa51f5fcd5f3fc76dc892f34bbcd578053471d24b1b4c673825002c3d89cdd7d2600cc1603d78904852d103892598c60d742677eddf97533492114e48803f716f93a34890d178550009ea74539e4902fb27208a7bb4723def2fdd67ddf5be4f04ed9add3bd21da5dd68b83a272ccd4858da4b7148ff00ad23e5d65978af8e814f2f3013d0f81a850fcb121ec82d718a596fdfdb7be5ddab3cd8ecc8f7493bfa30f2caa334fb729c9ca1d74190977f300b322c9ea5981f6abf16086f1de7359be17971e8663a8863c4c5685cac018ace047a59f60839ca1c09290dd4a406e80234d44b3f0556595a0feb1322db19882693f22788b2adbe5e694ae06800ac4bcd026bc937c3e5dc5d7993b7a8f5ca6872e8ca9ee078b6b3d8a4f78cade710465a6ad7a014768c8e95aa6d2ae3ca5b68d9b52e554337002af04bcb775a73643b1c0738f01cc6d903f83d5fd24e903764c70ea06b4c7615144967c2a29c8abc0ea9f53ba7790dd47f1903cd4b6e866b02b73ae73e37945c8ccc5e96733f7152b98c9d083e532bd99122992f1f134f50b35403a68d77f49c41ed4c37b23d8588aed2ee38532d10c706c27934049ed2e53ddd733ef8d83be1f2d9656a09a1186a15214344c6b2a3e53cbccb305c602ada40a39ff74e92124e944909df023c454bc10cb4795a5b45159f6708b2f01e9716036cd476809854764958a50f3624c6f478c477867b89742fa02124a327ce28d58112eff51607d4e68322373a3c67e30b095e676790b3a93caeb9cd91acae1e6482546f06382244235c306082babe6164412b98499e06116bc409103508acb62b0cf8d9882361a6e9308647a7ebf7f36dd8ff6c2e00389bb5ec7201fac5fe49602403ee670de2944a3bb73e13f978e85442d52737b89e651cfcc51f2f9a0c650a18b700c3801c32c32cc5c4ba6d67937ec222f7a6ff2e497ce141e736bc05cbde9baa0a0eb2cee19304f5e256abd284812442bb1e0c24ba5997c0321d9420dde5a27e0b9ec60fa1b49260a2a189d51fa96b8fd2c00b2f9a3cc394142bedca69b6d61a6c9444d63112c0dc4ff57be767c310445f9f19c583c702d60a8c50c6cc4634740694152121838a6f472d0235b56e61728c61ed8c325d5a57e7af86e8697dc90dc8c15d98ed7348a7d2db7640a50676b728aa354d789d8d5c2b83b585d7f99ae51dcfc240b3dfca2d44009d095901e80f5492cff7478346ba2a0f50d1b25bd0c1ba0b0e78ef4f8e81698ea8ad0e9fba9eeb8e7b747f12efd62458f7b3c4513df8037c8aefae901d4890868a0d6090162ffff0d046f536cb5a2596f90daf0845d0d362f375336db6491499c336c1da7880d5a177b09350ac18b33db5324d87386f29f945a0813715e656b55d057387724f7639f1f1e932e72b8fc1b4c925d30d6f2660480fbbdc1a1fcbc65973531899b442bfc1659d47e54a1044844edca5a09373586755b776907840042d7920d16777c8cd56c9165e40559f939d2d1ff601f179daf3ffcad6965436f9ebcc242a7a7d87231c92ae8cea415ac2fa0d66b8634b3db93299b3c1f6226b51b88c8a40be026b9959367063f0eed07bdec5eeda14d7f47a9a94dddaa58de4566743dccbaa48294abeb7a58df95c23163cc71180e4199513a0bfa7cb535068ef076918158cd64191829c5b62992d7d993340386d88efb81362873035bd1302019efc6b87f7b1fed39b8f2b2fefc843da881ca6f5de66e7e3940c0adf17da2caca6ad86806c5fa6d287babd8dfc2515f0b1b21f9c4e7312f65624b50608abe5ed394847f8060516258e817cad1e014687dc2551feb293c3057ea2f8a23dd7a0bc1708d000e86ba18f8d11af4f46d295d424fb5ed34f73168edcf88da8bee2f72968bcd67b75d4b184fa8e2c8e6aba7014b455730a34d711dbf94db57f592a36d6ba51d076fcc2ea477ec660c6a7f0aebc1874c2beb4b4a680ba7ac9fad3381bd2b18424405ca139d1f6dce238329d2d6b3ec0c195c9730976d39c2afe35cc37a956e1cd88480cc3da61295d25277ed42e64df52b2faaa9603d2366c159fdd3e1aa28c42206cdd82780aba1a76efe71262d341584c49a1bd0d4c7aceb9b15956fc8796ac5184c9f56368032efab54c3324607b0ec4886fcc21c2364adac69cab900e124225cc3e73f34d4b6b80603e42defad8508dc8d968099ab1ff32e622ab09ce9dffda7f88353ac61203a4baf10555ee549008600254e7300e48b525ad87e2e9a872c122c5ad0880b63b64d44eb4abf28e8fe3eaac34f984b65a469e3670c998176e0cce8786d33196859ab9697ecb1596f7810a701b519d264d013ee804dc2549462a368d81fd49c0d91a5062dba90fc17a3631c68c2dd1b1a3888c6987093762fb3c1350a616198219154f809f21b6bd9a30d375c6066424eb434782d08caaff2010b55633ff4a42aa6cf460590cd0816666f861482d0ce894b004d43d89b6a01d028472fc7bb4f208c805e46f83b39917807b19ed96230fde724b2e2b4a8d88808b9ac9f14ebe1d98d4084425eed0368fdb157451d67a7d712893723fd1db5650484fb7acf398c5e1df0b3a0d23266583de31677bd946c0e12b8", 0x1000}, {&(0x7f0000000540)="c0374e4fc6806d4eca1fd9c44ea3bae39a4f944c13435bbf33d45bc3400ba3bedf44a7685e900d1c38b01536847e4be5cfeea061090818d05763a38c3725a1595d3e597dffcbc0f98633c7583d3c4bc39c7842c85ad5d1c5ee5c779980d479c3465e64ce01af34b76abfe401e330c8e4b6eaa6d3003252c9f63cef1723f86575973973486f3cdbd44ccc4eb8333f63ef9016dbde4d56bd6fe6a144d7da500430a8104c1b31832434f09ef10c74d224f7c5a7845d6758de9c007eff03e943d8dc66581216f9d4ef44ecf7024f5f12f4c9029e03b8b2630ddd3852a3", 0xdb}, {&(0x7f0000000200)="65ed87b2266fca8a7ec5c9084f4610fb5d5132", 0x13}, {&(0x7f0000000380)="9f9fcc4f97e577f9328522694c9c2c7189826cad3dc65cba667b20c1e2702396d6c3438a712ecc862e19", 0x2a}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000640)="ca68a1f86fc4aec3081a35f8d8e73241b40b6b1871ff7329ca2983a93322a52d47f2d939b0e5178d6d562e9fc94172de6584b2a5324c2723c7ff2d42ca93dfa81f4b9c5c82b56d4a25aeb65904ddc20ef5eee4ab4080cd029ec6133b48175412b5e192a0e63faee1de620cd0ab82af350cd3", 0x72}, {&(0x7f00000006c0)="210e89a8c522be002625245a1f028d2c5334335ea1105a8e51d8ca87e3f6f165ff9f3dfcb451892100a7f049fc023fd5a180020872acb353a0b535c6e1df8c122cd2592770082674006571e26a8f71b9cdbaa7fe0f5828d2ec16cbf6d743fb10b68d6ff146490651c658cce57ffe77d829de0e90", 0x74}, {&(0x7f0000000740)="aa6200e8930f89a2206858f128028aa004673e346aa05ae9a62570da344f30db6aeba0aa9f9e20d4a40d6b56a71dea7e30def0c6511b9d7034f7715fd57df7adef7aed2c18d070246743a7f61aa5e7fd59c65a96efbcee9d7ce457505b983ff4cb6de00de6120e82dcea88b5add7cf79038d29b5c016e24d545d943a66a96eeaa9a9b82fd66cafce21d30ca53ab2289671ac7b3bab8a9bf6d63421d265c09f", 0x9f}, {&(0x7f0000000800)="a2f8cbc4683758b1fa72e77ab6582c7e5c2d2d1d28109e0c238ba866c74dfec12b463b4f37aaae03579358656ea6c4dfc529c1bace2a2e29f69d2a7217bb7bdd457db93188d59d1dd4cf4f69ff4f488aec6c4a05e1158f523e67f2f3035807ec01429196128dbdb68fa12c378309f0973462666ca29ae78e813882d85b88bd6aaa9682785c60aac5e0", 0x89}], 0xa, &(0x7f00000003c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000940)="ac0dabd581ca7c98f24690c7d2b9603afea9d87f13cbdee720eadfd0ad3bd8a863e0aa76870b7d468bae91cfe2cfa76036cedec12c2e544cc8875f63e953a20c4ed6ff21b0a55fb3386179fc6852f1d7e48be0bf5e30cd43fd58e9d293036a967f31c1436721eaecc6fc1f209ed4bb35ef8d521c11c968916b0fc252bba2106452d4e128ceef1de95ce535f6643519297414d1fcf1ae434b3cb39e634c3117e2a0029f9dbbbeb5", 0xa7}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="c38da12054735040f647142f903a1b437c2459aedd4b3e93d5e72f3eb99714d9ebd6a9a6ccfb4346f9b4c7b9e7a8a98bffcf8822db8c0111ea162e646dde9632644c49e3c5ebb947f6f27528023db91eb7088166cd8a8e756b7b4bc30f1eb3", 0x5f}, {&(0x7f0000000ac0)="7da794a0bb5e24eae5f1e36e935272bec778321479d9fd710458fa1f2f0189a5c3480e7f49965caf8ab2e256aeba60008651fc1ffa5f9c634cbe275cdc5b96431dfa7befcf", 0x45}, {&(0x7f0000000b40)="a35b2f7b1fe366abb7327b7a9d", 0xd}], 0x5, &(0x7f0000000bc0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x9a3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xdb}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="d8485fa54e68fe5f1ec626a6756bc1a64cb91c81ab4dd7", 0x17}, {&(0x7f0000000c40)="f5021fe81efba7c6a4afc05c98e884786d0f195f024fd1a18498cd6305f21767234438ae27b8f00cfd4d81917851945337bb38a1e3917ae684f5189a753d83eb86d111fd827fb0b56fcf8eb5117027debe57111ac1467aadcea095be8ae787330334bc479682acd6364f0ff09b5c8645b490f530bc76bef583a85f20a1022832db653c56361de5ddb209fb0d5ef90b7866296647eeda3028720fb58dd53aa736e5dfd45aa95e569fb72a127b2a55f742d625b70766766e012a6173139d818264d99d51b278763eef2ba651709a0e6effe9ecf74dd844a0a9610bfa8e698de3cd9d7a1e61bcea3033b721029fdfcf308983", 0xf1}, {&(0x7f0000000d40)="c697780e163e667a9652abe64d850a5fbf63b39a901ca35bf3375049526efe883b10d38c51856f1e8d662b81d056e1ac626de650d246dc3485f0dfdd634365d682e2eddf994f69935ae1e30063fa0df444f3f5cdba661de6899326dfd1bcc876339ba824ca40cc806455bc64915dba5e4cd9291aaf6d3d507c3f10598437a51c0b2323cc2ba9a050e7e271b6", 0x8c}, {&(0x7f0000000e00)="39ade1cf6dd2cee7f2f5883266eb737915410dc78caaad4d410612c1c4600ed3f246be635204fe10c777ec690ca4c37607bef5a73964a3e459721dcb204514ded6bf6ff8d4ceb4efe87e18cd4673f85065a6bef3e683cc61af9484f45fe3587f49c0970c18dc7584d48bda923bc8bcaa1fea62ae7941376b99fb8f59e26bdab606edc71ec90a3638c616fa9e6a0da96265f50281ad167fec353100daac79cd8de2eee6c70607cb221d1a3a", 0xab}, {&(0x7f0000003480)="84d8f33531455dddea1a2d1d83c555580d3955ee5a2b4d84e8b868f378a709a6d865ce9a90ad124f65b3f4839a841ce2f1a4e672db614cd48a9d6568e8cd2a73abbcbdad1d7aadb37dd1424394a6349ebde5ccd4fb2f211aac3b19a27c36a9710e908fca27c75463ea685d307874b838fd70fc94f1c2365c38635fb22ef07f1b72299439c06b31f299bd9baefe1f6c41600b0c896bccdd8873937fb6f9627fb03b449a4d7e647b7d2dd591eba74aa9abb04e87838c9ba5f07ed9c0a99ffd5a89499f6e24f0c07e2792025a0f3311771b9c17537d400165a354b296eff3d2300722e11c7c5bc8492a7e49d548995e78075f5bdadc34f1ac5367f086449fffc399701b66268e902811025a8caafd07b641eee595de6564fc7fe08afafd4e0c495ca49900ed6668418beb624fbb9f5ef48fb03724324d2b3d2ef3c1a72bd3e4d68ae079dff74567b3d143a92acb946a9d8155571f2a936e4df38fb1563223710a77039367afc2dac971844096fb857c99a37e03d583c0f582ba80d1f2f0575846740074a4973d168d7728b9c7b46e9282dcd5d0756e62db1b9f30ea3adabf58a4a3e67c162fad37f78729c47a6127af386f5c74f17c1dec364a6520ca1a1d0e361c25c58f944a1845533dc0e0d26b645e695d3ce52c8843c47d38597946783fb53b91a4d6492579660987ae25b3ba141744e5f8a18c753097fe1a66c8ee15dfd27058c50299cf1a7578b517840b39fee31c19b9dbfd32a76d9e96d6e5663d39d072eb0dcff88cdea634ea7986895630772312aa86c70b307377c3b179495a096c9ef2162d26b3fa41bc1b29f2a806805da418c268c6be4b6f7ef460c364e45b3a2159488d506ff14b380ebdcfd9f878ca17b15981c2da0f5eb129ec330ea28f2371094d9d6530d244e86e75548c74733a3719e7e67ff98aeb17148e22b08199052d99937e93e80f8e9870722ece81f4f76188b351115ece52a4c34266f798d12046ffec3e1943714f21b3c251438ed647338d215a815780747eb69c720fc3eb7fd192f275a698ba365e3ad3087866e48016469e2e41150302d99c07651e163ac5528980451ff0f1adc4d3ab527038be8a82bedf488f34750bf45275c1240993882dbb87decbbdb0cfffa0f0e51878b4546c8a3e8b0ff9f282fbe780687a5b873799052f27e290545bf1c199f912a8d210ccfaccf262185f4ea9aca16d92a8c919cebf7fe9f657e75d71d9800bc06c9a9c2807ee27f2b56c712cc208ba1de541d56fb0b146e82b1c9b4a1479a7d36d971fd4a92d7feb906d0137a916a128704bfe1bb0f8de2be7ac5b2ec13e5ab61a1f1a5a85b8bd120135031e4ac6a5513f8b6bfbf5f06313ec283fd6e5593eec7431749f4ad56fff0fc62ccff3a5b2a89cd44b48a731b99798e4f89d387d51e1a145c755a10860d781b359664874aec7d10a8867925dcddb790d8b2b9d17698dce4fa922c77bfc620b273b13e59dc56f7f6fdbb0484e7493a87ac948b433472c8968fce569a1b4660f822d08591a375d582eefe5116087b1895ffb09aa0c34238f73cb1c92a6bb9d12275375588a870ff17a436891fd66c27d8dd803c031ada6908be532879a7c1b9ec485f348bee749f93c0d8736d6e6b3d15ca05ba54991114e5d64e819367952189e945ffc8dc201dcda3611ead75432e6d22a1c619cbea7a8ceef17de19be9d77562b508f84a33e12554173a312092d034d6d11db1aa09eca0aa21d5476b23e234bd969c21968e07b97a27dece83a9fd154ae9a454831271cd70b642f8eb0b22183fc0c2c5a2ed37aa67360e9209b48e7104cc9d976422fbcc96c111be36f2caacbb14e6e040e015eef96a90e069440d45a48efd536e15445c6a268d1a3d0cc141cf97fe527420a1709398fd7de484c2045e067dc61939d42d94436833fa29db58b3998110f2b4b5d54c6549cd8c6ac8ec0ec2621aafbc0ce7cfd0247d98c9b3788812a788256b73a19b8a1ba66663acc6dc426e32dd760fd4ea997c5c2e5e0a5535787dc0dc3ed9885f76a18411809a7739056f8f5a06ad4eca630dedd396d92347bd7bece2e6670c19cae96c70f1585d5c804d19b450fd9ae7d4862ca05be9974793019963786df9f7952cf9b5fdd5bbe95ede26aecd6789a6b4cab6cd3cb0cd38c58b1e670a2731bf2bc5c0eb9985f7db2be4a861148f39401f819a6329d7eea2e97907fc882ba27c461027ef75b54e9a197a8acf08232d28ee07e7d05a406002a3c9488df7d29910f4a998b3b68b10cba31fd3609e350df5fdb9838b5c9007aac29dc8a2965a8cb40d793511a1caa40b7d7af7a9cf99a07768dcf993bd1d3cad3d2c4e71a7a2fa92d4650bc6d341500d0365dc0aee01f37fe21436ecc75bdfa751e411a8b2f8eed33baf84d736f40a15d01941130526064a28910d3de2b31fae9e9e0800592e51754372e449fb6fa6b383c096b75bff256f4244913e3aeda0ac810c3b9e43f4ce735b31f497ed61b39d01f79aba885e34488938948ed777cef1d917ba56bc8b0aeab5623009eba9d36efedf46f8d19706232d0d51bab31ee8ace4143edc5239d3408a50b22d335ebebfb0ab1301d928c5d4518d8b4bd1aa62e5364b0108d6b1ad5507bc8b91cd6f8b49b6f84c6b0fc5435f53ed84a3e5cecae18e68b2b09838ac34048fb34809cd94d4385a01ebae52e15dd5cba027ec4e75c8f26dbbe7bfae831b1859364d90f2c1cb9a908a53c6041d211ffe9218881510f80b55da0cbc6e958c7d6008bbaedbb9d62517fd5b8ce08d223b7fa9beb28fa7a396e11bf5c8ea727b83f62d67f6deb1d200b93dc41d30fe2199c11badfd73e7c95b0be6023b0d8aaf8ae8ab04daf1b9f31ac3d9a19e18df67efb75042a232a73c1ad2c3d99410bdaaea0d4a25294eb0c4616871c1040b557df89335c6d31ef180dadbc23d6feda0c11c898e5313106b78fa0dd88fd9ed11b7d6a7010e16daa651c15a0e8b6fc3205b014b4379218d83b1b36ce9de705068521fbe79c8428aa840c4c55f468231847f1514d92e29dda9e6c626d9d74fd188cbc59ee2dd1fe8708e4d30468a0740df276dfdab25dd2ae88f437d3cb41aecd771130029808df1056584e31e82365f1501dab8a248a398d0c407dec66831ba548345f0eb655ba6767c73edca93a619949a9b60914b79668b151e9e9adb9f7961eb487d89da85337bfefe4f2ae56717c3c286a597eeff5d80fb2f3706c4042e7d7cc3b1c57260ba991bd72c7c9c9a7cec1b17749e9736ac5877555be5d8ffaa5ad64be74b3ce838ed4f526968caef5570a8f0dced313679c2755161931e2c954cf305bdb7b930b3bcfc75259c1c84a8507ce9cb4eee6fca77b8495c1496e9a41ba98395ca1af0e07f6cd97db396597b4b1dc45fc8656215f997101bce30dd9864a18c76df9c4d128a9e0af5032c011312131c77bc263bdea8212950422fa2dd2520b4f9398cc040002eca54860375b831ef3d9e91e6f0094acc6dc14e1e5779ae68ff6f6c88176e7a5f3cca9f6ea0edfe5902f948f532f07abed675c968f697676a564b987d99ef3f8d82da765a8a22847a348ecb2acd46ff068f88a2e0e98438e3b128be1ff410459c50f943b33299bafaeccc7d644e1a90be23d487f97d27af279ab1334116ee5fef686151aeb37215decc795f420b9a0afe08902d760bed871a6a0c8adaa51e332d713763de2bb734d7dbb0b292aafab6d7b05ed72a35640040344a1de1210706828b0d35a8a7975ef5b6ddcae369b1b4e0c54b3eb7a1aef943b0fa269b8453a6d472d2593e1e8e69813b0ad9e2acb88b749bd384ed0922daf8ca1d75d300e220698b37ebb1f2c328266bf8725b0a4401c38bb422f663de1a519da766e471a85a1f81cd17d05fdbe8c38dc89d9655c155308606a1df3029a9c3f7f5d658eda37ec7ff2d0fd0b9c5bec56801617598727e72fabf8e81375193a77a5e1f491bd2bc83e99e0ad94ffe96139c636151b8d4d45d7b1761757d871d00fbd831c91ac497049bee682e0301c24a982c0caca7a2036e7df33ce128155d6e5c5643e4757789094d2385948ddfa01db001fb8a2836196264880b77fca9340899a123135d44068e042ceb71a7218f17c4c2d1549d798e5bee60e63552f27daaecf20aa31c4701075a2e162e1d1247ea209e3b5d0556c9084615f085c35b817f3ef2c41aa669a500aa27f0198569afc4c4090be59d789a69c59fced5660e7cbbcc3613734b89a0db314f5a7c71befbdeb1661cc90a6b3f7a3b5ffdf578c47d754a5d54daa8e05f60359932b2f2524cc63bb42c123785d4a818314ca2addef673cea18e31b5a8a148c780c304497930d1461c451f52669f2a4537bc5252ee678572f8eb78c0332411180a8602537be02ffa34cd64b995737d8a65575ec56a7c188620a9969bd72f8648e45db703bc9f81ed1771113b748e0881e0146f28c6b361367e11ff9a7dc26a5ba84b3e01b79410d50715613dedf23a528c265899464929d8f813f842ed58f6bd301f99a768c14a144c44064d274509a787a4120b943cb1e6ab78d07b48744a3fb9e41c3d08335d2ff1957f056d31555f7152357d85b9d40ed1ea2cfc940b2566fb48666cb504238987297d24f06a76267ff6fc2b6af2bcd8e7f1912cb14fb24c848e0c83d245b870144ff1833454eb43ba763be5cd5b06d3b1872cf457ff5fdff3f33f75d5f5626c310c9875b77c2d0cea8736d253dade78acf0b6b7ac7620e76d081c3e4ba1f55e108f413a2573ba27c9d9b63c0d3fe815d09dbb08385d629a8a360124743fd429f79642191a5a2a45d7758518a75419e00c609ce3f7f877a69cb9546dbeea5fc497dfdac47ecb3d81bd2dc8c52eb88fe906c03035d4e29e18caba396a6b80d155d5a4bbaa464bd6e9ea2147bef4d72d906820c98dd630823d2d1c31f1bba1ecb3e235911694aae8c24b21e0c56100cd0e4314e2b31beb35823af309570cad8ea6e03677968affe9864d309b68ea6fe125943a45c42607b4a43c9e140e7355134b043506e7f5b985c84d0a4168054184ab443ef66b28450f1333c3fba585821f0fef9724a59eb1c4ffaec9594df281b1987fa448122692bd6c5766f8e5de328c3495660b21f726a170e55280d0abb0fc52a2eb38218985a9435a7cdc1878c37b9c31e2c530dcd075a3e72ce3d02af7fe75b8295beaba6311bb08dbbf0e59789a26251bb2f383124daf62ff1c42d5346d58b010900df88fe33807bf8134b54eb2b4b67b89c5a9526d0370297fa3e6741701ff7c4092d9dc94cb37a124f45e86b43501795c3e1bdec262419c34f8a52ce86ad5e1c01ed8ff06911d8923985981e5c413b452c0b5464db1a8939c4fa0268686bae87954ff71ad29a5e6d8042a24742d69aa776d092fbf3c485ea9a83b354bceb3e4b05f6c3ff93fbc6947599b62717630b344539c8d9480656941816f6990e0fa0c93c8a0b428c03815361e42261b48b1fcc9387c9cb92d63439263e88b0b64363692bc61a973360ee1d6531664310092a47e7c8674d963b9965299637fa72d136ee71d303cb0699716a2b9d58d643f7240af1356e76ffc323fbe12d937f13726ebd36f79a409aab77f2d57e4ca827dd8015ac571b2a7ad11cdfb8e749d5483426183b2231becf749714df3d3caae1e9831855aed04126c30ccc9cc486866c0959e6d443683856f2ba609f3e304e1703aa0a64eda0670c3bed64e4240d97afc9443ea37b3536f187be1fdf7d0718c5c2b7682bfa0c66b974aeda5dcdb57b4ec5e23285dad8b5cdc588a40655a27f92e0", 0x1000}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="780000000000000007000000440c7d83ac141444ffffff92861affffffff000ee234baf82f7b0ff403140f5c0103fa061a3386fd0303890fbc00000000ac1414aaffffffff4414b2e3ac1414bbfffffffbac1414bbfffffff9891f3764010101ac1e0001ac1e0001e0000002ac1414bbac1414bbac141432940401001000000000000000010000000200000020000000000000000700000084110667432f85e37e8df28405da190dab000000"], 0xa8}}], 0x4, 0x0) 2m52.371198849s ago: executing program 1 (id=3201): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8949, &(0x7f0000000040)={'pim6reg\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x50, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xc, 0x7c5, 0x1, 0x2800, 0x8, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x9, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x24000080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES8=r3, @ANYRES64=r3, @ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f00000100000400000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000009700000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/108], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x9}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) 2m52.32201453s ago: executing program 8 (id=3202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x400000ffc000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r4, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r7}, 0x10) preadv(r5, 0x0, 0x0, 0x6, 0xffbffffb) 2m50.460162584s ago: executing program 8 (id=3207): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0005010000004fc00b394be2338c2a5f49124e62ab98c547337b3a37718e48e597c264d6a73ecd02cb0ec92318f2c0358dd384e24f2da91d8f31ebd49742cceea39dd161699698fd43430ddcb7a5d74bb0ae6eb38937e39c0f41e1bf8ff78d8246d35cae615c10dcccfd526e2772aa83b5b23b23d1efc2f30a602387f44e5eae9bbdf87dfaa3a8261d2661960ee6cc0dbd5fb2ddc331"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000002300)) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, 0xffffffffffffffff, 0x35, 0x4, 0x0, @void, @value}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, 0xffffffffffffffff, 0x35, 0x4, 0x0, @void, @value}, 0x20) 2m50.399060571s ago: executing program 1 (id=3208): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000100)={0x0, 0xa}, 0x0, 0x0}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x8542, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800120006"], 0x80}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111b4000000000085000000580000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) (async, rerun: 64) r5 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.events\x00', 0x0, 0x0) (rerun: 64) ioctl$int_in(r5, 0x5421, &(0x7f0000000bc0)=0x9) (async) sendto$inet6(r5, &(0x7f0000000240)="c182b9fa4cfaa9d0b4590c37e50c7ef3137f355986fbef994db5dd881da0732cc805f435a2045f20b2d512e9482de9a178c6f52d36f66a879ca4be829f4813655238635ea84733c2c813f413b2afa44a9000c243dea278479d3ed71546dc9d918371c3a77717421bd2e8f153f9ada78ec60e9a7c11e820c679384c2e5af70be8610000000000000000", 0x89, 0x20004820, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/130, 0x82}], 0x2, &(0x7f0000000500)=""/189, 0xbd}, 0xc96}, {{&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000700)=""/218, 0xda}, {0x0}], 0x3, &(0x7f0000000a40)=""/232, 0xe8}, 0xfffffff7}, {{&(0x7f0000000b40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)=""/197, 0xc5}, 0x3326}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000000d40)=""/176, 0xb0}], 0x2, &(0x7f0000000e40)=""/168, 0xa8}, 0x8}], 0x4, 0x2131, 0x0) (async, rerun: 32) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) (rerun: 32) 2m49.192642965s ago: executing program 1 (id=3212): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) close_range(r3, r3, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0xa351}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) prctl$PR_SET_VMA(0x49, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000340)=0x400f) 2m47.975319671s ago: executing program 8 (id=3213): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$bsg(0xffffff9c, &(0x7f00000000c0), 0x400000, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abdffffffffffffffff00000c0099000e228d0f49000000060036002a0000000600360007000000060036000d00000006003600000000060036003b000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0xbf44d9f6c15af72f, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000500)={{0x0, 0x0, 0x80}}) io_setup(0xa, &(0x7f0000000240)) 2m47.019304171s ago: executing program 8 (id=3217): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex, 0xffffffffffffffff, 0x1, 0x2000, 0xffffffffffffffff, @value}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001280)="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", 0x1ec}], 0x2}}], 0x1, 0x40000d0) sendto$inet(r0, 0x0, 0x0, 0x20040010, 0x0, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x65, '\x00', 0x0, r2, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet(r0, &(0x7f0000000840), 0x0, 0x40040011, 0x0, 0x0) 2m46.763120484s ago: executing program 8 (id=3218): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="62e8cbc7528e00"/19], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2c020400) (async) unshare(0x2c020400) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff2, 