last executing test programs: 9m28.762373207s ago: executing program 3 (id=3632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) 9m28.418662747s ago: executing program 3 (id=3635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000097c7000000002000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000080900010073797a3000000000ec020000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000004a8020980c00002801c"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 64) getuid() (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x8000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures={0x4a}}) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r5, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x5e80, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x10001, 0x7}) (async) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r7) r9 = syz_clone(0x982100, &(0x7f0000000180)="2dfc8378c0d2d9d129fca56fd3f3895f22f222f1a7441d488d696961cfd08066cd4c482277fbc1fc32704e51da3883c14feefd09f1d4a4801bba76d33df9754f1f4e7a98518f4bc38b06720204a54f85186d4f22d2b802ab69ecef8335", 0x5d, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="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") r10 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000016c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) sendmsg$netlink(r1, &(0x7f0000001880)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)=[{&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x118}, {&(0x7f00000002c0)={0x15c, 0x41, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x9f, 0xcf, 0x0, 0x1, [@generic="1b9423f111b971a59e362a28942a288349203e8fe6b7a1d1f9ee8f6bfb63ec54c9b0f939fd88ef8f045c593433b9f3bbd282218a5ac50a862218f7b8ac74d9b7668827faf08b5e701230ce523e94cda93c7ca079fa4a0007f976f995c16a102bc9ecbb7cf82d25ca0a22801121e0937a73e5fc29ab71e6a0de5c7c25d3c1202b7746d1dbe4b4303081681c3b0cd16adee65f20518b2381", @nested={0x4, 0x36}]}, @nested={0x2d, 0x22, 0x0, 0x1, [@nested={0x4, 0x66}, @nested={0x4, 0x70}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0x4}, @generic="8791854e285671d65d", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x401}, @nested={0x4, 0xae}]}, @typed={0x8, 0x9e, 0x0, 0x0, @pid=r7}, @generic="60e655dfa0b4fda237dbdebebee0a2463e992c3008891fed660ba715e2b88cca859b07f3641d5b2d1df021701c8cec10bd647565bd807de27f742cd2d98dd96396e114c171f30c6c88d3ffab6b899a53655a06803d62cbb1836adb253a85490c3e5660f415e04b325a79a363bf0f0f5e70138ba4"]}, 0x15c}, {&(0x7f00000014c0)={0x18, 0x23, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x17, 0x0, 0x0, @pid=r9}]}, 0x18}, {&(0x7f00000018c0)=ANY=[@ANYBLOB="700100001a00040029bd7000fcdbdf250800cd00", @ANYRES32=r10, @ANYBLOB="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"], 0x170}], 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x40801) 9m28.19559871s ago: executing program 3 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 9m28.06616318s ago: executing program 3 (id=3640): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 9m27.194724318s ago: executing program 3 (id=3644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000002400)={0x2d, 0xffffffffffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000997b1cd5394c62b2080007006e6174"], 0xf0}}, 0x0) 9m26.933021605s ago: executing program 3 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x0, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f06260f01c50f796602a70fc799900066aeb9110800000032deee6766c7442400000001006766c7442402090000006766c744240600000000670f0114242e65650f124ac8ba6100b09dee", 0x4b}], 0x62, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c744240039010000c74424028a000000ff1c240f20c035040000002e0f4019400f1278c8c443a96c13053e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f20f1eca66baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = io_uring_setup(0x1124, &(0x7f0000000240)={0x0, 0x39c4, 0x1, 0x0, 0x14e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) r8 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) unshare(0x40600) ioctl$FITRIM(r8, 0xc0185879, 0x0) getdents64(r11, 0x0, 0x0) readv(r11, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) 9m25.89364189s ago: executing program 32 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x0, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f06260f01c50f796602a70fc799900066aeb9110800000032deee6766c7442400000001006766c7442402090000006766c744240600000000670f0114242e65650f124ac8ba6100b09dee", 0x4b}], 0x62, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c744240039010000c74424028a000000ff1c240f20c035040000002e0f4019400f1278c8c443a96c13053e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f20f1eca66baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = io_uring_setup(0x1124, &(0x7f0000000240)={0x0, 0x39c4, 0x1, 0x0, 0x14e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) r8 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) unshare(0x40600) ioctl$FITRIM(r8, 0xc0185879, 0x0) getdents64(r11, 0x0, 0x0) readv(r11, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) 8m1.96530252s ago: executing program 5 (id=4006): io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x60, "c443d201cab13c73a34e86b87b26b2b3313c6f3fce57850034b8ac56a373a3e1fd2c1ee99bcfdf24eee109fa49c09db7654c6cc7bba9cc3a678ffbb4fbc537b66ac0c6598ac9872ba7efe73b6b147320d42967b3f7146c5f03e514deee604cc9"}, &(0x7f0000000040)=0x68) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x7, 0x7, 0x7f, 0x7}, &(0x7f00000001c0)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 8m0.890505088s ago: executing program 5 (id=4010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000004b0000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 8m0.679248676s ago: executing program 5 (id=4013): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x2, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'gre0\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20004000) fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r0}) 7m57.334471886s ago: executing program 5 (id=4024): io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f00000000c0)="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", 0x20d, 0x2, 0x0, 0x2}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r3, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x205b) syz_fuse_handle_req(r3, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d13", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x800000, {0x6, 0x0, 0x1, 0x400000000000, 0x0, 0x2, {0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, r5, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={0x90, 0x0, 0x5, {0x6, 0x4, 0x81004, 0x200000000, 0x5, 0xfffffffc, {0x0, 0x4858e8ae, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x94fa, 0x8, 0x2, 0x4000, 0xfffffffc, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000021c0)='./file0/file1/file0\x00', &(0x7f0000002100), 0x4404, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}}) ioctl$TUNSETGROUP(r0, 0x400454ce, r6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0xfffe}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xffffffffffffff4d}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 7m56.281897807s ago: executing program 5 (id=4029): io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x60, "c443d201cab13c73a34e86b87b26b2b3313c6f3fce57850034b8ac56a373a3e1fd2c1ee99bcfdf24eee109fa49c09db7654c6cc7bba9cc3a678ffbb4fbc537b66ac0c6598ac9872ba7efe73b6b147320d42967b3f7146c5f03e514deee604cc9"}, &(0x7f0000000040)=0x68) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x7, 0x7, 0x7f, 0x7}, &(0x7f00000001c0)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 7m56.117784652s ago: executing program 5 (id=4030): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0x9, 0x6, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m55.478362717s ago: executing program 33 (id=4030): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0x9, 0x6, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m8.179416708s ago: executing program 6 (id=4230): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001800010019000000000000000200a8ef"], 0x20}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0xab6d33360de55ee7}]}}}]}, 0x3c}}, 0x0) 7m8.009049601s ago: executing program 6 (id=4231): syz_emit_ethernet(0x4e, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_io_uring_setup(0x10a, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x14, 0x0, @fd, 0x1000007, {}, 0xa6, 0x5}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="10010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0x110}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x0) io_getevents(r4, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r3, 0x0, 0x0, 0x4, 0x0, 0x1, r3}]) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20e, 0x10, 0x3, 0x2d7}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_UNREGISTER_PBUF_RING(r10, 0x17, 0x0, 0x1) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) 7m6.89652118s ago: executing program 6 (id=4238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000020300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 7m6.450703054s ago: executing program 6 (id=4239): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') setpriority(0x1, r0, 0x97) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"61ffffff", 0x0, 0x5, 0x2, 0x0, 0x9, "00e6672165cc002100", "53e900", "0300", '\x00', ["10000000eaff000e00", '\x00', "0000efffffffffffbfff00", "fffffdc26501f3aead6c00"]}) getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') (async) setpriority(0x1, r0, 0x97) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x800) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"61ffffff", 0x0, 0x5, 0x2, 0x0, 0x9, "00e6672165cc002100", "53e900", "0300", '\x00', ["10000000eaff000e00", '\x00', "0000efffffffffffbfff00", "fffffdc26501f3aead6c00"]}) (async) 7m6.120776374s ago: executing program 6 (id=4243): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="08000500010000001400040070696d726567000000000000000000003dee5b215b55e0a83f9d1f4cb5a493dbcf340f9a5e553ff90b29bbad3492c25e4405962cdb4d7388b06055969a6e76ed"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 7m5.726661266s ago: executing program 6 (id=4248): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000097000100fffffdff95"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x101, 0x7, 0x88f0, 0x2, 0x5}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x339, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x8, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x14}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/933], 0x0) 7m5.43588124s ago: executing program 34 (id=4248): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000097000100fffffdff95"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x101, 0x7, 0x88f0, 0x2, 0x5}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x339, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x8, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x14}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/933], 0x0) 10.084918906s ago: executing program 7 (id=6111): io_setup(0x23, &(0x7f0000000280)=0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) r6 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x39, 0x0, 0x0, 0x202}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc10c5541, &(0x7f0000000340)) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x7, 0x7ffffffe, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r11, 0x6, 0x17, 0x0, 0x0) (async) unshare(0x42000000) (async) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 9.826593431s ago: executing program 7 (id=6112): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x8, [@float={0x1, 0x0, 0x0, 0x10, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x2}}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @datasec={0x2, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x2bbe, 0x3}, {0x5, 0x8, 0x8c}, {0x5, 0x27bb, 0x7f}, {0x2, 0x7, 0x2}, {0x1, 0x4, 0xffffffff}], "b2dd"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x6}}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x5f, 0x71, 0x30, 0x5f, 0x30]}}, &(0x7f0000000240)=""/95, 0xd8, 0x5f, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x5}, @tail_call]}, &(0x7f0000000700)='syzkaller\x00', 0xfffffff4, 0x12, &(0x7f0000000740)=""/18, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0xa, 0x100, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x0, 0x5, 0xb, 0x6}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x1, 0x5, 0x5}], 0x10, 0x6}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x6, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x5, 0x1, 0x2, 0x10, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @generic={0x60, 0x5, 0x8, 0x2, 0x164}, @generic={0x7, 0x8, 0x9, 0x7f, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0xf5, 0x30, &(0x7f0000000080)=""/48, 0x41000, 0x27, '\x00', r0, @fallback=0xc, r1, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x7, &(0x7f0000000980)=[0x1, r4, r5, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x1, 0xb}, {0x1, 0x4, 0x4}, {0x4, 0x4, 0xa, 0x7}, {0x5, 0x1, 0x5, 0x8}, {0x38db, 0x1, 0xa, 0x1}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r1, 0x20, &(0x7f0000000c40)={&(0x7f0000000b00)=""/253, 0xfd, 0x0, &(0x7f0000000c00)=""/27, 0x1b}}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsync(r1) sendmsg(r4, &(0x7f0000000f40)={&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)="5c242e362b147efe326d5bea90e1c09237b5d7ffa2221316ac0a8995c4fc496129501a26743cab75d20b3a166d727977dd3511e6", 0x34}, {&(0x7f0000000d80)="ad683070e7a08d6d05ba6e9ddac2197120c66c014f9ce1f55bb7d59c44cd1318d173bf00417bc4197ea3b4bd5b32aa1cb3a71c8d0a64d06544d982d7b9444740607503bf731c108496b6c8c96e18a46d187394390686042fe8b3597cd71a5a9c1b520f86cbb936fe14a76c84bb81ac0c1e0d4ea21426de6a3fa47395f74e5d0e1fb0e559d911fc690f2d19771b4822706d96b1940935ca9b5346ffd7bbcac700baecaa91de3a9cf00a1719e59bf491bc8f268584ad54b9406e76256f", 0xbc}, {&(0x7f0000000e40)="6d45a9132c4444bf40c385b770d75c0ed6b0da7c6ef8cd282ea05180c61953b5bc8273a43c80d0ad1c2fad264c7af657d5fa3f8405ccb32e58ff46cfafb99682471154c023213e40", 0x48}, {&(0x7f0000000ec0)="5dbef3c547f9f145c5cf8e298d849eb4b6e7d7bb3a156ff98170836c0e52c3403118a879c3a27844c33fb2d63a", 0x2d}], 0x4}, 0x20008000) sendmsg$NFT_BATCH(r4, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1d0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d52cff3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b7bc948}]}, @NFTA_CHAIN_USERDATA={0xfc, 0xc, "22420dc39a22476264e91b298a71c756b424cfeb0cc2b2440f28f8c2e1c2e3ec13eb3a3848dc546b00642ca189791830bbcb8dd94f82cd5803af209cab1b22b8f09c8940120257b424d0ef3eba91b62ba6f3ead46f0f9c47691cca64ff01542fa83b65a87999451563e31944636202f1398d7460904c4dd1275e0bba8deee5fd8201594f7c9fee2a3446c9278cac556b7ccf2413e95eb3db3b890867221574818d6ff847ab8d0c95628a352b6499e1629c100e471c3aa19f5c0e7e816eb7e65861d5f17d461a2c11b050fc440df664ae61a618cbb9328169107c51841fe1769921a2778a2b61311f278d8b9f97446adf340014de0a3ca0ed"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x160, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe2, 0x7, 0x1, 0x0, "947bab6afd2feca4548bffa862e0d6c21f6b45db4d41506d1a554c9ffc2325ccd225c599a3d6033e492741389ace9b1e77fb96751521258b71550eb94c36c39111055bbf2b2e9a94ace73b9299f8b8a810073d95fdaa74df65eba275930226c3bf2eec92141b73bf2151faeee0e89e2f3256412450d9705dba3db7256b3fca0423c6215060ca40f9dedf786c8167b9788130a2face73cb541f59d1d610070063a1804b580b74fd7afcaccf741b14f3dc2d1b61a6cf56aa1cdb7af3995e899c2c36cac21163e638cbbbc71d53477bb8efc82a70d6630feb63b08a6dd532a5"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x158}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xf65e}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}], {0x14}}, 0x474}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000014c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001540)={0x6, &(0x7f0000001500)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000001580)={r8, 0x24}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000015c0)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000001600)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000001640)={0x28, 0x4, r9, r10, 0x7, 0x8, 0x5}) setxattr$incfs_metadata(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), &(0x7f0000001700)="ba664ef9b4352752936683af3b29f8d14222f5537809eb791e29b66941448e5ff83c9462d711d57fa3abe7779c708f22602b1fd123a79d24f819d524b4e2f60de5965081f5549e3464d0662b94eb8ddc8eb73c4905210dc1ef0143a8b7665f8d663bce53e3155c267bd7e2390ad86820a083521495cba613532a3140ff6782cdcc299fd8ddddf9c280c969942179f11d745d", 0x92, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000001800)={0x7fffffff, 0x28, '\x00', 0x1, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000001840)={0xc, r9}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001880), r4) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f00000018c0)) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) pread64(r6, &(0x7f00000019c0)=""/101, 0x65, 0x5) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000001a40)) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r12, 0x8983, &(0x7f0000001a80)) ioctl$TUNSETVNETBE(r11, 0x400454de, &(0x7f0000001ac0)) 8.903268306s ago: executing program 7 (id=6115): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x2d, 0xc6d4, 0xffffffff8112a988, 0x8, 0x4, 0x2, 0x294, 0x0, 0x0, 0x4, 0x309f}}, 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], 0x0, 0x0, 0x0}, &(0x7f00000006c0)=0x78) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce658c601020301090212f80000000000090432000897408ac92a55623ba532471dbf4b8009ed162d6695828f9b351133b3d578ba"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.580167509s