last executing test programs: 13.477547339s ago: executing program 4 (id=90): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006040)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}, 0x1, 0x0, 0x0, 0x28048880}, 0x20000800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r5, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="82", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x5) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000000)='e', 0x3f}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 12.452900912s ago: executing program 4 (id=98): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001f0000400000000000000000000200020000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x8}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf5a1, 0x1f, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000c40)={0x15, 0x0, 0x38}) 12.345418949s ago: executing program 1 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0xb1c, [0xc, 0x0, 0xa, 0xfff7, 0x9d7, 0xf, 0x9, 0x10, 0x0, 0x5, 0x4, 0x7, 0xff, 0x73, 0x8, 0x8, 0x5, 0x1, 0x3, 0x1, 0x61, 0x7, 0x1, 0xc15, 0x903, 0x0, 0x81, 0x5, 0x3, 0x7, 0x8, 0x2, 0xfff5, 0x2, 0x6, 0x1, 0x360, 0xff, 0xfffa, 0x7ff, 0x5, 0x1, 0x200, 0x3, 0x134c, 0xaf, 0x9000, 0x6600], 0xfffffff8}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000280), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0xc, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x10, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x1, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0xb}, {}, {0x0, 0xfe}, {0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x1, 0x2, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}, {0x0, 0x0, 0x4}]}}) r8 = fanotify_init(0x200, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="5feb836e037a48e22d88a01f67d0588b90869fa97efadeb50b9d35162f9c5fa4491c0448fbffe9d9402d795fe0ee71ced9c240c268642351a63b68219f771dcd9ec10299039ca94af156ffbd646474560f11a77c1b094dc1fd86738a8c4436a4dea9165efdd5e0944b10424777fa2fcc293d182d6d5a3ec4dd91cb293bd680e4f808856d9ab6ee199aaf210604470fac2ca09d244feab39c6a", 0x99}, {&(0x7f00000003c0)="3512310e2e9eac678dd6999001ca82520e3f312d0f19ff30f47a00eeb62bf58188fa83640842", 0x26}, {&(0x7f0000000440)="f8306dd93dce64401db67bd7de9f74dc5f3c21bb741207ae7e34daabbb3fee50da43022172239dcf45defc3f626a75c5823bf46b552e68ae27a931e9de78755e755c51ae93364698b039a5fb0a2c0c662b12514da17c132785057566d8b7474892c0dc0ffeb9f6ecaa0b3144effc7def506d471984", 0x75}, {&(0x7f00000004c0)="fae2e09b90887bffa900118dc0334c8a749da8eff768e68bec362dcea511fbe2c5da33b90642af7f5508303daf5880007a1da07b8ed19e00fb711bf011bfd243adce393973ddd4ef4eecc8ad7ca73d34bfd939e92477ca38c5c7520fa4c86c66a8b6a104e0801379d3382a10cafe210322aba2d6765f180a85024912d492b3", 0x7f}, {&(0x7f0000002300)="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", 0x1000}], 0x5, &(0x7f0000000580)=[@authinfo={0x10, 0x84, 0x6, {0x5}}], 0x10, 0x8000}, 0x80) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mknodat$null(r5, &(0x7f00000000c0)='./file0\x00', 0x200, 0x103) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x3}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) fanotify_mark(r8, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) unshare(0x68040200) 12.037620592s ago: executing program 2 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x88) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000a006) sendmsg$nl_netfilter(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd646, 0x7, 0x10000000000f, 0x100000000, 0x1fe, 0x0, 0x58, 0x8000000000000001, 0xc7, 0x7fff, 0x101, 0x392ad71a, 0x1], 0xdddd1000, 0x141a54}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80000001, 0x81e, 0x8, 0xe, 0xb6, 0x61, '\x00', 0xe, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 9.378817019s ago: executing program 2 (id=107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a5343", 0xf) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 8.764894903s ago: executing program 1 (id=109): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x411e, 0x4) sendmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000780)=@generic={0xa, "a4676d72a38b701cf59a332cae73866153c4f7eee7ffb037e429fbc238fc558f6d2225361d49130f04775b499a2f1b642874e2e726ffa448411450f22125aec9f99e54ac56f9f9d97210c6217a58e42768850f9bfe0659925cd71289ebdc1908b80b18843d9031041f9430007159d2b7238ca6d88b0dea913d21e3f3fd15"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="d479fecb22d10000000000000000", 0xe}, {&(0x7f0000001c00)}], 0x2}}], 0x24, 0x24044015) recvmmsg(r2, &(0x7f0000000380), 0x0, 0x2082, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000082000/0x1000)=nil) r3 = io_uring_setup(0xcbe, &(0x7f0000000140)={0x0, 0x39, 0x2, 0x6, 0x262}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="72f5a65f3b1b522922c53dafdad11d9b53399ed9827c4f176d1528dc2af6cc88417494ea32863ca3cdef526bde5fe4cc5fd7c5ac9b265fe9e6705764ed078fd7ca5b6c0aab104f41cd59e7e78121c8515d349380133447385a5763ed9729660f8b34d41825f904e156cfea0bbde06e07e2927f03aba7f77351716cfa0bfa4bd18a7308f16de024f645eed595aa4c974cfad5f0827475bc933df10d5256bd426e0e080564871a9f569e077f0c47e4919cd125df7cea0f071122f039bac5e90b55a557d6d511716537e8e2ccbaa737329caa9cc9ce36ac3d2a9b7277f5f284f2fb98b72ce576bae318a7c9e7dec0622d04a60ec80b8be423aac33eaf30e87cf198b12220a5f4d8f9e283e9d882fa273c85617e09a4a627501cfe52a143a1c37caba6bd19ecd52e6976898cfad85e91934d24751ce219f4a9d7b5a3d088953064912be74fdbbb28034059d75647c811d6006a8ce40472feadfa90056de97a9899fceba1a8ad88598c69361de142a85be160a14648042032ba35d48bc566a61b7fb146c60641cf052595344af1ee64477bb792a18369cd4af9b726cb6fbfc277335c1ea122c0fda2277d7f5050ef947d32108923b8a3b08616b13882668684ef255373ef4b97abc57a4a79871776c34cd1fda001b08ee6aebc1d05be9d4c090705f23c4fadedb03a888d1f5bb029cd194ade8628167cfbd15e869259bf7029cf2ef4fb0f56b1d0414780d562039ae521a188b45bbaa9d1a4a80c99b8650c6331bcf58f9898625aea3376b7d1801e373171e2b19ced0607b7148ec884628de64a0727080e96d103708aceb122aff60e012d1a33cb8d212042755bfb4704689a753f49f511eb1f1fc428d0bfceb547bb9734ed358a7b2b29d871fa7f5ff90b3875e422d535307a8a5cd6872527f6a3c68ae7de890b73a2682eef0c068cafdff6f31f4512feac2f7a1c8bc6100db3f1e18ac99091b12236f445da82d5e33de718fb8cbd445d3cde9cb4676c80238e2467f3f707e6f3f2f63fa339ccbbe68123700e1e5b71a8f21e6f0ba5020cda534899a154ffc82dd121626dcec67f2dad07e60f8759e68c8d9d979b27fd8d11660654ba6cff19da8c41c1d7526a710e1cc883f17747e08b30cb1a37dc91ef66720d4395cd66925967ce0e9814cfe82fc673a32a2d0999dd8263c1ebcfbc57af6222ef134fae36d01a22b6271a4e0d60529872ff9ade3c537182fa1a25f944d3c9ff8fd7fba0c7ffb6914770e126226112570b3743daaa4f765159934ffa877a37589dccc20898f2174a6e34348b2bf5b08cd42b1c13c6d8e72fca6b6e48e35cd378f0ccf38ad1f6031e2e27171ccc7ef72d897a86b532395eaa8f81ae109fb725e542fa5c2e038c625c1057ea3cf84589343fe7a53dceec34c1fc65396e17add4e66aebc6b1fdf512bf6968c2cbce7c9a16bfccfd72a1ebedcfc38aea4d16cf1c42841920117d9f2f3d23ad4d6080f398ebf67a0ddfef657238063c22ccf18885e01554ef1748901a177ad755e2508db37c1548880ab5404617089725342a9958948ced08b332b05a7d3420716216171f8bf21e074abe8d82ea63fea7f0b010fa38ba13884f3af6fc4326a226beb2aae02d304bcd8b395f61117b7be699f7a27f49887c1af47697567e086e21177ee9071ea3a4f4ca172fc41abaf802e5addbebbe8e02454fdf54fa087240c6698fe8c56ded2f15e99cbd1622e356f8d7eb81c6b2c5bd68bc3fad648783007c2e6f99c35e5a271d31633407edb9e6df0f63efe950bf27c62e49428e9cf0eb713ffac78ccbd98a31d8afa9248cdcf52fd2d9816d7ba0895d8e23c321e2149e0cc03053b7353e11d7646fb97dccf28a1acd830f17ffdeed81f3d2e25bb1dc3f08deb272abf5ef33af61c03baf89221fda61bca3d54c1d694851378761a884d65da562d8a13fa31447ee40bf4ef2195c1dfe737c1e74455f1e21254ace43c2b66818ffcdd97d2a315a68da6bc2177b0334162524b724c3feb25fe4a02e70a9904acfc8be152273b586b4d2f8fa176ad82b78c7e00bf632f2532a9b31517a41d5470f4600735dbd28e082a351d6f422973a0b3d59e75544e9d0dde8534e5e92c47c1a38fdd8d1ea0998120cb6ffbe1ad2fb03a8a7f1602b1d2fb5247a7e7521ee720b04137bbe7cdc3b8d07307259085e34559ccd3f7c97cd1402cfb3c753b4f411fb51d0aff7f6273e90c8826db164c2afac775639fa309a40daf1d1168e24dcc712130d4457e6842b50e007a4581715ae208b875916e1b5e4ad56d3fa18f2e5eaa8dd57ba95191bdce93c255625336f2373747e1b2658c325c48d6ffd729f66bd9ef20b6714ee533f0d869783d57fe4825aa184adeed21a49a3f9f4823cefd0e584a3d8a1cd6d4b08689f2ab73608cfc575692152a2107b69b8652d762f37dc3a428fe76bfe153a3d11b81e1bb579e9c5f72041392e7146771a78a095fd974955ecb51e8718a11274093d4964cada795d73bdb847614e05fe0faa6234072d3be979ecb0c694051fe846e5e895396e24d41fe6f0d209c0c22b1be10239e49acfc8c43d613b2dacadb6b1bfe6d6aba9accbfd7d178375b55ee47e3e2d09f1b1e1f11e453ab493214dcca30ff8bed07404ec2a01fd5e037facb274926fa494448855a8e7175232a0128e94567b5fd70d21b8c32a4bd25b1e77a900ac5e076ac33f3054c72cb459383028957e0a3ceffdba3441ad0a0b4602704711f0e2495f1588c335cc4c7a9d22827b0adea87ea55bc931a1287925be37b59d3fef01d33c0c6574274d0b61f6b6586aa977b31f908c55daaebfae5bb15d335b625c8762dd6ce101c5c4f9bf6360ccae51863bb71000cb607b116d424a16537158a96bba0d5b25492632d3dbba17d5bad008a5799fe058b4b15af8a7f887584a84773663d70eb5331a205a4e8f31a144cf6db8f65b7bd4da061e25b780167c8a9e040e45686f25c704fa56e96e7e4e70f1343deb24c3ace49ac6379be0b15103f01e8e6ee0bee60ff13e7cbcdae0bb39baa504c8acf278def1762793ea00b5155d471ece14cb1f1d0994da42c8825d0771821a0f6c2c72eba8aa0027e4f3780a1a66959860ccc4cd484ff262f2ca2ec02719943a6175c3a84ebc26625c52062fd1ddd9c1708b46720ff8e20e3eda139eda64452606ac30d9e9a66831babadc1df8197525bff64af3cdb927c34a059c41e2fadf5ce1c2ee3ba24a72e8917da96fa7460877a7e1e5500453b23aaf961fbb118361a1c2dd209ab2488475ec36808d1ffd7fd5b17b1a9a4498c6f7bc32c46a02a293ecddc1d4ad535b5988bfd5a9bcbd6f03b68ea5d1c19024a53e58928a86c8e868d81fe2cd9984bc41b738747c5e1b5369451860ad26d14a8dcba0ff9997e8d9b4c8dd049206f5e110867c9c0cd71bbcdfe8637cbb3c1b53b1544097b766d5441dc977c1971d9b21184ff82767db459e8c0bc14d1e9131e25f944831bf1b1a1325650d65b8eece45aef5e19f7da35296bd287ee9ca6b90650f58036fe19b854c3db0cf91430a9d5acb3e2cb583134b386cafea46dd85a0165ac169eae2719b02556422792a8ca1d7c56dc6ba4dae31c4443e726a852308efc40f0a14f8b44d50c4aed2701287797d78717165335fab13569eae285148e7beaa7b2c44a12a05d21d0f610656c859f2f47854ef8e27c689047058bec29a714d1abce88b84fb42f82713b759054cd2fd67ef55ab04e32f33a37634442bf3cc5797fcce0d2e4d66c0cd082571155e80caf18552f8491d0f1e3d8cd79338ad275030a0b71ee1db44d4b33b643856c15b410a326abc22566ae38986389d889b18f10a86cd46975810828ab0cf6e32b858687d3f459a34b03aa9810623f474aa2c4b0289d69dd93849575f6a1bf7c8bce1b8f9f959b8843ee3a41b517cefaf4d9e779c94c089bdf5956547d9dc5c318530a03d3eb5e2f5fdd8309bb630e74672db9339b738f47b74c7c6ffa5b33513d3e02e5221621143ca912611343919e321805c8bb74b85040dc4f03a5d4bdf013aee50ef6435086199447af8dc06acfa238280b63e7df1317021a5e6e63347fa65e4e435ac3a92fb2b414b6fcef59daa099f853816867467166691d5665354dfde3c51cd84334f9a4d4be6957e833f0c59f647c1aeb817624cc0a30b1a4dab408c0880d9ef7660da9e4a478b41e035f9e7e6007f63c5f442ea3ed3bca86906370c5859a842fa4aa4b3ac79c7a3117c940303e5331e3fde311d8aee715f0ab5fb6a8c3dd17e26e274f5f4283fc3e6d634e310930c3990101e5982016d9312130c4a6eb7c694bb2865029422700926faed62679034867075fe1010fd95a91be9d515b88a891b56b697ce0b85ee7d8f7ea1a339ef87559043acc917cfd7e0c67d23807c4c9ab76ccf984f46309f24a32864a1504912594f1879fd9c9adf1b5530389cfb47ee7cf9cb9f633566e45850b86a0355a9f340c03346487b05f9423f0724248618f6aa7cbad3122abd30838ea59dc79ce6ccf9c8d479a01f68f6f785d908654ceabf169e473e29d6c41463d91046b2d9233dc17bfa5b1c96725b429be682cce54df0d40ec9d8721de24af0ed94f90364f056774f29970b737a81ed1426db15cef56b861689fc413bc87a48f2426222babcdd899c07bdb9caa863a3fb3d988f251ac577f6b266893c0b87a6319aaf243b793d94db538075851ed33f7758b345cae5d07920a52538b99203b99e90940261ba135fb82feee0256bf00a75573a835c33e9e10d14828f6d322053cf75cac2f718e05b4129c42eb48e0a7c80d5ad94418e87c73b4415512d375110029ca3143035ff2770743f6729340c988e638c4b32a7ca565104fdd86e8d3a335b2229a58011cf423080c79702641a7b638fe08b178c4a0101296dbe1a1744fca37ffd8ae602293d07cfb860cfbcab47aad4752b960fd0785477269d67064050e045f021511d64764976e03f04f3489e45cc733654317489c6ea76e2f109f9052c2080d15d8fa3249d79d6bce447e2c7f433ce6ba393ac53ea77a5080055e944d9f4257e8fa47d8a6c389ca55df8b4f0ac68a7077ee4bb38df7f062dee4dc2e4bc0c5cb62bfe040f5852c2b0262af10e6f99fa203f333939422c25e308652ed7e0a93b4a17686d79f12b6e0490dbc63367dcbf3879bead9c83a62c5951259730776e3715257614f83d3a54254fc3e16dfad7b15b9eb95055dd08434bec17b29b172f07c63bbafc5b99fdce15a7456d00b17ea2a6f21bc93c11c9d00ec8a288bea4c73131d42ae69a1a7b260958f9329a2cdc1bf8d2d57f2208a632edc6b414fb0015d7cad48a4f91ab9bbfa1a361487f58056a773a48c8e0301c880afc3477d743e293101c212a3c5d408a964be8007ede3586cdbc1ca5416bdca3ac81f8aabcd73ae5a88fe155284e46933c7a5c98842a5bc10acb7f798c5444abba88a7e9a185a66c0bf7d45b0b61768a7aa7703ad60b97222aac96851b995493fe78a172e450d1bcb5dd1dbcd540ffe6ef8b6c09291479386065dcdf642c58b5aa101882f7ce1700fab1b75388f0041cb17824650f892ab302fbf5ef349e63720db7537d7ffd8eda1315b1190985cce868b7dc2227f352b363fa249b096f1c8d3c48c8993d767b419abed3760b66d6f8859cd21e0993525c73bf5cf121de2fcd5441a90a3536cff04b2dd1fdef97480d5c21d34ca35f8d610a729fe0a095a9742e2fdd95a3a182aaea88098bf861f8b48b6e17b0da66236eab9c67232c66cbfea4ae8fe4a4fedbbf6dd0e659ad11233c72682c4055904d657cb75f59aa9f74e4fb42baad78ca1a7d12282ff6c3023483afadd0462e6ef9dcc03c6c5e21f5d8597c83a07567f78c697fba4fba23946f1078455b6966181f3d60498a70a74de507e64574b0e21e39f7c805e3674c9dc8fe12a3c5092f60751e7ede6df03208f7310bff3a09211be5e1de01ff04478760139938a961ec19f8af1a464fea5b36aaaff1cee5b303d02e9ccacc689d8d35dd211e170efc011935b4ba586c6ffab1923049aa33029677ca6881e9d3552f5c33551d182216040ce82b8f057e27dbf7da94fa74d36f64d366539cc46efa7a9e64be1c749dde462244289c0552469dc231067c2df7d554a2985443d583013da78dd4569ee12a11811ad492434f086253441103267d28406b68183a0606f104455f16875d8a3a067d3491b75bf01026df8b3f80e425a789110109f9e267a8bc617f6ea564841f549c7d59269b609126ff371b9171f01741a1fec7cd419fb2beede0218243ddf9db3ee044c3477f70bc90488386b98d668ed5cc8116533a7852a99271d97b391014b93d108d75871a9e9c1b5f8b3baa8eb2bdd6ad8d3702252b5b1c9a3a5ed70fc87c088f02a7accccae6ea8831379a06ca181a306671acf55ffece44a86d10428cc02bcd6477d908f392ce410c7095a21392e7fb41401f87aca7e0434bd696fb62b686ca4ec160786a962ca007e40dda54c263dee76f7b5dac73bab6a24e4c0068a7fe0b149fc7a4e06c75e216ffa81660e171660163403fa0aa61a033d6732087cdcc728adae7a787adba8d4565f32edc88281f1ac1e6e9711f9316ad9894ff0ead7faca66105930e875f241c3449281d305ceb2a0cf50da24a3baa84beb146a88e077a7e2c9a495233d1dc633df156c4f6bbf26cf33e4272f114f83157ffbbd487b28dbd82b25b6e2a030ff579f1a007a022bdcadd30aaaf0dac93a4e7a411a6d1fb36f717a7aa72106203dfaf0eba2e0274d095e50ff86993e4fd2cf640c9664037980fd361defd5730d944e277325e71a20acf637c218f53a56779b6d281bc0c420141902b7abd5757d211308a99cb91535196b75fedae48b74ab815e10ef48a761e3754df760f3fa40361d651e278330f80f5e7f5f60113c192fb3916ad22490c016b7f8a1b377b3e5b140745d7f4ee216937f9d56145eb6cd601e243395020b1c5246d0783aba2250f44a56de9a1a602c2822962423b9c5cb6c3fe5f5aaa3704ee2e7a155860e75b3fd001e6f1b110a74281851e9f8fb149593aee77f7d4f888734e5d036422fd3094dc56ff89ccd691ac6f252b6ebded99a8747999453d85fa48592a6f56a9e7293e0595fee5b3a499c87896ca66985332e546bda8e9f80e4637181455cb88b2166ab7b95dcf9f32c14eec494cb38890c809547df38beb9c81307f567e1abdaab231a22445853f93b9cf3844b556d5d9f29230e8405315d42055f8428329d399d1e981521cab270ebbdc8fe3493f74dd834c717118dda3a30173f7cef0e888cf55ce0290dc294009444e418a0737c318be8932aa02a88d7ab9702a977140f8718b73bb0ebd98fbb4ff9935a0cab3f76659c85e91a6d690a0b2166249ce42aeb07e73b66c14bf3c1b9d06516eb9b502c2878e1643226ebf7e83321c682ca54d493e8ebe2d1c5480fc18a23434467484b514de2c70560e374c83370d74b83af61d12b6ddbea2b676997025544f3712a1e591adfcb6dca774bb1f17f512e01c99692f962237136ce0b401b22a5657c8bc9caa48c2b775325651bf7fd19ea5bade8ca0bd83461efa2c0e594b0eb0002e286a3e57184736eb573bc9b1e7e0ee286738ddd1413fa36e5589a5b53b073aedbcb896fde0c11b82ec5fa7cab0f1c24796a4b7c82ee8a4774f46aed1d773f07f3c2e37ce85d5129836820b85de6d05c48f1bebd0babd43cd39e1cb4f2789852088afbc43899c1db12372d336ed1416daf29b69ba9eaf741e0aa021a7fd573fcf56704279accc193708491d0986dc8af131411d9c965c1b165ce0e7bb2bf2ca7290ba203f7102676d7531c23d0f3bb7f217a9c558839a5af7b5390e05606fb6f3d653d3d5b43c194cee7a879e9f6aa798f9fd2561afe3a88db81bfda09c13b270cde2c36a849a2fe76568284f0f2dbb79c6ec31869fc1404209e8fe2fa4fc0d62a8773414371c8b5b802756b2767d07aa1551a843ed172dea90f0034248b146867b9a1d238eea299c7d9bc1beca91d3c39fd3224db63e90bab5adad9314fda54bd75fae0b4521748f13d0762e27558ead29ef5fdaf3ca5a522bf05243ca94c4db9e81ad1bb9fb1059a25a36c492aab258b959993d96a54845c0de4e631a37548bb776e7db2cb78d18c20b131875ed40c89eab3e440a88f659414d975f948d144e09f0cb50469804a991155012529d32c2e31c2ddb4e2e9b622274cbf7dedaefaf58707224ea2971ea97674f714f2fb265a355c68941c8fc55688b80d90d591faa5a818c3ba5d251680c3c4d1a09c9b9ffba0c718197a1eeafe47e0a5c8456a2402edbca5ef7f5cf778e8c1f0ba35d37047fbb2d11d2d9d201f5f04cab01ad8fa890a6ffa5fac9bfa1a5af08f95529cde0f0aa30405ba25709507e4eeb15215a8f60491be5042b70e70c752d7e32b9b784d7781d3152641ca19d6c1c84de2884b6186847782129b5b18df5a13923b8bc2b147b53ef5b5c6965e3471071cccd986e104f5779ffb12834a467a8ff54dd7eea306f3e16c3d12edc5e70ddeb8c666d7cf6d67ac31a1c212cdc4cd376cc9952a369f4c0860d8a653e8a5d65789bd8bdbb729f60b7786ce0bed5f5abb80bf5b4e24ac22b11d35e487b8bb80e4dc98efe09d5e6ce73565bff059e859406b5984a50eb781d2297c0e9ae49f4f7790dd33b4ab9da4be283fe0f63e1a6bb1a983b49baeaf4334ef851ec84b19d92807b5a500e575390e14eeb26c17c7c8fec15a94588a5b508ae89a35777bda350a50d07999bc3b314b5da8b89bd7178cd5e19d19a207c92d0baa6456d7acf0aa4d27b401c60fc0c8c544eddc09cc8f41f9202e5d39907c0ab34904e1346a29137e9ea6a3f37c5329fe1da84f8e601a405db039f913741339d0db7906cdde251fbbdfcfa285649df7a8437386042add59e04411a13976b56b06d8e746f4c1c2e8f9d0a9074f125171079811de40799c022f8224e3077140bddf65dc0b1a09c2358c5f060806c58329e58c861760b879ed1843b09579db4142bd8fb4cb4405235e42894cae75441b7c864ba9b6a7bc49a064a163f961f66e7b69a111f6131d7ac9d99f587eba22a5c181e786a3c84ec000ee1af2ebff4631eddd2aa4a418f4cfd559d4535539f0a31f0ad80db0b63b30bbd5a6ec60753a73534ac57c83a6e3b7cd551b5bc11c9fb47f0c7af76bdfc07ef16482fb3449b1b291e5f2e21dfb58d15a02140918d63400766a6fe4ff0b8f6aa8a8c13b84b2fe2f672fb83328d49654f8f1afc5d2ff1815d18a2392878795310d02d76b47effce6710cde954d9feaeca5a7c2dc5d12bffb2cfd2964426fc42bd68b356c7bc896c78076bd6eb83c74faa32eec5babd41c76c84dda886f555074523ada26f4ab1db97486129f73dd47b648a5eeaa9854e732ed845f51d78908c25abb1c2e66e5149013dd6ee20daf4d82a12a222d4fa08bec79f2f06f1dd36268365a98eaa693565566dec7cc0e5c73dfa4ed770ae3795db3191332da94fdf14e1040b3690863f182753876e6a895458aa84ca2ea910c02ef218b8aa662c1b15f7976d8dfe76fbbe2f95e9189cfb6f999a6f92a280c19befac0b6c4b54e25c321d01b5ca851a331948b5f04955c6ad5b474f9793ac530ee3f7ab4c860defffc232aea9eb977dab845117bfe8a7a24783f7e24c6e92147b0b5bbb5faaa9f1a2f3ce5d5c62005fd9ecabe76020aa8ac98e79a7531d95fe81bb0c5ae1f0cfd2846b5485368d57f2ff7564793c6d1463d7a702021fa7cbc59490561b809a8a39ebaa1a69cb79fe40f0a5239c66ba646a95bf1cc2b64237d893685a7bbef4d22873b5fb2234f1534b0f149cbdfcefb891795a7f4955090f17c26703af364ef3cb6c660f7f8ae0c84beca9060a8d7fe2eaa215f90a98d61de5c7f6e18b0e23d8e54dee5ff49b0ac4c877a8e58d29d70c9704c8b3908cf578a1a157d74d0e535520e76fa87b1fc0627524b9cc7fb5b78ce42f5988bb46eb1e25246409f636cb54b97ab819a1be5e9b00fa4418a30315c17b2b7b98846365fd6179f37419c736a6a4aa379a3f11ffb22e30a429bbe9808a5f7fb793ef9dedef649fe05351e5af116281731906ba0b68c5e1772d08dd147e1937d4fb6f8193bc49745c8e07b364e58db7e8783079d326ca94fba12304d47389e8b6049796904a2a40a374f632aae161ac5327cf197dfec0450c70c651aa7899771de8e9e8efae95137b98796582e50e98be7d2cebc554c0f359af65d92e8cc747d1f06d6a336616be1b824bffaaf87377c7c1abcd7f446e2fc833b7792efecdbe770001177005cd873e4814941ab543be872d5d1e365fae06f8c5c3cacf381c5ee2be80eccdf8f750554bffad5f066cf9115d94f1d7715d3d4bb89165a054a912243de4cf676e5c2fed5cd14e6942dd912212061261dcf81fa9895e326331153d44a62ce292c04d1edcb096063e63e7919db848ba2308237de896439a3a76bebec8c3b09a675e77a8d8237a8eeb047ddb6a83a45b191168cdc6744ef05b072d11aecac49e0ce8a1d6f0b700ceaec6167cb61360f997ef2417eb8ad516dc35aaef26fb7aecae7c7f7b516652b6217cfd05cca31e773fe2ad0a78f5d5e77ae6bdb69bc19dd4b78ae950497530ff64677772613abbe7697357bbe2b7e90664148e32938a77ed0457d8d78944f2ac4c567282b99a35f26abc15e224fb45044cab2e9d3dd083662d4e211509a7fb11bd9ba5826d614861b418e4a1565fd87f8f49a981f21bf66a0fbc38531ed7c6b53e86a2977119d9ee9430e504147a85a95b0146a544b39efb8b037d50f6f797b187841885e6bfc6ed4407e407ea5c654d932392401a58ff34d8482d8787dfcc0eeff4f077d86a810e356759bbc07c26904f672ff873efe60a587a8b5b41df3c8496ffb164aceedcc3503b194600aba181590d45cd0fa6b14ee9fb8f046a3d7084283fb61e082db58655735ef7a9594466343ab3d1003b25b13488560a987fa939cd089da52ecb3a71fb811fe4f16d7a0473ed502d76f9d14c3193b3fa30d8ea93e7c5c1e15a62a3f5ebc59ce4484f959c24e6cd8f6aa28225a1ffcf917a9d61c8e95b44ed1b6abc48bbee417bc56f81299d85e27772dbcc7bc7cbd7ff24a25f837802c071439ee976af7eeb0187d651f5b30b441a98733149f462b8244c280f9f5e9ebfcdd3a1d1d55b39097515bac166eaa3e2fa4366ac93e53c583a53ea09c454ff1ca39eae4ad6a53586784018446d63980615b5bc39e97d9197461791ca90d22cf8520b7a0148e6519934e4a0129fb5ab3df50bd9d16e849e59f6f696b2e0e4409fe2855860d4560c79779aaed7aafbe7fe7fe1b9c71de5cc1c361b24e82f6ab2151e55a5973ec39d551d7ee7700441fa194c6ff26a465a9d580f9cf23c28ca896a0641d6f2683c56ab9f8505efc6c992b5e8dcd54f52726b41ee4b9a06b61921eb9933881ac1074e0a47875085dcaea611dfafb83e73d3a43e8bf0f56ee59115f744b22ec235ef1e86bab70da9c398073554fbba8bedcd8756754579829d4b258dfdb4cd669b060944dc20912d5c4b8d3bfd9e5708ff237d4f131c11cb7e0190", 0x2000, &(0x7f0000000d40)={&(0x7f00000003c0)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x80000000, 0x200000, 0x1200, 0x8, 0x6, 0xda, 0x0, 0x0, 0x4, 0xcfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101081, 0x11e) fcntl$lock(r6, 0x7, &(0x7f0000000200)={0x1}) mremap(&(0x7f000019f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00001f4000/0x4000)=nil) unshare(0x22020600) io_uring_setup(0x202af7, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) 8.495094638s ago: executing program 4 (id=111): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88842, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007300004000000000ff"]) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 7.460829238s ago: executing program 2 (id=113): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(r2, 0x9) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x5, "536dd8e1"}, @extension_unit={0xc, 0x24, 0x8, 0x60, 0x0, 0xfd, "7742946023"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, '\f'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x1, 0x3, 0x1000, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x1, 0x4e, 0x3ff}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x2, 0x3, 0x40, 0xe}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x40, 0x1, 0x2}]}}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000f80)="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", 0x801}, {0x0}], 0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x5fc}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={r9, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) socket$nl_generic(0x10, 0x3, 0x10) 7.155434519s ago: executing program 4 (id=114): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(r2, 0x9) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x5, "536dd8e1"}, @extension_unit={0xc, 0x24, 0x8, 0x60, 0x0, 0xfd, "7742946023"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, '\f'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x1, 0x3, 0x1000, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x1, 0x4e, 0x3ff}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x2, 0x3, 0x40, 0xe}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x40, 0x1, 0x2}]}}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c021000050001072501"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x5fc}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={r9, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) socket$nl_generic(0x10, 0x3, 0x10) 6.101563824s ago: executing program 3 (id=116): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="824900008000050018003780080002000000000000000280080003008adec842050027"], 0x40}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 5.651156079s ago: executing program 3 (id=118): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r3 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_FPEXC(0x45, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x1, 'wg2\x00', {}, 0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 5.441009264s ago: executing program 1 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000300)="12", 0x1, 0x5000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000002780)={0x5, 0x32315659, 0x1, @discrete={0x9, 0xfffffffd}}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x1, 0x3}, 0x10) dup3(r3, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20000000) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000008) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x2000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="050000000000000000002604000008000300", @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000088}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000a001"]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x88, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 4.985102849s ago: executing program 1 (id=120): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/140, &(0x7f0000000000)=0x8c) unshare(0x4000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x901}], 0x1, 0x0, 0x0, 0x0) unshare(0x2c020400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) 4.132078675s ago: executing program 0 (id=122): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat64(r5, &(0x7f00000000c0)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000100), &(0x7f0000000140)=0x4) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r9, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x4) shutdown(r9, 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 3.975098653s ago: executing program 1 (id=123): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="00150b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1b, 