0x7}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff2, 0x7}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f76873fe45000000000000f1a5000000f0fff0ffc31a00000001000095"], &(0x7f0000000180)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2cd, @void, @value}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x0, 0x9, 0x16, {0x16, 0x6, "25ed27386d9be7afb8d7ec0953e3bd0a3268668c"}}, &(0x7f0000000200)={0x0, 0x3, 0x51, @string={0x51, 0x3, "90e8e951e31459a9af0c77fe01f2c532131f3d797bbcc3dd1347dd48901fc2be6dcb012623776aacec2a309c3e87fc82522c297a59db455f4eaf7b027e967441eec47209be70e00c2e82f5c8977c63"}}}, &(0x7f0000000500)={0x24, &(0x7f0000000280)={0x0, 0x1e, 0x38, "3e9ccc1c60b2f2b2bcd40fa249df992b8e5b1ba87a0342952ffdd7e55aa38bc0b7a635dcbf1961f33db4a3ff66052d947de578068ad61578"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x3, "c5e6c8"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "d2"}, &(0x7f0000000440)={0x20, 0x83, 0x1, '\a'}, &(0x7f0000000480)={0x20, 0x84, 0x3, 'h#\a'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "41d951"}}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x0, 0x9, 0x16, {0x16, 0x6, "25ed27386d9be7afb8d7ec0953e3bd0a3268668c"}}, &(0x7f0000000200)={0x0, 0x3, 0x51, @string={0x51, 0x3, "90e8e951e31459a9af0c77fe01f2c532131f3d797bbcc3dd1347dd48901fc2be6dcb012623776aacec2a309c3e87fc82522c297a59db455f4eaf7b027e967441eec47209be70e00c2e82f5c8977c63"}}}, &(0x7f0000000500)={0x24, &(0x7f0000000280)={0x0, 0x1e, 0x38, "3e9ccc1c60b2f2b2bcd40fa249df992b8e5b1ba87a0342952ffdd7e55aa38bc0b7a635dcbf1961f33db4a3ff66052d947de578068ad61578"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x3, "c5e6c8"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "d2"}, &(0x7f0000000440)={0x20, 0x83, 0x1, '\a'}, &(0x7f0000000480)={0x20, 0x84, 0x3, 'h#\a'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "41d951"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x5, 0x7fff0000}]}) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m46.579667536s ago: executing program 1 (id=3220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc070002"], 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4004, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100001000010000000000fcffffffe0000002000000000000000000000000ac1e000100"/64, @ANYRES64, @ANYRESOCT, @ANYBLOB="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"], 0x154}}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x19) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) 2m44.579393342s ago: executing program 8 (id=3223): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x484}, 0x8) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) close(r2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m31.261568114s ago: executing program 36 (id=3220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc070002"], 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4004, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100001000010000000000fcffffffe0000002000000000000000000000000ac1e000100"/64, @ANYRES64, @ANYRESOCT, @ANYBLOB="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"], 0x154}}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x19) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) 2m31.090715961s ago: executing program 7 (id=3260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x0) (async) close(r0) (async) openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x10002, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x8) (async) listen(r1, 0x3) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) (async) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000000)=""/17, &(0x7f0000000280)=0x11) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) 2m30.803701893s ago: executing program 7 (id=3261): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000100000001a7acf6be67acd8a6e87995c6dc2e17000000", @ANYRES32=r4], 0x10}, 0x0) recvmmsg$unix(r4, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x16c}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000e00)}}], 0x4, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB], 0x90}}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r7 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '/dev/snd/seq\x00', 0x3a, ')({', 0x3a, './file0'}, 0x37) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c166a0108304341276ff0102030109021200010000000009040000007be4a800c0fd4dc2342132cb202a000ce44253e77f93419903b2"], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m28.698630706s ago: executing program 37 (id=3223): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x484}, 0x8) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) close(r2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m27.470862877s ago: executing program 7 (id=3263): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81800) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12012002df529b08d2194501f5440102030109021b00010701e005090453fe01ffffffa10005070d1000025f047953f790d32ca65c2a7e028070bff5523250831077fb619b65e508bd30fd4e94987f65bcaebb8df8eec9006fe1cb11921b7efaec03"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x254) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r6 = accept4(r1, &(0x7f0000000500)=@un=@abs, &(0x7f00000001c0)=0x80, 0x0) getsockopt$sock_int(r6, 0x1, 0x2f, 0x0, &(0x7f0000000580)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x3, 0x0, 0xa128}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) bind$rds(r8, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010102}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r7, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc5614beaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce84bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bcbd4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d7916daf222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7742850b956b609740c913f54225ae18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14a08e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c3792c5d2665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250b089b0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xee14, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x7, 0x0, 0x7fffffff, 0xfffffffe, 0x4009, 0x7, r9, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r11}, 0x8) 2m24.339487424s ago: executing program 7 (id=3268): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0xb4b5, 0x800, 0x3, 0x1}, &(0x7f0000000300), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0xcc, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, [0xffffffff], [], 'pimreg0\x00', 'sit0\x00', {}, {0xff}, 0x3c, 0x6}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x952, 0x9, 0x1}}}, {{@uncond, 0x0, 0xdc, 0x11c, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xfffffffffffffffc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "98133ee53ea43f801a3687bed58fd453ac8021adcc4e0385a1700bbcd59d"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x30c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) recvmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/229, 0xe5}, {0x0}], 0x2}, 0x9}], 0x1, 0x100, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0xff09, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="20291e20603bfe18e067719fc6fe4c1c2bc5f8681566da8f0a4143b6773c6a302e21bb3778f786d489828fa56cb7cf079c9529cf76bddc13bb0fed05d6cb1d61e62e8b36d9fae9a52c2a3873a45f327e24ef3b01a13058de2461330056f9793ef53bfcadbe8fe6b47697071a27c0e65d795e8f26631ce4ee54e9a3321e7de095c2e2f9bc0b0591fe79653d3aa6b78c0c24ef81b713e4e3a0732a12489b7a2fec23c188f2039eb9e18528ce3cdaca0d3251806a3cbc25a43c74bf9fdf386a69222c3811b3e1d0585cae97ae80", 0xcc}, {&(0x7f0000000000)="67e1eb5942826fe08fe25a", 0xb}, {&(0x7f0000000740)="70c3ff18570f20afafe9b04d0d0278d5aee5ba3026c4097e04804ef101006edcb1ce686ff9545898def959bf5ba82e753c5edd252879d0e3830101f5289c90f7400ce9f5cc62647cdbdc5102284da95dc5c752801e08f08b980f0dc45e86bfe0e875c4039f5cd6f8c4e79fd2553fc5637ecb7a0149b6d11ee3b023cb829b0a343bbd2415986331205a38b37cc79c1371e7e967efce5c06be12cdd0eaf5b4b48ff06c0d6cd791408a0b68ec87cf8265690da1eae1b5e4908d78d885f9ee787162f7140240f2be379e58cadb538fbf4608f3f44a39365f18bcc2681e0a6f1e", 0xde}, {&(0x7f0000000340)="7395c42373b9922470c382ae2835ac386237e244e9ca6ea3848ad78debf9bc3f1d1cb524fe92f4ab0aa46cf90a9aa490f0e92b07bd7cf61b4cd5975fe512645d22902a46998f458c30516cdfc6dc02732af37ab98d4092af25566da308a0593ec4aec378c8f398cf7b0290a98895fec5c60f0bab6bd19f90c86c56dbe65f6f98cc1377789f6ad3b27f21e6ac0ea43be64058d79644eb107296eca2472dbb1d4beca3206a160c1dfb918a3d2261088157e8e90d017898faea43f5c07e1350dc", 0xbf}, {&(0x7f0000000b80)="ab06d5fe45e75653799b216c5ff808a295a608fe671e23fb74d55930876f88196debbd8a771e04af31611cd0947639f27cf35f67f737ef3c868f15408131ea8636e31da7a277dfb5128a46182c0738d125eb868f9d81795a66b5cca51641fb44309f4fee5c6d1de9c81133a285c8640d9d6d37e375951e34b6b49585c990b3b2721d0b5b36d8a075", 0x88}], 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x7dd}) 2m24.033186805s ago: executing program 7 (id=3270): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000001fff000200000014000180060001000200000008000300ac1414aa46"], 0x28}}, 0x0) 2m23.862317219s ago: executing program 7 (id=3271): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x484}, 0x8) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) close(r2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m8.628962214s ago: executing program 38 (id=3271): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x484}, 0x8) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) close(r2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m16.067378749s ago: executing program 3 (id=3502): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES8]) 1m15.46310162s ago: executing program 3 (id=3506): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}], 0x2}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x23c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff1b9d, @mcast2, 0x10000}}}}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x48, 0x3, "5ad0c90ebf2a6582ac80bd23caf83d501e3a2d6b72cf7e2c7d1b1c6260cbb1570b09c439e6aae1a39e71da179b1bc529b4433334f00ec723af6cd41cebb552c12c568da6"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d2d6dab880c4a440bb082c79758b032882712b5ab6870688a4e87244cd01cf"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x670cecb6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "886d3958fa487ff788b72fdaeeaf1e7fe613fdfa3e4bfe477f879faa134d86a1457c19"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) 1m14.851227039s ago: executing program 3 (id=3509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c055}, 0x8010) (fail_nth: 8) 1m13.819495069s ago: executing program 3 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007800800"], 0x6c}}, 0x0) 1m13.471194143s ago: executing program 3 (id=3513): mlock(&(0x7f000069f000/0x2000)=nil, 0x2000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000069c000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (fail_nth: 4) 1m12.775242127s ago: executing program 3 (id=3515): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r2, 0xce, 0x3, 0x7ffffffc, 0x0, 0xfffffffe, 0x0, 0xb, 0x200420, 0x7ff}) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xffff3243) socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x7, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xd, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x2000, 0x3}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) socket$inet(0x2, 0x3, 0x4) socket$kcm(0x11, 0x20000000000000a, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 57.624191944s ago: executing program 39 (id=3515): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r2, 0xce, 0x3, 0x7ffffffc, 0x0, 0xfffffffe, 0x0, 0xb, 0x200420, 0x7ff}) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xffff3243) socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x7, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xd, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x2000, 0x3}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) socket$inet(0x2, 0x3, 0x4) socket$kcm(0x11, 0x20000000000000a, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 9.186799806s ago: executing program 0 (id=3670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x717, 0x70bd27, 0x25dfdbff, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x2800, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000094}, 0x20040000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 8.85011564s ago: executing program 0 (id=3673): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.09418838s ago: executing program 5 (id=3678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000001100)={0x1, 0x200, 0xfffffff8}) 6.611330718s ago: executing program 0 (id=3686): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x53}}], 0x2, 0x0) 6.285050761s ago: executing program 0 (id=3689): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) read$proc_mixer(r0, &(0x7f0000000040)=""/9, 0x9) listen(r6, 0x0) r7 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xaa44, 0x13900, 0x0, 0x8}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$KDGETLED(r0, 0x4b31, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01"], 0xec}}, 0x0) 5.7930827s ago: executing program 5 (id=3691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000400)={0xc0, 0x10, [0x5, 0x3, 0x0, 0x2], &(0x7f0000000140)=[0x0, 0x0]}) sendmmsg$inet6(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000000c0)="10", 0x1}], 0x1}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x5, 0x0, [{0x1, 0x31, &(0x7f0000000000)=""/49}, {0x2000, 0x62, &(0x7f0000000200)=""/98}, {0x6000, 0x5f, &(0x7f0000000280)=""/95}, {0x1b3ba2000, 0xcf, &(0x7f0000000300)=""/207}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r3 = openat$fuse(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002200), 0x1, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x80000, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r6, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$video4linux(&(0x7f0000000240), 0x8a85, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x9, 0x101c, 0x9, 0x4, 0x2, 0x0, 0xe7}}) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000004, 0x24b, 0x10001, 0x9}) flock(0xffffffffffffffff, 0xc) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, 0x0) syz_io_uring_complete(r7) write$proc_mixer(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="3849624954414c330a56499d454f20274361707475726520566f6c756d65272030301e9dbd220f3030303030303030303030303030323030300a"], 0x35) 5.347082702s ago: executing program 5 (id=3694): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00010000140000000000001c"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.342140894s ago: executing program 9 (id=3695): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) readv(r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x8) 5.005147893s ago: executing program 9 (id=3696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.767192012s ago: executing program 5 (id=3697): io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="c7", 0x1}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d3580", 0xf}, {&(0x7f0000000780)="4a5aa24ba81ba7757188aaa8afca3424d1946bbbd38bd4133101952e0d4df0192a2380cf1eb0825ffc5927cdb324afa64fde9c0fb172d0b3742418ae29d7e46fe01253669ce063d6a0efcd062166ce62e0a1f22289cc7694699f1905373cb2f2a690d697493e97453eab363e4468b041efaa3a952e893157ed1ffdd63b73a0d08d07ee983eb82c6ce12dde6739a68d88b09be48b42ded943287be822827d88b7007056086daed01f020a", 0xaa}, {&(0x7f0000002880)="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", 0x37d}], 0x5, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x300}]) syz_clone3(&(0x7f0000000280)={0x68080000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvfrom$unix(r3, &(0x7f0000000300)=""/225, 0xe1, 0x10000, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) 3.68696024s ago: executing program 4 (id=3700): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r1, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @multicast1}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000300)={r3, r4, 0x0, 0x6a48, 0x4}) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000000)={r8, 0xd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8, 0xfffffff9}, &(0x7f0000000040)=0x8) 3.255413006s ago: executing program 5 (id=3701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000001100)={0x1, 0x200, 0xfffffff8}) 3.136903921s ago: executing program 4 (id=3702): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="eea1", 0x2}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) (async) readv(r6, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01e934bd6ede9e45c4d4aca37000fddb"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x64, 0x63, 0x0, 0x0, 0x0, 0x0, 0x39, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x1d) (async) r12 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0xcf) (async) close_range(r8, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xe, 0x1, 0x2, [0x437a, 0xffffffff]}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.083919135s ago: executing program 2 (id=3703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {0x0}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x23c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff1b9d, @mcast2, 0x10000}}}}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x48, 0x3, "5ad0c90ebf2a6582ac80bd23caf83d501e3a2d6b72cf7e2c7d1b1c6260cbb1570b09c439e6aae1a39e71da179b1bc529b4433334f00ec723af6cd41cebb552c12c568da6"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d2d6dab880c4a440bb082c79758b032882712b5ab6870688a4e87244cd01cf"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x670cecb6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "886d3958fa487ff788b72fdaeeaf1e7fe613fdfa3e4bfe477f879faa134d86a1457c19"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) 2.97111331s ago: executing program 0 (id=3704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0009012ee7e966"], 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = dup(r2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0x10000000006, 0xffff1000, 0x0, r5}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r7, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000200)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES32], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0009012ee7e966"], 0x0, 0x0, 0x0, 0x0}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) dup(r2) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0x10000000006, 0xffff1000, 0x0, r5}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_buf(r7, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) bind$can_raw(r8, &(0x7f0000000200)={0x1d, r9}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) (async) 2.657157939s ago: executing program 2 (id=3705): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 2.518870626s ago: executing program 4 (id=3706): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) readv(r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x8) 2.344222506s ago: executing program 2 (id=3707): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x21, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) mknod(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x81f) r2 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 2.249425316s ago: executing program 4 (id=3708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x1, [0x80000000000]}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0xfdb2, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004850}, 0x48010) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) openat$ptp0(0xffffff9c, &(0x7f00000016c0), 0x513700, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@loopback}, 0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) syz_clone3(&(0x7f00000005c0)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0, {0x3e}, &(0x7f00000004c0)=""/12, 0xc, &(0x7f0000000500)=""/96, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4, {r4}}, 0x58) sched_setaffinity(r7, 0x8, &(0x7f0000001680)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={r6, r8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) r9 = openat$cuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000680)={{r9}, "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"}) close_range(r2, 0xffffffffffffffff, 0xdd) 2.134014893s ago: executing program 9 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x40}}, 0x0) 2.02327768s ago: executing program 2 (id=3710): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)="27ddff00140007ebf731000080f7120f0a00110001000000009d2fc712c06f0000008a151f75080039500595204dddf2248b92bc370cf790bbb376ab660cfce900bd8dc6de", 0x45) writev(r1, &(0x7f0000000000), 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc) 1.743291197s ago: executing program 9 (id=3711): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountstats\x00') exit(0x3) preadv(r1, &(0x7f0000003800)=[{&(0x7f0000002800)=""/4096, 0x1000}], 0x1, 0xfffffff7, 0xffba) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x60}}, 0x0) 1.704076529s ago: executing program 4 (id=3712): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000040)=0xd, 0x8, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @private}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000001400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x100000, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, '\x00\x00\x00\x00\x00jcy', "cb83a84cbae76006000000192b90d142", '\f_\x00', '<\a\x00'}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000009, 0x20010, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r3, 0x1) madvise(&(0x7f0000447000/0x3000)=nil, 0x3000, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r7, 0x80044dfd, &(0x7f0000000040)) 1.12327301s ago: executing program 5 (id=3713): r0 = fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) gettid() r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000200)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000140)='s(\x00', 0x40, 0x21, &(0x7f00000001c0)={0x6, 0x7ff, 0xa4b, 0xaa}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80100", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00', @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="740001801400020076657468305f746f5f6261746164760008", @ANYRES32=r6, @ANYBLOB="1400020064766d727031000000000000000000000800030001000000080003000200000008000300030000001400020064756d6d7930000000000000000000001400020076657468315f766c616e0000000000006400", @ANYRES32=r6, @ANYBLOB="08200100f0320687d2b9b0866ab25de940583726551fa9e08fd54e88581d0049391f3e65bf4455b8219829", @ANYRES32=r6, @ANYBLOB="140002007663616e300000000000000000000000080003000500000008000100", @ANYRES32=r6, @ANYBLOB="080001", @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c1) r8 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r8, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000180)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) 966.837329ms ago: executing program 4 (id=3714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000f4c20ef5b3551e000000000a00000a20000000020a010300000000000000000200000a0c0004400000000000000004140000001100010000000000000000000f00000a"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x4040) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7f, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0xe23d}, 0xa9, 0x5, 0x19b0}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004801}, 0x44080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f0000000040)={0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@delchain={0x24, 0x65, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x10, 0x9}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="e00fb17acf", 0x5}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlockall(0x6) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r11, 0xae9a) 658.780395ms ago: executing program 9 (id=3715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {0x0}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x23c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff1b9d, @mcast2, 0x10000}}}}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x48, 0x3, "5ad0c90ebf2a6582ac80bd23caf83d501e3a2d6b72cf7e2c7d1b1c6260cbb1570b09c439e6aae1a39e71da179b1bc529b4433334f00ec723af6cd41cebb552c12c568da6"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d2d6dab880c4a440bb082c79758b032882712b5ab6870688a4e87244cd01cf"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x670cecb6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "886d3958fa487ff788b72fdaeeaf1e7fe613fdfa3e4bfe477f879faa134d86a1457c19"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) 503.355467ms ago: executing program 0 (id=3716): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="22001000", @ANYRES16=r2, @ANYBLOB="cf0400000000fedbdf251300000008000300", @ANYRES32=r3, @ANYBLOB="0400130008001400", @ANYRES32=r3, @ANYBLOB="060012000300000006001000c00000000500190000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x8010, r6, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0xc, 0x2000, 0x15199, {0x0, r9}}) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4) 495.240678ms ago: executing program 9 (id=3717): r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0xffff84df, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "8b5d92b27abf1ca08736186ed37d549dbfc3691ec2aa55be5c67b16e00063e342bdf6ce2208d212a5f719bcfd0e81681864328a15ddc61b34da0f9007ee435f193a13a1a884ffd99547cd256559837e4203b1c69d9eaed6d8964a66d2e304c16b23dce7c17e2d9ad79fd50a10be5f82203e6e5ed280524c80d2177b42fb566a5f1fa86b2241b161d3dcb73b2b6c1c7cf7d873cd654db1c6fe576115f9383d7f8fa1f691b04e231ed2cd07335166cc1a27a2a1f64657db9fe3d156b304f44238fdaafae016234549a027f2617c7bfa22ee254c6f63be8109993837d1b18eaae58ad6994219690d819a71552e3f027449fc6aecd6403467495d5784f704964c31c"}]}}]}, 0x148}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100036f0e2408c4108a8198f00102030109021b00010807109509047901010300000909050303"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 291.557848ms ago: executing program 2 (id=3718): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) readv(r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x8) 0s ago: executing program 2 (id=3719): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0xb4b5, 0x800, 0x3, 0x1}, &(0x7f0000000300), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0xcc, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, [0xffffffff], [], 'pimreg0\x00', 'sit0\x00', {}, {0xff}, 0x3c, 0x6}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x952, 0x9, 0x1}}}, {{@uncond, 0x0, 0xdc, 0x11c, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xfffffffffffffffc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "98133ee53ea43f801a3687bed58fd453ac8021adcc4e0385a1700bbcd59d"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x30c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) recvmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/229, 0xe5}, {0x0}], 0x2}, 0x9}], 0x1, 0x100, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0xff09, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="20291e20603bfe18e067719fc6fe4c1c2bc5f8681566da8f0a4143b6773c6a302e21bb3778f786d489828fa56cb7cf079c9529cf76bddc13bb0fed05d6cb1d61e62e8b36d9fae9a52c2a3873a45f327e24ef3b01a13058de2461330056f9793ef53bfcadbe8fe6b47697071a27c0e65d795e8f26631ce4ee54e9a3321e7de095c2e2f9bc0b0591fe79653d3aa6b78c0c24ef81b713e4e3a0732a12489b7a2fec23c188f2039eb9e18528ce3cdaca0d3251806a3cbc25a43c74bf9fdf386a69222c3811b3e1d0", 0xc6}, {&(0x7f0000000000)="67e1eb5942826fe08fe25a", 0xb}, {&(0x7f0000000740)="70c3ff18570f20afafe9b04d0d0278d5aee5ba3026c4097e04804ef101006edcb1ce686ff9545898def959bf5ba82e753c5edd252879d0e3830101f5289c90f7400ce9f5cc62647cdbdc5102284da95dc5c752801e08f08b980f0dc45e86bfe0e875c4039f5cd6f8c4e79fd2553fc5637ecb7a0149b6d11ee3b023cb829b0a343bbd2415986331205a38b37cc79c1371e7e967efce5c06be12cdd0eaf5b4b48ff06c0d6cd791408a0b68ec87cf8265690da1eae1b5e4908d78d885f9ee787162f7140240f2be379e58cadb538fbf4608f3f44a39365f18bcc2681e0a6f1e57", 0xdf}, {&(0x7f0000000340)="7395c42373b9922470c382ae2835ac386237e244e9ca6ea3848ad78debf9bc3f1d1cb524fe92f4ab0aa46cf90a9aa490f0e92b07bd7cf61b4cd5975fe512645d22902a46998f458c30516cdfc6dc02732af37ab98d4092af25566da308a0593ec4aec378c8f398cf7b0290a98895fec5c60f0bab6bd19f90c86c56dbe65f6f98cc1377789f6ad3b27f21e6ac0ea43be64058d79644eb107296eca2472dbb1d4beca3206a160c1dfb918a3d2261088157e8e90d017898faea43f5c07e1350dc", 0xbf}, {&(0x7f0000000b80)="ab06d5fe45e75653799b216c5ff808a295a608fe671e23fb74d55930876f88196debbd8a771e04af31611cd0947639f27cf35f67f737ef3c868f15408131ea8636e31da7a277dfb5128a46182c0738d125eb868f9d81795a66b5cca51641fb44309f4fee5c6d1de9c81133a285c8640d9d6d37e375951e34b6b49585c990b3b2721d0b5b36d8a075", 0x88}], 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x7dd}) kernel console output (not intermixed with test programs): ed+0x10/0x10 [ 966.599400][T19626] ? fs_reclaim_acquire+0x7d/0x100 [ 966.599446][T19626] should_fail_ex+0x414/0x560 [ 966.599472][T19626] should_failslab+0xa8/0x100 [ 966.599502][T19626] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 966.599528][T19626] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 966.599547][T19626] ? __alloc_skb+0x112/0x2d0 [ 966.599578][T19626] __alloc_skb+0x112/0x2d0 [ 966.599608][T19626] rtmsg_ifinfo_build_skb+0x84/0x260 [ 966.599649][T19626] rtnetlink_event+0x1b7/0x270 [ 966.599676][T19626] notifier_call_chain+0x1b3/0x3e0 [ 966.599706][T19626] netif_set_mac_address+0x37c/0x4c0 [ 966.599740][T19626] ? __pfx_netif_set_mac_address+0x10/0x10 [ 966.599769][T19626] ? down_write+0x162/0x1f0 [ 966.599798][T19626] ? rcu_is_watching+0x15/0xb0 [ 966.599830][T19626] ? trace_kmalloc+0x1f/0xd0 [ 966.599853][T19626] ? do_setlink+0x8ee/0x40d0 [ 966.599883][T19626] do_setlink+0x908/0x40d0 [ 966.599925][T19626] ? __pfx_do_setlink+0x10/0x10 [ 966.599954][T19626] ? __lock_acquire+0xaac/0xd20 [ 966.599989][T19626] ? __mutex_trylock_common+0x153/0x260 [ 966.600014][T19626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 966.600041][T19626] ? rcu_is_watching+0x15/0xb0 [ 966.600072][T19626] ? trace_contention_end+0x39/0x120 [ 966.600094][T19626] ? __mutex_lock+0x330/0xe80 [ 966.600123][T19626] ? __pfx_aa_get_newest_label+0x10/0x10 [ 966.600150][T19626] ? rtnl_newlink+0x8db/0x1c70 [ 966.600171][T19626] ? rcu_is_watching+0x15/0xb0 [ 966.600202][T19626] ? __pfx___mutex_lock+0x10/0x10 [ 966.600234][T19626] ? full_name_hash+0x92/0xe0 [ 966.600268][T19626] ? netdev_name_node_lookup+0xdf/0x120 [ 966.600306][T19626] rtnl_newlink+0x160b/0x1c70 [ 966.600327][T19626] ? kasan_save_track+0x3e/0x80 [ 966.600360][T19626] ? __pfx_rtnl_newlink+0x10/0x10 [ 966.600415][T19626] ? kasan_quarantine_put+0xdd/0x220 [ 966.600446][T19626] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.600477][T19626] ? nlmon_xmit+0xb0/0x100 [ 966.600502][T19626] ? kmem_cache_free+0x192/0x3f0 [ 966.600535][T19626] ? __local_bh_enable_ip+0x12d/0x1c0 [ 966.600569][T19626] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.600595][T19626] ? __local_bh_enable_ip+0x12d/0x1c0 [ 966.600626][T19626] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 966.600667][T19626] ? aa_get_newest_label+0xf7/0x5d0 [ 966.600693][T19626] ? __lock_acquire+0xaac/0xd20 [ 966.600746][T19626] ? __pfx_rtnl_newlink+0x10/0x10 [ 966.600768][T19626] rtnetlink_rcv_msg+0x7cc/0xb70 [ 966.600796][T19626] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 966.600817][T19626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 966.600846][T19626] ? ref_tracker_free+0x63a/0x7d0 [ 966.600866][T19626] ? __copy_skb_header+0xa7/0x550 [ 966.600904][T19626] netlink_rcv_skb+0x219/0x490 [ 966.600929][T19626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 966.600954][T19626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 966.601000][T19626] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.601023][T19626] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.601053][T19626] netlink_unicast+0x758/0x8d0 [ 966.601086][T19626] netlink_sendmsg+0x805/0xb30 [ 966.601122][T19626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.601149][T19626] ? __import_iovec+0x5d4/0x7f0 [ 966.601175][T19626] ? aa_sock_msg_perm+0x94/0x160 [ 966.601198][T19626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 966.601222][T19626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.601247][T19626] __sock_sendmsg+0x219/0x270 [ 966.601272][T19626] ____sys_sendmsg+0x505/0x830 [ 966.601307][T19626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.601353][T19626] ___sys_sendmsg+0x21f/0x2a0 [ 966.601383][T19626] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.601459][T19626] ? __fget_files+0x2a/0x420 [ 966.601485][T19626] ? __fget_files+0x3a0/0x420 [ 966.601523][T19626] __sys_sendmsg+0x164/0x220 [ 966.601555][T19626] ? __pfx___sys_sendmsg+0x10/0x10 [ 966.601599][T19626] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 966.601625][T19626] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.601652][T19626] __do_fast_syscall_32+0xb4/0x110 [ 966.601681][T19626] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.601710][T19626] do_fast_syscall_32+0x34/0x80 [ 966.601737][T19626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.601762][T19626] RIP: 0023:0xf7f31539 [ 966.601780][T19626] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 966.601799][T19626] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 966.601822][T19626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 966.601838][T19626] RDX: 0000000000008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.601850][T19626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.601863][T19626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 966.601876][T19626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.601907][T19626] [ 966.604972][ T5879] usb 10-1: config 220 has no interface number 2 [ 967.158138][ T5883] usb 1-1: USB disconnect, device number 68 [ 967.173877][ T5883] mcba_usb 1-1:0.0 can0: device disconnected [ 967.236096][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.316837][T14674] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 967.324359][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 967.336303][T14674] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.348794][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.360554][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.426742][T14674] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 967.434289][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 967.452072][T14674] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.464809][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.480386][T14674] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.550881][T14674] usb 3-1: string descriptor 0 read error: -22 [ 967.558346][T14674] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 967.572740][T14674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.605811][T18134] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 967.667452][ T5879] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 967.715607][ T5879] usb 10-1: config 220 interface 0 has no altsetting 0 [ 967.726925][T14674] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 967.754858][ T5879] usb 10-1: config 220 interface 76 has no altsetting 0 [ 967.775062][ T5879] usb 10-1: config 220 interface 1 has no altsetting 0 [ 967.788747][T18134] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.831971][ T5879] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 967.851582][T18134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.862182][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.902688][ T5879] usb 10-1: Product: syz [ 967.914516][T19638] FAULT_INJECTION: forcing a failure. [ 967.914516][T19638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.942698][ T5879] usb 10-1: Manufacturer: syz [ 967.945501][T18134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 967.996616][ T5879] usb 10-1: SerialNumber: syz [ 968.005847][T18134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 968.023575][T19638] CPU: 0 UID: 0 PID: 19638 Comm: syz.3.3513 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 968.023606][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 968.023619][T19638] Call Trace: [ 968.023628][T19638] [ 968.023637][T19638] dump_stack_lvl+0x189/0x250 [ 968.023678][T19638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.023709][T19638] ? __pfx__printk+0x10/0x10 [ 968.023743][T19638] should_fail_ex+0x414/0x560 [ 968.023769][T19638] _copy_to_user+0x31/0xb0 [ 968.023798][T19638] do_pagemap_cmd+0xb06/0xbb0 [ 968.023833][T19638] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 968.023878][T19638] ? __fget_files+0x2a/0x420 [ 968.023910][T19638] ? __fget_files+0x3a0/0x420 [ 968.023936][T19638] ? __fget_files+0x2a/0x420 [ 968.023965][T19638] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 968.023999][T19638] __ia32_compat_sys_ioctl+0x551/0x840 [ 968.024025][T19638] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 968.024047][T19638] ? __fget_files+0x3a0/0x420 [ 968.024080][T19638] ? fput+0xa0/0xd0 [ 968.024111][T19638] ? ksys_write+0x1f0/0x250 [ 968.024132][T19638] ? rcu_is_watching+0x15/0xb0 [ 968.024171][T19638] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 968.024199][T19638] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.024226][T19638] __do_fast_syscall_32+0xb4/0x110 [ 968.024252][T19638] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.024281][T19638] do_fast_syscall_32+0x34/0x80 [ 968.024308][T19638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.024333][T19638] RIP: 0023:0xf7f31539 [ 968.024363][T19638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 968.024382][T19638] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 968.024404][T19638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0606610 [ 968.024419][T19638] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.024432][T19638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.024445][T19638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 968.024458][T19638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.024488][T19638] [ 968.280731][T19641] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 968.302498][ T918] usb 3-1: USB disconnect, device number 37 [ 968.311045][T18134] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.323957][T18134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.338221][T18134] usb 6-1: config 0 descriptor?? [ 968.530408][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 968.530453][ T30] audit: type=1326 audit(1747003467.180:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 968.564738][ T30] audit: type=1326 audit(1747003467.180:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 968.679272][ T30] audit: type=1326 audit(1747003467.180:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 968.766711][ T30] audit: type=1326 audit(1747003467.180:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.067976][T18134] usbhid 6-1:0.0: can't add hid device: -71 [ 969.078682][T18134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 969.098048][ T30] audit: type=1326 audit(1747003467.210:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.131984][T18134] usb 6-1: USB disconnect, device number 28 [ 969.232335][ T30] audit: type=1326 audit(1747003467.220:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.241270][ T5879] uvcvideo 10-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 969.287740][ T5879] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 969.294964][ T5879] usb 10-1: No valid video chain found. [ 969.311891][ T5879] usb 10-1: selecting invalid altsetting 0 [ 969.344404][ T30] audit: type=1326 audit(1747003467.270:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.372496][ T30] audit: type=1326 audit(1747003467.270:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.420155][ T30] audit: type=1326 audit(1747003467.270:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.479870][ T5879] usb 10-1: selecting invalid altsetting 0 [ 969.493912][ T5879] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 969.504813][ T30] audit: type=1326 audit(1747003467.270:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz.9.3507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 969.558938][ T5879] usb 10-1: USB disconnect, device number 13 [ 970.450300][T19682] ipvlan2: entered allmulticast mode [ 970.474082][T19682] macvlan0: entered allmulticast mode [ 970.484248][T19682] veth1_vlan: entered allmulticast mode [ 970.491041][T19685] netlink: 'syz.5.3526': attribute type 4 has an invalid length. [ 971.096272][ T5879] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 971.126487][ T5915] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 971.304281][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 971.356319][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 971.368389][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 971.374812][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 971.392494][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 971.414417][ T5879] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 971.424769][ T5915] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 971.434798][ T5915] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 971.450906][ T5915] usb 10-1: config 0 interface 0 has no altsetting 0 [ 971.461124][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.514616][ T5915] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 971.525365][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.535232][ T5915] usb 10-1: Product: syz [ 971.545017][ T5915] usb 10-1: Manufacturer: syz [ 971.553063][ T5879] usb 6-1: config 0 descriptor?? [ 971.559019][ T5915] usb 10-1: SerialNumber: syz [ 971.581150][ T5915] usb 10-1: config 0 descriptor?? [ 972.072081][T14674] usb 10-1: USB disconnect, device number 14 [ 972.216730][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 972.222888][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 972.278093][ T5879] usb 6-1: USB disconnect, device number 29 [ 972.740779][T19727] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3536'. [ 973.296073][ T5883] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 973.485589][ T5883] usb 10-1: device descriptor read/64, error -71 [ 973.574400][T19751] @: renamed from vlan0 (while UP) [ 973.580480][T14674] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 973.745544][ T5883] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 973.786602][T14674] usb 1-1: Using ep0 maxpacket: 32 [ 973.823997][T14674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 32609, setting to 