ago: executing program 0 (id=6123): socket(0xa, 0x80801, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r5, 0x8, 0x1) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x40400d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r7, r7, 0x0, 0x200000) 7.580008173s ago: executing program 4 (id=6124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072052451ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 7.577650571s ago: executing program 4 (id=6127): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x98, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc80) write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2300ebdf3ee17a6843b6f08300000100000000000000021900000004000bf9ff000000"], 0x23) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x0) 6.391705384s ago: executing program 1 (id=6128): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x520, 0x2c, 0xd27, 0x70bd29, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4f0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x4d8, 0x3, [@m_bpf={0x110, 0x20, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x3, 0xffffffffffffffff, 0x102b, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x5, 0x0, 0x4, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9ad, 0xf1, 0x2, 0x10000, 0x101}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5f, 0x6, "e34dddbd29e127d2258cc3fe083180c78d354a50eb489fe35aabec255cbb8604c6b69cbb4a4749274ea6616d43ef209244b4024c42e3a4b1f5a730c2a2851f2cc9588c086e48cb788c5fb894844050842ff57c0ac7b4a30ea02d36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x70, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x3a, 0x6, "c2fcd4e8b992df7b121e86f9e226f6428fc608d968615c1233bd73caa8289891dcd8180567f1f5968d37f49822928ca3a44e0fc93fac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x168, 0x1c, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0xd, 0x6, 0x14f1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x820, 0xffffffffffffffff, 0x1, 0x8}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0xf, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf52}]}, {0x82, 0x6, "b1410e51abd91c19df03678c0a734d81f15d12da897bdfda147129939b701982f88ef1530658e77269b94e9578c525f6af9d0b09060f41d335cfe49f87770ed7cfae2bc46bad866cfe2e63954f12060e1e9773ec9687cf75bb8147cd5d44ff0e6670baf0986aa2415bf20da788e368e8b2ad7bf23e33e00571e6cadc2f42"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x9c, 0x16, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x10000000, 0x80000001, 0x6}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0xfffffffffffffff8, 0x6, 0xfffffffe}, @private=0xa010101, @multicast2, 0xff000000, 0x1}}]}, {0x24, 0x6, "9d61a804491d93f3a318b13472c4c13c4a2ed17605e0276b2e69695fc6c745a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x150, 0x6, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK={0x8, 0x5, 0x8}]}, {0xdd, 0x6, "312feec9711d469aa9e09a47cb4ac7c821f6bbf7f8ede91cefa9514b34992034195a415f193d4bc02077d3c161c98c5c3f8b0a295aac7398c1dde1e03c3b8f9394e5e992ae65aadd44e8224144b3182b648787b711161405176528d797e5527a9f3ae11e84ada47772eade600db074b6d06490dac5292fbb3c18ea2a645e79039d8356b8dc8aeef1edf6b6734a4273ac83466de3bdfe7120500b77accd616acbc031a5923303ee6ccd7939b00a77d36e8aacf8541778ac2eb523656711efe838f558b78558e364942ecd41f46bc6af1fe865686306ed594958"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x520}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000540)="d067746c0bedc6d4fb29aee101a18aee495ef73742e9f16c2073212113761c34d56485de3501ea11528c7d988d46b56260e6abf81a84cfe94885ae443c38811af0aa5bb9f908b2f010d18fcf29c8f083fda1c83d12d85c65b8c0647a441501cdfb4094b3a5d4eb7915f7032f2d76208465c1e91d57baf93ace421469401563597ea176b18827d09e892f76516c80aabd3cfd68ca5aad05184e3a0118960cf4f3f80595", 0xa3}, {&(0x7f0000000380)="38eac46ef8c254432b31cc4d5a6e71b9da3caa4ee92ff63c42dc7f31c6887a19bc34271e4439e745dac5532ad63846456b627ecb94fc4f5654e0e14da739a9eaa97d1ac5d0d1e28face848715a1b743b6c1ada1f3a790f7ecdea0d455aacd6facddf02071fe8e8c24f3c8f0afca5837df2e10213", 0x74}, {&(0x7f0000003000)="374ca85e5dc343a6f2f3bbe58ec1998f277e9959634e0c800d0ea60a2e06ec806a4b66d50e0cd93676086f821fe827eca2fa5d483d47fcce7331f9260c9673bbc9cd0eb83acb0225b95da04cf02020a06a4f8b15231238391674c1146fdd1e3d5407d18ae451eb9f5f58da5658fb93a972663c59290fdee148417772666337c401e8044b6d73f53605a92e6e2269d693c28df8a4f46d790a7da14d7be6e428c2a58b6d9c0addb413d862862c35897822bd0ac0ec84c980a44d1394d52f5415022c949ae4856982d121b442715c8f9c8c37a7dd88a93f0cdd7bec6591d5b09c31712de5384d02d3", 0xe7}, {&(0x7f0000000240)="f478c7", 0x3}, {&(0x7f0000003100)="05835a19d9da614364bf42bfed149c886910c25c5c0338206586731eefc0aecb7855caca46cd949921cbd73655f480dbf9e676170dd1392ad9141dd5a13a7b8837aeb1eb47a8356c4275265f6b8569529146cac4bdaa53e995482d22d5ee981445b7166db0710deb17257e136e123397bc9f25f09b0147392328c74d91076a64f3b767b736dc6c706f49a05f059c37cb2b8c56e7b5e208e69338514902368d00b484e5a514ab86cd936b62eed29caeec9490893838a8134ef6f7b7447e15119fe22af02f8527356e0c1231c9419eca8e86178861623552a875ec9cc34c80c095acead1984c50c430d73a027c737426a8", 0xf0}, {&(0x7f0000003200)="e31eacd7801566b0d4899704df5da3f93392bc748dc2ebad4361f62b9b33e2028ce061547b0099e7610326fbe1632e63ed32944a7e8bc8043fb3eb1004205836177180777f439ee69c0627d71088e12fe87129457497f4ee3d0f1b49fa5622bbf745f47f2f3921772e7f536e2ba2cdd5d5c1622dd0dc764b413966d6cf61ee157431f318ffdfd20b0dd508a15b1555f8893ea8825548ca33f5537d88d5af598d", 0xa0}], 0x6, &(0x7f0000003340)=[@iv={0x90, 0x117, 0x2, 0x79, "deccbf482d88dac589d5942fb1b17c188d5f5de075f256cec33c1f7116d03f2a33b7530ef33c183b20a6ac4b71e229c3b70b26229d5266a6b3b5d58171c794c6e76989c4d4483cf5c270b27041179ae9ed5f03278445c17eb1363e0b4186cad906a825e64907e93679cf955097b6542262e196b8b259aa6bca"}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18}], 0x108, 0x40004}, {0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003480)="cf507848acfee1e0577d5df26ba930bb4ca358493e6d1a7deb4511f4788b6cb5716e0c4f7db13c94d1a737e3ef7be164421bdbd73b642a32d8fa82935750953a02e7324e242bb95c42c58d3acbb709600156e39a428c6d065a78d25c69659fd5", 0x60}, {&(0x7f0000000600)="c0836144d51f", 0x6}, {&(0x7f0000003500)="589f3d3745b17f1a20904d923f829b46c545af344c788a380ee531ed917f02e764a9472665428af9b8611041ae92aa05528a059c2e8d01451d0e6bebb2ede136de67466f26fca073c94ca925957928abd33a36613ab4", 0x56}, {&(0x7f0000003580)="64574aea920f1a353cf47bc194359c79bfb2083e63e6ac4cd9a660acca513bd45cfac62b46b5dd5f21125a8197689eff2e5431bda8087c8e2b58bb9776aed612469660391be5", 0x46}, {&(0x7f0000003600)="4aadd5f5f9f9724de1ff8c2efe73581b7dba525083b5ec37a1ac395fd3d4e025cfceac9c093f32803d1cf62522387cd6dde48b3efc", 0x35}], 0x5, &(0x7f00000036c0)=[@assoc={0x18, 0x117, 0x4, 0x20000000}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x78, 0x48051}, {0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003740)="c99e29b478d0cdbd8ab3dc21e7f5650ff56c5378bd1087e99b2247eb27245962e0aa7ee2ba70b61d2e079da04fb0ea4fe931e8f2d0857f581ab762b19fab852ffbc6d15a15ab278f9caed665fc9ee1d8d747f54038329817d72c0b53be8284c861bad1394ded8f036ffead71bd1f6cfd79208da9635700c9fdfe31f7ef89317b37f3db7bc4c8abd72fca", 0x8a}], 0x1}], 0x3, 0x40010) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') unshare(0x22020400) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x4cc, &(0x7f0000002b00)={{0x12, 0x1, 0x310, 0x20, 0x32, 0x1c, 0x20, 0xbb4, 0xa13, 0x8a60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ba, 0x1, 0x9, 0xb7, 0x0, 0xff, [{{0x9, 0x4, 0xc7, 0xc0, 0x8, 0x7f, 0x7d, 0xdf, 0x0, [@hid_hid={0x9, 0x21, 0xfffd, 0x3, 0x1, {0x22, 0xa35}}, @generic={0x5c, 0x2, "df6c8073493311f88453b6f02a978fa9dc02bf75762dd46448b20d5c62d25f6f5e9dbb9ee70e3d5a59df40f2479a356b5cb7ca27577d925482a0b42e7ad95935779444b2b5bc5f5bcb273e2050106652c4871fd620122da609b2"}], [{{0x9, 0x5, 0x5, 0xc, 0x8, 0x3, 0x55, 0x6}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x61, 0x2, 0x5, [@generic={0x49, 0x3, "729b8298db2405287a81c0c077647c2418fac88ff7ff15fcac6d3aa345f8051850c4a81da2be366d8a2c52605fccdc3a753f96ae753f8b4aafd9b4919962060a5ed3c9c9a124bb"}, @generic={0xca, 0x11, "4f3adf1abf440c5fb6e481e8cf91ef0617f6b0aa57450752dfea12a93b128e3b55f9c649e24b0c7c63be73d85cea16ff7f5468c4618789b12a610f150895e75d5f395d6741eebc7fffcad1613f33f3347543b7f7ff8dbae41790c7a78753261aea895fb0bf68fce9fa3f5856da7c88860d2063a98ef97243301676420d1a4f36b1e2a914bfec27faafdd9453606a5649b6af5504a816c1a89c9681abba89db5f54f4aeeac3a5b863755593e04cb7cb15da10a8333503bbedb8ccc898bb5daff98569e3b5d7b1a8a2"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x2, 0xff, [@generic={0xf4, 0xa, "761205db82d466fcf17f697b4e7d6cff28bade3dde5e96bbee3df5847a786889d2a638ac33164fbdc5f7203be5148709b579370aab86a9bf06e7a4371e1513af08eb92321ecaa600033dd988aa7a30367cab902b245c79b83923186001d3918c6b2b4f9d8dc38d0d27819072f77e4f22ee5996a038301fff28660587d06af00be7daf033939b5ed293c2b8ec4fa0eb69efe683588a468297917ef24124508c7849a27c78edf14fcab7511a45063aa1252f89ccc60e14dd07d296fc98625dcb115a04ef006fa307a96b491f71e0a195a5a4479f7b5334b030ba60dc0c6dea0b78fca3d89709cc9b976c02c7dccca184a7cd87"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x80, 0xa, 0xc, [@generic={0x77, 0x22, "c0daf5b2485f4748fd9d3c6450fa1854c961fbadf5fa29494a0ab5d04c10184cbdf735389182c1adfa723d22fc4a52dca8a5daa4a942660f67b76f6c930a3caf797d64d35954e4c7160d9735832f4281db48d38f5fffcf90624739ecc8a2a7cd6b8eef29dbff37f17f489cb72fe0ca566d6d5766ba"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x3, 0x5, [@generic={0x38, 0x31, "de89d9d7264fb60ba60e9a44d10c0364637d003c51ccd4066051e0aff2247298ae2b0aebf803b869d345096b20f9ec7f20d025887398"}, @generic={0x73, 0xc, "4e8516f20f48eb76b0575829c18ca936d80837ddef88c5d00252b72dbfe6ece2099a45aeca4407ef89c306049a28f9aafca047a7e2ffda0a3a532d7cc8ae7f11f802a6ad96c1cd34aff0067104a7006e4990d3620f84a2413e8c4864225a602ccb676cfb4a0183cfabf3084eddeb295eb8"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x9, 0x4}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8, 0x9, 0x2, [@generic={0xcb, 0x4, "6d7a698585d92c87f62f8e65e58e6779b08044916e570522df5197e76a10780977fd11cccdd17c179d653477389b19051893f4fb5cfb03b5315c50f43b0ce7214ba0fe0c4d89e1bfa649cb967b22bf94aa568ae8d203795b6b0b0b29d9b1f6f770c9fcaaf0028fdf0097b62d01719d30fc2dce6661d4feeb0465cda3994f4f8f1cb2fd3d0e8a461e6e4cb15ad2e377e53cbe9e4f443fc2fb17af0ac59b2f3ae9b3b9f70e9bda3db6625d64a0b1b7e23ea62ca83bd035a5788b824de1a9a392ba83b841e89ed25c0d8b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x7, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xfc, 0x7, 0x5d, 0xff, 0x7}, 0xf3, &(0x7f0000000100)={0x5, 0xf, 0xf3, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x4, 0x1}, @generic={0xc8, 0x10, 0xa, "0a69e0400d01e3c78b42e118cbe67ba497bbe51226a662a9644edbc93a4505b7b56a4d09f180754a570fa2bf1a50c2cf85513a19520341e155627dd06b7e8979dc6706504ec1d3100be202093033c9ded53a3dd03ad303ea30ff82412596eb3995311771051a2d18ece30635aa1e6f14654b6eb00ac9796e4e776d14077c248ee986a2d80dbcf9db796ee8dd04b073ae252d3e5b84a098d66378a766c2dc2e4d9da0157a294636fcc5e3eb9f041e353c2a39e7a68543e73860bc252639894827d2a48571a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b0067f8f0282089ee11c89b87f403151"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x2, 0x1, 0x2000, 0x6}]}, 0x1, [{0x81, &(0x7f0000000480)=@string={0x81, 0x3, "59a566a8acf08a3b8ff2c6cd7d0f0498ba1cd3f9d7a10735d1c9444fc01f313fac99db6fd60eddc3078fe75189a7c8f165a3d101bc14baebcc5f8f9d384f059179cc3ac7875ded152476f6048d2ecc9407968dc575e0eb0c7ca0804d7220cdf93c7ae208813dedad973a901e7d21e86fd0567ad9e37b6f65bf416abff87eb4"}}]}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120001000000000904"], 0x0) 5.697619047s ago: executing program 7 (id=6129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x80000001, 0x0, 0x9, 0xf, 0x2, 0x8b, 0x46, 0x8, 0xc, [0x101, 0x7, 0xfff, 0x8, 0x8, 0x7, 0x82a, 0x4]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x2040) r4 = syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902970003010000000904000000010100000a24010000000201021324060000ebffff0800000000000000000000092403fd030300000009829d8d46f8431cfd0924030004020004fc0a2405040050b04dc2ef09060100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101ea"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf25010000d74b480597115191b987fd00040003000400028004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x40) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20048001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0xcf9}, 0x10, 0x0, r3}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r9, &(0x7f00000061c0)={0x2020}, 0x207a) 5.695085696s ago: executing program 0 (id=6130): syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xf7, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xed, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0xfffa, 0x3, 0x1, {0x22, 0xb47}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf8, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x201, 0x2, 0x8, 0x2, 0x0, 0x3}, 0xbc, &(0x7f0000000c40)={0x5, 0xf, 0xbc, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x0, 0x2764}, @ptm_cap={0x3}, @generic={0x84, 0x10, 0xb, "23a7dbe305cee146d9fc68f24d8993669e9309fcff774e3009c16e1f31a05c362cd21ed50d7a0ee4f5ceeb01946183757c0a3bc13e75e15c62d9a94b02b6acc1eebba4fa314a5c35378a6c370dec30f5b1f516744a5be44a89925039cccafbf57eb6f4e473c5c766626274768991f55fb87c1c11694aca39a741ad038737769543"}, @generic={0x29, 0x10, 0x2, "bf000375556d8a876f346f34454fd8fdaf2e3273d02af56bd0d59060f1478c3465336743e318"}]}, 0x4, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x418}}, {0xc5, &(0x7f0000000d40)=@string={0xc5, 0x3, "aae4739f51c45aff449c6e03c541aaed72080050c7e7a37a1e5aa056b945534538d19617afa26cc7f1157989d3488227c2e13082ca9ef0806428b4397dca0c09c260ff7625aa925e1e4743d4fdbd9e64e58336d62793adb792becad44c5d9cec7fc52195aef23f065348280c97aca9ca0accfb19ff3ab7b6b46a2b25d32bb80e10e3f165c30dfa57f40c6e48ec28893e1a8aab67f2ed5bb88deaef9329a92a19b9b7f2898d7a85f8df5719e7456440d87769e0ac7d67a23e6369954627dc217ef569cb"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2001}}, {0xc6, &(0x7f0000000e80)=@string={0xc6, 0x3, "322921c6eec11a4539400b337bc6ebbba78b092529d615a9f2dd9059716e1d3cbddc53aece4d0bbdc68d8d5e67b1fd7316015b075cd4150acc19d6c94774a4cabba25a544bf5cb34ceab3698f4e3f1041d8210a0c8e494748abd4e76159a133a67d40b78323f0ecc11cce7947d6f45472c5126b1d8d8cfadfa0883cbcf83137c84d8ec348866ce9f49faeb21fb0789d7e3b61531a30c005b694ef808d21b0455c80202680f4e3d60cf9c991b3f860ff7016f5949eaf5fcf48455b1ebb710742b26fb33cf"}}]}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x1, 0xfa}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x8f, 0xa, 0x0, 0x5}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x9, [{0xb4, &(0x7f0000000700)=@string={0xb4, 0x3, "4e43a3b7d1daf28d660c57823ab7743c02d922b142fb6b7266161c6ff35d53f276ba94279ec09bd099c0c560c6ee1247d88133d9c8d5d3992f3b7ffa47fa164f6854c743d51e22b7d747be3b776b6972f73499e300ad07ed10c3a3f2671ca40dd2091ca45fc5895136dd719e91ba4df1feb9ab4fb1ae2393ec2c5ee20fe0cf95400490a08c10029bdcdb2e5d8a72f528c9b8fa9c0a8db00efb97f94e3780da050937b80b764b1c16d7cfd50d30aa098ba0bd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4010}}, {0xfb, &(0x7f0000000800)=@string={0xfb, 0x3, "26d177589b9750bb1f7eac356d16d82586a3702f6951461117a0b8c7a391b47fe49a8867d9c6beb27c276465916c8a205a3a92197261af7608e5f1888f2ff400be3c138001368529fbae6a617d615568ea792c224a50abb1860c89c2746e754278e090331f3f3a6697492f10f18e8bbf1a42e95a6517f4053a51dc3723269dde41e30d41304cf709dcfefa0d60c3ec789fa57f9901d52c89b60df95fa3ac8d94ed695546c67f8df1b1a1b15dc586add45341cb2ec11d30aa2b7a3494d9d1c2279d323fcaa32a86cc1a71f61c02f2ad10f20aea93c2d9b720ffd1a4233ea9bf8374e42a840414495352908422bc9564ef19902d295e0285a433"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2009}}, {0xa1, &(0x7f00000009c0)=@string={0xa1, 0x3, "6b802e6475c41514b8e6c0dcea80c76e1ca143aca40d8b1a8ab90230e4beb2c61ddbb7bbe5b458c71779f44d293aed8e3c762a56d18a10b7dac4056a17c3ef17d2d40c1a8ca172494b2894497ca0089badca79a2038be396941dabc546c34025e15d0440987d4db84a2fd20acc2765713ea9b1462c6cfde9efbd49cd73f28f4c80e59d5c84d303c9e3cf8c6019b746273013e1817223876e8421805f75bf1c"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4}}, {0x2, &(0x7f0000000ac0)=@string={0x2}}]}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x538, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x514, 0x1, 0x0, 0x1, [@nested={0x50e, 0xc, 0x0, 0x1, [@nested={0xfffffef3, 0x123, 0x0, 0x1, [@typed={0x4, 0xa3}, @nested={0x4, 0x45}, @nested={0x4, 0xf0}, @generic="058c986526429694e70514d6e50df17477029b4eccf8598195ec857961a123cf498ec17f60ca65984cdd184d7d1f9c2ed3d6c373ecc61f040776421bb43c5a3fbdd03d83ffa1f7e8f06644578f1f1d8dac7cbced30e31781fc3bf33275ff12f88be034adcc852a66539bef54624382fef19bed3fff370f88e9b41d35a4f2e5ae41da9805ea82c200ad3918aed7637b2937b3feb967d97d88963d0d33b5908ffb6ff0e30e16256ea5d54cf70766c6fbe6d6b9d3e0b66010c3758b0d6b4354d5f06d1c5250b88b0d8fc62407e3164a92843b0adc0e207fe824de889e", @generic="a8e2dded6778fa4f78cdac5cf46521790208d56e1fc284a573298db6d90365b22ea759d9765c5795a83ad5d0a619899532e5ef57c1542d6eb0ddafbaa773b7fff5bb951a2f4dea5f82993edb2c6df39d622eb0ab7c39", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, @generic="75e71b9859560bd72faeefa12e99f380f4f5341a9aed5b13bcfff489e45502231774b10aefe8fed955d29450943c1ab46911855410da725cc8456fa65f0323332fce40b3edab918c507e4d943967970af737d2615a3b759a98bf3e283f91e5990dab14ffda94784970a879dcc06d436cb8d3d7bbc24dd830797547ced9be840516a047d46531c197b00d11efaf26ec1f2dde08fa58cab4cbdb44b6feae4f4140b4278327bed03b4292518596aa71691eead78be035dbb33cd1e642038388fb13c39037ed217de911cf335ff8d9a7d9329d3f9d816d2ea603e4469b70a57d98d22228ab6da6282288d5a3378fb411a255867a6dede328", @typed={0x8, 0x126, 0x0, 0x0, @fd=r0}, @nested={0x28a, 0x94, 0x0, 