0x91}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) 3.85703909s ago: executing program 0 (id=124): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x14004000}, 0x40000) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x188) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000010", 0xfdef}], 0x1}, 0x800) 3.606362736s ago: executing program 3 (id=125): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd646, 0x7, 0x10000000000f, 0x100000000, 0x1fe, 0x0, 0x58, 0x8000000000000001, 0xc7, 0x7fff, 0x101, 0x392ad71a, 0x1], 0xdddd1000, 0x141a54}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80000001, 0x81e, 0x8, 0xe, 0xb6, 0x61, '\x00', 0xe, 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r6, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r6, 0x200, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.167129216s ago: executing program 4 (id=126): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x62c03) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x48, 0x3, &(0x7f0000000080)={0xa, "c240aa6643d952861747cfef4732c626e52100cb1c04c2519b5e4dee89c58a199a"}}) 2.78288303s ago: executing program 0 (id=127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x100000, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2.666455535s ago: executing program 2 (id=128): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000174389349"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020000"], 0x0) (fail_nth: 3) 2.548555984s ago: executing program 0 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x61ffc4ad9d27ec86}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (fail_nth: 3) 2.199606666s ago: executing program 2 (id=130): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_io_uring_submit(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x40202) fstat64(r5, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x48040) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) pipe2$9p(&(0x7f0000000240), 0x0) fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x20001, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x2f6003) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x8, 0x1000, 0x0, r8, 0x8}) 2.17247139s ago: executing program 0 (id=131): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r3 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_GET_FPEXC(0x45, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x1, 'wg2\x00', {}, 0x5}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.443349234s ago: executing program 3 (id=132): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file1\x00') (async) openat(r5, &(0x7f0000000000)='./file1\x00', 0x240, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000024000400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) semget$private(0x0, 0x0, 0xfee7cb7f974dc2fd) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000080)={[0x1, 0x7, 0x6, 0x6, 0x9, 0x100000001, 0x9, 0x7af6, 0x8, 0xc, 0x7, 0x7, 0x101, 0xa, 0x8, 0x1], 0xeeee8000, 0x80002}) (async) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async) syz_usb_control_io$uac1(r11, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) 1.297133513s ago: executing program 3 (id=133): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf8", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x40408e0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.113556495s ago: executing program 2 (id=134): r0 = socket(0x2b, 0x80801, 0x1) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x800) alarm(0x1000000001) alarm(0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000080000000000800104000044000100", @ANYRES32, @ANYBLOB="a6ce00000000000000000000000000000000000097a0f51a1e650507fdbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000040000000200"/24, @ANYRES32, @ANYBLOB], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x5b23, 0x0) poll(&(0x7f0000000200)=[{r3, 0x8110}], 0x1, 0x7f) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) 482.288027ms ago: executing program 1 (id=135): r0 = socket$packet(0x11, 0x2, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = timerfd_create(0x2, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='-\x00', &(0x7f0000000200)='-{{*{/!$#\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"766cace9c303653f121a2d892000", r5, 0x0, {0x81, 0x50000a}, {0x3, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x9, 0x400, 0xffffffffffff0003, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x80000001, 0x522586f, 0xfffffffffffffffb, 0x200000000000007]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f00000003c0)={"13730e6efda3ac2a4f289bd623e03839", r3, r5, {0x0, 0x3}, {0x6}, 0x4, [0x4c1, 0x3, 0xb, 0x8, 0xb13, 0x4, 0x9, 0xfffff00000000000, 0xffffffffffffffff, 0x0, 0x40, 0x6, 0x2, 0x9, 0x6, 0x6]}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r0, &(0x7f0000000040)="7538736d00ff370100000000800000f488a80464fe0b6003", 0x18, 0x24044881, &(0x7f0000000000)={0x11, 0x88a8, r10, 0x1, 0x4, 0x6, @broadcast}, 0x14) 182.142161ms ago: executing program 0 (id=136): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(r2, 0x9) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x5, "536dd8e1"}, @extension_unit={0xc, 0x24, 0x8, 0x60, 0x0, 0xfd, "7742946023"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x9, '\f'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x1, 0x3, 0x1000, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x1, 0x4e, 0x3ff}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x2, 0x3, 0x40, 0xe}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x40, 0x1, 0x2}]}}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c021000050001072501"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x5fc}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={r9, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) socket$nl_generic(0x10, 0x3, 0x10) 181.473857ms ago: executing program 3 (id=137): r0 = socket(0x10, 0x803, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='sched\x00') preadv(r2, 0x0, 0x0, 0xfffffffc, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00') getdents(r3, &(0x7f0000000140)=""/72, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x6, 0x0, 0x8, 0x4, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) 0s ago: executing program 4 (id=138): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000555ac01bfef1045fdbf3a21568f4"], 0x50) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 73.873354][ T5817] cgroup: Unknown subsys name 'net' [ 74.064157][ T5817] cgroup: Unknown subsys name 'cpuset' [ 74.072664][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.526310][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.509666][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.518020][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.526445][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.535194][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.543107][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.551142][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.559351][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.566878][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.570931][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.574574][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.591356][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.591505][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.599914][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.605661][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.621626][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.629744][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.629990][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.638835][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.651849][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.657897][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.692260][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.700856][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.702133][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.724513][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.743545][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.434085][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 80.465086][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 80.476217][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 80.756528][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 80.767189][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 80.825475][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.832948][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.841374][ T5854] bridge_slave_0: entered allmulticast mode [ 80.848654][ T5854] bridge_slave_0: entered promiscuous mode [ 80.857869][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.865038][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.872471][ T5850] bridge_slave_0: entered allmulticast mode [ 80.879661][ T5850] bridge_slave_0: entered promiscuous mode [ 80.933337][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.941649][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.948921][ T5854] bridge_slave_1: entered allmulticast mode [ 80.956592][ T5854] bridge_slave_1: entered promiscuous mode [ 80.964259][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.971810][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.979933][ T5850] bridge_slave_1: entered allmulticast mode [ 80.987057][ T5850] bridge_slave_1: entered promiscuous mode [ 81.007135][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.014354][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.022668][ T5852] bridge_slave_0: entered allmulticast mode [ 81.030267][ T5852] bridge_slave_0: entered promiscuous mode [ 81.084595][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.091910][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.099250][ T5852] bridge_slave_1: entered allmulticast mode [ 81.106585][ T5852] bridge_slave_1: entered promiscuous mode [ 81.138261][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.174663][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.187381][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.216431][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.244883][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.268452][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.366180][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.373732][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.381124][ T5849] bridge_slave_0: entered allmulticast mode [ 81.389373][ T5849] bridge_slave_0: entered promiscuous mode [ 81.397209][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.404476][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.412069][ T5853] bridge_slave_0: entered allmulticast mode [ 81.419108][ T5853] bridge_slave_0: entered promiscuous mode [ 81.439736][ T5850] team0: Port device team_slave_0 added [ 81.448225][ T5852] team0: Port device team_slave_0 added [ 81.455157][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.462794][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.470422][ T5849] bridge_slave_1: entered allmulticast mode [ 81.477988][ T5849] bridge_slave_1: entered promiscuous mode [ 81.485450][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.494069][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.501920][ T5853] bridge_slave_1: entered allmulticast mode [ 81.508988][ T5853] bridge_slave_1: entered promiscuous mode [ 81.517795][ T5854] team0: Port device team_slave_0 added [ 81.525448][ T5850] team0: Port device team_slave_1 added [ 81.533813][ T5852] team0: Port device team_slave_1 added [ 81.581352][ T5854] team0: Port device team_slave_1 added [ 81.657178][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.664289][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.690301][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.701014][ T5830] Bluetooth: hci2: command tx timeout [ 81.713600][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.721350][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.748547][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.764306][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.773545][ T5830] Bluetooth: hci0: command tx timeout [ 81.781436][ T5841] Bluetooth: hci4: command tx timeout [ 81.787250][ T5830] Bluetooth: hci3: command tx timeout [ 81.795836][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.808913][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.830256][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.841020][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.868366][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.879277][ T5830] Bluetooth: hci1: command tx timeout [ 