64 [ 973.857851][T14674] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 973.876231][T14674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.894342][T14674] usb 1-1: Product: syz [ 973.955731][ T5883] usb 10-1: device descriptor read/64, error -71 [ 974.020187][T14674] usb 1-1: Manufacturer: syz [ 974.056131][T14674] usb 1-1: SerialNumber: syz [ 974.084183][T14674] usb 1-1: config 0 descriptor?? [ 974.120218][T14674] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 974.185355][ T5883] usb usb10-port1: attempt power cycle [ 974.346133][ T5915] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 974.506575][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 974.514405][ T5915] usb 3-1: config 127 has an invalid interface number: 254 but max is 0 [ 974.530998][ T5915] usb 3-1: config 127 has no interface number 0 [ 974.556569][ T5915] usb 3-1: config 127 interface 254 has no altsetting 0 [ 974.567953][ T5915] usb 3-1: New USB device found, idVendor=05d1, idProduct=1001, bcdDevice=85.35 [ 974.588519][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.597872][ T5915] usb 3-1: Product: syz [ 974.602078][ T5915] usb 3-1: Manufacturer: syz [ 974.607607][ T5915] usb 3-1: SerialNumber: syz [ 974.642053][ T5915] ftdi_sio 3-1:127.254: FTDI USB Serial Device converter detected [ 974.672941][ T5915] ftdi_sio ttyUSB0: unknown device type: 0x8535 [ 974.695815][ T5883] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 974.736775][ T5883] usb 10-1: device descriptor read/8, error -71 [ 974.972687][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 974.972715][ T30] audit: type=1326 audit(1747003473.610:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.028350][ T30] audit: type=1326 audit(1747003473.610:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.072152][ T30] audit: type=1326 audit(1747003473.610:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.094851][ T5883] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 975.113046][ T30] audit: type=1326 audit(1747003473.610:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.147336][ T5883] usb 10-1: device descriptor read/8, error -71 [ 975.168506][ T30] audit: type=1326 audit(1747003473.610:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.196898][ T30] audit: type=1326 audit(1747003473.620:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.228626][ T36] usb 1-1: Failed to submit usb control message: -110 [ 975.239997][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.270640][ T36] usb 1-1: unable to send the bmi data to the device: -110 [ 975.279105][ T5883] usb usb10-port1: unable to enumerate USB device [ 975.296679][ T30] audit: type=1326 audit(1747003473.620:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.326705][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.337362][ T36] usb 1-1: unable to get target info from device [ 975.366479][ T36] usb 1-1: could not get target info (-110) [ 975.374002][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.386449][ T36] usb 1-1: could not probe fw (-110) [ 975.393180][ T30] audit: type=1326 audit(1747003473.620:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.398894][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.423403][ T30] audit: type=1326 audit(1747003473.620:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.446638][ T30] audit: type=1326 audit(1747003473.620:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 975.985746][ T5879] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 976.119549][T19788] FAULT_INJECTION: forcing a failure. [ 976.119549][T19788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.134156][T19788] CPU: 0 UID: 0 PID: 19788 Comm: syz.9.3547 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 976.134185][T19788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.134198][T19788] Call Trace: [ 976.134207][T19788] [ 976.134216][T19788] dump_stack_lvl+0x189/0x250 [ 976.134249][T19788] ? __lock_acquire+0xaac/0xd20 [ 976.134281][T19788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.134309][T19788] ? __pfx__printk+0x10/0x10 [ 976.134329][T19788] ? __might_fault+0xb0/0x130 [ 976.134365][T19788] should_fail_ex+0x414/0x560 [ 976.134390][T19788] _copy_from_user+0x2d/0xb0 [ 976.134437][T19788] get_compat_msghdr+0xad/0x4a0 [ 976.134469][T19788] ? __pfx_get_compat_msghdr+0x10/0x10 [ 976.134496][T19788] ? rcu_is_watching+0x15/0xb0 [ 976.134526][T19788] ? ___sys_recvmsg+0x1c4/0x510 [ 976.134561][T19788] ___sys_recvmsg+0x17f/0x510 [ 976.134595][T19788] ? __pfx____sys_recvmsg+0x10/0x10 [ 976.134649][T19788] ? __fget_files+0x3a0/0x420 [ 976.134687][T19788] do_recvmmsg+0x36a/0x760 [ 976.134733][T19788] ? __pfx_do_recvmmsg+0x10/0x10 [ 976.134775][T19788] ? __pfx_vfs_write+0x10/0x10 [ 976.134814][T19788] __sys_recvmmsg+0x19d/0x280 [ 976.134846][T19788] ? __pfx___sys_recvmmsg+0x10/0x10 [ 976.134872][T19788] ? ksys_write+0x1f0/0x250 [ 976.134905][T19788] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 976.134934][T19788] __do_fast_syscall_32+0xb4/0x110 [ 976.134962][T19788] ? lockdep_hardirqs_on+0x9c/0x150 [ 976.134992][T19788] do_fast_syscall_32+0x34/0x80 [ 976.135017][T19788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 976.135042][T19788] RIP: 0023:0xf70be539 [ 976.135059][T19788] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 976.135077][T19788] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 976.135102][T19788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 976.135117][T19788] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 976.135130][T19788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 976.135143][T19788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 976.135155][T19788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.135184][T19788] [ 976.373760][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 976.415228][ T5879] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 976.426368][ T5879] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 976.456299][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 976.514090][ T5879] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 976.534089][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.578270][ T5879] usb 6-1: Product: syz [ 976.605350][ T5879] usb 6-1: Manufacturer: syz [ 976.628895][ T5879] usb 6-1: SerialNumber: syz [ 976.655003][ T5879] usb 6-1: config 0 descriptor?? [ 976.794156][T14674] usb 1-1: USB disconnect, device number 69 [ 976.960113][T19800] netlink: 'syz.0.3549': attribute type 4 has an invalid length. [ 976.991329][T19800] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3549'. [ 977.152898][T18146] usb 3-1: USB disconnect, device number 38 [ 977.191508][T18146] ftdi_sio 3-1:127.254: device disconnected [ 977.486363][T14674] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 977.666861][T14674] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 977.694959][ T3468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.710638][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 977.735722][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 977.771572][T14674] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 977.787509][T14674] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 977.824530][T14674] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.877595][T14674] usb 10-1: config 0 descriptor?? [ 977.951939][ T3468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.109322][ T3468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.273253][ T3468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.516490][T14674] usbhid 10-1:0.0: can't add hid device: -71 [ 978.522755][T14674] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 978.587992][T14674] usb 10-1: USB disconnect, device number 19 [ 978.733972][T18146] usb 6-1: USB disconnect, device number 30 [ 978.736810][ T3468] bridge_slave_1: left allmulticast mode [ 978.766157][ T3468] bridge_slave_1: left promiscuous mode [ 978.776448][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.836755][ T3468] bridge_slave_0: left allmulticast mode [ 978.842576][ T3468] bridge_slave_0: left promiscuous mode [ 978.867532][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.419849][T17374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 979.430663][T17374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 979.445674][T17374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 979.461379][T17374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 979.476652][T17374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 979.617117][T18146] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 979.795536][T18146] usb 10-1: Using ep0 maxpacket: 16 [ 979.807702][T18146] usb 10-1: config 8 has an invalid interface number: 39 but max is 0 [ 979.835703][T18146] usb 10-1: config 8 has no interface number 0 [ 979.846141][T18146] usb 10-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 979.917442][T18146] usb 10-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 979.928108][T18146] usb 10-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 979.946319][T18146] usb 10-1: config 8 interface 39 has no altsetting 0 [ 979.998542][T18146] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 980.032094][T18146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.048273][T18146] usb 10-1: Product: syz [ 980.052759][T18146] usb 10-1: Manufacturer: syz [ 980.057978][T18146] usb 10-1: SerialNumber: syz [ 980.468091][ T3468] team0: Port device bridge1 removed [ 980.703358][T19841] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 980.773892][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.794185][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.806909][ T3468] bond0 (unregistering): Released all slaves [ 980.870571][T19841] ipvlan3: entered allmulticast mode [ 980.987663][T18146] ipheth 10-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 981.203846][T18146] ipheth 10-1:8.39: Apple iPhone USB Ethernet device attached [ 981.248496][T18146] usb 10-1: USB disconnect, device number 20 [ 981.547128][T17374] Bluetooth: hci3: command tx timeout [ 981.577768][T18146] ipheth 10-1:8.39: Apple iPhone USB Ethernet now disconnected [ 981.636754][ T3468] hsr_slave_0: left promiscuous mode [ 981.709242][ T3468] hsr_slave_1: left promiscuous mode [ 981.740852][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.774945][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.820030][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.829577][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.870948][ T3468] veth1_macvtap: left promiscuous mode [ 981.887417][ T3468] veth0_macvtap: left promiscuous mode [ 981.893301][ T3468] veth1_vlan: left promiscuous mode [ 981.906286][ T3468] veth0_vlan: left promiscuous mode [ 981.925589][T18146] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 982.085607][T18146] usb 10-1: Using ep0 maxpacket: 16 [ 982.093198][T18146] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 982.113231][T18146] usb 10-1: config 0 has no interface number 0 [ 982.141949][T18146] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 982.152316][T18146] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 982.162863][T18146] usb 10-1: config 0 interface 41 has no altsetting 0 [ 982.172539][T18146] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 982.182022][T18146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.190758][T18146] usb 10-1: Product: syz [ 982.195053][T18146] usb 10-1: Manufacturer: syz [ 982.200070][T18146] usb 10-1: SerialNumber: syz [ 982.218059][T18146] usb 10-1: config 0 descriptor?? [ 982.231271][T19868] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 982.239130][T19868] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 982.516254][T18146] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 982.536231][T18146] usb 10-1: USB disconnect, device number 21 [ 982.891604][ T3468] team0 (unregistering): Port device team_slave_1 removed [ 982.958133][ T3468] team0 (unregistering): Port device team_slave_0 removed [ 983.640856][T17374] Bluetooth: hci3: command tx timeout [ 983.643554][ T918] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 983.836647][ T918] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.880925][ T918] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.894593][ T918] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 983.920686][ T918] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 983.952009][ T918] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 983.961535][ T918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.998484][ T918] usb 10-1: config 0 descriptor?? [ 984.105508][T16328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 984.123500][T16328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 984.131886][T16328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 984.145336][T16328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 984.158411][T16328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 984.365168][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3569'. [ 984.380507][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3569'. [ 984.479059][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'. [ 984.572185][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'. [ 984.639890][ T918] usbhid 10-1:0.0: can't add hid device: -71 [ 984.648739][ T918] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 984.685837][ T918] usb 10-1: USB disconnect, device number 22 [ 984.869325][T19895] chnl_net:caif_netlink_parms(): no params data found [ 985.012596][T19844] chnl_net:caif_netlink_parms(): no params data found [ 985.374577][ T3468] IPVS: stop unused estimator thread 0... [ 985.526685][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.534155][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.542273][T19895] bridge_slave_0: entered allmulticast mode [ 985.552655][T19895] bridge_slave_0: entered promiscuous mode [ 985.580044][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.595819][T19895] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.604542][T19895] bridge_slave_1: entered allmulticast mode [ 985.627694][T19895] bridge_slave_1: entered promiscuous mode [ 985.707297][T16328] Bluetooth: hci3: command tx timeout [ 985.891246][T19844] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.939724][T19844] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.965827][T19844] bridge_slave_0: entered allmulticast mode [ 985.980456][T19844] bridge_slave_0: entered promiscuous mode [ 985.994911][T19895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.045973][T18134] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 986.119816][ T3468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.173849][T19844] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.194324][T19844] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.211575][T18134] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 986.228561][T18134] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.251563][T19844] bridge_slave_1: entered allmulticast mode [ 986.266385][T16328] Bluetooth: hci7: command tx timeout [ 986.296581][T19844] bridge_slave_1: entered promiscuous mode [ 986.303140][T18134] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 986.314501][T17374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.328255][T17374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.336831][ T5883] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 986.338139][T17374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.355081][T17374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.370102][T18134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.394803][T17374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.408341][T19895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.426188][T18134] usb 6-1: config 0 descriptor?? [ 986.506757][ T3468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.552089][ T5883] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 986.575711][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.583983][ T5883] usb 10-1: Product: syz [ 986.602747][ T5883] usb 10-1: Manufacturer: syz [ 986.641406][ T5883] usb 10-1: SerialNumber: syz [ 986.667260][ T5883] usb 10-1: config 0 descriptor?? [ 986.704915][ T5883] ch341 10-1:0.0: ch341-uart converter detected [ 986.794022][T19895] team0: Port device team_slave_0 added [ 986.866221][ T3468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.902930][T19844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.937690][T19895] team0: Port device team_slave_1 added [ 987.012021][T19844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.056283][T18134] usb 6-1: string descriptor 0 read error: -71 [ 987.166358][T18134] usb 6-1: USB disconnect, device number 31 [ 987.318428][T19895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.344769][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.382665][T19895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.510935][ T3468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.709040][T19895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.716995][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.767379][T19895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.786070][T17374] Bluetooth: hci3: command tx timeout [ 987.927874][T19844] team0: Port device team_slave_0 added [ 988.117019][T19844] team0: Port device team_slave_1 added [ 988.345883][T17374] Bluetooth: hci7: command tx timeout [ 988.371272][T19895] hsr_slave_0: entered promiscuous mode [ 988.397246][T19895] hsr_slave_1: entered promiscuous mode [ 988.406640][T19895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.444469][T19895] Cannot create hsr debugfs directory [ 988.507140][T17374] Bluetooth: hci0: command tx timeout [ 988.513537][ T5883] usb 10-1: failed to send control message: -110 [ 988.549309][ T5883] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 988.699429][T19844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.723777][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.786169][T19844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.822297][T19844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.846264][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.936188][T19844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.283464][T19844] hsr_slave_0: entered promiscuous mode [ 989.311591][T19844] hsr_slave_1: entered promiscuous mode [ 989.326671][T19844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.334305][T19844] Cannot create hsr debugfs directory [ 989.597224][T16328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 989.615157][T16328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 989.634667][T16328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 989.644981][T16328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 989.653930][T16328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 989.789410][ T3468] bridge_slave_1: left allmulticast mode [ 989.796345][ T3468] bridge_slave_1: left promiscuous mode [ 989.803385][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.824146][ T3468] bridge_slave_0: left allmulticast mode [ 989.830450][ T3468] bridge_slave_0: left promiscuous mode [ 989.836734][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.333667][ T5915] usb 10-1: USB disconnect, device number 23 [ 990.358781][ T5915] ch341 10-1:0.0: device disconnected [ 990.425857][T17374] Bluetooth: hci7: command tx timeout [ 990.596906][T17374] Bluetooth: hci0: command tx timeout [ 990.728725][T20001] FAULT_INJECTION: forcing a failure. [ 990.728725][T20001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.747349][T20001] CPU: 0 UID: 0 PID: 20001 Comm: syz.9.3577 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 990.747377][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.747388][T20001] Call Trace: [ 990.747396][T20001] [ 990.747404][T20001] dump_stack_lvl+0x189/0x250 [ 990.747447][T20001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.747472][T20001] ? __pfx__printk+0x10/0x10 [ 990.747501][T20001] should_fail_ex+0x414/0x560 [ 990.747523][T20001] _copy_to_user+0x31/0xb0 [ 990.747548][T20001] simple_read_from_buffer+0xe1/0x170 [ 990.747573][T20001] proc_fail_nth_read+0x1df/0x250 [ 990.747600][T20001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.747627][T20001] ? rw_verify_area+0x258/0x650 [ 990.747645][T20001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.747689][T20001] vfs_read+0x1fd/0x980 [ 990.747714][T20001] ? __pfx___mutex_lock+0x10/0x10 [ 990.747737][T20001] ? __pfx_vfs_read+0x10/0x10 [ 990.747758][T20001] ? __fget_files+0x2a/0x420 [ 990.747785][T20001] ? __fget_files+0x3a0/0x420 [ 990.747806][T20001] ? __fget_files+0x2a/0x420 [ 990.747837][T20001] ksys_read+0x145/0x250 [ 990.747859][T20001] ? __pfx_ksys_read+0x10/0x10 [ 990.747881][T20001] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 990.747905][T20001] ? lockdep_hardirqs_on+0x9c/0x150 [ 990.747928][T20001] __do_fast_syscall_32+0xb4/0x110 [ 990.747952][T20001] ? lockdep_hardirqs_on+0x9c/0x150 [ 990.747976][T20001] do_fast_syscall_32+0x34/0x80 [ 990.747998][T20001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 990.748020][T20001] RIP: 0023:0xf70be539 [ 990.748036][T20001] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 990.748052][T20001] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 