0x1, [@nested={0x4, 0x82}, @generic="873c8a68f8f79082e79247dda9a9846eeb8678d16da636306ab94d972532eae1ceb4d948883fd5f941d6f977643f878a5a9c5e62f0ff0cc4b38ea37a7db6c2a524598525b773f3c0913d53f796d4b3719e3fa3dd25eee0c1cb60bedf9c0b98cd3f04ef415d54c117baf95c611a2e927c72cca33347f0394dbee7f3c145ea26c0c713a11657e0dcc16231483d611951eab43fdf3dafa50a923de33fe117df498cfc716c4ff5a4ab6c9796ec77b25cf4ae47d85dec81dfe288a6ac8b78d8f33b420f233a5e6ea8", @generic="ed16cbe26ce53249fb257baf108f2368f6a1f03431979cb02e14aa2af49a2f71899c806ba1bf4395305853829ce7094eab33acfd3377c1013232441853c2d5ae2d4cca4f79dc377d863145fd1226de6d4615e01b84d5f26288e9a78219226fe8d945704d425d1d3b18c2d32f9859648921ae9795fc100deea993d3490c98651abf66d3296c58f03e17da791aeb8e8eaeed510ff78b5d97c6a063ba52d6f8cfa9ca39", @typed={0x8, 0xf6, 0x0, 0x0, @fd=r0}, @typed={0xd7, 0xfa, 0x0, 0x0, @binary="0187a326f95074443f937e60275f1d994d2a4137fdd7cbe0fca042907b99d8ede9c3a4e526b62caf8a90bb09fa40dd2523cd5f6db96fc765edfa2bcd6cccde738dc9b448b967443b86eae3eb69fb43673c77a3757557b8f20f986b93828a3bdaa233374ef4a4383442bac7420e194dfe82b6d4d00b25c56d66aea543cb90431ce3b98a088737bd02df5d2c5069db65d084b5d5300355303111eae982b41658546da980cd0790ceea845313890304dd6f21f00705973fb730568d71db47e8418544dc906feffb4911673e75ae0e4ed28fd4ca8d"}, @generic="ec32df2cc880d270", @nested={0x4, 0x92}, @nested={0x4, 0x1}, @generic="e1e3a2419928dceaa9eba4ba632e132f8edef8efd30d4b57b59ccaf1fb0238a2b9ad84d50c41ebd37450"]}, @nested={0xc, 0x38, 0x0, 0x1, [@nested={0x4, 0x31}, @nested={0x4, 0xa3}]}, @typed={0x8, 0xb2, 0x0, 0x0, @uid=r1}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@empty}]}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str='\x80\n'}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x400c097}, 0xc000) 5.179088057s ago: executing program 2 (id=6131): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xe05, 0xe7, 0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x2800, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) (rerun: 64) 4.852502526s ago: executing program 2 (id=6132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='ro\x00', &(0x7f0000000140)="a6", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 4.785626195s ago: executing program 1 (id=6133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2b010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 4.614952437s ago: executing program 2 (id=6134): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000020180)={0x1, 0x0, [{0x15201279be33ada3, 0xb3, &(0x7f000001fc80)=""/179}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r1, 0x0, 0x6b1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x23, 0x32, 0xef, 0x20, 0x1660, 0x932, 0xa5bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x80, 0x9d, 0x0, 0x10, 0x93, 0xb9}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010400a823d320240430cf591f010203010902120001000010000904a50000b062cd006ca5048e22170ab621cb91235153254226ed715b41b9ebafaeed8616e2a4c533e753c7b2b739085769671ed61dcd8d4fc6ee858ace1aaf8653a38338763e584d8d84594791c6e57bc893bd6a242a1217a12a14cbe2fbbfdcc4a7a9964333c4316697346d4a17cada5402a0134918e603db1c670bab09546e61a89dd7e117015d0118c41c129bb4c25bde841b339309feb707b521de2e45e812ceadcd588033428063a6e81450928c485275da7f80778a71aaba31d72d"], 0x0) 4.314417398s ago: executing program 4 (id=6135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d960720dabe1ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.045240134s ago: executing program 4 (id=6136): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00004003000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 3.654183568s ago: executing program 4 (id=6137): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0xa, 0xe5a6, 0x2, 0xa}, 0x50, [0x242f, 0x9, 0x7, 0x7, 0x4, 0x299, 0x4, 0xfffffffd, 0x5, 0x7, 0xe916, 0x7, 0x8, 0x10000, 0x5, 0x3, 0x7, 0x5, 0x4, 0x6, 0xdf, 0x101, 0x8, 0x5, 0x9, 0x3, 0x1, 0x2, 0x0, 0x3, 0x2, 0x3ff, 0x3d500, 0x2, 0xff, 0x3, 0x81, 0x9, 0x1a8, 0x6, 0xff, 0x1, 0x7, 0x5, 0x2, 0x7, 0x3, 0x4, 0x8, 0x1, 0x2, 0x4, 0xfffffff2, 0x8, 0xfffffffc, 0x5, 0x401, 0xb39, 0xfffffffa, 0x6, 0x40000, 0xffffffff, 0x8b6, 0x1b], [0x9, 0x0, 0xa9, 0x80000000, 0x0, 0x6, 0x800, 0x3, 0x3, 0x1, 0x6, 0x6, 0x7, 0x3ff, 0x0, 0x6e8, 0x9f, 0x4, 0x0, 0xffff8001, 0x9, 0x2, 0x4, 0x1, 0x7, 0x1, 0x4, 0x8, 0x6, 0x7, 0x1ff, 0x5, 0xffff299e, 0x5, 0x8, 0x7, 0xfffffffe, 0x2, 0x0, 0x9, 0xa40, 0x74, 0x4, 0x5, 0xff, 0x10000, 0x5, 0x9, 0xd9a, 0x7fffffff, 0x4, 0x9, 0x1fea0fe0, 0xc38, 0xd5, 0x8, 0x7, 0x4, 0x80000001, 0x788, 0x800, 0xfd, 0x7, 0x9], [0x61, 0x0, 0x3fe8, 0x5, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x3c7, 0xbe3, 0x101, 0x3, 0x2, 0x8, 0x10ef, 0x800, 0xb, 0x2, 0x4, 0x7, 0xad91, 0x12, 0x4, 0x3, 0x5d336c2e, 0xd, 0x2, 0xffffffff, 0x6, 0x2, 0x6, 0x51, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, 0x4, 0x2abe, 0x2, 0x8001, 0x3, 0x7d1dc1c5, 0x1000, 0x2400, 0x9, 0x9, 0x2, 0xffffff7f, 0x80, 0x4005, 0x1, 0x8f, 0xe, 0x9, 0x3, 0x5, 0x2, 0x6, 0x0, 0x80000001, 0x8], [0x2, 0x4, 0x7fffffff, 0x800, 0x3, 0xdc7, 0x2, 0x7ff, 0x2566, 0x80000001, 0x7, 0x0, 0xfffffff9, 0x9, 0x5, 0x9, 0x5, 0x80000000, 0x3, 0x7, 0x0, 0x10, 0x9, 0x6dc, 0x3, 0x9e, 0x9, 0xa1a8, 0x3, 0x400, 0x400, 0x9, 0x401, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x9, 0xc6, 0x5, 0x100, 0x8, 0x10001, 0xa, 0x2, 0x8, 0x7, 0x0, 0x5, 0x4, 0x35f, 0x1, 0x62c7, 0x7, 0x5, 0x6, 0x5, 0x7f, 0x10, 0xbcc3, 0x7fff, 0x3, 0x80000001]}, 0x45c) (rerun: 64) syz_usb_connect(0x4, 0x10b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5d, 0x6b, 0xd9, 0x40, 0x423, 0xa, 0xb584, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x1, 0x6, 0x0, 0x10, 0x88, [{{0x9, 0x4, 0x93, 0x1, 0x2, 0xf2, 0xee, 0x73, 0x8, [@generic={0xc7, 0xd, "f40a9a2259ceb3848ee52268c479a7aa9e4ee4047cd00792ad6b2cfb39bd26fc5fae473bfd8a082c93ccfdf365436ba2088b22bf3697a3f8be1164fcf1d6ee693861fcc9f2600a11c16611d8cafefcae26ba79fc9246fb7a38dbeb742b5b5dd9dfc5eef2611fe429c4a706b36daf8ef4ac042eee3044d32a243560b0fd2b805d9b6c9e7633ff688358dce139986aeb238db045fcf2e1f3ccc6648734b5a6efc923e528430291f41465962f8a271c3f7ddaff3c303e36fb3570d87f43be8562b1289d62a64b"}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0xf6, 0x3, 0xd}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7f, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x6, 0xc, 0x8, 0x3}, 0x16f, &(0x7f0000000200)={0x5, 0xf, 0x16f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x1, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x86, 0x3, 0x2, 0x1100, 0x6}, @generic={0x5d, 0x10, 0x3, "38e20c236c74a26c0bce54a2fb3e813d78b5d6471e3dec180f78b4bb4b500c306e0ce16f39f1325b55fd1468845cc95562c9017e7b7ddf7e9b245cce1e95ee2e84e422455de35a8e988bdf3680bb5426194a879878d6665e3efa"}, @generic={0xd4, 0x10, 0x2, "cb7b22b492e945a2f1ee21dd7d0a1a27167c02fd6188fefe0cc060c5655709f466d0d44db15c004eb54b93978cc941864ac01300e63c1343720fec5deeeaf0ed3b4733769e80c08003f05a795ad2d683d68bfc741c6d383c86fe2e50daae19f60a365fee248132f9c78b056d45034028ca249460f52cfaed3f72b1f48799e11cd7783c41779894b4b6fd64bfc89638e2e7031bcf7fb85d4654fbbda34fa25219faf0307e0f533d7cd71135ddad630a345c45ff57e9cec869a73368e931e35c5ddf9aee25f059c89d6c61bf7a3e3c754136"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x9, 0xc59}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x9, 0xf, 0x8, [0x0]}]}, 0x7, [{0xfffffffffffffe5c, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x860}}, {0x65, &(0x7f0000000880)=@string={0x65, 0x3, "f0ffa8fe333ea9f79975cbdf5b073de13989013ef62c3ea1d00135f5e502a3757aecb7853c5203ea9ab29b8d1f1c928fdee0e0bc4f6c4958136774ff6cef9a38ca3e51ad521834489d4d60c321a40b8033f4fe70850059573264f75bb897c4e2d7eaaa"}}, {0x8f, &(0x7f0000000900)=@string={0x8f, 0x3, "54f8321ba401f4c19e2caba97178c468e66faff94c7d2f3a489c2a8981f0676a0ab313ee9128fb92c5aced37616f29336152bc4ecd9b815d903ff194af11db6b547e0341458e41cc231f2176396ebd77096a201a7e2cba4ca1886c20f91b493101358415e1e58493b991e39b37a1d302ac9b5027cbc31c9b1c5c4c5222de892a4f419de6780c8e547d2a1ac170"}}, {0xa6, &(0x7f00000009c0)=@string={0xa6, 0x3, "d25ca18fe4df3f2d86fc4d4e8311d87555d9e69282cb656dde269a589a78152f63f9634029833f1ce490d7810c75228c555c0e2f893bed515216c3363ecad99bf86701f0e70db19273c901f15d3779f0e47e199406173ac79fd9ac5124f4a863b3b7cd160adb5580a55b70d3b6a4ebc9f1c19d3ee185f6d7d1e65a794024ceb1e71d0b913d3cf515cb2c6af27bb4c360c982cfcf53bb36bdb998c1bd7665995b8ec20887"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2401}}, {0x2c, &(0x7f0000000ac0)=@lang_id={0x0, 0x3, 0x422}}]}) 3.379723094s ago: executing program 1 (id=6138): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x9, 0x726, 0x1, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0xfffd, 0x0, 0x0, 0x4, 0x0, @rand_addr, @rand_addr=0x200}}}}) 3.133061222s ago: executing program 1 (id=6139): r0 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f00000001c0)=""/2, &(0x7f0000000340)=0x2) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x6558, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mremap(&(0x7f0000528000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f000048b000/0x1000)=nil) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) epoll_pwait(r9, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000200)={[0x4]}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 2.986675011s ago: executing program 2 (id=6140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000280)={{@any, 0xffffffff}, 0x1, 0x0, 0x800}) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r6) timer_settime(r2, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="2c385a21ec57cf18b7adcd", 0xb) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000000300)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x7}, 0x41) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff488eedc5388c8aa6f554", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_io_uring_setup(0x7d8b, &(0x7f00000000c0)={0x0, 0x6873, 0x2, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.546487028s ago: executing program 0 (id=6141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="69643d7ed15289746aca4a56d551dd4c2a1f00df1ac3d7958e68f8c92cbe5b87b1fe06975e514ea63ac55408b16daf2290242809", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) (async) read$FUSE(r2, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x200) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) (async) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.544718341s ago: executing program 1 (id=6142): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0x10000, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x410c02, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) dup(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) write(r4, &(0x7f0000000000)="95962cf3b5", 0x5) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) tkill(0x0, 0x14) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x10000036, 0x2, 0xd7bc, 0x8, 0xfffffffffffffffb, 0x6, 0x7, 0x9}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.535368977s ago: executing program 7 (id=6143): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000140), 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) close(r0) request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)='{}\x00\xa8\x9f\xd8\x1cN)\x16\xc7;\x7f\xc9\xe9\x99\xeaO\t\xa8x\xe4\xa3\x14\xef\xa7\x03Q\x00\xdbI*\x8d\x10!\xbe\x17\x01\x98\xc7\xd1\xd5\xa5r\xcb\xb1l\x02|+\xaa\x9eq+\xf2b\xbf\x00\f.\xa1\x0e4\xff\xc6\xfe\xa4\xef\xd47\xf62\xf5\x98\b\x9c\xads\t?\xcc\v\xfa\x1d\x9cX\xa4\xa2\nc\x90\xf4\xc0\xc5\xf2\xf1\xde*\xc2\xaf\xe4\xbe\xda\xbe&\x01?\x86\x06\xd9O\xa9\xd0\x1fa\xf3\xdb\x82{/\xfb\\\x9b\x16z\x9f\xb9\xea5\b\xcb\x1cy\\\xfa\xf8S\x97\xc70\xc1\x13\xafmNn\xfc\xbds/\xfb\xba>=\xb2\x02\x89\x05\xb2\xf1N\x98\xbbJ\xad\x12\xc9\xc46(t\xa13C\xf5\xe6?\x82}\xdci\x99\xee\xff/|;\xea\x107m \xea4\x9f2\xd56\x80\xc4\xbc\xaeX\xbd\x1e\x15\xef\x84\'\x05\xc6\xca\xdb-\x7f\xfe\xd0\xea+\x9a\xa8\xec\x94\xb7\xbe\xda\xafW\x15\xef\xd5\x00'/257, r8) socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.582424397s ago: executing program 2 (id=6144): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x2]}, 0x0, 0x0, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x4, 0xb0000) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000340)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000bc0)={0x0, 0xf, 0x2, "56c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x11, 0x1d, {0x1d, 0xd, "cbc95f721076678e177536fba2b2ee1f13415e71c24cd53d06eac5"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0xe6, "a7771d68202529e39c7bf7f44c308d117f0bdac3abe71fb1488d28cf84f11ee25ba6e69be14d1f6cd868d510df5aff3c0769722b50ef8f3cbb28ea740d36009ca1e6e967f71b6dc544e3a6cf68fdb70d4d6e83acd7f0ee6ad6e4fad59cac6fbf69dfaddc67e97d6ccf9217b94445cfdc75963e25152936696cbf721f0677ea66848e3400983049771d6651214add383c4a4ea9f8fa870437290d35df705562782c6151f57b70b43cad5df328cd374dfb90703c09d074f2339192a391007dee972ac321330350899544f45ad0299274d7ad4e46225ef687802b406ce2d3ff850103a8fa961147"}, &(0x7f0000000c00)={0xa1, 0x1, 0x400, "1e761eb4d941c408876d5b33a8cab04d1d8f0912eb1fb2f8744c9d4d7f4d3e154edfac61db4099aae7559235ee42889a92215c68d57490bc035ad2c40d116955b547b74e4c90523f69c9cee52994f3eabe65e07f385974f4cdddaa59340e0271b3fb0b2b4446fae88c1b530173a54a9374ba7dc66fef6764672165f8ee356d37ac27fc77950c7c5147d230be7ccb1760f9868d096d4a21524d32044cdfc198ea87cfec5963cc7d30a99916a447aeffa612abf3cd7d343ba1c3d967b440c66f063c68b9f5430db25c94ce13a426ad608de8e4daf6250910c53db883bf0e0952006ef115c356aa087043585a46e53bc2e231ee5eff9d843d29b87e795dfce452293e867e775e151ab0f624ac17269692d61c4e4d1e4a6eac81baf81d6153cf4426d48a0554bcbba220e853bf9b4569e6bbb4c3eaf463a584a42217301d956e0d52f90531d3d0638c06f3fefd85b22c24abb3270a032389973d05e05f7ca2abecc792696c9e120386a08fed288b53a9a1c434510d7d1eebbd1750ad417de50f214187c1eb0ad7eefb4127120885a937c2950631181a59f1b263ed29204f2a5534ec71d8e08d4675b3937e9e2194889ae9825e9505edf604b26798a0b5836a8c92a6757aa8abdbcba2be4d9bc9551f16aa69dcd81529b5aced6039fbb79111f64077472d29a9d39b9f4fea52e1ba297ac8c52075680029db393c71db89a4be02a214047ccc973ce7d3e722b3067e9425f28809afdbe0f08a776ca571946053d4f385ffea859a1adadfe88b8b6c1095e462e8b8d407f4ece67fc453eba349308a5e418cdd555fcb10f4cbc7810eb79ec0ae7a34cc05b6d4d40c879c044600f4abef4221d1dbe344e7921faa6014074753f909569c7b57bec5fcfaed2c3ba8d891bff0a4e0b2e8bdb896a56ce2e22fbf6eaab463e42ac07f68abfe9cfad61596138c78ddbd7f65abac301c2cbc0e49e31e3ff252525818e7bb6a807028f756a38b0b9d7d6ac04933f1ec3f83eba22928b5200761f240179b422f09dfb294b88a8d4e5791d950aa3532fe343269ba345d285739fdd43797f4f4eeec82ef9fc07bc16550940ccfcbcca70be2d68780d152bea9b4bff74949cb778897c08a684644042c2ef0c3a41feea3e70b3ab916bb0db462dc6adae1aba32aa01da10f4b7a1ae8e4d1d9cd985e9ff457c21dae328985f36c8f2febddf3e3093aac4a41de0b9cf0eaec00b34463cbef8403ab481c6d9687810c906ff02652f0694c17c8c267d78b79cd935cf1381361e6e44eadc88012be4d74b38fd4158e425cb9bc9c00789dcdc0a3b994b8fa240c6e9efd9a7f8942babe3fa0e7c1a3ee43e936fd8c38b1f5d0e5d15cbef16a1c6e5bfa6e99b34a00444f3fee8be8df34f0083decc46987384af7a8c84dfd18059684561ce8383df04d235588a9f4a99be795ec5d52b9e5899215c8"}, &(0x7f0000000100)}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000004140)={0x1c, &(0x7f0000004040)={0x40, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.156643948s ago: executing program 1 (id=6145): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f00000000c0)=""/138) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r5, 0x0, 0x6, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x0, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x4000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xc, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xc, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x8000000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0xff, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x80, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea7ca6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1baa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a772b08ea90f63f5c4851df9aef747a4e240cec55ce1659c08d387142c5835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe00000000000000011a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a29eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000500d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e000000000957a98a840111c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fd1e796afeac2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f600000000dbfae6788549e6000000000000d7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dcca000000d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbeedf263779ba2e402d7db15804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb72d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca0d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r6, &(0x7f0000000440)='}', 0x1, 0x4) 1.097724743s ago: executing program 0 (id=6146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000014c0)={0x2, 0x0, [{0xc0010117, 0x0, 0x1}, {0xa0d, 0x0, 0x100000000000001}]}) 882.481643ms ago: executing program 0 (id=6147): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000340000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 247.161124ms ago: executing program 7 (id=6148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f, 0x2000) mmap(&(0x7f00002c3000/0x1000)=nil, 0x1000, 0x100000b, 0x4008032, r5, 0x2000) (async) mmap(&(0x7f00002c3000/0x1000)=nil, 0x1000, 0x100000b, 0x4008032, r5, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) 246.804286ms ago: executing program 0 (id=6149): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000000c0)={0x2, 0x18, [0x3, 0x3, 0xebc, 0x9], &(0x7f0000000000)=[0x0, 0x0, 0x0]}) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='unlock mem\x00'], 0xb) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001"], 