81.887895][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.895297][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.921732][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.962311][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.972222][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.979174][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.006414][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.073502][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.080485][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.107591][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.144715][ T5849] team0: Port device team_slave_0 added [ 82.157556][ T5850] hsr_slave_0: entered promiscuous mode [ 82.164546][ T5850] hsr_slave_1: entered promiscuous mode [ 82.202058][ T5849] team0: Port device team_slave_1 added [ 82.221276][ T5853] team0: Port device team_slave_0 added [ 82.229833][ T5853] team0: Port device team_slave_1 added [ 82.241890][ T5852] hsr_slave_0: entered promiscuous mode [ 82.248494][ T5852] hsr_slave_1: entered promiscuous mode [ 82.255404][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 82.261556][ T5852] Cannot create hsr debugfs directory [ 82.336323][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.343683][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.370946][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.394813][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.401984][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.428819][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.458177][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.465282][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.491252][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.520947][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.528019][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.555212][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.595745][ T5854] hsr_slave_0: entered promiscuous mode [ 82.602097][ T5854] hsr_slave_1: entered promiscuous mode [ 82.608210][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 82.614096][ T5854] Cannot create hsr debugfs directory [ 82.747879][ T5849] hsr_slave_0: entered promiscuous mode [ 82.754458][ T5849] hsr_slave_1: entered promiscuous mode [ 82.760538][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 82.766414][ T5849] Cannot create hsr debugfs directory [ 82.816975][ T5853] hsr_slave_0: entered promiscuous mode [ 82.823396][ T5853] hsr_slave_1: entered promiscuous mode [ 82.829535][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 82.836261][ T5853] Cannot create hsr debugfs directory [ 83.265444][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.278492][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.297114][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.324672][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.375764][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.387486][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.400047][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.425339][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.509106][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.520265][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.542622][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.553387][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.683096][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.697661][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.717736][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.727674][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.738736][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.775030][ T5830] Bluetooth: hci2: command tx timeout [ 83.832816][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.849705][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.861249][ T5841] Bluetooth: hci4: command tx timeout [ 83.866709][ T5841] Bluetooth: hci0: command tx timeout [ 83.874119][ T5830] Bluetooth: hci3: command tx timeout [ 83.874356][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.897762][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.913253][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.927066][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.934620][ T5830] Bluetooth: hci1: command tx timeout [ 83.973969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.981405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.999832][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.007099][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.032586][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.065977][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.073225][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.099767][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.106932][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.190510][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.212854][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.280228][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.299770][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.316708][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.334899][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.342032][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.372341][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.379644][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.390714][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.397954][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.423542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.431900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.445573][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.529299][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.546395][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.618177][ T5850] veth0_vlan: entered promiscuous mode [ 84.665552][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.677413][ T5850] veth1_vlan: entered promiscuous mode [ 84.711770][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.732373][ T5852] veth0_vlan: entered promiscuous mode [ 84.760300][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.775910][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.796220][ T5852] veth1_vlan: entered promiscuous mode [ 84.813419][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.820920][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.835398][ T5850] veth0_macvtap: entered promiscuous mode [ 84.861967][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.869179][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.878777][ T5850] veth1_macvtap: entered promiscuous mode [ 84.947048][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.973021][ T5854] veth0_vlan: entered promiscuous mode [ 84.980627][ T5852] veth0_macvtap: entered promiscuous mode [ 84.996940][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.011550][ T5852] veth1_macvtap: entered promiscuous mode [ 85.042188][ T5854] veth1_vlan: entered promiscuous mode [ 85.048922][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.061870][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.085341][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.095821][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.104855][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.125600][ T5849] veth0_vlan: entered promiscuous mode [ 85.144716][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.173275][ T5849] veth1_vlan: entered promiscuous mode [ 85.205053][ T5854] veth0_macvtap: entered promiscuous mode [ 85.226471][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.240625][ T5854] veth1_macvtap: entered promiscuous mode [ 85.250034][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.260218][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.287295][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.345240][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.363573][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.366721][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.391494][ T5849] veth0_macvtap: entered promiscuous mode [ 85.407645][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.446039][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.464738][ T5849] veth1_macvtap: entered promiscuous mode [ 85.483842][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.493509][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.503423][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.515446][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529383][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.539600][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.594913][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.614476][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.631953][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.659761][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.665255][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.730224][ T5853] veth0_vlan: entered promiscuous mode [ 85.738803][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.748659][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.792448][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796442][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800481][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.812118][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.832908][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.844565][ T5853] veth1_vlan: entered promiscuous mode [ 85.870815][ T5830] Bluetooth: hci2: command tx timeout [ 85.876373][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933040][ T5830] Bluetooth: hci3: command tx timeout [ 85.938579][ T5830] Bluetooth: hci0: command tx timeout [ 85.941061][ T5841] Bluetooth: hci4: command tx timeout [ 86.019679][ T5841] Bluetooth: hci1: command tx timeout [ 86.042541][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.050399][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.109470][ T5931] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 86.195224][ T5853] veth0_macvtap: entered promiscuous mode [ 86.224572][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.234117][ T5853] veth1_macvtap: entered promiscuous mode [ 86.244232][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.282048][ T5935] netlink: 'syz.4.7': attribute type 10 has an invalid length. [ 86.349416][ T5935] team0: Port device netdevsim0 added [ 86.376260][ T5938] vivid-002: disconnect [ 86.390619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.399954][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.423916][ T5937] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 86.432165][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.452708][ T5937] team0: Port device netdevsim0 added [ 86.479132][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.509463][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.519758][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.566567][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.578535][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789877][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.798742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.827811][ T43] cfg80211: failed to load regulatory.db [ 86.835030][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.881261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 86.976829][ T5930] vivid-002: reconnect [ 87.001183][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.044877][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.066923][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.091685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.232692][ T5951] FAULT_INJECTION: forcing a failure. [ 87.232692][ T5951] name failslab, interval 1, probability 0, space 0, times 1 [ 87.247235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 87.247264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.261222][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.277084][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.293218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.332436][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.379944][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 87.379968][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.379984][ T5951] Call Trace: [ 87.379991][ T5951] [ 87.379999][ T5951] dump_stack_lvl+0x189/0x250 [ 87.380043][ T5951] ? __pfx____ratelimit+0x10/0x10 [ 87.380063][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.380084][ T5951] ? __pfx__printk+0x10/0x10 [ 87.380100][ T5951] ? rcu_is_watching+0x15/0xb0 [ 87.380117][ T5951] ? trace_fib_table_lookup+0x85/0x200 [ 87.380142][ T5951] should_fail_ex+0x414/0x560 [ 87.380170][ T5951] should_failslab+0xa8/0x100 [ 87.380188][ T5951] kmem_cache_alloc_noprof+0x74/0x6e0 [ 87.380206][ T5951] ? __pfx_find_exception+0x10/0x10 [ 87.380225][ T5951] ? dst_alloc+0x105/0x170 [ 87.380242][ T5951] ? fib_lookup+0x76/0x440 [ 87.380263][ T5951] dst_alloc+0x105/0x170 [ 87.380284][ T5951] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 87.380306][ T5951] ? ip_route_output_key_hash_rcu+0x1351/0x23e0 [ 87.380333][ T5951] ? ip_route_output_key_hash+0xc1/0x280 [ 87.380363][ T5951] ip_route_output_key_hash+0x174/0x280 [ 87.380388][ T5951] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 87.380429][ T5951] tcp_v4_connect+0x710/0x1a90 [ 87.380470][ T5951] ? __pfx_tcp_v4_connect+0x10/0x10 [ 87.380497][ T5951] __inet_stream_connect+0x2ae/0xe70 [ 87.380533][ T5951] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.380552][ T5951] ? __pfx___inet_stream_connect+0x10/0x10 [ 87.380584][ T5951] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.380602][ T5951] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.380632][ T5951] inet_stream_connect+0x66/0xa0 [ 87.380660][ T5951] kernel_connect+0x116/0x180 [ 87.380688][ T5951] ? __pfx_kernel_connect+0x10/0x10 [ 87.380725][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 87.380752][ T5951] smc_connect+0x7a5/0xd90 [ 87.380779][ T5951] __sys_connect+0x316/0x440 [ 87.380800][ T5951] ? __fget_files+0x3a0/0x420 [ 87.380817][ T5951] ? __pfx___sys_connect+0x10/0x10 [ 87.380853][ T5951] ? __pfx_ksys_write+0x10/0x10 [ 87.380883][ T5951] __ia32_sys_connect+0x7a/0x90 [ 87.380907][ T5951] __do_fast_syscall_32+0xb6/0x2b0 [ 87.380930][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.380956][ T5951] do_fast_syscall_32+0x34/0x80 [ 87.380978][ T5951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.380996][ T5951] RIP: 0023:0xf702d539 [ 87.381029][ T5951] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 87.381042][ T5951] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 87.381061][ T5951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 87.381073][ T5951] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.381083][ T5951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.381093][ T5951] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.381103][ T5951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.381134][ T5951] [ 87.705520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.714059][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.726496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.754819][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.774316][ T24] usb 1-1: Product: syz [ 87.781831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.801487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.868514][ T24] usb 1-1: Manufacturer: syz [ 87.931434][ T5841] Bluetooth: hci2: command tx timeout [ 87.936905][ T24] usb 1-1: SerialNumber: syz [ 88.014514][ T5841] Bluetooth: hci4: command tx timeout [ 88.022705][ T5841] Bluetooth: hci0: command tx timeout [ 88.022720][ T5830] Bluetooth: hci3: command tx timeout [ 88.082015][ T24] usb 1-1: config 0 descriptor?? [ 88.091353][ T5830] Bluetooth: hci1: command tx timeout [ 88.280930][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.426658][ T5968] FAULT_INJECTION: forcing a failure. [ 88.426658][ T5968] name failslab, interval 1, probability 0, space 0, times 0 [ 88.526109][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 88.526129][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.526135][ T5968] Call Trace: [ 88.526141][ T5968] [ 88.526148][ T5968] dump_stack_lvl+0x189/0x250 [ 88.526166][ T5968] ? __pfx____ratelimit+0x10/0x10 [ 88.526179][ T5968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.526193][ T5968] ? __pfx__printk+0x10/0x10 [ 88.526206][ T5968] ? __pfx___might_resched+0x10/0x10 [ 88.526219][ T5968] ? fs_reclaim_acquire+0x7d/0x100 [ 88.526236][ T5968] should_fail_ex+0x414/0x560 [ 88.526253][ T5968] should_failslab+0xa8/0x100 [ 88.526264][ T5968] kmem_cache_alloc_node_noprof+0x77/0x710 [ 88.526277][ T5968] ? __alloc_skb+0x112/0x2d0 [ 88.526285][ T5968] ? netlink_autobind+0xdb/0x300 [ 88.526297][ T5968] __alloc_skb+0x112/0x2d0 [ 88.526308][ T5968] netlink_sendmsg+0x5c6/0xb30 [ 88.526322][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.526332][ T5968] ? __import_iovec+0x40e/0x7f0 [ 88.526343][ T5968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 88.526358][ T5968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.526368][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.526377][ T5968] __sock_sendmsg+0x21c/0x270 [ 88.526391][ T5968] ____sys_sendmsg+0x505/0x830 [ 88.526405][ T5968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.526423][ T5968] ___sys_sendmsg+0x21f/0x2a0 [ 88.526434][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.526462][ T5968] ? __fget_files+0x2a/0x420 [ 88.526470][ T5968] ? __fget_files+0x3a0/0x420 [ 88.526484][ T5968] __sys_sendmsg+0x164/0x220 [ 88.526495][ T5968] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.526510][ T5968] ? __pfx_ksys_write+0x10/0x10 [ 88.526524][ T5968] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 88.526539][ T5968] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.526552][ T5968] __do_fast_syscall_32+0xb6/0x2b0 [ 88.526565][ T5968] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.526578][ T5968] do_fast_syscall_32+0x34/0x80 [ 88.526591][ T5968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.526603][ T5968] RIP: 0023:0xf7f36539 [ 88.526612][ T5968] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 88.526620][ T5968] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 88.526634][ T5968] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 88.526641][ T5968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.526646][ T5968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.526651][ T5968] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.526656][ T5968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.526671][ T5968] [ 88.930646][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.116526][ T5972] process 'syz.4.12' launched './file0' with NULL argv: empty string added [ 89.162849][ T5831] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.173108][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.182684][ T5831] usb 4-1: Product: syz [ 89.189630][ T5831] usb 4-1: Manufacturer: syz [ 89.311217][ T5831] usb 4-1: SerialNumber: syz [ 89.334496][ T5831] usb 4-1: config 0 descriptor?? [ 89.431225][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'. [ 89.650960][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.147071][ T5958] FAULT_INJECTION: forcing a failure. [ 90.147071][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.190897][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 90.190913][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.190919][ T5958] Call Trace: [ 90.190924][ T5958] [ 90.190928][ T5958] dump_stack_lvl+0x189/0x250 [ 90.190945][ T5958] ? __pfx____ratelimit+0x10/0x10 [ 90.190958][ T5958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.190970][ T5958] ? __pfx__printk+0x10/0x10 [ 90.190987][ T5958] should_fail_ex+0x414/0x560 [ 90.191004][ T5958] strncpy_from_user+0x36/0x290 [ 90.191025][ T5958] getname_flags+0xf3/0x540 [ 90.191038][ T5958] do_sys_openat2+0xbc/0x1c0 [ 90.191051][ T5958] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.191062][ T5958] ? ksys_write+0x22a/0x250 [ 90.191075][ T5958] ? __pfx_ksys_write+0x10/0x10 [ 90.191089][ T5958] __ia32_compat_sys_openat+0x131/0x160 [ 90.191104][ T5958] __do_fast_syscall_32+0xb6/0x2b0 [ 90.191117][ T5958] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.191132][ T5958] do_fast_syscall_32+0x34/0x80 [ 90.191144][ T5958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.191156][ T5958] RIP: 0023:0xf7f55539 [ 90.191165][ T5958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 90.191173][ T5958] RSP: 002b:00000000f5425100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 90.191184][ T5958] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5425150 [ 90.191191][ T5958] RDX: 00000000008c4201 RSI: 0000000000000000 RDI: 00000000f73e5ff4 [ 90.191196][ T5958] RBP: 00000000008c4201 R08: 0000000000000000 R09: 0000000000000000 [ 90.191202][ T5958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.191207][ T5958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.191221][ T5958] [ 90.197199][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 90.532221][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 90.541176][ T24] usb 5-1: config 0 has no interface number 0 [ 90.547564][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 90.586472][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.596318][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.657626][ T24] usb 5-1: Product: syz [ 90.674730][ T24] usb 5-1: Manufacturer: syz [ 90.700688][ T24] usb 5-1: SerialNumber: syz [ 90.752184][ T5923] usb 1-1: USB disconnect, device number 2 [ 90.802998][ T24] usb 5-1: config 0 descriptor?? [ 90.825050][ T24] smsc75xx v1.0.0 [ 90.833790][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 90.915273][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 90.933539][ T5988] FAULT_INJECTION: forcing a failure. [ 90.933539][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.010333][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 91.010358][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.010368][ T5988] Call Trace: [ 91.010375][ T5988] [ 91.010384][ T5988] dump_stack_lvl+0x189/0x250 [ 91.010411][ T5988] ? __pfx____ratelimit+0x10/0x10 [ 91.010432][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.010453][ T5988] ? __pfx__printk+0x10/0x10 [ 91.010484][ T5988] should_fail_ex+0x414/0x560 [ 91.010514][ T5988] _copy_to_user+0x31/0xb0 [ 91.010537][ T5988] simple_read_from_buffer+0xe1/0x170 [ 91.010566][ T5988] proc_fail_nth_read+0x1b3/0x220 [ 91.010591][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.010615][ T5988] ? rw_verify_area+0x2a6/0x4d0 [ 91.010636][ T5988] ? __lock_acquire+0xab9/0xd20 [ 91.010651][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.010674][ T5988] vfs_read+0x200/0xa30 [ 91.010695][ T5988] ? fdget_pos+0x247/0x320 [ 91.010720][ T5988] ? __pfx___mutex_lock+0x10/0x10 [ 91.010745][ T5988] ? __pfx_vfs_read+0x10/0x10 [ 91.010765][ T5988] ? __fget_files+0x2a/0x420 [ 91.010784][ T5988] ? __fget_files+0x3a0/0x420 [ 91.010797][ T5988] ? __fget_files+0x2a/0x420 [ 91.010819][ T5988] ksys_read+0x145/0x250 [ 91.010842][ T5988] ? __pfx_ksys_read+0x10/0x10 [ 91.010866][ T5988] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 91.010890][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.010914][ T5988] __do_fast_syscall_32+0xb6/0x2b0 [ 91.010936][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.010959][ T5988] do_fast_syscall_32+0x34/0x80 [ 91.010981][ T5988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.011001][ T5988] RIP: 0023:0xf7f42539 [ 91.011015][ T5988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 91.011029][ T5988] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 91.011046][ T5988] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 91.011057][ T5988] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 91.011067][ T5988] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 91.011077][ T5988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.011086][ T5988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.011114][ T5988] [ 91.341615][ T5972] Zero length message leads to an empty skb [ 91.602979][ T5992] FAULT_INJECTION: forcing a failure. [ 91.602979][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.603463][ T5923] usb 4-1: USB disconnect, device number 2 [ 91.692312][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) [ 91.692334][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.692344][ T5992] Call Trace: [ 91.692351][ T5992] [ 91.692358][ T5992] dump_stack_lvl+0x189/0x250 [ 91.692385][ T5992] ? __pfx____ratelimit+0x10/0x10 [ 91.692406][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.692427][ T5992] ? __pfx__printk+0x10/0x10 [ 91.692462][ T5992] should_fail_ex+0x414/0x560 [ 91.692491][ T5992] _copy_to_user+0x31/0xb0 [ 91.692515][ T5992] simple_read_from_buffer+0xe1/0x170 [ 91.692543][ T5992] proc_fail_nth_read+0x1b3/0x220 [ 91.692567][ T5992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.692591][ T5992] ? rw_verify_area+0x2a6/0x4d0 [ 91.692621][ T5992] ? __lock_acquire+0xab9/0xd20 [ 91.692634][ T5992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.692653][ T5992] vfs_read+0x200/0xa30 [ 91.692671][ T5992] ? fdget_pos+0x247/0x320 [ 91.692688][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 91.692708][ T5992] ? __pfx_vfs_read+0x10/0x10 [ 91.692730][ T5992] ? __fget_files+0x2a/0x420 [ 91.692748][ T5992] ? __fget_files+0x3a0/0x420 [ 91.692763][ T5992] ? __fget_files+0x2a/0x420 [ 91.692786][ T5992] ksys_read+0x145/0x250 [ 91.692808][ T5992] ? __pfx_ksys_read+0x10/0x10 [ 91.692831][ T5992] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 