990.748071][T20001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ae620 [ 990.748083][T20001] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 990.748094][T20001] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 990.748105][T20001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 990.748115][T20001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.748142][T20001] [ 991.229026][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 991.229045][ T30] audit: type=1326 audit(1747003489.880:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.262392][ T30] audit: type=1326 audit(1747003489.880:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.284975][ T30] audit: type=1326 audit(1747003489.910:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.333416][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.357121][ T30] audit: type=1326 audit(1747003489.910:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.407003][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.425884][ T30] audit: type=1326 audit(1747003489.910:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.459700][ T30] audit: type=1326 audit(1747003489.910:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.510038][ T3468] bond0 (unregistering): (slave team0): Releasing backup interface [ 991.533631][ T30] audit: type=1326 audit(1747003489.910:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.568673][ T3468] bond0 (unregistering): Released all slaves [ 991.604801][ T30] audit: type=1326 audit(1747003489.910:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.629168][ T30] audit: type=1326 audit(1747003489.910:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 991.706574][T17374] Bluetooth: hci6: command tx timeout [ 991.745846][ T30] audit: type=1326 audit(1747003489.910:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.9.3578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 992.169137][T20018] FAULT_INJECTION: forcing a failure. [ 992.169137][T20018] name failslab, interval 1, probability 0, space 0, times 0 [ 992.184350][T20018] CPU: 1 UID: 0 PID: 20018 Comm: syz.9.3579 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 992.184382][T20018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 992.184396][T20018] Call Trace: [ 992.184404][T20018] [ 992.184413][T20018] dump_stack_lvl+0x189/0x250 [ 992.184450][T20018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.184479][T20018] ? __pfx__printk+0x10/0x10 [ 992.184514][T20018] should_fail_ex+0x414/0x560 [ 992.184540][T20018] should_failslab+0xa8/0x100 [ 992.184576][T20018] __kmalloc_cache_noprof+0x70/0x3d0 [ 992.184603][T20018] ? sctp_add_bind_addr+0x8c/0x370 [ 992.184635][T20018] sctp_add_bind_addr+0x8c/0x370 [ 992.184667][T20018] sctp_copy_local_addr_list+0x30b/0x4e0 [ 992.184698][T20018] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 992.184725][T20018] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 992.184754][T20018] ? sctp_v6_is_any+0x64/0x80 [ 992.184785][T20018] ? sctp_copy_one_addr+0x93/0x360 [ 992.184815][T20018] sctp_bind_addr_copy+0xb3/0x3c0 [ 992.184844][T20018] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 992.184872][T20018] sctp_connect_new_asoc+0x2e0/0x690 [ 992.184894][T20018] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 992.184912][T20018] ? __local_bh_enable_ip+0x12d/0x1c0 [ 992.184950][T20018] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 992.184975][T20018] ? security_sctp_bind_connect+0x7e/0x2e0 [ 992.185009][T20018] sctp_sendmsg+0x155c/0x2810 [ 992.185053][T20018] ? __pfx_sctp_sendmsg+0x10/0x10 [ 992.185089][T20018] ? aa_sk_perm+0x81e/0x950 [ 992.185114][T20018] ? __pfx_aa_sk_perm+0x10/0x10 [ 992.185138][T20018] ? sock_rps_record_flow+0x19/0x400 [ 992.185171][T20018] ? inet_sendmsg+0x2f4/0x370 [ 992.185205][T20018] __sock_sendmsg+0x19c/0x270 [ 992.185229][T20018] __sys_sendto+0x3bd/0x520 [ 992.185256][T20018] ? __pfx___sys_sendto+0x10/0x10 [ 992.185278][T20018] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 992.185318][T20018] ? __fget_files+0x3a0/0x420 [ 992.185350][T20018] ? ksys_write+0x1f0/0x250 [ 992.185385][T20018] __ia32_sys_sendto+0xdd/0x100 [ 992.185414][T20018] __do_fast_syscall_32+0xb4/0x110 [ 992.185440][T20018] ? lockdep_hardirqs_on+0x9c/0x150 [ 992.185469][T20018] do_fast_syscall_32+0x34/0x80 [ 992.185507][T20018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.185530][T20018] RIP: 0023:0xf70be539 [ 992.185548][T20018] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 992.185573][T20018] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 992.185593][T20018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 992.185606][T20018] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080000480 [ 992.185619][T20018] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 992.185632][T20018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 992.185643][T20018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 992.185672][T20018] [ 992.506703][T17374] Bluetooth: hci7: command tx timeout [ 992.666013][T17374] Bluetooth: hci0: command tx timeout [ 993.151669][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.159525][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.169188][T19937] chnl_net:caif_netlink_parms(): no params data found [ 993.721233][ T3468] hsr_slave_0: left promiscuous mode [ 993.728145][ T3468] hsr_slave_1: left promiscuous mode [ 993.734283][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.743296][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.758285][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.767144][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.785101][ T3468] veth1_macvtap: left promiscuous mode [ 993.791207][T17374] Bluetooth: hci6: command tx timeout [ 993.799322][ T3468] veth0_macvtap: left promiscuous mode [ 993.805232][ T3468] veth1_vlan: left promiscuous mode [ 993.810769][ T3468] veth0_vlan: left promiscuous mode [ 993.918619][ T3468] pim6reg (unregistering): left allmulticast mode [ 993.940656][ T5878] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 994.110924][ T5878] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.141367][ T5878] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 994.152746][ T5878] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 994.166306][ T5878] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 994.180641][ T5878] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 994.190312][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.213948][ T5878] usb 10-1: config 0 descriptor?? [ 994.531314][ T3468] team0 (unregistering): Port device team_slave_1 removed [ 994.611276][ T3468] team0 (unregistering): Port device team_slave_0 removed [ 994.756003][T17374] Bluetooth: hci0: command tx timeout [ 994.841935][ T5878] usbhid 10-1:0.0: can't add hid device: -71 [ 994.853874][ T5878] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 994.867673][ T5878] usb 10-1: USB disconnect, device number 24 [ 995.866141][T17374] Bluetooth: hci6: command tx timeout [ 996.098543][T19937] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.109777][T19937] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.117763][T19937] bridge_slave_0: entered allmulticast mode [ 996.128222][T19937] bridge_slave_0: entered promiscuous mode [ 996.154054][T19937] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.161810][T19937] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.189079][T19937] bridge_slave_1: entered allmulticast mode [ 996.206322][T19937] bridge_slave_1: entered promiscuous mode [ 996.259241][ T5878] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 996.442931][ T5878] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 996.467839][ T5878] usb 10-1: config 0 has no interface number 0 [ 996.489058][ T5878] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 996.513763][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.560476][ T5878] usb 10-1: config 0 descriptor?? [ 996.569641][T19937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.593678][ T5878] usb 10-1: selecting invalid altsetting 1 [ 996.617816][ T5878] dvb_ttusb_budget: ttusb_init_controller: error [ 996.627127][T19937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.636398][ T5878] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 996.827582][ T5878] DVB: Unable to find symbol cx22700_attach() [ 996.931331][T19937] team0: Port device team_slave_0 added [ 996.972928][ T5878] DVB: Unable to find symbol tda10046_attach() [ 996.973185][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3583'. [ 996.982217][T19937] team0: Port device team_slave_1 added [ 997.008351][ T5878] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 997.030479][ T3468] IPVS: stop unused estimator thread 0... [ 997.351910][T19984] chnl_net:caif_netlink_parms(): no params data found [ 997.371593][T19937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.395569][T19937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.436260][T19937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.450896][T19937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.458467][T19937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.485363][T19937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.727821][ T3468] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.834746][T19937] hsr_slave_0: entered promiscuous mode [ 997.842254][T19937] hsr_slave_1: entered promiscuous mode [ 997.865165][T19937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.885350][T19937] Cannot create hsr debugfs directory [ 997.949822][T17374] Bluetooth: hci6: command tx timeout [ 997.963252][T19895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 998.184039][ T3468] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.212379][T19895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 998.289566][T19895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 998.363363][ T3468] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.494808][T19895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 998.548092][T19984] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.567095][T19984] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.574862][T19984] bridge_slave_0: entered allmulticast mode [ 998.609187][T19984] bridge_slave_0: entered promiscuous mode [ 998.663458][ T3468] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.768420][T19984] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.789554][T19984] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.803934][T19984] bridge_slave_1: entered allmulticast mode [ 998.814219][T19984] bridge_slave_1: entered promiscuous mode [ 999.027458][T19984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.051222][T19984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.265501][ T5878] usb 10-1: USB disconnect, device number 25 [ 999.491859][T19984] team0: Port device team_slave_0 added [ 999.632781][T19984] team0: Port device team_slave_1 added [ 999.822826][T19984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.847987][T19984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.910507][T19984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.974117][ T3468] bridge_slave_1: left allmulticast mode [ 999.983756][ T3468] bridge_slave_1: left promiscuous mode [ 1000.002431][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.016747][ T3468] bridge_slave_0: left allmulticast mode [ 1000.022582][ T3468] bridge_slave_0: left promiscuous mode [ 1000.029116][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.115467][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.129792][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.143634][ T3468] bond0 (unregistering): Released all slaves [ 1001.155578][T14674] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1001.172989][T19984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.180489][T19984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.213017][T19984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.312553][T14674] usb 10-1: Using ep0 maxpacket: 16 [ 1001.333807][T14674] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1001.356283][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1001.420196][T14674] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1001.437981][T14674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.456182][T14674] usb 10-1: Product: syz [ 1001.460676][T14674] usb 10-1: Manufacturer: syz [ 1001.467489][T14674] usb 10-1: SerialNumber: syz [ 1001.496550][T14674] usb 10-1: config 0 descriptor?? [ 1001.510416][T14674] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1001.522587][T14674] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1001.535318][T19984] hsr_slave_0: entered promiscuous mode [ 1001.553208][T19984] hsr_slave_1: entered promiscuous mode [ 1001.573548][T19984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.594183][T19984] Cannot create hsr debugfs directory [ 1001.748777][T19844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1001.882531][T19844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1001.911131][T19844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1002.055960][T19844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1002.112515][T14674] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1002.135280][T14674] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1002.173770][ T3468] hsr_slave_0: left promiscuous mode [ 1002.180632][ T3468] hsr_slave_1: left promiscuous mode [ 1002.187357][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.198626][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.208301][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.225719][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.268368][ T3468] veth1_macvtap: left promiscuous mode [ 1002.274022][ T3468] veth0_macvtap: left promiscuous mode [ 1002.295796][ T3468] veth1_vlan: left promiscuous mode [ 1002.302954][ T3468] veth0_vlan: left promiscuous mode [ 1002.755385][T14674] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1002.771665][T14674] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1003.414492][ T3468] team0 (unregistering): Port device team_slave_1 removed [ 1003.529308][ T3468] team0 (unregistering): Port device team_slave_0 removed [ 1003.863017][T14674] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1003.878200][T14674] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1003.885164][T14674] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1003.917803][T14674] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1003.955640][T14674] usb 10-1: USB disconnect, device number 26 [ 1005.265349][T19895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.462977][T19895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.559737][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.566986][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.607088][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.614304][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.827611][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3590'. [ 1006.008643][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.050021][T19937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.105142][T19937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.225072][T19937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1006.245103][T19937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1006.306293][T18134] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1006.394790][T19844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.476928][T18134] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.514507][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.521739][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.526404][T18134] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1006.543141][T18134] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1006.554145][T18134] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1006.572851][T18134] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.584777][T18134] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.617717][T18134] usb 10-1: config 0 descriptor?? [ 1006.653019][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.660245][T18834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.776448][T19895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.266868][T19937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.295800][T18134] usbhid 10-1:0.0: can't add hid device: -71 [ 1007.301965][T18134] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1007.363822][T18134] usb 10-1: USB disconnect, device number 27 [ 1007.397469][T19895] veth0_vlan: entered promiscuous mode [ 1007.457130][T19984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1007.478915][T19984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1007.503843][T19895] veth1_vlan: entered promiscuous mode [ 1007.514793][T19984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1007.541216][T19937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.561351][T19984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1007.591015][T19844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.628389][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.635648][T18834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.652147][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.659375][T18834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.760824][T19895] veth0_macvtap: entered promiscuous mode [ 1007.814632][T19895] veth1_macvtap: entered promiscuous mode [ 1007.879685][T19844] veth0_vlan: entered promiscuous mode [ 1007.974168][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.016252][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.041054][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.056753][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.087458][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.100144][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.111292][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.122386][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.137273][T19895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.226174][T20252] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1008.260866][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.305668][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.316577][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.327529][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.339206][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.367028][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.385520][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.397753][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.441486][T19895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.475562][T19895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.511204][T19895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.728582][T19895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.786607][T19895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.829818][T19895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.876769][T19895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.951956][T19844] veth1_vlan: entered promiscuous mode [ 1009.245089][T19937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.310434][T19984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.471228][T19984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.537458][T11791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.544689][T11791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.569523][T19844] veth0_macvtap: entered promiscuous mode [ 1009.595813][T18834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.647784][T18834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.669984][T19844] veth1_macvtap: entered promiscuous mode [ 1009.713889][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.721192][T12787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.948421][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.966804][T18834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.975319][T18834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.996167][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.016633][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.035814][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.065545][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.101980][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.122752][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.134267][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.152169][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.163032][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.184213][T19844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.228714][T19937] veth0_vlan: entered promiscuous mode [ 