0x74}}, 0x0) 246.482803ms ago: executing program 4 (id=6150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x3, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100000005000000000000000010000000000c00000000000000fcffffff"], &(0x7f0000001500), 0x200) sendmsg$NFT_MSG_GETCHAIN(r3, 0x0, 0x20) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0xfffffffffffffd22, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x1076}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 0s ago: executing program 2 (id=6151): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="120100884657977614f5046b9300fe76181004160780a6af0117030109"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x10, 0x2000, @fd=r1, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="6ec77956b27d31f07c94b4dd4ea2c112737df6cba89721f6b8308210a063ffc1e70669ea0b7fc8a8db3fe665d0cb88cb5e512e1f89b2860fb49609636db14a93975d109e9af3e1c85d31bbccdb09eb13ada97c243c873173121d6b076ea5ccb309865324d412b0995449b05d65f5d27923f51ca9031f92214c", 0x79}, {&(0x7f0000000080)="313dde4e4ab53ba187b64c1d79c0c1fae8ba45d9106b2afbb3ebf319fea324e00a857f1959448a86", 0x28}], 0x2, 0x8, 0x0, {0x0, r2}}) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/245) kernel console output (not intermixed with test programs): ect [ 1386.665524][T28265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1387.263417][T28279] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1387.471108][T28283] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 1387.538218][T28283] team0: Port device batadv11 added [ 1388.335885][T28297] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1388.405491][T28294] syzkaller1: entered promiscuous mode [ 1388.424862][T28294] syzkaller1: entered allmulticast mode [ 1389.696331][T18471] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1389.867464][T18471] usb 3-1: Using ep0 maxpacket: 8 [ 1389.874491][T18471] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1389.894758][T18471] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.913876][T18471] usb 3-1: config 127 has no interface number 1 [ 1389.920664][T18471] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1389.938480][T18471] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1389.951449][T18471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.968408][T18471] usb 3-1: Product: syz [ 1389.975601][T18471] usb 3-1: Manufacturer: syz [ 1390.418740][T18471] usb 3-1: SerialNumber: syz [ 1390.711438][T28321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1390.748893][T28321] Unknown options in mask b7f2 [ 1390.984544][T28334] net_ratelimit: 11 callbacks suppressed [ 1390.984558][T28334] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1391.427862][T28347] syzkaller1: entered promiscuous mode [ 1391.433505][T28347] syzkaller1: entered allmulticast mode [ 1392.405522][T18471] xr_serial 3-1:127.171: xr_serial converter detected [ 1392.428022][T18471] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1392.434463][T18471] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1392.487564][T18471] usb 3-1: USB disconnect, device number 76 [ 1392.495212][T18471] xr_serial 3-1:127.171: device disconnected [ 1392.778142][T28353] tipc: Resetting bearer [ 1392.786902][T28353] tipc: Resetting bearer [ 1392.830692][T28354] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1392.885236][T28353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.523497][T28364] loop5: detected capacity change from 0 to 7 [ 1393.549238][T28364] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1393.584950][T28364] loop5: p1 start 771753728 is beyond EOD, truncated [ 1393.602120][T28364] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1393.634945][T28364] loop5: p3 start 6291456 is beyond EOD, truncated [ 1393.673102][T28364] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1393.686392][T28364] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1393.696736][T28364] loop5: p6 start 701767795 is beyond EOD, truncated [ 1394.733448][T28395] bridge0: port 1(erspan0) entered blocking state [ 1394.740906][T28395] bridge0: port 1(erspan0) entered disabled state [ 1394.749194][T28395] erspan0: entered allmulticast mode [ 1394.766530][T28395] erspan0: entered promiscuous mode [ 1394.794592][T28395] bridge0: port 1(erspan0) entered blocking state [ 1394.802152][T28395] bridge0: port 1(erspan0) entered forwarding state [ 1394.835926][T28404] erspan0: left allmulticast mode [ 1394.851757][T28404] erspan0: left promiscuous mode [ 1394.924113][T28404] bridge0: port 1(erspan0) entered disabled state [ 1395.106705][T18933] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1395.268735][T18933] usb 5-1: device descriptor read/64, error -71 [ 1395.276289][T18480] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1395.428398][T18480] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1395.439335][T18480] usb 2-1: not running at top speed; connect to a high speed hub [ 1395.449003][T18480] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1395.460172][T18480] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1395.471258][T18480] usb 2-1: config 2 has no interface number 0 [ 1395.480922][T18480] usb 2-1: config 2 has no interface number 1 [ 1395.490813][T18480] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1395.508832][T18480] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1395.526618][T18933] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1395.537874][T18480] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1395.561822][T18480] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1395.581882][T18480] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1395.612997][T18480] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1395.628622][T18480] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1395.638750][T18480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.652314][T18480] usb 2-1: Product: syz [ 1395.661676][T18480] usb 2-1: Manufacturer: syz [ 1395.666517][T18933] usb 5-1: device descriptor read/64, error -71 [ 1395.676329][T18480] usb 2-1: SerialNumber: syz [ 1395.776691][T18933] usb usb5-port1: attempt power cycle [ 1396.116263][T18933] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1396.136975][T18933] usb 5-1: device descriptor read/8, error -71 [ 1396.376303][T18933] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1396.396934][T18933] usb 5-1: device descriptor read/8, error -71 [ 1396.506757][T18933] usb usb5-port1: unable to enumerate USB device [ 1397.850072][T18480] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input101 [ 1397.908598][T18480] usb 2-1: USB disconnect, device number 71 [ 1397.918603][T28423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.953290][T28423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.112179][T28427] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1398.121374][T28427] 0X: renamed from caif0 [ 1398.273212][T28427] 0X: entered allmulticast mode [ 1398.278781][T28427] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1398.346785][T18480] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1398.486493][T18480] usb 2-1: device descriptor read/64, error -71 [ 1398.569738][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5773'. [ 1398.728120][T18480] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1399.126534][T18480] usb 2-1: device descriptor read/64, error -71 [ 1399.237214][T18480] usb usb2-port1: attempt power cycle [ 1399.616359][T18480] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1399.644644][T18480] usb 2-1: device descriptor read/8, error -71 [ 1399.687154][T18936] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1399.826395][T18936] usb 3-1: device descriptor read/64, error -71 [ 1399.897440][T18480] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1399.928586][T18480] usb 2-1: device descriptor read/8, error -71 [ 1400.057292][T18480] usb usb2-port1: unable to enumerate USB device [ 1400.106271][T18936] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1400.257024][T18936] usb 3-1: device descriptor read/64, error -71 [ 1400.376660][T18936] usb usb3-port1: attempt power cycle [ 1400.666320][T18933] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1400.726346][T18936] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1400.746933][T18936] usb 3-1: device descriptor read/8, error -71 [ 1400.836440][T18933] usb 5-1: Using ep0 maxpacket: 32 [ 1400.844492][T18933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1400.862388][T18933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1400.884289][T18933] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1400.893881][T18933] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1400.902469][T18933] usb 5-1: Product: syz [ 1400.907117][T18933] usb 5-1: Manufacturer: syz [ 1400.911735][T18933] usb 5-1: SerialNumber: syz [ 1400.920072][T18933] usb 5-1: config 0 descriptor?? [ 1400.939873][T18933] hub 5-1:0.0: bad descriptor, ignoring hub [ 1400.945836][T18933] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1400.986271][T18936] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1401.021577][T18936] usb 3-1: device descriptor read/8, error -71 [ 1401.141816][T18936] usb usb3-port1: unable to enumerate USB device [ 1401.247246][T18480] usb 5-1: USB disconnect, device number 19 [ 1401.306726][T28484] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1401.966658][T18480] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1402.116318][T18480] usb 5-1: Using ep0 maxpacket: 32 [ 1402.133068][T18480] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1402.146239][T18480] usb 5-1: config 0 has no interface number 0 [ 1402.159991][T18480] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1402.176707][T18480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.184864][T18480] usb 5-1: Product: syz [ 1402.191050][T18480] usb 5-1: Manufacturer: syz [ 1402.195820][T18480] usb 5-1: SerialNumber: syz [ 1402.203379][T18480] usb 5-1: config 0 descriptor?? [ 1402.210856][T18480] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1402.416069][T18480] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1402.432069][T18480] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1402.815233][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1402.815571][T18936] usb 5-1: USB disconnect, device number 20 [ 1402.838707][T18936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1402.855741][T18936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1402.868789][T18936] quatech2 5-1:0.51: device disconnected [ 1403.016348][T18933] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1403.122079][T28501] input: syz1 as /devices/virtual/input/input102 [ 1403.178226][T18933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.193587][T18933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.203800][T18933] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1403.214733][T18933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.234475][T18933] usb 3-1: config 0 descriptor?? [ 1403.653710][T18933] hid_parser_main: 20 callbacks suppressed [ 1403.653732][T18933] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 1403.669372][T18933] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 1403.681998][T18933] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.003C/input/input103 [ 1403.710093][T18933] cm6533_jd 0003:0D8C:0022.003C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1403.736784][T18936] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1403.864716][T28499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.873537][T28499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.876290][T18480] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1403.897174][T18936] usb 5-1: Using ep0 maxpacket: 32 [ 1403.905764][T18936] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1403.915424][T18936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.926033][T18936] usb 5-1: config 0 has no interface number 0 [ 1403.932737][T18936] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1403.944082][T18936] usb 5-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1403.958830][T18936] usb 5-1: config 0 interface 8 has no altsetting 0 [ 1403.961759][T28499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.967599][T18936] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1403.976622][T28499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.983189][T18936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.016941][T18936] usb 5-1: Product: syz [ 1404.022509][T18936] usb 5-1: Manufacturer: syz [ 1404.027264][T18936] usb 5-1: SerialNumber: syz [ 1404.033909][T18936] usb 5-1: config 0 descriptor?? [ 1404.040605][T18480] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.053844][T18480] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1404.063989][T18480] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1404.075348][T18933] usb 3-1: USB disconnect, device number 81 [ 1404.085216][T18480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.108516][T18480] usb 2-1: config 0 descriptor?? [ 1404.123804][T18480] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1404.132815][T18480] dvb-usb: bulk message failed: -22 (3/0) [ 1404.147944][T18480] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1404.161971][T18480] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1404.170046][T18480] usb 2-1: media controller created [ 1404.177862][T18480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.191151][T18480] dvb-usb: bulk message failed: -22 (6/0) [ 1404.203174][T18480] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1404.213194][T18480] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104 [ 1404.229377][T18480] dvb-usb: schedule remote query interval to 150 msecs. [ 1404.236702][T18480] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1404.382160][T28515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.396622][T18480] dvb-usb: bulk message failed: -22 (1/0) [ 1404.407195][T18480] dvb-usb: error while querying for an remote control event. [ 1404.416708][T28515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.475189][T28519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.489701][T28519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.576562][T18480] dvb-usb: bulk message failed: -22 (1/0) [ 1404.582528][T18480] dvb-usb: error while querying for an remote control event. [ 1404.704411][T18936] ath6kl: Failed to submit usb control message: -71 [ 1404.714517][T18936] ath6kl: unable to send the bmi data to the device: -71 [ 1404.736286][T18936] ath6kl: Unable to send get target info: -71 [ 1404.746796][T18480] dvb-usb: bulk message failed: -22 (1/0) [ 1404.752834][T18936] ath6kl: Failed to init ath6kl core: -71 [ 1404.768112][T18936] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1404.776721][T18480] dvb-usb: error while querying for an remote control event. [ 1404.798937][T18936] usb 5-1: USB disconnect, device number 21 [ 1404.870034][T28526] syzkaller0: left promiscuous mode [ 1404.875290][T28526] syzkaller0: left allmulticast mode [ 1404.956334][T18480] dvb-usb: bulk message failed: -22 (1/0) [ 1404.962178][T18480] dvb-usb: error while querying for an remote control event. [ 1405.121395][T18936] usb 2-1: USB disconnect, device number 76 [ 1405.126840][T18480] dvb-usb: bulk message failed: -22 (1/0) [ 1405.136996][T18480] dvb-usb: error while querying for an remote control event. [ 1405.171803][T18936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1405.338916][T28534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1406.236669][T28548] ptrace attach of "./syz-executor exec"[17369] was attempted by ""[28548] [ 1406.252870][T28549] loop5: detected capacity change from 0 to 7 [ 1406.255102][T28548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5805'. [ 1406.272791][T28549] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1406.292844][T28549] loop5: p1 start 771753728 is beyond EOD, truncated [ 1406.302741][T28549] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1406.309926][T28549] loop5: p3 start 6291456 is beyond EOD, truncated [ 1406.324008][T28549] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1406.332421][T28549] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1406.347250][T28549] loop5: p6 start 701767795 is beyond EOD, truncated [ 1408.228107][T18480] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1408.411223][T28593] 0X: left allmulticast mode [ 1408.414212][T28594] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1408.418370][T28593] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1408.449643][T18480] usb 3-1: device descriptor read/64, error -71 [ 1408.570385][T28595] syzkaller0: entered promiscuous mode [ 1408.575981][T28595] syzkaller0: entered allmulticast mode [ 1408.696452][T18480] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1408.856384][T18480] usb 3-1: device descriptor read/64, error -71 [ 1408.966699][T18480] usb usb3-port1: attempt power cycle [ 1409.312179][T28603] loop5: detected capacity change from 0 to 7 [ 1409.328378][ T6236] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1409.336894][ T6236] loop5: p1 start 771753728 is beyond EOD, truncated [ 1409.344250][ T6236] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1409.364550][ T6236] loop5: p3 start 6291456 is beyond EOD, truncated [ 1409.372782][ T6236] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1409.380532][ T6236] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1409.388664][ T6236] loop5: p6 start 701767795 is beyond EOD, truncated [ 1409.400516][T28603] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1409.406578][T18480] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1409.432941][T28603] loop5: p1 start 771753728 is beyond EOD, truncated [ 1409.441008][T18480] usb 3-1: device descriptor read/8, error -71 [ 1409.461034][T28603] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1409.473261][T28603] loop5: p3 start 6291456 is beyond EOD, truncated [ 1409.480284][T28603] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1409.487785][T28603] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1409.494704][T28603] loop5: p6 start 701767795 is beyond EOD, truncated [ 1409.707051][T18480] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1409.744020][T28607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5817'. [ 1409.763538][T18480] usb 3-1: device descriptor read/8, error -71 [ 1409.819336][T28612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5820'. [ 1409.902087][T18480] usb usb3-port1: unable to enumerate USB device [ 1409.947593][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1410.038279][T28615] netlink: 'syz.4.5821': attribute type 13 has an invalid length. [ 1410.136937][T28615] vxlan0: entered promiscuous mode [ 1410.165374][ T6084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.175650][ T6084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.209464][ T6084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.230501][ T6084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.090723][T28632] syz_tun: entered promiscuous mode [ 1411.100567][T28632] syz_tun: left promiscuous mode [ 1411.996247][T18936] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1412.176871][T18936] usb 2-1: Using ep0 maxpacket: 32 [ 1412.268678][T18936] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1412.279316][T18936] usb 2-1: config 0 has no interface number 0 [ 1412.299364][T28649] loop5: detected capacity change from 0 to 7 [ 1412.301363][T18936] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1412.314907][T28649] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1412.328770][T28649] loop5: p1 start 771753728 is beyond EOD, truncated [ 1412.342086][T18936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.342132][T28649] loop5: p2 start 1818846767 is beyond EOD, [ 1412.360552][T18936] usb 2-1: Product: syz [ 1412.360698][T28649] truncated [ 1412.380821][T18936] usb 2-1: Manufacturer: syz [ 1412.380870][T28649] loop5: p3 start 6291456 is beyond EOD, [ 1412.385834][T18936] usb 2-1: SerialNumber: syz [ 1412.387354][T28649] truncated [ 1412.398367][T28649] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1412.412863][T28649] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1412.414179][T18936] usb 2-1: config 0 descriptor?? [ 1412.439814][T28649] loop5: p6 start 701767795 is beyond EOD, truncated [ 1412.442679][T18936] smsc95xx v2.0.0 [ 1412.699314][T28662] netlink: 'syz.4.5834': attribute type 16 has an invalid length. [ 1412.716555][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5834'. [ 1412.745549][T28662] macsec1: entered allmulticast mode [ 1412.752486][T28662] bond0: entered allmulticast mode [ 1412.781324][T28662] bond0: left allmulticast mode [ 1412.845318][T28665] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1412.853860][T28647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.864072][T28647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.878176][T18936] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1412.933308][T28663] tipc: Resetting bearer [ 1412.948329][T28663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1412.979886][T18936] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1413.226553][T18933] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1413.379612][T18933] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1413.389663][T18933] usb 5-1: config 0 has no interface number 0 [ 1413.396115][T18933] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1413.398469][T28647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.636694][T28647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.670650][T18933] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1413.681904][T18933] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1413.695526][T18933] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1413.743806][T18933] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1413.755746][T18933] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1413.770766][T18933] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1413.782615][T18933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.797748][T18933] usb 5-1: config 0 descriptor?? [ 1413.804057][T28667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1413.812669][T28667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1413.831106][T18933] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1414.104280][T18936] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1414.120934][T18936] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1414.141503][T28678] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 1414.500395][T28685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5839'. [ 1414.569975][T28687] CUSE: unknown device info "" [ 1414.582186][T28687] CUSE: unknown device info "" [ 1414.593330][T28687] CUSE: DEVNAME unspecified [ 1415.086087][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5843'. [ 1415.126270][T28702] netlink: 'syz.7.5843': attribute type 5 has an invalid length. [ 1415.349972][T28702] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5843'. [ 1415.404338][T18471] usb 2-1: USB disconnect, device number 77 [ 1415.498966][T28710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.627877][T28702] geneve3: entered promiscuous mode [ 1415.639932][T28702] geneve3: entered allmulticast mode [ 1415.646712][T28710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.679115][ T6014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1415.688197][ T6014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1415.697045][ T6014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1415.705740][ T6014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1415.817077][T18471] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1415.978335][T18471] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1415.989227][T18471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.001628][T18471] usb 2-1: config 0 descriptor?? [ 1416.013473][T18471] cp210x 2-1:0.0: cp210x converter detected [ 1416.150144][T28714] netlink: 'syz.2.5845': attribute type 1 has an invalid length. [ 1416.220661][T28714] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1416.414715][T18471] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1416.428692][T28712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.444410][T28712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.463394][T28712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.473528][T28718] ipt_ECN: cannot use operation on non-tcp rule [ 1416.491210][T28712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.590597][T18471] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1416.599814][T18471] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1416.620191][T18471] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1416.660863][T18471] usb 2-1: USB disconnect, device number 78 [ 1416.683702][T18471] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1416.705882][T18471] cp210x 2-1:0.0: device disconnected [ 1418.056509][T18471] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1418.237566][T18471] usb 2-1: config 0 has no interfaces? [ 1418.248485][T18471] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1418.258117][T18471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.266487][T18471] usb 2-1: Product: syz [ 1418.270807][T18471] usb 2-1: Manufacturer: syz [ 1418.275482][T18471] usb 2-1: SerialNumber: syz [ 1418.282106][T18471] usb 2-1: config 0 descriptor?? [ 1418.518631][T28729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5848'. [ 1418.567325][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1418.567342][ T30] audit: type=1326 audit(1769198525.989:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1418.717608][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5850'. [ 1418.794439][ T30] audit: type=1326 audit(1769198525.989:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1418.892007][ T30] audit: type=1326 audit(1769198526.189:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1418.984231][ T30] audit: type=1326 audit(1769198526.189:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.076970][ T30] audit: type=1326 audit(1769198526.189:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.148513][ T30] audit: type=1326 audit(1769198526.189:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.273730][ T30] audit: type=1326 audit(1769198526.189:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.338491][ T30] audit: type=1326 audit(1769198526.189:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.506916][ T30] audit: type=1326 audit(1769198526.189:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1419.592269][ T30] audit: type=1326 audit(1769198526.189:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28737 comm="syz.7.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed559acb9 code=0x7ffc0000 [ 1420.028098][T28750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.067642][T28750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.356080][T28750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.370809][T28750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.510225][T18480] usb 2-1: USB disconnect, device number 79 [ 1420.967354][T28778] veth1_to_batadv: mtu less than device minimum [ 1421.072097][T28783] netlink: 'syz.4.5862': attribute type 27 has an invalid length. [ 1421.126564][T18480] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1421.271060][T28785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.276284][T18936] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1421.289959][T18480] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1421.307621][T18480] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 1421.315991][T18480] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 1421.336705][T28785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.353956][T18480] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1421.376861][T18480] usb 2-1: config 129 has no interface number 0 [ 1421.384478][T28783] vxlan0: left promiscuous mode [ 1421.390004][T18480] usb 2-1: config 129 has no interface number 1 [ 1421.397247][T18480] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1421.426442][T18480] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1421.438351][T18480] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1421.452856][T18480] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1421.456447][T18936] usb 3-1: device descriptor read/64, error -71 [ 1421.460517][T18480] usb 2-1: config 129 interface 5 has no altsetting 0 [ 1421.481703][T18480] usb 2-1: string descriptor 0 read error: -22 [ 1421.496603][T18480] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1421.505676][T18480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.534060][T18480] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.541172][T18480] usb 2-1: MIDIStreaming interface descriptor not found [ 1421.643884][T28784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.659846][T28784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.672245][T28784] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1421.690960][T16666] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.701541][T16666] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.710609][T16666] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.719762][T18936] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1421.756274][T16666] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.804715][T28787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1421.866463][T18936] usb 3-1: device descriptor read/64, error -71 [ 1421.976638][T18936] usb usb3-port1: attempt power cycle [ 1422.316310][T18936] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1422.336870][T18936] usb 3-1: device descriptor read/8, error -71 [ 1422.596509][T18936] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1422.628561][T18936] usb 3-1: device descriptor read/8, error -71 [ 1422.736543][T18936] usb usb3-port1: unable to enumerate USB device [ 1422.943201][T28792] netlink: 'syz.7.5865': attribute type 27 has an invalid length. [ 1422.965859][T28792] batman_adv: batadv0: Interface deactivated: dummy0 [ 1422.979856][T28792] ip6gre2: left promiscuous mode [ 1422.984833][T28792] ip6gre2: left allmulticast mode [ 1423.000504][T28792] geneve3: left promiscuous mode [ 1423.005487][T28792] geneve3: left allmulticast mode [ 1423.013537][ T50] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1423.022644][ T50] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1423.035460][ T50] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1423.035632][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.052294][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.055569][ T50] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1423.097923][T28792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.105750][T28792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.115451][T28792] batman_adv: batadv0: Interface activated: dummy0 [ 1423.123760][T28792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.911947][T18936] usb 2-1: USB disconnect, device number 80 [ 1424.270763][T28809] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1424.349757][T28808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.016496][T18480] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1425.127433][T28821] syzkaller0: entered promiscuous mode [ 1425.133181][T28821] syzkaller0: entered allmulticast mode [ 1425.216569][T18480] usb 3-1: Using ep0 maxpacket: 32 [ 1425.225336][T18480] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1425.233894][T18480] usb 3-1: config 0 has no interface number 0 [ 1425.243696][T18480] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1425.253615][T18480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.273731][T18480] usb 3-1: Product: syz [ 1425.279349][T18480] usb 3-1: Manufacturer: syz [ 1425.302112][T18480] usb 3-1: SerialNumber: syz [ 1425.311613][T18480] usb 3-1: config 0 descriptor?? [ 1425.350039][T18480] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1425.578348][T18480] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1425.617000][T18480] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1426.608626][T28835] netlink: 'syz.7.5877': attribute type 10 has an invalid length. [ 1426.675310][T28836] netlink: 'syz.7.5877': attribute type 10 has an invalid length. [ 1427.064815][T28843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1427.810030][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1427.810494][T18936] usb 3-1: USB disconnect, device number 90 [ 1427.884248][T18936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1427.930223][T18936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1427.961542][T18936] quatech2 3-1:0.51: device disconnected [ 1428.318594][T28864] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1430.323632][T28835] team0: Port device netdevsim0 added [ 1430.339041][T28836] team0: Port device netdevsim0 removed [ 1430.360177][T28836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1430.395305][T28863] tipc: Resetting bearer [ 1430.442673][T28863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.640447][T28876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.793708][T28879] xt_TCPMSS: Only works on TCP SYN packets [ 1430.800407][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1431.368042][T18936] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1431.597873][T18936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1431.628748][T28891] fuse: Bad value for 'fd' [ 1431.633944][T18936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1431.663763][T18936] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1431.673779][T18936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.686412][T18936] usb 3-1: Product: syz [ 1431.699787][T18936] usb 3-1: Manufacturer: syz [ 1431.705658][T18936] usb 3-1: SerialNumber: syz [ 1431.714171][T18936] usb 3-1: config 0 descriptor?? [ 1431.720425][T28888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1431.728568][T28888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1431.755046][T28893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1431.836850][T28893] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1431.879154][T28893] File: /dev/nullb0 PID: 28893 Comm: syz.1.5894 [ 1432.068346][T28888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1432.075792][T28888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1432.569269][T28919] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 1432.580816][T28919] team0: Port device batadv12 added [ 1432.587554][T18936] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1432.809665][T18936] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1433.068692][T28931] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1433.086293][T28925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1433.151545][T18936] usb 3-1: USB disconnect, device number 91 [ 1433.740914][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5910'. [ 1434.308401][T28958] netlink: 'syz.1.5912': attribute type 27 has an invalid length. [ 1434.351441][T28959] netlink: 'syz.0.5913': attribute type 27 has an invalid length. [ 