91.692851][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.692873][ T5992] __do_fast_syscall_32+0xb6/0x2b0 [ 91.692893][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.692918][ T5992] do_fast_syscall_32+0x34/0x80 [ 91.692941][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.692961][ T5992] RIP: 0023:0xf702d539 [ 91.692976][ T5992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 91.692987][ T5992] RSP: 002b:00000000f541d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 91.693004][ T5992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f541d620 [ 91.693016][ T5992] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 91.693025][ T5992] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 91.693035][ T5992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.693044][ T5992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.693068][ T5992] [ 92.128650][ T6003] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.454166][ T6010] fuse: Unknown parameter 'use00000000000000000000' [ 93.531252][ T24] usb 5-1: USB disconnect, device number 3 [ 93.571272][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.750985][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 93.772308][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 93.848399][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 93.867455][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.890045][ T10] usb 1-1: Product: syz [ 93.898404][ T10] usb 1-1: Manufacturer: syz [ 93.923415][ T6027] syz.4.31 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.940880][ T10] usb 1-1: SerialNumber: syz [ 93.951500][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 93.954969][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 93.966809][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 93.989159][ T10] usb 1-1: config 0 descriptor?? [ 94.002962][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 94.011897][ T6027] random: crng reseeded on system resumption [ 94.071352][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 94.074393][ T6029] ip6gretap1: entered allmulticast mode [ 94.128464][ T6032] ip6gretap1: entered allmulticast mode [ 94.219868][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.228904][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.269900][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.299182][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.368834][ T6015] team_slave_0: entered promiscuous mode [ 94.375056][ T6015] team_slave_1: entered promiscuous mode [ 94.389476][ T6015] vlan2: entered promiscuous mode [ 94.396360][ T6015] team0: entered promiscuous mode [ 94.522231][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 94.588179][ T10] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 95.207535][ T10] usb 1-1: USB disconnect, device number 3 [ 95.287114][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.375216][ T6050] netlink: 'syz.1.39': attribute type 5 has an invalid length. [ 95.423043][ T30] audit: type=1326 audit(1762139270.999:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.37" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x0 [ 96.101020][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.310869][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.351094][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 96.595824][ T5923] usb 1-1: device descriptor read/64, error -71 [ 96.624782][ T10] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 96.634084][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.670872][ T10] usb 4-1: Product: syz [ 96.682079][ T10] usb 4-1: Manufacturer: syz [ 96.688415][ T10] usb 4-1: SerialNumber: syz [ 96.702121][ T10] usb 4-1: config 0 descriptor?? [ 96.709080][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.773157][ T10] usb 4-1: bad CDC descriptors [ 96.886806][ T5923] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.200794][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.256215][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.270848][ T5923] usb 1-1: device descriptor read/64, error -71 [ 97.472096][ T5923] usb usb1-port1: attempt power cycle [ 97.646546][ T6080] FAULT_INJECTION: forcing a failure. [ 97.646546][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.662345][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 97.662369][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.662380][ T6080] Call Trace: [ 97.662387][ T6080] [ 97.662394][ T6080] dump_stack_lvl+0x189/0x250 [ 97.662422][ T6080] ? __pfx____ratelimit+0x10/0x10 [ 97.662444][ T6080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.662466][ T6080] ? __pfx__printk+0x10/0x10 [ 97.662485][ T6080] ? __might_fault+0xb0/0x130 [ 97.662519][ T6080] should_fail_ex+0x414/0x560 [ 97.662548][ T6080] _copy_from_user+0x2d/0xb0 [ 97.662571][ T6080] media_device_ioctl+0x1d8/0x430 [ 97.662596][ T6080] ? __pfx_media_device_ioctl+0x10/0x10 [ 97.662615][ T6080] ? do_vfs_ioctl+0xbe8/0x1430 [ 97.662673][ T6080] media_device_compat_ioctl+0x16e/0x2f0 [ 97.662698][ T6080] ? __pfx_media_device_compat_ioctl+0x10/0x10 [ 97.662723][ T6080] ? __fget_files+0x3a0/0x420 [ 97.662739][ T6080] ? __fget_files+0x2a/0x420 [ 97.662754][ T6080] ? __pfx_media_device_compat_ioctl+0x10/0x10 [ 97.662777][ T6080] ? media_compat_ioctl+0xfe/0x120 [ 97.662801][ T6080] __ia32_compat_sys_ioctl+0x543/0x840 [ 97.662826][ T6080] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 97.662848][ T6080] ? __fget_files+0x3a0/0x420 [ 97.662870][ T6080] ? fput+0xa0/0xd0 [ 97.662890][ T6080] ? ksys_write+0x22a/0x250 [ 97.662911][ T6080] ? exc_page_fault+0x82/0x100 [ 97.662934][ T6080] ? __pfx_ksys_write+0x10/0x10 [ 97.662959][ T6080] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 97.662982][ T6080] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.663007][ T6080] __do_fast_syscall_32+0xb6/0x2b0 [ 97.663031][ T6080] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.663055][ T6080] do_fast_syscall_32+0x34/0x80 [ 97.663198][ T6080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.663219][ T6080] RIP: 0023:0xf6ffd539 [ 97.663236][ T6080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 97.663253][ T6080] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 97.663273][ T6080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0487c04 [ 97.663285][ T6080] RDX: 0000000080000c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.663296][ T6080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.663306][ T6080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.663320][ T6080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.663347][ T6080] [ 98.022580][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.043912][ T5923] usb 1-1: device descriptor read/8, error -71 [ 98.296948][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.387804][ T5923] usb 1-1: device descriptor read/8, error -71 [ 98.870636][ T5923] usb usb1-port1: unable to enumerate USB device [ 99.180968][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.377488][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.390394][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.496145][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 99.511758][ T5923] usb 4-1: USB disconnect, device number 3 [ 99.520338][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.641125][ T24] usb 5-1: config 0 descriptor?? [ 99.716470][ T5965] IPVS: starting estimator thread 0... [ 99.827641][ T6101] IPVS: using max 51 ests per chain, 122400 per kthread [ 99.910492][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 99.931191][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.972424][ T24] usb 5-1: USB disconnect, device number 4 [ 103.081035][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.250847][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 103.723235][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.751142][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.818173][ T5965] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 103.839122][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.945770][ T5965] usb 3-1: config 0 descriptor?? [ 104.062581][ T6158] FAULT_INJECTION: forcing a failure. [ 104.062581][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.106751][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(full) [ 104.106776][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.106786][ T6158] Call Trace: [ 104.106793][ T6158] [ 104.106799][ T6158] dump_stack_lvl+0x189/0x250 [ 104.106823][ T6158] ? __pfx____ratelimit+0x10/0x10 [ 104.106842][ T6158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.106862][ T6158] ? __pfx__printk+0x10/0x10 [ 104.106879][ T6158] ? __might_fault+0xb0/0x130 [ 104.106914][ T6158] should_fail_ex+0x414/0x560 [ 104.106943][ T6158] _copy_from_user+0x2d/0xb0 [ 104.106963][ T6158] get_compat_msghdr+0xad/0x4a0 [ 104.106985][ T6158] ? __pfx_get_compat_msghdr+0x10/0x10 [ 104.107004][ T6158] ? ___sys_recvmsg+0x1c4/0x510 [ 104.107020][ T6158] ? kfree+0x4d/0x6d0 [ 104.107046][ T6158] ___sys_recvmsg+0x17f/0x510 [ 104.107065][ T6158] ? __pfx____sys_recvmsg+0x10/0x10 [ 104.107105][ T6158] ? __fget_files+0x3a0/0x420 [ 104.107127][ T6158] do_recvmmsg+0x36a/0x770 [ 104.107152][ T6158] ? __pfx_do_recvmmsg+0x10/0x10 [ 104.107169][ T6158] ? ksys_write+0x1cb/0x250 [ 104.107208][ T6158] ? __fget_files+0x3a0/0x420 [ 104.107230][ T6158] __sys_recvmmsg+0x19d/0x280 [ 104.107251][ T6158] ? __pfx___sys_recvmmsg+0x10/0x10 [ 104.107270][ T6158] ? __pfx_ksys_write+0x10/0x10 [ 104.107294][ T6158] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 104.107316][ T6158] __do_fast_syscall_32+0xb6/0x2b0 [ 104.107339][ T6158] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.107365][ T6158] do_fast_syscall_32+0x34/0x80 [ 104.107386][ T6158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.107406][ T6158] RIP: 0023:0xf7f55539 [ 104.107420][ T6158] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 104.107433][ T6158] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 104.107451][ T6158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001040 [ 104.107462][ T6158] RDX: 0000000000000002 RSI: 0000000040000002 RDI: 0000000000000000 [ 104.107473][ T6158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.107482][ T6158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.107491][ T6158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.107518][ T6158] [ 104.415005][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.427613][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.554594][ T6163] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.884104][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.911743][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.990875][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.054614][ T5965] usbhid 3-1:0.0: can't add hid device: -71 [ 105.083265][ T5965] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.114911][ T5965] usb 3-1: USB disconnect, device number 2 [ 105.174799][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.195081][ T6180] FAULT_INJECTION: forcing a failure. [ 105.195081][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 105.210967][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.4.74 Not tainted syzkaller #0 PREEMPT(full) [ 105.210991][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.211000][ T6180] Call Trace: [ 105.211007][ T6180] [ 105.211015][ T6180] dump_stack_lvl+0x189/0x250 [ 105.211042][ T6180] ? __pfx____ratelimit+0x10/0x10 [ 105.211072][ T6180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.211093][ T6180] ? __pfx__printk+0x10/0x10 [ 105.211115][ T6180] ? __pfx___might_resched+0x10/0x10 [ 105.211139][ T6180] should_fail_ex+0x414/0x560 [ 105.211166][ T6180] should_failslab+0xa8/0x100 [ 105.211184][ T6180] __kmalloc_noprof+0xcb/0x7f0 [ 105.211203][ T6180] ? iter_file_splice_write+0x1c6/0x10e0 [ 105.211229][ T6180] iter_file_splice_write+0x1c6/0x10e0 [ 105.211274][ T6180] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.211313][ T6180] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 105.211339][ T6180] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.211369][ T6180] direct_splice_actor+0x101/0x160 [ 105.211395][ T6180] splice_direct_to_actor+0x5a8/0xcc0 [ 105.211438][ T6180] ? __pfx_direct_splice_actor+0x10/0x10 [ 105.211462][ T6180] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 105.211497][ T6180] do_splice_direct+0x181/0x270 [ 105.211524][ T6180] ? __pfx_do_splice_direct+0x10/0x10 [ 105.211546][ T6180] ? common_file_perm+0x1b5/0x230 [ 105.211571][ T6180] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 105.211590][ T6180] ? bpf_lsm_file_permission+0x9/0x20 [ 105.211607][ T6180] ? security_file_permission+0x75/0x290 [ 105.211628][ T6180] ? rw_verify_area+0x255/0x4d0 [ 105.211661][ T6180] do_sendfile+0x4da/0x7e0 [ 105.211688][ T6180] ? __pfx_do_sendfile+0x10/0x10 [ 105.211707][ T6180] ? __pfx_ksys_write+0x10/0x10 [ 