1010.249392][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.274833][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.291778][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.303543][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.324778][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.337802][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.358612][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.373920][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.389199][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.404038][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.417832][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.445562][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.469626][T19844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.540424][T19844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.565585][T19844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.574408][T19844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.585356][T19844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.651271][T19937] veth1_vlan: entered promiscuous mode [ 1010.938281][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.966011][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.013280][T19937] veth0_macvtap: entered promiscuous mode [ 1011.119216][T19937] veth1_macvtap: entered promiscuous mode [ 1011.253407][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.269418][T19984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.291927][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.349791][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.379087][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.394166][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.412921][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.423425][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.443049][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.453389][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.464445][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.482613][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.493567][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.503820][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.516147][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.567218][T19937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.583393][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.635411][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.665868][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.678020][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.688299][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.742331][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.773794][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.805505][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.815390][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.829036][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.839368][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.850278][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.860731][T19937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.880831][T19937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.893722][T19937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.981614][T19937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.016175][T19937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.035611][T19937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.036178][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1012.055075][T19937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.225763][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1012.240145][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1012.252821][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1012.297280][ T10] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1012.312102][T19984] veth0_vlan: entered promiscuous mode [ 1012.342229][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.372027][ T10] usb 5-1: Product: syz [ 1012.376744][ T10] usb 5-1: Manufacturer: syz [ 1012.381384][ T10] usb 5-1: SerialNumber: syz [ 1012.396476][ T10] usb 5-1: config 0 descriptor?? [ 1012.414419][ T10] empeg 5-1:0.0: empeg converter detected [ 1012.430020][T19984] veth1_vlan: entered promiscuous mode [ 1012.444773][ T10] usb 5-1: active config #0 != 1 ?? [ 1012.553173][T18834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.675496][T18834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.842783][T18146] usb 5-1: USB disconnect, device number 27 [ 1012.954335][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.004677][T19984] veth0_macvtap: entered promiscuous mode [ 1013.052320][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.160675][T19984] veth1_macvtap: entered promiscuous mode [ 1013.304452][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.350770][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.383810][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.412068][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.484526][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.540955][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.576453][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.615397][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.658698][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.692395][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.745765][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.768593][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.784758][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.804146][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.817189][T19984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.826507][T18146] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1013.895209][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.962012][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.994932][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.030665][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.051057][T18146] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1014.065050][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.105380][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.134529][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.158200][T18146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1014.188488][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.189881][T18146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1014.247501][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.248364][T18146] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1014.285526][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.322476][T18146] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1014.325648][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.369285][T18146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.373908][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.409639][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.435580][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.467894][T19984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.492659][T19984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.530215][T19984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.662169][T18146] usb 5-1: config 0 descriptor?? [ 1014.681812][T19984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.727920][T19984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.772102][T19984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.815629][T19984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.035748][T14674] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1015.193972][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.217939][T14674] usb 10-1: Using ep0 maxpacket: 32 [ 1015.234060][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.273463][T14674] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1015.308845][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1015.355653][T18146] usbhid 5-1:0.0: can't add hid device: -71 [ 1015.361735][T18146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1015.387402][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1015.415755][T12787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.425309][T18146] usb 5-1: USB disconnect, device number 28 [ 1015.438409][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1015.460837][T12787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.508980][T14674] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1015.573031][T14674] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1015.631174][T14674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.688517][T14674] usb 10-1: Product: syz [ 1015.713221][T14674] usb 10-1: Manufacturer: syz [ 1015.735772][T14674] usb 10-1: SerialNumber: syz [ 1015.767511][T14674] usb 10-1: config 0 descriptor?? [ 1016.194668][T20375] FAULT_INJECTION: forcing a failure. [ 1016.194668][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.236265][T20375] CPU: 0 UID: 0 PID: 20375 Comm: syz.4.3612 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1016.236297][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1016.236310][T20375] Call Trace: [ 1016.236319][T20375] [ 1016.236329][T20375] dump_stack_lvl+0x189/0x250 [ 1016.236378][T20375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.236408][T20375] ? __pfx__printk+0x10/0x10 [ 1016.236435][T20375] ? __pfx___might_resched+0x10/0x10 [ 1016.236454][T20375] ? fs_reclaim_acquire+0x7d/0x100 [ 1016.236489][T20375] should_fail_ex+0x414/0x560 [ 1016.236516][T20375] should_failslab+0xa8/0x100 [ 1016.236545][T20375] __kmalloc_noprof+0xcb/0x4f0 [ 1016.236570][T20375] ? kfree+0x4d/0x440 [ 1016.236589][T20375] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1016.236621][T20375] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1016.236649][T20375] ? tomoyo_domain+0xda/0x130 [ 1016.236681][T20375] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1016.236714][T20375] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1016.236751][T20375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1016.236827][T20375] ? __fget_files+0x2a/0x420 [ 1016.236860][T20375] ? __fget_files+0x3a0/0x420 [ 1016.236886][T20375] ? __fget_files+0x2a/0x420 [ 1016.236914][T20375] security_file_ioctl_compat+0xcb/0x2d0 [ 1016.236948][T20375] __ia32_compat_sys_ioctl+0x128/0x840 [ 1016.236976][T20375] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1016.236999][T20375] ? __fget_files+0x3a0/0x420 [ 1016.237032][T20375] ? fput+0xa0/0xd0 [ 1016.237063][T20375] ? ksys_write+0x1f0/0x250 [ 1016.237084][T20375] ? rcu_is_watching+0x15/0xb0 [ 1016.237123][T20375] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1016.237151][T20375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.237178][T20375] __do_fast_syscall_32+0xb4/0x110 [ 1016.237206][T20375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.237236][T20375] do_fast_syscall_32+0x34/0x80 [ 1016.237263][T20375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1016.237288][T20375] RIP: 0023:0xf7f13539 [ 1016.237307][T20375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1016.237325][T20375] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1016.237358][T20375] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 000000000000ae80 [ 1016.237372][T20375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.237385][T20375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1016.237398][T20375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1016.237410][T20375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1016.237441][T20375] [ 1016.237451][T20375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1016.562587][T20384] FAULT_INJECTION: forcing a failure. [ 1016.562587][T20384] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1016.575877][T20384] CPU: 1 UID: 0 PID: 20384 Comm: syz.0.3614 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1016.575906][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1016.575919][T20384] Call Trace: [ 1016.575927][T20384] [ 1016.575937][T20384] dump_stack_lvl+0x189/0x250 [ 1016.575979][T20384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.576010][T20384] ? __pfx__printk+0x10/0x10 [ 1016.576034][T20384] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1016.576059][T20384] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1016.576084][T20384] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1016.576107][T20384] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1016.576133][T20384] should_fail_ex+0x414/0x560 [ 1016.576169][T20384] get_futex_key+0x936/0xe10 [ 1016.576198][T20384] ? __pfx_get_futex_key+0x10/0x10 [ 1016.576225][T20384] ? __lock_acquire+0xaac/0xd20 [ 1016.576258][T20384] futex_wait_setup+0x49/0x290 [ 1016.576285][T20384] ? __futex_wait+0x9f/0x2a0 [ 1016.576316][T20384] __futex_wait+0xf9/0x2a0 [ 1016.576349][T20384] ? __pfx___futex_wait+0x10/0x10 [ 1016.576381][T20384] ? __pfx_futex_wake_mark+0x10/0x10 [ 1016.576423][T20384] futex_wait+0x104/0x360 [ 1016.576453][T20384] ? __pfx_futex_wait+0x10/0x10 [ 1016.576508][T20384] do_futex+0x333/0x420 [ 1016.576536][T20384] ? __pfx_do_futex+0x10/0x10 [ 1016.576568][T20384] __se_sys_futex_time32+0x360/0x3e0 [ 1016.576601][T20384] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1016.576624][T20384] ? rcu_is_watching+0x15/0xb0 [ 1016.576664][T20384] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1016.576693][T20384] do_int80_emulation+0x11f/0x200 [ 1016.576719][T20384] ? clear_bhb_loop+0x45/0xa0 [ 1016.576741][T20384] ? clear_bhb_loop+0x45/0xa0 [ 1016.576766][T20384] asm_int80_emulation+0x1a/0x20 [ 1016.576786][T20384] RIP: 0023:0xf712e539 [ 1016.576804][T20384] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1016.576822][T20384] RSP: 002b:00000000f50fd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1016.576845][T20384] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000000 [ 1016.576860][T20384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.576872][T20384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1016.576885][T20384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1016.576898][T20384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1016.576927][T20384] [ 1016.735681][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1016.867138][T14674] iforce 10-1:0.0: usb_submit_urb failed: -110 [ 1016.874890][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.881679][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.890137][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.896790][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.903260][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.910307][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.916839][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.923328][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.929728][ T5879] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1016.938744][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.945403][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.952732][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.959254][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1016.966372][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.075716][ T5879] usb 3-1: device descriptor read/64, error -71 [ 1017.166023][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.225753][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1017.231000][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.241847][ T10] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1017.253080][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.261346][ T10] usb 6-1: Product: syz [ 1017.265927][ T10] usb 6-1: Manufacturer: syz [ 1017.270631][ T10] usb 6-1: SerialNumber: syz [ 1017.281636][ T10] usb 6-1: config 0 descriptor?? [ 1017.300839][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.340552][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.349196][ T5879] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1017.394705][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.424905][T14674] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1017.452485][T14674] input input85: Timeout waiting for response from device. [ 1017.512278][ T10] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 032 [ 1017.527868][ T5879] usb 3-1: device descriptor read/64, error -71 [ 1017.635903][ T5879] usb usb3-port1: attempt power cycle [ 1017.800745][T14674] usb 10-1: USB disconnect, device number 28 [ 1017.981754][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1017.985594][ T5879] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1018.038688][ T5879] usb 3-1: device descriptor read/8, error -71 [ 1018.150543][ T9] usb 6-1: USB disconnect, device number 32 [ 1018.305596][ T5879] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1018.316267][T18146] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1018.336543][ T5879] usb 3-1: device descriptor read/8, error -71 [ 1018.450911][ T5879] usb usb3-port1: unable to enumerate USB device [ 1018.528620][T18146] usb 5-1: Using ep0 maxpacket: 16 [ 1018.547762][T18146] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.581530][T18146] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.594395][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1018.620174][T18146] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.637694][T18146] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1018.686615][T18146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.736385][T18146] usb 5-1: config 0 descriptor?? [ 1018.828251][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1018.876611][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1018.941144][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1018.992822][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1019.054506][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1019.119414][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1019.176396][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.198741][ T10] usb 1-1: Product: syz [ 1019.203008][ T10] usb 1-1: Manufacturer: syz [ 1019.272377][T18146] hid (null): report_id 11059 is invalid [ 1019.280006][ T10] usb 1-1: SerialNumber: syz [ 1019.295570][T18146] hid (null): unknown global tag 0xfa [ 1019.323223][ T10] usb 1-1: config 0 descriptor?? [ 1019.356157][T20410] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1019.390983][T18146] cougar 0003:060B:500A.0037: usage count exceeds max: fixing up report descriptor [ 1019.446803][T18146] cougar 0003:060B:500A.0037: unexpected long global item [ 1019.454778][T18146] cougar 0003:060B:500A.0037: parse failed [ 1019.511941][T18146] cougar 0003:060B:500A.0037: probe with driver cougar failed with error -22 [ 1019.619655][T20410] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1019.661427][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input86 [ 1019.805913][ T5879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1019.923679][T18146] usb 1-1: USB disconnect, device number 70 [ 1019.996337][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.044438][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1020.077637][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1020.109564][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1020.125960][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1020.156257][ T5879] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1020.182782][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.235867][ T5879] usb 3-1: config 0 descriptor?? [ 1020.305871][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1020.327920][ T10] usb 6-1: config 118 has an invalid interface number: 30 but max is 3 [ 1020.364800][ T10] usb 6-1: config 118 has an invalid interface number: 125 but max is 3 [ 1020.394498][ T10] usb 6-1: config 118 has an invalid interface number: 72 but max is 3 [ 1020.427793][ T10] usb 6-1: config 118 has an invalid interface number: 61 but max is 3 [ 1020.441466][ T10] usb 6-1: config 118 has an invalid descriptor of length 88, skipping remainder of the config [ 1020.495672][ T10] usb 6-1: config 118 has no interface number 0 [ 1020.520061][ T10] usb 6-1: config 118 has no interface number 1 [ 1020.541042][ T10] usb 6-1: config 118 has no interface number 2 [ 1020.555475][ T10] usb 6-1: config 118 has no interface number 3 [ 1020.569015][ T10] usb 6-1: config 118 interface 125 altsetting 2 endpoint 0xC has an invalid bInterval 255, changing to 7 [ 1020.602966][ T10] usb 6-1: config 118 interface 125 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1020.642820][ T10] usb 6-1: config 118 interface 125 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1020.675579][T14674] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1020.721436][ T10] usb 6-1: config 118 interface 125 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1020.762750][ T10] usb 6-1: config 118 interface 72 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1020.790273][ T10] usb 6-1: config 118 interface 72 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1020.823663][ T10] usb 6-1: config 118 interface 61 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1020.857549][ T10] usb 6-1: config 118 interface 61 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1020.868151][T14674] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1020.879217][ T10] usb 6-1: config 118 interface 61 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1020.902973][ T10] usb 6-1: config 118 interface 61 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1020.904505][T14674] usb 10-1: not running at top speed; connect to a high speed hub [ 1020.926916][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 1020.949040][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1020.949373][ T10] usb 6-1: config 118 interface 61 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1020.998127][ T5879] usb 3-1: USB disconnect, device number 43 [ 1021.002259][ T10] usb 6-1: config 118 interface 61 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1021.023062][T14674] usb 10-1: config 8 has an invalid interface number: 24 but max is 0 [ 1021.043830][ T10] usb 6-1: config 118 interface 30 has no altsetting 0 [ 1021.051108][T14674] usb 10-1: config 8 has an invalid descriptor of length 180, skipping remainder of the config [ 1021.081557][T14674] usb 10-1: config 8 has no interface number 0 [ 1021.097434][T14674] usb 10-1: too many endpoints for config 8 interface 24 altsetting 2: 155, using maximum allowed: 30 [ 1021.133376][ T10] usb 6-1: config 118 interface 125 has no altsetting 0 [ 1021.138735][T14674] usb 10-1: config 8 interface 24 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 155 [ 1021.152445][ T10] usb 6-1: config 118 interface 72 has no altsetting 0 [ 1021.162379][ T10] usb 6-1: config 118 interface 61 has no altsetting 0 [ 1021.173448][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=ad9b, bcdDevice=84.41 [ 1021.183458][T14674] usb 10-1: config 8 interface 24 has no altsetting 0 [ 1021.206701][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.211269][T14674] usb 10-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1021.215150][ T10] usb 6-1: Product: syz [ 1021.231205][T18146] usb 5-1: USB disconnect, device number 29 [ 1021.236372][T14674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.276092][T14674] usb 10-1: Product: syz [ 1021.280450][T14674] usb 10-1: Manufacturer: syz [ 1021.280529][ T10] usb 6-1: Manufacturer: syz [ 1021.285195][T14674] usb 10-1: SerialNumber: syz [ 1021.325520][ T10] usb 6-1: SerialNumber: syz [ 1021.355642][T18598] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1021.381482][T20461] binder: 20460:20461 ioctl c0306201 80001d40 returned -14 [ 1021.417437][ T5878] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1021.453231][ T5878] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1021.519889][T18598] usb 1-1: Using ep0 maxpacket: 8 [ 1021.549637][T18598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1021.584119][T14674] vmk80xx 10-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1021.589196][ T10] usbhid 6-1:118.125: couldn't find an input interrupt endpoint [ 1021.617830][T18598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1021.661820][T18598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1021.677786][T20464] fido_id[20464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1021.682409][T14674] usb 10-1: USB disconnect, device number 29 [ 1021.728996][ T10] usb 6-1: USB disconnect, device number 33 [ 1021.743873][T18598] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1021.765107][T18598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.811352][T18598] usb 1-1: Product: syz [ 1021.832170][T18598] usb 1-1: Manufacturer: syz [ 1021.856137][T18598] usb 1-1: SerialNumber: syz [ 1021.885239][T18598] usb 1-1: config 0 descriptor?? [ 1022.278612][ T10] usb 1-1: USB disconnect, device number 71 [ 1022.816013][T20493] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1022.856770][T18598] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1023.046563][T18598] usb 3-1: Using ep0 maxpacket: 16 [ 1023.096460][T18598] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1023.144624][T18598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1023.215608][T14674] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1023.223526][T18598] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1023.292634][T18598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 1023.355905][T18598] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1023.391244][T18598] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1023.401015][ T5915] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1023.434904][T18598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.443949][T14674] usb 5-1: Using ep0 maxpacket: 16 [ 1023.465933][T14674] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1023.487045][T18598] usb 3-1: Product: syz [ 1023.506211][T14674] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1023.523602][T18598] usb 3-1: Manufacturer: syz [ 1023.530156][T18598] usb 3-1: SerialNumber: syz [ 1023.545622][T14674] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1023.558717][T18598] usb 3-1: config 0 descriptor?? [ 1023.575763][T20489] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1023.586543][ T5915] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1023.605572][T14674] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1023.613047][T20489] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1023.626512][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.646653][T14674] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1023.660408][ T5915] usb 10-1: Product: syz [ 1023.675568][ T47] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1023.683397][T14674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.702313][ T5915] usb 10-1: Manufacturer: syz [ 1023.717152][ T5915] usb 10-1: SerialNumber: syz [ 1023.722060][T14674] usb 5-1: Product: syz [ 1023.729795][T18598] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1023.737241][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1023.737370][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1023.752673][T14674] usb 5-1: Manufacturer: syz [ 1023.757893][T14674] usb 5-1: SerialNumber: syz [ 1023.766707][ T5915] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1023.821637][ T5879] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1023.838496][T14674] usb 5-1: config 0 descriptor?? [ 1023.858541][ T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1023.904572][T20499] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1023.942146][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1024.001224][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1024.076151][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1024.166865][T20499] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1024.167977][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1024.244919][T14674] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input87 [ 1024.254222][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.307251][ T47] usb 6-1: config 0 descriptor?? [ 1024.603118][T14674] usb 5-1: USB disconnect, device number 30 [ 1024.916977][ T5879] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1024.930925][ T5879] ath9k_htc: Failed to initialize the device [ 1024.978598][ T47] usbhid 6-1:0.0: can't add hid device: -71 [ 1025.021598][ T47] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1025.064327][ T5879] usb 10-1: ath9k_htc: USB layer deinitialized [ 1025.081908][ T47] usb 6-1: USB disconnect, device number 34 [ 1025.274794][T20531] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 1025.884615][ T5915] usb 10-1: USB disconnect, device number 30 [ 1026.240727][ T9] usb 3-1: USB disconnect, device number 44 [ 1026.287675][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 1026.335642][ T47] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1026.543003][ T47] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1026.640732][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1026.699086][ T47] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1026.725283][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.740917][ T47] usb 5-1: config 0 descriptor?? [ 1026.747898][T20544] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1026.766632][ T5915] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1026.948447][ T5915] usb 1-1: config 45 has too many interfaces: 190, using maximum allowed: 32 [ 1027.051133][ T5915] usb 1-1: config 45 has 1 interface, different from the descriptor's value: 190 [ 1027.085558][ T5915] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1027.123115][ T5915] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.161483][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1027.210959][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.287482][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 1027.334054][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1027.391742][ T47] usb 5-1: USB disconnect, device number 31 [ 1028.481139][T20573] Invalid logical block size (510) [ 1028.937282][ T5915] usbhid 1-1:45.0: can't add hid device: -71 [ 1028.944636][ T5915] usbhid 1-1:45.0: probe with driver usbhid failed with error -71 [ 1029.109934][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1029.146685][ T5915] usb 1-1: USB disconnect, device number 72 [ 1029.325952][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 1029.435707][ T5879] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1029.495554][ T5879] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1029.541610][ T5879] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1029.565684][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1029.576776][ T5879] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1029.586299][ T5915] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1029.606266][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.623568][ T5879] usb 5-1: Product: syz [ 1029.639989][ T5879] usb 5-1: Manufacturer: syz [ 1029.647426][ T5879] usb 5-1: SerialNumber: syz [ 1029.661035][ T5879] usb 5-1: config 0 descriptor?? [ 1029.680465][T20580] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1029.760793][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 1029.788260][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.833604][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.875577][ T5915] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.942638][T20580] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1029.962542][ T5915] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1029.976050][ T5879] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 1029.976087][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1030.005727][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.056681][ T5915] usb 10-1: config 0 descriptor?? [ 1030.258483][ T5878] usb 5-1: USB disconnect, device number 32 [ 1030.273146][ T5876] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1030.274984][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.354990][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1030.387288][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1030.445978][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1030.490468][ T5915] microsoft 0003:045E:07DA.0039: unbalanced collection at end of report description [ 1030.505995][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1030.540097][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.551842][ T5915] microsoft 0003:045E:07DA.0039: parse failed [ 1030.570216][ T5915] microsoft 0003:045E:07DA.0039: probe with driver microsoft failed with error -22 [ 1030.586924][ T9] usb 6-1: config 0 descriptor?? [ 1030.709538][T20585] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3658'. [ 1030.738001][ T5915] usb 10-1: USB disconnect, device number 31 [ 1030.856676][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1031.081355][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'. [ 1031.172818][T20610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:2d) already exists on: batadv_slave_0 [ 1031.197867][T20610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.211691][T20610] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1031.243640][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1031.252691][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1031.295948][ T9] usb 6-1: USB disconnect, device number 35 [ 1031.755925][ T5915] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1031.945572][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 1031.969326][ T5915] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1032.012581][T20632] Invalid logical block size (510) [ 1032.015830][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.028702][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3670'. [ 1032.082723][ T5915] usb 10-1: config 0 descriptor?? [ 1032.116615][T20636] loop8: detected capacity change from 0 to 8 [ 1032.130877][ T5915] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1032.155962][T20636] Dev loop8: unable to read RDB block 8 [ 1032.196237][T20636] loop8: unable to read partition table [ 1032.235938][T20636] loop8: partition table beyond EOD, truncated [ 1032.265962][T20636] loop_reread_partitions: partition scan of loop8 (þF>«xü^>Ñà– ) failed (rc=-5) [ 1032.321434][T20639] tipc: Enabling of bearer rejected, failed to enable media [ 1032.574156][T20649] FAULT_INJECTION: forcing a failure. [ 1032.574156][T20649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.685592][T20649] CPU: 0 UID: 0 PID: 20649 Comm: syz.2.3674 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1032.685625][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.685639][T20649] Call Trace: [ 1032.685649][T20649] [ 1032.685660][T20649] dump_stack_lvl+0x189/0x250 [ 1032.685693][T20649] ? __lock_acquire+0xaac/0xd20 [ 1032.685725][T20649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.685754][T20649] ? __pfx__printk+0x10/0x10 [ 1032.685775][T20649] ? __might_fault+0xb0/0x130 [ 1032.685815][T20649] should_fail_ex+0x414/0x560 [ 1032.685842][T20649] _copy_from_user+0x2d/0xb0 [ 1032.685871][T20649] ip6_tnl_siocdevprivate+0x1b6/0xad0 [ 1032.685901][T20649] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 1032.685927][T20649] ? rcu_is_watching+0x15/0xb0 [ 1032.685980][T20649] ? full_name_hash+0x92/0xe0 [ 1032.686013][T20649] ? netdev_name_node_lookup+0xdf/0x120 [ 1032.686049][T20649] dev_ifsioc+0xb54/0xf00 [ 1032.686082][T20649] dev_ioctl+0x84c/0x1150 [ 1032.686108][T20649] sock_ioctl+0x719/0x790 [ 1032.686142][T20649] ? __pfx_sock_ioctl+0x10/0x10 [ 1032.686190][T20649] compat_sock_ioctl+0x285/0xc80 [ 1032.686229][T20649] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1032.686261][T20649] ? __fget_files+0x3a0/0x420 [ 1032.686284][T20649] ? __fget_files+0x2a/0x420 [ 1032.686312][T20649] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1032.686344][T20649] __ia32_compat_sys_ioctl+0x551/0x840 [ 1032.686371][T20649] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1032.686393][T20649] ? __fget_files+0x3a0/0x420 [ 1032.686423][T20649] ? fput+0xa0/0xd0 [ 1032.686452][T20649] ? ksys_write+0x1f0/0x250 [ 1032.686483][T20649] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1032.686511][T20649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.686537][T20649] __do_fast_syscall_32+0xb4/0x110 [ 1032.686565][T20649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.686591][T20649] do_fast_syscall_32+0x34/0x80 [ 1032.686617][T20649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1032.686643][T20649] RIP: 0023:0xf7f94539 [ 1032.686661][T20649] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1032.686679][T20649] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1032.686700][T20649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1032.686714][T20649] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.686726][T20649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1032.686739][T20649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1032.686751][T20649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.686782][T20649] [ 1033.375581][ T5879] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1033.417662][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3665'. [ 1033.457395][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1033.559141][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1033.588458][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1033.635676][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1033.671084][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.695858][T20670] FAULT_INJECTION: forcing a failure. [ 1033.695858][T20670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.729703][ T5879] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.769103][T20670] CPU: 0 UID: 0 PID: 20670 Comm: syz.4.3680 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1033.769135][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.769148][T20670] Call Trace: [ 1033.769156][T20670] [ 1033.769164][T20670] dump_stack_lvl+0x189/0x250 [ 1033.769201][T20670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.769231][T20670] ? __pfx__printk+0x10/0x10 [ 1033.769257][T20670] ? __might_fault+0xb0/0x130 [ 1033.769289][T20670] should_fail_ex+0x414/0x560 [ 1033.769314][T20670] _copy_from_user+0x2d/0xb0 [ 1033.769343][T20670] move_addr_to_kernel+0x7e/0x160 [ 1033.769376][T20670] get_compat_msghdr+0x3bd/0x4a0 [ 1033.769408][T20670] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1033.769445][T20670] ___sys_sendmsg+0x193/0x2a0 [ 1033.769474][T20670] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.769497][T20670] ? rcu_is_watching+0x15/0xb0 [ 1033.769564][T20670] ? __fget_files+0x2a/0x420 [ 1033.769588][T20670] ? __fget_files+0x3a0/0x420 [ 1033.769622][T20670] __sys_sendmmsg+0x28e/0x430 [ 1033.769655][T20670] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1033.769692][T20670] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.769736][T20670] ? rcu_is_watching+0x15/0xb0 [ 1033.769774][T20670] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1033.769805][T20670] __do_fast_syscall_32+0xb4/0x110 [ 1033.769841][T20670] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.769869][T20670] do_fast_syscall_32+0x34/0x80 [ 1033.769895][T20670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.769921][T20670] RIP: 0023:0xf7f13539 [ 1033.769939][T20670] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.769959][T20670] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1033.769980][T20670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1033.769995][T20670] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.770007][T20670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.770019][T20670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.770032][T20670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.770061][T20670] [ 1033.770715][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.076500][ T5879] usb 6-1: config 0 descriptor?? [ 1034.335207][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1034.705846][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 1034.712093][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1034.762624][T20691] input: syz1 as /devices/virtual/input/input89 [ 1034.777290][ T5879] usb 6-1: USB disconnect, device number 36 [ 1035.129684][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1035.160653][ T5915] gspca_sonixj: reg_w1 err -71 [ 1035.167474][ T5915] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1035.189938][ T5915] usb 10-1: USB disconnect, device number 32 [ 1035.336649][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1035.368174][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.493141][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.544734][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1035.596566][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1035.622063][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1035.660994][ T9] usb 3-1: Manufacturer: syz [ 1035.684407][ T9] usb 3-1: config 0 descriptor?? [ 1036.126739][T20726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3694'. [ 1036.162571][ T9] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 1036.184440][ T9] appleir 0003:05AC:8243.003A: No inputs registered, leaving [ 1036.261030][ T9] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1037.722184][ T5879] usb 3-1: USB disconnect, device number 45 [ 1037.773287][T20752] ALSA: mixer_oss: invalid OSS volume 'u' [ 1038.325522][T18146] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1038.487591][T18146] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1038.555629][T18146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1038.583271][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1038.615617][T18146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1038.633042][T18146] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1038.652137][T18146] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1038.661554][T18146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.710215][T18146] usb 6-1: config 0 descriptor?? [ 1038.785960][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1038.794704][ T9] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1038.843762][ T9] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1038.875977][ T9] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1038.909929][ T9] usb 1-1: config 250 has no interface number 0 [ 1038.928092][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1038.980011][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1039.034601][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1039.068070][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1039.108835][T20778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1039.125802][ T9] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1039.195787][ T9] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1039.217655][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1039.306764][ T9] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1039.315226][ T9] usb 1-1: Product: syz [ 1039.335319][ T9] usb 1-1: SerialNumber: syz [ 1039.393916][ T9] hub 1-1:250.228: bad descriptor, ignoring hub [ 1039.401857][T18146] usbhid 6-1:0.0: can't add hid device: -71 [ 1039.408047][T18146] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1039.436004][ T9] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1039.467926][T18146] usb 6-1: USB disconnect, device number 37 [ 1039.555533][ T5883] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1039.573163][ T9] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1039.618375][T20793] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3711'. [ 1039.739399][ T5883] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1039.749237][ T5883] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1039.777241][T20766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.794763][T20766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.803762][ T5883] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.822053][ T5883] usb 3-1: config 220 has no interface number 2 [ 1039.828792][ T5883] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1039.842552][ T5883] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1039.849636][ T5883] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1039.857656][ T5883] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1039.872631][ T5883] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1039.898751][ C0] usblp0: nonzero read bulk status received: -71 [ 1039.942664][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.954622][ T5883] usb 3-1: Product: syz [ 1039.995739][ T5883] usb 3-1: Manufacturer: syz [ 1040.005515][ T5883] usb 3-1: SerialNumber: syz [ 1040.071920][T20766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.086759][T20766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.096921][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 1040.267198][ T5883] usb 3-1: selecting invalid altsetting 0 [ 1040.304887][ T5883] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1040.311593][ T5883] usb 3-1: No valid video chain found. [ 1040.341564][ T5883] usb 3-1: selecting invalid altsetting 0 [ 1040.369626][ T5883] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1040.393164][T20808] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 1040.437950][ T5883] usb 3-1: USB disconnect, device number 46 [ 1040.675894][T18146] usb 1-1: USB disconnect, device number 73 [ 1040.711080][T18146] usblp0: removed [ 1041.077472][ T5915] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1041.151384][ T31] INFO: task syz.1.3220:18202 blocked for more than 143 seconds. [ 1041.175652][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 1041.183389][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1041.235758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.244551][ T31] task:syz.1.3220 state:D stack:24920 pid:18202 tgid:18187 ppid:17051 task_flags:0x40044c flags:0x20004006 [ 1041.335590][ T5915] usb 10-1: Using ep0 maxpacket: 8 [ 1041.344541][ T31] Call Trace: [ 1041.348929][ T31] [ 1041.352043][ T31] __schedule+0x16e2/0x4cd0 [ 1041.356802][ T31] ? schedule+0x165/0x360 [ 1041.361630][ T31] ? __pfx___schedule+0x10/0x10 [ 1041.366634][ T31] ? schedule+0x91/0x360 [ 1041.372469][ T31] schedule+0x165/0x360 [ 1041.376936][ T31] schedule_preempt_disabled+0x13/0x30 [ 1041.382884][ T31] __mutex_lock+0x724/0xe80 [ 1041.388964][ T31] ? __mutex_lock+0x51b/0xe80 [ 1041.394539][ T31] ? usbdev_release+0x7e/0x760 [ 1041.399651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1041.405115][ T31] ? __asan_memset+0x22/0x50 [ 1041.409884][ T31] ? __fsnotify_parent+0x242/0x540 [ 1041.417187][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 1041.422791][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 1041.432802][ T31] usbdev_release+0x7e/0x760 [ 1041.442686][ T5915] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1041.447197][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 1041.468512][ T31] __fput+0x449/0xa70 [ 1041.658572][ T5915] usb 10-1: config 8 has an invalid interface number: 121 but max is 0 [ 1041.712142][ T5915] usb 10-1: config 8 has no interface number 0 [ 1041.771592][ T5915] usb 10-1: config 8 interface 121 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1041.801005][ T31] task_work_run+0x1d1/0x260 [ 1041.805847][ T5883] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1041.865771][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1041.870993][ T31] do_exit+0x8d6/0x2550 [ 1041.875199][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1041.875238][ T5915] usb 10-1: config 8 interface 121 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1041.936792][ T31] ? __pfx_do_exit+0x10/0x10 [ 1041.941487][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1041.956710][ T5915] usb 10-1: config 8 interface 121 has no altsetting 0 [ 1041.975598][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 1041.980875][ T31] do_group_exit+0x21c/0x2d0 [ 1042.011030][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.030753][ T31] get_signal+0x125e/0x1310 [ 1042.060259][ T31] arch_do_signal_or_restart+0x95/0x780 [ 1042.085502][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1042.091767][ T31] ? __sys_recvmmsg+0x19d/0x280 [ 1042.138056][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1042.162532][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 1042.183937][ T31] __do_fast_syscall_32+0xc1/0x110 [ 1042.190781][ T31] do_fast_syscall_32+0x34/0x80 [ 1042.204066][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.210853][ T31] RIP: 0023:0xf703e539 [ 1042.214997][ T31] RSP: 002b:00000000f500d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1042.239670][ T31] RAX: 0000000000010106 RBX: 0000000000000009 RCX: 00000000800000c0 [ 1042.276554][ T31] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1042.297999][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1042.315803][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.335469][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.355585][ T31] [ 1042.366742][ T31] INFO: task syz.8.3223:18214 blocked for more than 144 seconds. [ 1042.410727][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 1042.427836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.452515][ T31] task:syz.8.3223 state:D stack:26936 pid:18214 tgid:18213 ppid:17685 task_flags:0x400040 flags:0x20000004 [ 1042.475639][ T31] Call Trace: [ 1042.479115][ T31] [ 1042.482129][ T31] __schedule+0x16e2/0x4cd0 [ 1042.496937][ T31] ? schedule+0x165/0x360 [ 1042.501395][ T31] ? __pfx___schedule+0x10/0x10 [ 1042.515632][ T31] ? schedule+0x91/0x360 [ 1042.519994][ T31] schedule+0x165/0x360 [ 1042.524233][ T31] schedule_preempt_disabled+0x13/0x30 [ 1042.541906][ T31] __mutex_lock+0x724/0xe80 [ 1042.552559][ T31] ? __mutex_lock+0x51b/0xe80 [ 1042.562393][ T31] ? usbdev_open+0x16e/0x760 [ 1042.569161][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1042.574295][ T31] ? bus_find_device+0x273/0x2b0 [ 1042.581588][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1042.588827][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1042.594270][ T31] ? usbdev_open+0xa7/0x760 [ 1042.604655][ T31] usbdev_open+0x16e/0x760 [ 1042.613890][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1042.624739][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1042.631338][ T31] chrdev_open+0x4c9/0x5e0 [ 1042.636518][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1042.643248][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1042.651999][ T31] do_dentry_open+0xdf0/0x1970 [ 1042.657314][ T31] vfs_open+0x3b/0x340 [ 1042.661504][ T31] ? path_openat+0x2ecd/0x3830 [ 1042.675720][ T31] path_openat+0x2ee5/0x3830 [ 1042.680577][ T31] ? arch_stack_walk+0xfc/0x150 [ 1042.691532][ T31] ? futex_wait_queue+0x31/0x200 [ 1042.705229][ T31] ? __pfx_path_openat+0x10/0x10 [ 1042.715483][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1042.720648][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.734996][ T31] do_filp_open+0x1fa/0x410 [ 1042.740094][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1042.765573][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1042.770575][ T31] ? alloc_fd+0x64c/0x6c0 [ 1042.774996][ T31] do_sys_openat2+0x121/0x1c0 [ 1042.789468][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1042.794811][ T31] ? rcu_is_watching+0x15/0xb0 [ 1042.813026][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1042.829530][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1042.834770][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.852934][ T31] do_fast_syscall_32+0x34/0x80 [ 1042.863633][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.880868][ T31] RIP: 0023:0xf704e539 [ 1042.885137][ T31] RSP: 002b:00000000f503e100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1042.896655][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f503e150 [ 1042.904818][ T31] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 00000000f73b2ff4 [ 1042.923742][ T31] RBP: 0000000000101301 R08: 0000000000000000 R09: 0000000000000000 [ 1042.945587][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.964356][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.986363][ T31] [ 1042.989579][ T31] [ 1042.989579][ T31] Showing all locks held in the system: [ 1043.145619][ T31] 1 lock held by rcu_preempt/16: [ 1043.152747][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1043.235497][ T31] 1 lock held by khungtaskd/31: [ 1043.240456][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1043.345580][ T31] 6 locks held by kworker/u8:2/36: [ 1043.350851][ T31] 2 locks held by getty/5588: [ 1043.435473][ T31] #0: ffff88814d5cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1043.525505][ T31] #1: ffffc9000363b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1043.615641][ T31] 5 locks held by kworker/0:7/5883: [ 1043.621126][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1043.725507][ T31] #1: ffffc900042bfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1043.767315][ T31] #2: ffff888027a67198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1043.795518][ T31] #3: ffff888027af2510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1043.865884][ T31] #4: ffff888144fd7168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1043.905508][ T31] 4 locks held by udevd/5898: [ 1043.910301][ T31] #0: ffff88807e5a6418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1043.964890][ T31] #1: ffff888011774888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 1044.009845][ T31] #2: ffff88801cfb62d8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 1044.050944][ T31] #3: ffff8880590c2198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1044.064366][ T31] 3 locks held by kworker/1:5/5915: [ 1044.081876][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1044.097180][ T31] #1: ffffc9000437fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1044.116555][ T31] #2: ffff888027bb1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1044.132044][ T31] 5 locks held by kworker/1:6/5930: [ 1044.137731][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1044.149490][ T31] #1: ffffc900042ffc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1044.161679][ T31] #2: ffff888145789198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1044.171188][ T31] #3: ffff8880590c2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1044.185061][ T31] #4: ffff888031b62160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1044.194683][ T31] 5 locks held by kworker/1:7/5934: [ 1044.200090][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1044.211566][ T31] #1: ffffc90004447c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1044.223840][ T31] #2: ffff888027b86198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1044.233018][ T31] #3: ffff8881446bd198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1044.242560][ T31] #4: ffff8880650bd160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1044.254499][ T31] 4 locks held by udevd/6135: [ 1044.259471][ T31] #0: ffff88804862d1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1044.268580][ T31] #1: ffff88807da02488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 1044.279732][ T31] #2: ffff8880288511e8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 1044.289501][ T31] #3: ffff8881446bd198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1044.299051][ T31] 1 lock held by syz.1.3220/18202: [ 1044.304230][ T31] #0: ffff888145789198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 1044.313587][ T31] 1 lock held by syz.8.3223/18214: [ 1044.318973][ T31] #0: ffff888145789198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1044.328339][ T31] 1 lock held by syz.7.3271/18505: [ 1044.333550][ T31] #0: ffff888145789198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1044.342715][ T31] 2 locks held by kworker/u8:9/18834: [ 1044.364530][ T31] 1 lock held by syz.3.3515/19648: [ 1044.371232][ T31] #0: ffff888027b86198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1044.384137][ T31] 4 locks held by syz.5.3713/20826: [ 1044.389746][ T31] #0: ffff888059cd8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1044.400393][ T31] #1: ffff888059cd8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1044.410548][ T31] #2: ffffffff8f45a448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1044.420896][ T31] #3: ffff88801b73a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1044.431110][ T31] 1 lock held by syz.4.3714/20805: [ 1044.436556][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1044.446652][ T31] 3 locks held by syz.0.3716/20815: [ 1044.451997][ T31] #0: ffff88805c0d4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1044.462484][ T31] #1: ffff88805c0d4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1044.472759][ T31] #2: ffffffff8f45a448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1044.484938][ T31] 1 lock held by syz.9.3717/20817: [ 1044.493060][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1044.502417][ T31] 1 lock held by syz.2.3719/20828: [ 1044.509608][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 1044.521273][ T31] [ 1044.523697][ T31] ============================================= [ 1044.523697][ T31] [ 1044.561734][ T31] NMI backtrace for cpu 1 [ 1044.561760][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1044.561786][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.561799][ T31] Call Trace: [ 1044.561808][ T31] [ 1044.561817][ T31] dump_stack_lvl+0x189/0x250 [ 1044.561851][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1044.561878][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.561907][ T31] ? __pfx__printk+0x10/0x10 [ 1044.561948][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1044.561973][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1044.561991][ T31] ? _printk+0xcf/0x120 [ 1044.562016][ T31] ? __pfx__printk+0x10/0x10 [ 1044.562038][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1044.562062][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1044.562087][ T31] watchdog+0xfee/0x1030 [ 1044.562116][ T31] ? watchdog+0x1de/0x1030 [ 1044.562149][ T31] kthread+0x70e/0x8a0 [ 1044.562177][ T31] ? __pfx_watchdog+0x10/0x10 [ 1044.562202][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.562227][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.562258][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.562280][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.562305][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.562329][ T31] ret_from_fork+0x4b/0x80 [ 1044.562349][ T31] ? __pfx_kthread+0x10/0x10 [ 1044.562373][ T31] ret_from_fork_asm+0x1a/0x30 [ 1044.562407][ T31] [ 1044.562448][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1044.719537][ C0] NMI backtrace for cpu 0 [ 1044.719560][ C0] CPU: 0 UID: 0 PID: 20828 Comm: syz.2.3719 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1044.719582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.719593][ C0] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 1044.719622][ C0] Code: 1e 1f 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 50 75 92 41 f6 47 2f [ 1044.719640][ C0] RSP: 0018:ffffc90013f6f460 EFLAGS: 00000046 [ 1044.719656][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000000 [ 1044.719668][ C0] RDX: 0000000000000000 RSI: ffffffff8d75e4ff RDI: ffffffff8bc1d2e0 [ 1044.719680][ C0] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 1044.719692][ C0] R10: ffffc90013f6f658 R11: ffffffff81acbbd0 R12: 0000000000000002 [ 1044.719704][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000246 [ 1044.719716][ C0] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 1044.719731][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1044.719743][ C0] CR2: 00007ffe3a919cec CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1044.719758][ C0] Call Trace: [ 1044.719765][ C0] [ 1044.719774][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1044.719795][ C0] lock_acquire+0xe7/0x360 [ 1044.719820][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1044.719842][ C0] ? stack_trace_save+0x9c/0xe0 [ 1044.719860][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1044.719878][ C0] unwind_next_frame+0xc2/0x2390 [ 1044.719898][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1044.719917][ C0] ? arch_stack_walk+0xe4/0x150 [ 1044.719942][ C0] ? __unwind_start+0x5b9/0x760 [ 1044.719964][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1044.719982][ C0] arch_stack_walk+0x11c/0x150 [ 1044.720006][ C0] ? stack_trace_save+0x9c/0xe0 [ 1044.720025][ C0] stack_trace_save+0x9c/0xe0 [ 1044.720042][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1044.720064][ C0] save_stack+0xf7/0x1f0 [ 1044.720086][ C0] ? __pfx_save_stack+0x10/0x10 [ 1044.720111][ C0] ? page_ext_put+0x97/0xc0 [ 1044.720134][ C0] __reset_page_owner+0x71/0x1f0 [ 1044.720161][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 1044.720189][ C0] vfree+0x1a6/0x330 [ 1044.720211][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1044.720232][ C0] kcov_close+0x28/0x50 [ 1044.720251][ C0] __fput+0x449/0xa70 [ 1044.720281][ C0] task_work_run+0x1d1/0x260 [ 1044.720304][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1044.720327][ C0] ? kmem_cache_free+0x192/0x3f0 [ 1044.720350][ C0] do_exit+0x8d6/0x2550 [ 1044.720375][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1044.720393][ C0] ? __pfx_do_exit+0x10/0x10 [ 1044.720413][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1044.720440][ C0] do_group_exit+0x21c/0x2d0 [ 1044.720460][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.720481][ C0] get_signal+0x125e/0x1310 [ 1044.720517][ C0] arch_do_signal_or_restart+0x95/0x780 [ 1044.720536][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1044.720559][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1044.720585][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 1044.720606][ C0] __do_fast_syscall_32+0xc1/0x110 [ 1044.720628][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.720649][ C0] do_fast_syscall_32+0x34/0x80 [ 1044.720670][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1044.720691][ C0] RIP: 0023:0xf7f94539 [ 1044.720704][ C0] Code: Unable to access opcode bytes at 0xf7f9450f. [ 1044.720713][ C0] RSP: 002b:00000000f757fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1044.720729][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1044.720740][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.720751][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1044.720761][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.720771][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.720789][ C0] [ 1045.124521][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1045.131430][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 1045.143266][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.153350][ T31] Call Trace: [ 1045.156657][ T31] [ 1045.159697][ T31] dump_stack_lvl+0x99/0x250 [ 1045.164331][ T31] ? __asan_memcpy+0x40/0x70 [ 1045.168955][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.174201][ T31] ? __pfx__printk+0x10/0x10 [ 1045.178841][ T31] panic+0x2db/0x790 [ 1045.182782][ T31] ? __pfx_panic+0x10/0x10 [ 1045.187239][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1045.193183][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1045.198601][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1045.204806][ T31] watchdog+0x102d/0x1030 [ 1045.209182][ T31] ? watchdog+0x1de/0x1030 [ 1045.213650][ T31] kthread+0x70e/0x8a0 [ 1045.217762][ T31] ? __pfx_watchdog+0x10/0x10 [ 1045.222494][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.227128][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.231768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.237012][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.242248][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.246875][ T31] ret_from_fork+0x4b/0x80 [ 1045.251326][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.255949][ T31] ret_from_fork_asm+0x1a/0x30 [ 1045.260762][ T31] [ 1045.264088][ T31] Kernel Offset: disabled [ 1045.268448][ T31] Rebooting in 86400 seconds..