105.211732][ T6180] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 105.211754][ T6180] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 105.211771][ T6180] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.211796][ T6180] __do_fast_syscall_32+0xb6/0x2b0 [ 105.211821][ T6180] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.211846][ T6180] do_fast_syscall_32+0x34/0x80 [ 105.211869][ T6180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.211888][ T6180] RIP: 0023:0xf6ffd539 [ 105.211904][ T6180] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 105.211917][ T6180] RSP: 002b:00000000f53ab55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 105.211935][ T6180] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 105.211946][ T6180] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 105.211956][ T6180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.211966][ T6180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.211975][ T6180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.212002][ T6180] [ 105.543647][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.558513][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.568018][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.579127][ T24] usb 2-1: config 0 descriptor?? [ 105.587074][ T24] hub 2-1:0.0: USB hub found [ 105.831806][ T24] hub 2-1:0.0: 2 ports detected [ 105.937288][ T6183] FAULT_INJECTION: forcing a failure. [ 105.937288][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.963002][ T5923] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.963840][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 105.963861][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.963871][ T6183] Call Trace: [ 105.963877][ T6183] [ 105.963884][ T6183] dump_stack_lvl+0x189/0x250 [ 105.963910][ T6183] ? __pfx____ratelimit+0x10/0x10 [ 105.963932][ T6183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.963953][ T6183] ? __pfx__printk+0x10/0x10 [ 105.963970][ T6183] ? __might_fault+0xb0/0x130 [ 105.964002][ T6183] should_fail_ex+0x414/0x560 [ 105.964031][ T6183] _copy_from_user+0x2d/0xb0 [ 105.964053][ T6183] kvm_arch_vm_ioctl+0x66d/0x1700 [ 105.964076][ T6183] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 105.964093][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964137][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964156][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964184][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964210][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964244][ T6183] ? is_bpf_text_address+0x26/0x2b0 [ 105.964265][ T6183] ? is_bpf_text_address+0x292/0x2b0 [ 105.964282][ T6183] ? is_bpf_text_address+0x26/0x2b0 [ 105.964300][ T6183] ? kernel_text_address+0xa5/0xe0 [ 105.964324][ T6183] ? __kernel_text_address+0xd/0x40 [ 105.964345][ T6183] ? unwind_get_return_address+0x4d/0x90 [ 105.964364][ T6183] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.964385][ T6183] ? arch_stack_walk+0xfc/0x150 [ 105.964414][ T6183] ? stack_trace_save+0x9c/0xe0 [ 105.964434][ T6183] ? __pfx_stack_trace_save+0x10/0x10 [ 105.964455][ T6183] ? stack_depot_save_flags+0x40/0x860 [ 105.964482][ T6183] kvm_vm_ioctl+0x85f/0xc60 [ 105.964503][ T6183] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 105.964519][ T6183] ? __kasan_save_free_info+0x46/0x50 [ 105.964537][ T6183] ? __kasan_slab_free+0x5c/0x80 [ 105.964558][ T6183] ? kfree+0x19a/0x6d0 [ 105.964576][ T6183] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 105.964594][ T6183] ? security_file_ioctl_compat+0xcb/0x2d0 [ 105.964613][ T6183] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 105.964639][ T6183] ? __do_fast_syscall_32+0xb6/0x2b0 [ 105.964659][ T6183] ? do_fast_syscall_32+0x34/0x80 [ 105.964679][ T6183] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.964711][ T6183] ? kvm_arch_vm_compat_ioctl+0x119/0x220 [ 105.964730][ T6183] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 105.964769][ T6183] ? kasan_quarantine_put+0xdd/0x220 [ 105.964790][ T6183] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.964819][ T6183] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 105.964840][ T6183] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 105.964863][ T6183] ? do_vfs_ioctl+0xbe8/0x1430 [ 105.964885][ T6183] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.964918][ T6183] ? __lock_acquire+0xab9/0xd20 [ 105.964944][ T6183] kvm_vm_compat_ioctl+0x265/0x330 [ 105.964969][ T6183] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 105.964991][ T6183] ? __fget_files+0x3a0/0x420 [ 105.965006][ T6183] ? __fget_files+0x2a/0x420 [ 105.965024][ T6183] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 105.965046][ T6183] __ia32_compat_sys_ioctl+0x543/0x840 [ 105.965070][ T6183] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 105.965091][ T6183] ? __fget_files+0x3a0/0x420 [ 105.965112][ T6183] ? fput+0xa0/0xd0 [ 105.965140][ T6183] ? ksys_write+0x22a/0x250 [ 105.965160][ T6183] ? exc_page_fault+0x82/0x100 [ 105.965181][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 105.965205][ T6183] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 105.965227][ T6183] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.965251][ T6183] __do_fast_syscall_32+0xb6/0x2b0 [ 105.965273][ T6183] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.965297][ T6183] do_fast_syscall_32+0x34/0x80 [ 105.965318][ T6183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.965337][ T6183] RIP: 0023:0xf7f36539 [ 105.965352][ T6183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 105.965365][ T6183] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 105.965383][ T6183] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008048ae66 [ 105.965394][ T6183] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.965404][ T6183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.965413][ T6183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.965423][ T6183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.965449][ T6183] [ 106.427437][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.451639][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.473171][ T6166] xt_cluster: node mask cannot exceed total number of nodes [ 106.834384][ T5923] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.144447][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 107.263042][ T24] usb 2-1: USB disconnect, device number 2 [ 107.265903][ T5923] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 107.315105][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.344128][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.506927][ T5923] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.517721][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.537274][ T5923] usb 4-1: Product: syz [ 107.561027][ T5923] usb 4-1: Manufacturer: syz [ 107.625003][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 107.639111][ T5923] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.643495][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.739219][ T6204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3693406402 (118189004864 ns) > initial count (17453120 ns). Using initial count to start timer. [ 107.810818][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 107.830800][ T5910] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 107.865791][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.876780][ T5910] usb 1-1: Product: syz [ 107.882070][ T5910] usb 1-1: Manufacturer: syz [ 107.887240][ T5910] usb 1-1: SerialNumber: syz [ 107.903658][ T6211] FAULT_INJECTION: forcing a failure. [ 107.903658][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.905542][ T5910] usb 1-1: config 0 descriptor?? [ 107.941093][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(full) [ 107.941115][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.941124][ T6211] Call Trace: [ 107.941131][ T6211] [ 107.941137][ T6211] dump_stack_lvl+0x189/0x250 [ 107.941161][ T6211] ? __pfx____ratelimit+0x10/0x10 [ 107.941181][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.941201][ T6211] ? __pfx__printk+0x10/0x10 [ 107.941230][ T6211] should_fail_ex+0x414/0x560 [ 107.941259][ T6211] _copy_to_user+0x31/0xb0 [ 107.941281][ T6211] simple_read_from_buffer+0xe1/0x170 [ 107.941308][ T6211] proc_fail_nth_read+0x1b3/0x220 [ 107.941328][ T6211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.941348][ T6211] ? rw_verify_area+0x2a6/0x4d0 [ 107.941368][ T6211] ? __lock_acquire+0xab9/0xd20 [ 107.941384][ T6211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.941411][ T6211] vfs_read+0x200/0xa30 [ 107.941432][ T6211] ? fdget_pos+0x247/0x320 [ 107.941452][ T6211] ? __pfx___mutex_lock+0x10/0x10 [ 107.941475][ T6211] ? __pfx_vfs_read+0x10/0x10 [ 107.941497][ T6211] ? __fget_files+0x2a/0x420 [ 107.941518][ T6211] ? __fget_files+0x3a0/0x420 [ 107.941533][ T6211] ? __fget_files+0x2a/0x420 [ 107.941555][ T6211] ksys_read+0x145/0x250 [ 107.941570][ T6211] ? exc_page_fault+0x82/0x100 [ 107.941587][ T6211] ? __pfx_ksys_read+0x10/0x10 [ 107.941607][ T6211] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 107.941630][ T6211] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.941659][ T6211] __do_fast_syscall_32+0xb6/0x2b0 [ 107.941682][ T6211] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.941705][ T6211] do_fast_syscall_32+0x34/0x80 [ 107.941727][ T6211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.941748][ T6211] RIP: 0023:0xf6ffd539 [ 107.941762][ T6211] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 107.941775][ T6211] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 107.941794][ T6211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed620 [ 107.941804][ T6211] RDX: 000000000000000f RSI: 00000000f7395ff4 RDI: 0000000000000000 [ 107.941814][ T6211] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 107.941823][ T6211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.941833][ T6211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.941861][ T6211] [ 107.954312][ T5910] gspca_main: sq905-2.14.0 probing 2770:9120 [ 108.223500][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.237643][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.256346][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.290846][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.324484][ T6224] capability: warning: `syz.1.87' uses deprecated v2 capabilities in a way that may be insecure [ 108.327429][ T6200] vlan2: entered promiscuous mode [ 108.400926][ T6226] syz.4.88 uses obsolete (PF_INET,SOCK_PACKET) [ 108.424392][ T5910] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 108.435979][ T5910] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 108.451218][ T5910] usb 1-1: USB disconnect, device number 8 [ 109.196296][ T6232] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.277600][ T6232] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 109.303246][ T10] usb 4-1: USB disconnect, device number 4 [ 109.304790][ T6232] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 109.330036][ T6232] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 109.344469][ T6232] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 109.379035][ T6232] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 109.431775][ T6232] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 110.005660][ T5910] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.168054][ T6265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.220843][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 110.238415][ T5910] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 110.261020][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.284979][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.381949][ T5910] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.401083][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.520836][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.630904][ T5910] usb 4-1: string descriptor 0 read error: -71 [ 110.641665][ T5910] hub 4-1:1.0: bad descriptor, ignoring hub [ 110.746853][ T5910] hub 4-1:1.0: probe with driver hub failed with error -5 [ 110.769481][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 110.809094][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 110.816603][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 110.889562][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.901512][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 110.915540][ T5910] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 110.941097][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.955832][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.108582][ T24] usb 5-1: Product: syz [ 111.343322][ T5910] usb 4-1: USB disconnect, device number 5 [ 111.524938][ T24] usb 5-1: Manufacturer: syz [ 111.554418][ T24] usb 5-1: SerialNumber: syz [ 111.609335][ T6262] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.823982][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.291032][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 113.466468][ T10] usb 1-1: no configurations [ 113.479349][ T10] usb 1-1: can't read configurations, error -22 [ 113.568497][ T5965] usb 5-1: USB disconnect, device number 5 [ 113.674393][ T6310] fuse: Unknown parameter 'user_id00000000000000000000' [ 113.693527][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 113.941464][ T10] usb 1-1: no configurations [ 113.962209][ T10] usb 1-1: can't read configurations, error -22 [ 113.970398][ T10] usb usb1-port1: attempt power cycle [ 114.490868][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 114.559180][ T6320] netlink: 'syz.4.111': attribute type 4 has an invalid length. [ 114.567120][ T6320] netlink: 17 bytes leftover after parsing attributes in process `syz.4.111'. [ 114.591497][ T10] usb 1-1: no configurations [ 114.596215][ T10] usb 1-1: can't read configurations, error -22 [ 114.702607][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 114.738857][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 114.773318][ T10] usb 1-1: no configurations [ 114.778269][ T10] usb 1-1: can't read configurations, error -22 [ 114.791522][ T10] usb usb1-port1: unable to enumerate USB device [ 114.951335][ T6315] delete_channel: no stack [ 115.670868][ T5910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.678572][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.830864][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 115.836142][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 115.961582][ T5910] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 115.972352][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.980435][ T5910] usb 3-1: Product: syz [ 116.026009][ T5910] usb 3-1: Manufacturer: syz [ 116.032202][ T5910] usb 3-1: SerialNumber: syz [ 116.037911][ T43] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 116.047446][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.070393][ T5910] usb 3-1: config 0 descriptor?? [ 116.084867][ T43] usb 5-1: Product: syz [ 116.220840][ T43] usb 5-1: Manufacturer: syz [ 116.230879][ T43] usb 5-1: SerialNumber: syz [ 116.263182][ T5910] usb 3-1: bad CDC descriptors [ 116.339815][ T43] usb 5-1: config 0 descriptor?? [ 116.348298][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 116.401978][ T43] usb 5-1: bad CDC descriptors [ 116.657360][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.723407][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.738702][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.834650][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.836104][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.077676][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.119808][ T6347] binder: 6346:6347 unknown command 0 [ 117.125429][ T6347] binder: 6346:6347 ioctl c0306201 80000280 returned -22 [ 117.924545][ T6350] IPVS: length: 140 != 8 [ 118.661252][ T5965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.818354][ T5965] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.060919][ T5965] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 119.098350][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.108199][ T5945] usb 5-1: USB disconnect, device number 6 [ 119.148879][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.175539][ T5965] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.188773][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.250927][ T5965] usb 2-1: Product: syz [ 119.414711][ T5965] usb 2-1: Manufacturer: syz [ 119.421196][ T43] usb 3-1: USB disconnect, device number 3 [ 119.531084][ T5965] cdc_wdm 2-1:1.0: skipping garbage [ 119.548616][ T5965] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 119.556685][ T5945] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 119.662927][ T6377] FAULT_INJECTION: forcing a failure. [ 119.662927][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.701343][ T6377] CPU: 0 UID: 0 PID: 6377 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT(full) [ 119.701368][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.701377][ T6377] Call Trace: [ 119.701385][ T6377] [ 119.701392][ T6377] dump_stack_lvl+0x189/0x250 [ 119.701412][ T6377] ? __pfx____ratelimit+0x10/0x10 [ 119.701425][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.701439][ T6377] ? __pfx__printk+0x10/0x10 [ 119.701456][ T6377] should_fail_ex+0x414/0x560 [ 119.701473][ T6377] _copy_to_user+0x31/0xb0 [ 119.701486][ T6377] simple_read_from_buffer+0xe1/0x170 [ 119.701503][ T6377] proc_fail_nth_read+0x1b3/0x220 [ 119.701517][ T6377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.701530][ T6377] ? rw_verify_area+0x2a6/0x4d0 [ 119.701542][ T6377] ? __lock_acquire+0xab9/0xd20 [ 119.701551][ T6377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.701563][ T6377] vfs_read+0x200/0xa30 [ 119.701574][ T6377] ? fdget_pos+0x247/0x320 [ 119.701586][ T6377] ? __pfx___mutex_lock+0x10/0x10 [ 119.701600][ T6377] ? __pfx_vfs_read+0x10/0x10 [ 119.701612][ T6377] ? __fget_files+0x2a/0x420 [ 119.701624][ T6377] ? __fget_files+0x3a0/0x420 [ 119.701632][ T6377] ? __fget_files+0x2a/0x420 [ 119.701645][ T6377] ksys_read+0x145/0x250 [ 119.701656][ T6377] ? exc_page_fault+0x82/0x100 [ 119.701668][ T6377] ? __pfx_ksys_read+0x10/0x10 [ 119.701685][ T6377] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 119.701699][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.701713][ T6377] __do_fast_syscall_32+0xb6/0x2b0 [ 119.701727][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.701740][ T6377] do_fast_syscall_32+0x34/0x80 [ 119.701753][ T6377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.701764][ T6377] RIP: 0023:0xf7f36539 [ 119.701773][ T6377] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 119.701785][ T6377] RSP: 002b:00000000f5426590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 119.701796][ T6377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5426620 [ 119.701803][ T6377] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 119.701808][ T6377] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 119.701813][ T6377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 119.701819][ T6377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.701833][ T6377] [ 119.951490][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.094571][ T5945] usb 5-1: no configurations [ 120.099213][ T5945] usb 5-1: can't read configurations, error -22 [ 120.354505][ T5945] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 120.652800][ T5945] usb 5-1: no configurations [ 120.657882][ T5945] usb 5-1: can't read configurations, error -22 [ 120.672060][ T5945] usb usb5-port1: attempt power cycle [ 121.042678][ T5945] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 121.073848][ T5945] usb 5-1: no configurations [ 121.078486][ T5945] usb 5-1: can't read configurations, error -22 [ 121.245736][ T5945] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 121.441390][ T43] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 121.468365][ T5945] usb 5-1: no configurations [ 121.494925][ T5945] usb 5-1: can't read configurations, error -22 [ 121.541808][ T24] usb 2-1: USB disconnect, device number 3 [ 121.642527][ T5945] usb usb5-port1: unable to enumerate USB device [ 121.713491][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.726206][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.742138][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.751729][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976825][ T43] usb 3-1: usb_control_msg returned -32 [ 121.995381][ T43] usbtmc 3-1:16.0: can't read capabilities [ 130.190769][ C1] sched: DL replenish lagged too much [ 231.621774][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.636115][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.505522][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 233.538552][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 233.632389][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 233.639161][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 234.600710][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 234.608164][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5199/1:b..l [ 234.616698][ C1] rcu: (detected by 1, t=10502 jiffies, g=13017, q=835 ncpus=2) [ 234.624509][ C1] task:udevd state:R running task stack:24968 pid:5199 tgid:5199 ppid:1 task_flags:0x400140 flags:0x00080001 [ 234.639033][ C1] Call Trace: [ 234.642329][ C1] [ 234.645407][ C1] __schedule+0x1798/0x4cc0 [ 234.649986][ C1] ? __pfx___schedule+0x10/0x10 [ 234.654945][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 234.660170][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 234.665553][ C1] preempt_schedule_irq+0xb5/0x150 [ 234.670681][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 234.676484][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 234.682300][ C1] irqentry_exit+0x6f/0x90 [ 234.686984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.692994][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 234.698415][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab dc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 234.718093][ C1] RSP: 0018:ffffc900033276b8 EFLAGS: 00000206 [ 234.724159][ C1] RAX: bb23a309a660f600 RBX: 0000000000000000 RCX: bb23a309a660f600 [ 234.732148][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f3eb0 RDI: ffffffff8bbf0760 [ 234.740106][ C1] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 234.748060][ C1] R10: ffffc90003327878 R11: ffffffff81ac2f50 R12: 0000000000000002 [ 234.756260][ C1] R13: ffffffff8df3d620 R14: 0000000000000000 R15: 0000000000000246 [ 234.764232][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.769350][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.775482][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.780595][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.785794][ C1] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 234.791614][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.796725][ C1] unwind_next_frame+0xc2/0x2390 [ 234.801659][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.806782][ C1] ? unwind_next_frame+0xa5/0x2390 [ 234.811903][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 234.816930][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.823081][ C1] arch_stack_walk+0x11c/0x150 [ 234.828214][ C1] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 234.833856][ C1] stack_trace_save+0x9c/0xe0 [ 234.838542][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.844350][ C1] save_stack+0xf5/0x1f0 [ 234.848941][ C1] ? __pfx_save_stack+0x10/0x10 [ 234.853874][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 234.859163][ C1] ? __slab_free+0x2e7/0x390 [ 234.863735][ C1] ? qlist_free_all+0x97/0x140 [ 234.868483][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 234.876372][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 234.881488][ C1] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 234.887111][ C1] ? page_ext_put+0x97/0xc0 [ 234.891596][ C1] __reset_page_owner+0x71/0x1f0 [ 234.896528][ C1] __free_frozen_pages+0xbc4/0xd30 [ 234.901631][ C1] __slab_free+0x2e7/0x390 [ 234.906047][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 234.912046][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.918449][ C1] ? __phys_addr+0xd3/0x180 [ 234.922936][ C1] qlist_free_all+0x97/0x140 [ 234.927516][ C1] kasan_quarantine_reduce+0x148/0x160 [ 234.932959][ C1] __kasan_slab_alloc+0x22/0x80 [ 234.937797][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 234.943254][ C1] ? getname_flags+0xb8/0x540 [ 234.948101][ C1] getname_flags+0xb8/0x540 [ 234.952603][ C1] vfs_fstatat+0x43/0x170 [ 234.956934][ C1] __x64_sys_newfstatat+0x116/0x190 [ 234.962150][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 234.967849][ C1] ? __rseq_handle_notify_resume+0x384/0x1220 [ 234.973923][ C1] ? do_syscall_64+0xbe/0xfa0 [ 234.978582][ C1] do_syscall_64+0xfa/0xfa0 [ 234.983190][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.989259][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.995576][ C1] ? clear_bhb_loop+0x60/0xb0 [ 235.000271][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.006156][ C1] RIP: 0033:0x7f8be8911b0a [ 235.010566][ C1] RSP: 002b:00007ffe0fdd85d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 235.019265][ C1] RAX: ffffffffffffffda RBX: 0000562f6905a410 RCX: 00007f8be8911b0a [ 235.027317][ C1] RDX: 00007ffe0fdd85e0 RSI: 0000562f690482a8 RDI: 00000000ffffff9c [ 235.035373][ C1] RBP: 0000562f6ad45148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 235.043423][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.051382][ C1] R13: 00007ffe0fdd85e0 R14: 0000000000000000 R15: 00063478c1c69200 [ 235.059382][ C1] [ 235.083733][ T5843] Bluetooth: hci1: command 0x0406 tx timeout