1434.395377][T28958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.402871][T28958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.518062][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1434.785722][T28958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.786531][T18474] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1434.803876][T28958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.044540][T28974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1435.296522][T18474] usb 2-1: Using ep0 maxpacket: 16 [ 1435.308777][T18474] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1435.324417][T18474] usb 2-1: config 0 has no interface number 0 [ 1435.338219][T18474] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1435.374387][T18474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.448627][T18474] usb 2-1: Product: syz [ 1435.452879][T18474] usb 2-1: Manufacturer: syz [ 1435.492284][T18474] usb 2-1: SerialNumber: syz [ 1435.532136][T18474] usb 2-1: config 0 descriptor?? [ 1435.570859][T18474] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1435.756625][T28959] batman_adv: batadv0: Interface deactivated: dummy0 [ 1435.778950][T28959] bond8: left promiscuous mode [ 1435.962333][T28960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.003033][T28960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.026429][T28960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1436.086693][T18474] gspca_spca1528: reg_w err -110 [ 1436.107106][T18474] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1436.115171][T28967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.137962][T28967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.148182][T28967] batman_adv: batadv0: Interface activated: dummy0 [ 1436.154866][T28967] batadv0: mtu less than device minimum [ 1436.162106][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.173392][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.184495][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.195764][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.207463][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.218611][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.229874][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.240942][T28967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1436.278746][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.296466][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.307971][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.327485][T28981] binder: 28980:28981 ioctl 40046210 0 returned -14 [ 1436.332208][T28977] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1436.342812][T28977] team0: Port device batadv4 added [ 1436.352502][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.499122][T28987] xt_socket: unknown flags 0xc [ 1437.098624][T28992] syz.7.5920 (28992): drop_caches: 2 [ 1437.204821][T28997] program syz.4.5922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.215033][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5922'. [ 1437.238248][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5922'. [ 1437.263957][T28997] netlink: 'syz.4.5922': attribute type 11 has an invalid length. [ 1437.297567][T18480] usb 2-1: USB disconnect, device number 81 [ 1437.469646][T29010] netlink: 'syz.4.5925': attribute type 1 has an invalid length. [ 1437.528828][T29010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1437.714368][T29026] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1437.781928][T29026] team0: Port device batadv5 added [ 1437.926400][T18933] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1438.039096][T29035] netlink: 'syz.1.5927': attribute type 13 has an invalid length. [ 1438.058098][T29035] netlink: 'syz.1.5927': attribute type 27 has an invalid length. [ 1438.096297][T18933] usb 3-1: device descriptor read/64, error -71 [ 1438.446843][T18933] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1438.586296][T18933] usb 3-1: device descriptor read/64, error -71 [ 1438.696511][T18933] usb usb3-port1: attempt power cycle [ 1438.736954][T18480] usb 5-1: USB disconnect, device number 22 [ 1438.756613][T18480] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1438.862026][T29040] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1438.876996][T29040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1438.896930][T29040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1438.905118][T29040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1438.915189][T29040] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.019631][T29042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5934'. [ 1439.046358][T18933] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1439.070320][T18933] usb 3-1: device descriptor read/8, error -71 [ 1439.343651][T18933] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1439.388717][T18933] usb 3-1: device descriptor read/8, error -71 [ 1439.401423][T29043] chnl_net:caif_netlink_parms(): no params data found [ 1439.518396][T18933] usb usb3-port1: unable to enumerate USB device [ 1439.598612][T29062] netlink: 'syz.1.5938': attribute type 27 has an invalid length. [ 1439.657203][T29043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.664535][T29043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.674264][T29043] bridge_slave_0: entered allmulticast mode [ 1439.684430][T29043] bridge_slave_0: entered promiscuous mode [ 1439.738708][T29043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.746799][T29043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.754855][T29043] bridge_slave_1: entered allmulticast mode [ 1439.763456][T29043] bridge_slave_1: entered promiscuous mode [ 1439.795775][T29065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.805861][T29065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.840157][T29043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.871028][T29043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.904874][T29043] team0: Port device team_slave_0 added [ 1439.917156][T29043] team0: Port device team_slave_1 added [ 1439.963714][T29043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.971109][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.998124][T29043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.008925][T18936] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1440.019463][T29043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.027482][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.054248][T29043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.090885][ T2925] batman_adv: batadv0: Removing interface: netdevsim0 [ 1440.134410][T29043] hsr_slave_0: entered promiscuous mode [ 1440.141060][T29043] hsr_slave_1: entered promiscuous mode [ 1440.148079][T29043] debugfs: 'hsr0' already exists in 'hsr' [ 1440.153851][T29043] Cannot create hsr debugfs directory [ 1440.196237][T18936] usb 2-1: Using ep0 maxpacket: 16 [ 1440.203352][T18936] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1440.213965][T18936] usb 2-1: config 0 has no interface number 0 [ 1440.222959][T18936] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1440.253309][T18936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.266844][T18936] usb 2-1: Product: syz [ 1440.271049][T18936] usb 2-1: Manufacturer: syz [ 1440.277622][T18936] usb 2-1: SerialNumber: syz [ 1440.288566][T18936] usb 2-1: config 0 descriptor?? [ 1440.302879][T18936] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1440.394298][T29057] delete_channel: no stack [ 1440.476474][T16692] Bluetooth: hci3: command 0x0406 tx timeout [ 1440.510260][T29067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1440.826723][T18936] gspca_spca1528: reg_w err -110 [ 1440.858180][T18936] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1440.946424][T22668] Bluetooth: hci5: command tx timeout [ 1441.057929][T18928] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1441.131878][ T2925] bond0 (unregistering): Released all slaves [ 1441.141555][ T2925] bond1 (unregistering): Released all slaves [ 1441.155230][ T2925] bond2 (unregistering): Released all slaves [ 1441.169711][ T2925] bond3 (unregistering): Released all slaves [ 1441.184234][ T2925] bond4 (unregistering): Released all slaves [ 1441.199662][ T2925] bond5 (unregistering): Released all slaves [ 1441.226326][T18928] usb 3-1: Using ep0 maxpacket: 32 [ 1441.253809][T18928] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1441.262168][T18928] usb 3-1: config 0 has no interface number 0 [ 1441.282276][T18928] usb 3-1: config 0 interface 230 has no altsetting 0 [ 1441.348475][T18928] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1441.357698][T18928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.365698][T18928] usb 3-1: Product: syz [ 1441.370214][T18928] usb 3-1: Manufacturer: syz [ 1441.385325][T18928] usb 3-1: SerialNumber: syz [ 1441.401818][T18928] usb 3-1: config 0 descriptor?? [ 1441.418856][T18928] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 1441.447860][T18928] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1441.468805][ T2925] bond6 (unregistering): Released all slaves [ 1441.708429][ T2925] tipc: Left network mode [ 1441.733868][ T2925] IPVS: stopping backup sync thread 19134 ... [ 1442.126390][ T2925] hsr_slave_0: left promiscuous mode [ 1442.132586][ T2925] hsr_slave_1: left promiscuous mode [ 1442.170636][ T2925] team0 (unregistering): Port device batadv12 removed [ 1442.206466][ T2925] team0 (unregistering): Port device batadv11 removed [ 1442.246842][ T2925] team0 (unregistering): Port device batadv10 removed [ 1442.272618][ T2925] team0 (unregistering): Port device batadv9 removed [ 1442.298639][ T2925] team0 (unregistering): Port device batadv8 removed [ 1442.332189][ T2925] team0 (unregistering): Port device batadv7 removed [ 1442.380326][ T2925] team0 (unregistering): Port device batadv3 removed [ 1442.503937][T18474] usb 2-1: USB disconnect, device number 82 [ 1443.036233][T22668] Bluetooth: hci5: command tx timeout [ 1443.619296][T29043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1443.631937][T29043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1443.649934][T29043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1443.661280][T29043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1443.712350][T29114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5945'. [ 1443.788904][T29043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.847492][T29043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.855072][T18928] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 1443.890865][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.898126][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.916830][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1443.926290][T18928] usb 3-1: USB disconnect, device number 96 [ 1443.983235][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.990506][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.204664][T29043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.283777][T29043] veth0_vlan: entered promiscuous mode [ 1444.300842][T29043] veth1_vlan: entered promiscuous mode [ 1444.440715][T29043] veth0_macvtap: entered promiscuous mode [ 1444.460993][T29138] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1444.505506][T29043] veth1_macvtap: entered promiscuous mode [ 1444.598404][T29143] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1444.690665][T29043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.754699][T29043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.819489][T13558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.837192][T13558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.865755][T29151] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 1444.924312][T29151] team0: Port device batadv10 added [ 1444.931627][T13558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.944468][T13558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.996972][ T2925] IPVS: stop unused estimator thread 0... [ 1445.106597][T22668] Bluetooth: hci5: command tx timeout [ 1445.140138][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.149231][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.292331][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.330296][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.472597][T29165] syzkaller0: entered promiscuous mode [ 1445.499899][T29165] syzkaller0: entered allmulticast mode [ 1445.576973][T18480] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1445.599540][T29153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1445.747016][T18480] usb 3-1: Using ep0 maxpacket: 16 [ 1445.756902][T18480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1445.770660][T18480] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1445.786381][T18480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.794422][T18480] usb 3-1: Product: syz [ 1445.807312][T18480] usb 3-1: Manufacturer: syz [ 1445.811945][T18480] usb 3-1: SerialNumber: syz [ 1445.821557][T18480] usb 3-1: config 0 descriptor?? [ 1445.842666][T18480] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1445.866355][T18480] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1445.873000][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1445.873016][ T30] audit: type=1326 audit(1769198553.289:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1445.873496][ T30] audit: type=1326 audit(1769198553.289:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1445.931470][ T30] audit: type=1326 audit(1769198553.349:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1445.957873][ T30] audit: type=1326 audit(1769198553.349:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1445.982174][ T30] audit: type=1326 audit(1769198553.349:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.006031][ T30] audit: type=1326 audit(1769198553.349:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.035873][ T30] audit: type=1326 audit(1769198553.349:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.059865][ T30] audit: type=1326 audit(1769198553.349:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.101841][ T30] audit: type=1326 audit(1769198553.349:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.125316][ T30] audit: type=1326 audit(1769198553.349:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29172 comm="syz.4.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a799acb9 code=0x7ffc0000 [ 1446.424551][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1446.635334][T29188] veth5: entered promiscuous mode [ 1447.166907][T18480] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1447.187160][T22668] Bluetooth: hci5: command tx timeout [ 1447.243054][T18480] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1447.258274][T18480] em28xx 3-1:0.0: board has no eeprom [ 1447.346827][T18480] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1447.362976][T18480] em28xx 3-1:0.0: dvb set to bulk mode. [ 1447.369209][T18471] em28xx 3-1:0.0: Binding DVB extension [ 1447.539922][T18471] em28xx 3-1:0.0: Registering input extension [ 1447.879033][T29202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5966'. [ 1448.139463][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1448.258049][T18474] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1448.792477][T18474] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1448.806720][T18474] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.841639][T18474] usb 5-1: config 0 has no interfaces? [ 1448.851639][T18474] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1448.872704][T18474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.931569][T18474] usb 5-1: config 0 descriptor?? [ 1449.700157][T18474] usb 3-1: USB disconnect, device number 97 [ 1449.720715][T18474] em28xx 3-1:0.0: Disconnecting em28xx [ 1449.737554][T18474] em28xx 3-1:0.0: Closing input extension [ 1449.828712][T18474] em28xx 3-1:0.0: Freeing device [ 1450.318454][T29232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5973'. [ 1450.372562][T29232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1450.379846][T29232] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.387088][T29232] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.394274][T29232] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.798585][T29228] bridge0: entered promiscuous mode [ 1450.998290][T29246] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1451.206999][T29243] net_ratelimit: 13 callbacks suppressed [ 1451.207006][T29243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1451.792363][T18936] usb 5-1: USB disconnect, device number 23 [ 1452.039902][T29257] netlink: 'syz.4.5979': attribute type 1 has an invalid length. [ 1452.076302][ T5893] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1452.266720][ T5893] usb 3-1: config 0 has no interfaces? [ 1452.277933][ T5893] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1452.288339][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.297619][ T5893] usb 3-1: Product: syz [ 1452.301814][ T5893] usb 3-1: Manufacturer: syz [ 1452.309134][ T5893] usb 3-1: SerialNumber: syz [ 1452.366945][ T5893] usb 3-1: config 0 descriptor?? [ 1452.691538][T29245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1452.786257][ T5893] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1452.817320][T29266] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1453.251566][T29277] syzkaller1: entered promiscuous mode [ 1453.259076][T29277] syzkaller1: entered allmulticast mode [ 1453.406627][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1453.429800][ T5893] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1453.439314][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.472447][ T5893] usb 2-1: Product: syz [ 1453.480156][ T5893] usb 2-1: Manufacturer: syz [ 1453.790131][ T5893] usb 2-1: SerialNumber: syz [ 1453.800172][ T5893] usb 2-1: config 0 descriptor?? [ 1454.022887][ T5893] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1454.160829][T18474] usb 3-1: USB disconnect, device number 98 [ 1454.216966][ T5893] gp8psk: usb in 128 operation failed. [ 1454.223130][ T5893] gp8psk: usb in 137 operation failed. [ 1454.233957][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1454.243952][ T5893] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1454.262882][ T5893] usb 2-1: media controller created [ 1454.320947][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1454.436597][ T5893] gp8psk_fe: Frontend revision 1 attached [ 1454.461926][ T5893] usb 2-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 1454.506665][ T5893] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1454.821790][T16692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1454.844475][T16692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1454.861580][T16692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1454.873663][T16692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1454.884309][T16692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1455.147085][T29301] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1455.561444][ T5893] gp8psk: usb in 137 operation failed. [ 1455.605170][ T5893] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1455.648289][ T5893] gp8psk: found Genpix USB device pID = 201 (hex) [ 1455.721825][ T5893] usb 2-1: USB disconnect, device number 83 [ 1455.758696][T29294] chnl_net:caif_netlink_parms(): no params data found [ 1456.147324][ T5893] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1456.206307][T18936] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1456.359378][T18936] usb 5-1: Using ep0 maxpacket: 8 [ 1456.368839][T18936] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1456.403631][T18936] usb 5-1: config 179 has no interface number 0 [ 1456.424033][T18936] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1456.454437][T18936] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1456.477239][T18936] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1456.496524][T18936] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1456.523208][T18936] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1456.557599][T29294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.567965][T29294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.575364][T29294] bridge_slave_0: entered allmulticast mode [ 1456.576266][T18936] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1456.583892][T29294] bridge_slave_0: entered promiscuous mode [ 1456.598828][T18936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.627154][T29309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1456.637161][T29294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.644399][T29294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.658304][T29294] bridge_slave_1: entered allmulticast mode [ 1456.685445][T29294] bridge_slave_1: entered promiscuous mode [ 1456.688386][T29323] netlink: 'syz.0.5995': attribute type 16 has an invalid length. [ 1456.701492][T29323] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5995'. [ 1456.832772][T29294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.898914][T18936] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input108 [ 1456.956022][T22668] Bluetooth: hci4: command tx timeout [ 1457.038291][T29294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.060865][T29332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.070932][T29332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.175629][T18936] usb 5-1: USB disconnect, device number 24 [ 1457.175685][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1457.175729][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1457.228805][T29294] team0: Port device team_slave_0 added [ 1457.253898][T29294] team0: Port device team_slave_1 added [ 1457.406325][T29341] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1457.458387][T29341] team0: Port device batadv2 added [ 1457.675525][T29294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.700597][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.771543][T29294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.789699][T29294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.798578][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.834644][T29294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.046776][T22668] Bluetooth: hci4: command tx timeout [ 1459.083466][T29375] loop5: detected capacity change from 0 to 7 [ 1459.090431][T29375] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1459.113693][T29375] loop5: p1 start 771753728 is beyond EOD, truncated [ 1459.121113][T29375] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1459.146812][T29375] loop5: p3 start 6291456 is beyond EOD, truncated [ 1459.155587][T29375] loop5: p4 start 3090415749 is beyond EOD, truncated [ 1459.163583][T29375] loop5: p5 start 2847655788 is beyond EOD, truncated [ 1459.171071][T29375] loop5: p6 start 701767795 is beyond EOD, truncated [ 1459.423127][T29382] netlink: 'syz.4.6005': attribute type 27 has an invalid length. [ 1459.488989][ T6014] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1459.500958][ T6014] bond0 (unregistering): Released all slaves [ 1459.619139][ T6014] bond1 (unregistering): Released all slaves [ 1459.647280][ T6014] bond2 (unregistering): Released all slaves [ 1459.702389][ T6014] bond3 (unregistering): Released all slaves [ 1459.739375][ T6014] bond4 (unregistering): Released all slaves [ 1459.827823][ T6014] bond5 (unregistering): Released all slaves [ 1459.899393][ T6014] bond6 (unregistering): Released all slaves [ 1459.930698][ T6014] bond7 (unregistering): Released all slaves [ 1459.966431][ T5893] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1460.158714][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 1460.174790][ T5893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1460.192715][ T5893] usb 5-1: config 0 has no interface number 0 [ 1460.227700][ T5893] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1460.276205][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.323136][ T5893] usb 5-1: Product: syz [ 1460.333280][ T5893] usb 5-1: Manufacturer: syz [ 1460.338276][ T5893] usb 5-1: SerialNumber: syz [ 1460.356528][ T5893] usb 5-1: config 0 descriptor?? [ 1460.378995][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1460.393623][ T6014] bond8 (unregistering): Released all slaves [ 1460.843048][ T6014] bond9 (unregistering): Released all slaves [ 1460.870819][ T6014] bond10 (unregistering): Released all slaves [ 1460.917854][ T5893] gspca_spca1528: reg_w err -110 [ 1460.931845][T29294] hsr_slave_0: entered promiscuous mode [ 1460.937653][ T5893] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1460.952844][T29294] hsr_slave_1: entered promiscuous mode [ 1461.120150][T22668] Bluetooth: hci4: command tx timeout [ 1461.147864][T29382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.155271][T29382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.360588][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1461.360602][ T30] audit: type=1326 audit(1769198568.699:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.396261][ T30] audit: type=1326 audit(1769198568.699:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.614387][T29382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.627055][ T30] audit: type=1326 audit(1769198568.699:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49c995b58e code=0x7ffc0000 [ 1461.631633][T29382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.695357][ T30] audit: type=1326 audit(1769198568.699:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.776902][ T30] audit: type=1326 audit(1769198568.699:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.860423][ T30] audit: type=1326 audit(1769198568.699:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.926603][ T30] audit: type=1326 audit(1769198568.709:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1461.965942][T29383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.024645][T29383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.037079][ T30] audit: type=1326 audit(1769198568.709:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1462.096273][ T30] audit: type=1326 audit(1769198568.709:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1462.139137][ T30] audit: type=1326 audit(1769198568.709:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f49c999acb9 code=0x7ffc0000 [ 1462.213771][T29383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1462.289790][ T6014] tipc: Disabling bearer [ 1462.295456][ T6014] tipc: Left network mode [ 1462.342090][ T61] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.351787][ T61] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.417049][ T61] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.500406][ T61] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.191482][T22668] Bluetooth: hci4: command tx timeout [ 1463.412852][T18474] usb 5-1: USB disconnect, device number 25 [ 1463.484513][T29413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6010'. [ 1463.576849][ T6014] hsr_slave_0: left promiscuous mode [ 1463.695286][ T6014] hsr_slave_1: left promiscuous mode [ 1463.714944][T29423] FAULT_INJECTION: forcing a failure. [ 1463.714944][T29423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.732975][T29423] CPU: 0 UID: 0 PID: 29423 Comm: syz.7.6012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.732995][T29423] Tainted: [L]=SOFTLOCKUP [ 1463.732999][T29423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1463.733006][T29423] Call Trace: [ 1463.733011][T29423] [ 1463.733016][T29423] dump_stack_lvl+0xe8/0x150 [ 1463.733034][T29423] should_fail_ex+0x412/0x560 [ 1463.733050][T29423] _copy_from_iter+0x1d3/0x1670 [ 1463.733068][T29423] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1463.733085][T29423] ? __pfx__copy_from_iter+0x10/0x10 [ 1463.733100][T29423] ? __build_skb_around+0x22d/0x3c0 [ 1463.733115][T29423] ? __alloc_skb+0x193/0x390 [ 1463.733127][T29423] ? netlink_sendmsg+0x650/0xb40 [ 1463.733138][T29423] ? skb_put+0x11b/0x210 [ 1463.733152][T29423] netlink_sendmsg+0x6c0/0xb40 [ 1463.733167][T29423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.733179][T29423] ? aa_file_perm+0x12d/0x1630 [ 1463.733193][T29423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1463.733206][T29423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1463.733216][T29423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.733226][T29423] __sock_sendmsg+0x21c/0x270 [ 1463.733241][T29423] ____sys_sendmsg+0x4d7/0x810 [ 1463.733251][T29423] ? __might_fault+0xaf/0x130 [ 1463.733267][T29423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.733281][T29423] ? import_iovec+0x73/0xa0 [ 1463.733293][T29423] ___sys_sendmsg+0x2a5/0x360 [ 1463.733302][T29423] ? __lock_acquire+0x6b5/0x2cf0 [ 1463.733314][T29423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.733340][T29423] ? __fget_files+0x2a/0x420 [ 1463.733352][T29423] ? __fget_files+0x3a0/0x420 [ 1463.733368][T29423] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1463.733379][T29423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1463.733393][T29423] ? __pfx_ksys_write+0x10/0x10 [ 1463.733408][T29423] do_syscall_64+0xe2/0xf80 [ 1463.733429][T29423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.733438][T29423] ? trace_irq_disable+0x37/0x100 [ 1463.733451][T29423] ? clear_bhb_loop+0x60/0xb0 [ 1463.733462][T29423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.733472][T29423] RIP: 0033:0x7faed559acb9 [ 1463.733482][T29423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.733491][T29423] RSP: 002b:00007faed6522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.733503][T29423] RAX: ffffffffffffffda RBX: 00007faed5815fa0 RCX: 00007faed559acb9 [ 1463.733510][T29423] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1463.733517][T29423] RBP: 00007faed6522090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.733523][T29423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.733529][T29423] R13: 00007faed5816038 R14: 00007faed5815fa0 R15: 00007faed593fa48 [ 1463.733544][T29423] [ 1464.505203][ T6014] team0 (unregistering): Port device batadv10 removed [ 1464.524631][T29436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.584732][ T6014] team0 (unregistering): Port device batadv9 removed [ 1464.599402][T29441] loop5: detected capacity change from 0 to 7 [ 1464.608652][T29441] Dev loop5: unable to read RDB block 7 [ 1464.621599][T29441] loop5: unable to read partition table [ 1464.665664][T29441] loop5: partition table beyond EOD, truncated [ 1464.687666][ T6014] team0 (unregistering): Port device batadv8 removed [ 1464.696996][T29441] loop_reread_partitions: partition scan of loop5 (被x  ) failed (rc=-5) [ 1464.778806][ T6014] team0 (unregistering): Port device batadv7 removed [ 1464.973486][ T6014] team0 (unregistering): Port device batadv0 removed [ 1465.152048][T29450] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1465.519931][ T6014] team0 (unregistering): Port device batadv6 removed [ 1465.653265][ T6014] team0 (unregistering): Port device batadv3 removed [ 1465.974220][ T6014] team0 (unregistering): Port device batadv1 removed [ 1466.203817][T29459] fuse: Bad value for 'user_id' [ 1466.209392][T29459] fuse: Bad value for 'user_id' [ 1466.272979][T29461] netlink: 'syz.4.6020': attribute type 27 has an invalid length. [ 1466.756470][ T5893] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1466.916484][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 1466.948913][ T5893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1466.957028][ T5893] usb 5-1: config 0 has no interface number 0 [ 1467.004779][ T5893] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1467.015289][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.035881][ T5893] usb 5-1: Product: syz [ 1467.040441][ T5893] usb 5-1: Manufacturer: syz [ 1467.045072][ T5893] usb 5-1: SerialNumber: syz [ 1467.077873][ T5893] usb 5-1: config 0 descriptor?? [ 1467.101175][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1467.616350][ T5893] gspca_spca1528: reg_w err -110 [ 1467.643194][ T5893] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1467.725272][T29464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.748805][T29464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.763664][T29464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1467.890882][T29472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1468.262797][T29482] FAULT_INJECTION: forcing a failure. [ 1468.262797][T29482] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.297574][T29482] CPU: 0 UID: 0 PID: 29482 Comm: syz.1.6024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.297604][T29482] Tainted: [L]=SOFTLOCKUP [ 1468.297610][T29482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1468.297621][T29482] Call Trace: [ 1468.297630][T29482] [ 1468.297637][T29482] dump_stack_lvl+0xe8/0x150 [ 1468.297666][T29482] should_fail_ex+0x412/0x560 [ 1468.297696][T29482] should_failslab+0xa8/0x100 [ 1468.297719][T29482] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1468.297745][T29482] ? __netlink_lookup+0xc6/0x8b0 [ 1468.297766][T29482] ? skb_clone+0x212/0x3a0 [ 1468.297789][T29482] skb_clone+0x212/0x3a0 [ 1468.297811][T29482] __netlink_deliver_tap+0x404/0x850 [ 1468.297842][T29482] ? netlink_deliver_tap+0x2e/0x1b0 [ 1468.297863][T29482] netlink_deliver_tap+0x19c/0x1b0 [ 1468.297883][T29482] netlink_unicast+0x7e3/0x9b0 [ 1468.297917][T29482] ? __pfx_netlink_unicast+0x10/0x10 [ 1468.297940][T29482] ? __alloc_skb+0x193/0x390 [ 1468.297959][T29482] ? netlink_sendmsg+0x650/0xb40 [ 1468.297972][T29482] ? skb_put+0x11b/0x210 [ 1468.298002][T29482] netlink_sendmsg+0x813/0xb40 [ 1468.298024][T29482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1468.298040][T29482] ? aa_file_perm+0x12d/0x1630 [ 1468.298058][T29482] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1468.298078][T29482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1468.298091][T29482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1468.298106][T29482] __sock_sendmsg+0x21c/0x270 [ 1468.298125][T29482] ____sys_sendmsg+0x4d7/0x810 [ 1468.298139][T29482] ? __might_fault+0xaf/0x130 [ 1468.298162][T29482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1468.298183][T29482] ? import_iovec+0x73/0xa0 [ 1468.298202][T29482] ___sys_sendmsg+0x2a5/0x360 [ 1468.298216][T29482] ? __lock_acquire+0x6b5/0x2cf0 [ 1468.298240][T29482] ? __pfx____sys_sendmsg+0x10/0x10 [ 1468.298286][T29482] ? __fget_files+0x2a/0x420 [ 1468.298306][T29482] ? __fget_files+0x3a0/0x420 [ 1468.298332][T29482] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1468.298351][T29482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1468.298373][T29482] ? __pfx_ksys_write+0x10/0x10 [ 1468.298400][T29482] do_syscall_64+0xe2/0xf80 [ 1468.298421][T29482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.298437][T29482] ? trace_irq_disable+0x37/0x100 [ 1468.298458][T29482] ? clear_bhb_loop+0x60/0xb0 [ 1468.298479][T29482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.298497][T29482] RIP: 0033:0x7f49c999acb9 [ 1468.298512][T29482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.298526][T29482] RSP: 002b:00007f49ca83e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1468.298545][T29482] RAX: ffffffffffffffda RBX: 00007f49c9c15fa0 RCX: 00007f49c999acb9 [ 1468.298558][T29482] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1468.298569][T29482] RBP: 00007f49ca83e090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.298580][T29482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.298591][T29482] R13: 00007f49c9c16038 R14: 00007f49c9c15fa0 R15: 00007f49c9d3fa48 [ 1468.298617][T29482] [ 1468.747702][T29482] batman_adv: batadv0: Adding interface: dummy0 [ 1468.754122][T29482] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.814136][T29482] batman_adv: batadv0: Interface activated: dummy0 [ 1468.822158][T29491] loop5: detected capacity change from 0 to 7 [ 1468.830691][ T6236] Dev loop5: unable to read RDB block 7 [ 1468.837185][ T6236] loop5: unable to read partition table [ 1468.843059][ T6236] loop5: partition table beyond EOD, truncated [ 1468.879991][T29491] Dev loop5: unable to read RDB block 7 [ 1468.956889][T29491] loop5: unable to read partition table [ 1468.962962][T29491] loop5: partition table beyond EOD, truncated [ 1468.972358][T29491] loop_reread_partitions: partition scan of loop5 (被x ") failed (rc=-5) [ 1469.011651][T29294] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1469.078091][T29496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1469.096792][T29294] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1469.156544][T29294] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1469.222794][T29294] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1469.301758][ T6014] IPVS: stop unused estimator thread 0... [ 1469.340868][ T5893] usb 5-1: USB disconnect, device number 26 [ 1469.528285][T29518] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1469.757175][T29294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.865249][T29294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.899794][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.907054][T13558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.956215][ T5893] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1469.965786][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.973014][T13558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.189082][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 1470.210674][ T5893] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1470.255384][ T5893] usb 5-1: config 0 has no interface number 0 [ 1470.271464][ T5893] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1470.304849][ T5893] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1470.314397][T29294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.344861][ T5893] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1470.354251][T29541] FAULT_INJECTION: forcing a failure. [ 1470.354251][T29541] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.367879][T29541] CPU: 1 UID: 0 PID: 29541 Comm: syz.1.6036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.367910][T29541] Tainted: [L]=SOFTLOCKUP [ 1470.367917][T29541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1470.367928][T29541] Call Trace: [ 1470.367936][T29541] [ 1470.367944][T29541] dump_stack_lvl+0xe8/0x150 [ 1470.367972][T29541] should_fail_ex+0x412/0x560 [ 1470.368003][T29541] should_failslab+0xa8/0x100 [ 1470.368026][T29541] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1470.368053][T29541] ? skb_clone+0x212/0x3a0 [ 1470.368075][T29541] skb_clone+0x212/0x3a0 [ 1470.368093][T29541] ? dev_queue_xmit_nit+0x268/0xad0 [ 1470.368122][T29541] dev_queue_xmit_nit+0x29a/0xad0 [ 1470.368148][T29541] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1470.368184][T29541] dev_hard_start_xmit+0x1c1/0x7f0 [ 1470.368220][T29541] __dev_queue_xmit+0x14ed/0x32b0 [ 1470.368239][T29541] ? ___sys_sendmsg+0x2a5/0x360 [ 1470.368261][T29541] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1470.368297][T29541] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1470.368326][T29541] ? __copy_skb_header+0xa3/0x4a0 [ 1470.368345][T29541] ? __asan_memcpy+0x40/0x70 [ 1470.368388][T29541] ? skb_clone+0x246/0x3a0 [ 1470.368410][T29541] __netlink_deliver_tap+0x5ad/0x850 [ 1470.368442][T29541] ? netlink_deliver_tap+0x2e/0x1b0 [ 1470.368463][T29541] netlink_deliver_tap+0x19c/0x1b0 [ 1470.368483][T29541] netlink_unicast+0x7e3/0x9b0 [ 1470.368518][T29541] ? __pfx_netlink_unicast+0x10/0x10 [ 1470.368543][T29541] ? __alloc_skb+0x193/0x390 [ 1470.368565][T29541] ? netlink_sendmsg+0x650/0xb40 [ 1470.368582][T29541] ? skb_put+0x11b/0x210 [ 1470.368608][T29541] netlink_sendmsg+0x813/0xb40 [ 1470.368635][T29541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.368656][T29541] ? aa_file_perm+0x12d/0x1630 [ 1470.368678][T29541] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1470.368703][T29541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1470.368719][T29541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.368740][T29541] __sock_sendmsg+0x21c/0x270 [ 1470.368765][T29541] ____sys_sendmsg+0x4d7/0x810 [ 1470.368782][T29541] ? __might_fault+0xaf/0x130 [ 1470.368821][T29541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1470.368849][T29541] ? import_iovec+0x73/0xa0 [ 1470.368872][T29541] ___sys_sendmsg+0x2a5/0x360 [ 1470.368889][T29541] ? __lock_acquire+0x6b5/0x2cf0 [ 1470.368912][T29541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1470.368967][T29541] ? __fget_files+0x2a/0x420 [ 1470.368988][T29541] ? __fget_files+0x3a0/0x420 [ 1470.369020][T29541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1470.369041][T29541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1470.369069][T29541] ? __pfx_ksys_write+0x10/0x10 [ 1470.369099][T29541] do_syscall_64+0xe2/0xf80 [ 1470.369123][T29541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.369141][T29541] ? trace_irq_disable+0x37/0x100 [ 1470.369162][T29541] ? clear_bhb_loop+0x60/0xb0 [ 1470.369185][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.369203][T29541] RIP: 0033:0x7f49c999acb9 [ 1470.369221][T29541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.369236][T29541] RSP: 002b:00007f49ca83e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.369256][T29541] RAX: ffffffffffffffda RBX: 00007f49c9c15fa0 RCX: 00007f49c999acb9 [ 1470.369269][T29541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1470.369281][T29541] RBP: 00007f49ca83e090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.369293][T29541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.369304][T29541] R13: 00007f49c9c16038 R14: 00007f49c9c15fa0 R15: 00007f49c9d3fa48 [ 1470.369335][T29541] [ 1470.382048][ T5893] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1470.440127][T29294] veth0_vlan: entered promiscuous mode [ 1470.854538][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.892053][ T5893] usb 5-1: Product: syz [ 1470.906254][ T5893] usb 5-1: Manufacturer: syz [ 1470.910892][ T5893] usb 5-1: SerialNumber: syz [ 1470.970024][T29294] veth1_vlan: entered promiscuous mode [ 1470.988456][ T5893] usb 5-1: config 0 descriptor?? [ 1471.069974][T29294] veth0_macvtap: entered promiscuous mode [ 1471.127558][T29294] veth1_macvtap: entered promiscuous mode [ 1471.161888][T29553] loop5: detected capacity change from 0 to 7 [ 1471.199761][T29553] Dev loop5: unable to read RDB block 7 [ 1471.220353][T29553] loop5: unable to read partition table [ 1471.228097][T29294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.236956][T29553] loop5: partition table beyond EOD, truncated [ 1471.254240][T29294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.262480][T29553] loop_reread_partitions: partition scan of loop5 (被x U) failed (rc=-5) [ 1471.292914][ T4506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.323889][ T4506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.370878][ T4506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.401439][ T4506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.596664][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.611898][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.657369][ T5950] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1471.664930][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.674461][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.712166][ T5893] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input109 [ 1471.761431][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.768988][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.777137][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.784492][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.792193][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.799534][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.806903][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.814230][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.821893][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.829386][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.836842][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.844170][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.851796][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.859150][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.866519][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.873872][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.881463][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.888794][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.896413][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.904176][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.911820][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.919166][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.926408][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 1471.931613][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.939187][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.946495][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.953720][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.961062][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.968724][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.975963][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.983267][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.990659][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1471.998174][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.005395][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.012675][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.019975][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.027542][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.034775][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.038708][T29567] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6041'. [ 1472.042062][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.059055][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.066583][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.074058][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.081418][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.089029][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.096372][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.103702][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.111040][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.118603][T29569] netlink: 'syz.7.6041': attribute type 2 has an invalid length. [ 1472.118614][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.134154][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.141531][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.149212][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.156725][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.164051][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.171404][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.179002][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.186346][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.193806][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.201311][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.209016][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.216409][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.223922][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.231381][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.239004][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.249119][ C0] usb 5-1: hanwang_irq - urb shutting down with status: -2 [ 1472.264677][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 1472.268597][ T5893] usb 5-1: USB disconnect, device number 27 [ 1472.271847][ C1] usb 5-1: hanwang_irq - usb_submit_urb failed with result -19 [ 1472.283618][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1472.306365][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1472.348744][ T5950] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1472.366328][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.384581][ T5950] usb 2-1: Product: syz [ 1472.397886][ T5950] usb 2-1: Manufacturer: syz [ 1472.402530][ T5950] usb 2-1: SerialNumber: syz [ 1472.429955][ T5950] usb 2-1: config 0 descriptor?? [ 1472.481214][ T5950] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1472.507084][ T5950] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1472.536162][T29582] veth0_macvtap: left promiscuous mode [ 1472.572850][T29582] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1472.699302][T29586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6044'. [ 1473.141703][ T5950] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1473.152070][ T5950] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1474.008824][ T5950] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1474.040817][T29616] loop5: detected capacity change from 0 to 7 [ 1474.052659][T29616] Dev loop5: unable to read RDB block 7 [ 1474.066803][T29616] loop5: unable to read partition table [ 1474.077233][T29616] loop5: partition table beyond EOD, truncated [ 1474.157446][T29616] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1474.413130][T29622] netlink: 'syz.7.6049': attribute type 1 has an invalid length. [ 1474.431825][T29622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.641903][ T5950] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1474.667555][ T5950] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1474.674420][ T5950] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1474.689357][ T5950] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1474.721769][ T5950] usb 2-1: USB disconnect, device number 84 [ 1474.823035][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1474.823053][ T30] audit: type=1326 audit(1769198582.239:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1474.959536][ T30] audit: type=1326 audit(1769198582.269:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.012528][ T30] audit: type=1326 audit(1769198582.269:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.036007][ T30] audit: type=1326 audit(1769198582.279:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.062330][ T30] audit: type=1326 audit(1769198582.279:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.114966][ T30] audit: type=1326 audit(1769198582.279:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.175272][ T30] audit: type=1326 audit(1769198582.279:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.199103][T17655] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1475.247617][ T30] audit: type=1326 audit(1769198582.279:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.307895][ T30] audit: type=1326 audit(1769198582.279:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.376534][T17655] usb 3-1: device descriptor read/64, error -71 [ 1475.416742][ T30] audit: type=1326 audit(1769198582.279:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.2.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fad9acb9 code=0x7ffc0000 [ 1475.526249][T18933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1475.646254][T17655] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1475.666969][T18933] usb 5-1: device descriptor read/64, error -71 [ 1475.796221][T17655] usb 3-1: device descriptor read/64, error -71 [ 1475.907247][T18933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1475.916038][T17655] usb usb3-port1: attempt power cycle [ 1476.046236][T18933] usb 5-1: device descriptor read/64, error -71 [ 1476.177845][T18933] usb usb5-port1: attempt power cycle [ 1476.266611][T17655] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1476.289077][T17655] usb 3-1: device descriptor read/8, error -71 [ 1476.330611][T29647] loop5: detected capacity change from 0 to 7 [ 1476.340213][ T6236] Dev loop5: unable to read RDB block 7 [ 1476.345797][ T6236] loop5: unable to read partition table [ 1476.368922][ T6236] loop5: partition table beyond EOD, truncated [ 1476.382772][T29647] Dev loop5: unable to read RDB block 7 [ 1476.402569][T29647] loop5: unable to read partition table [ 1476.416714][T29647] loop5: partition table beyond EOD, truncated [ 1476.430135][T29647] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1476.516785][T18933] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1476.527125][T17655] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1476.547555][T18933] usb 5-1: device descriptor read/8, error -71 [ 1476.556016][T17655] usb 3-1: device descriptor read/8, error -71 [ 1476.669804][T17655] usb usb3-port1: unable to enumerate USB device [ 1476.787125][T18933] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1476.832190][T18933] usb 5-1: device descriptor read/8, error -71 [ 1476.947911][T18933] usb usb5-port1: unable to enumerate USB device [ 1477.785745][T29668] dvmrp12: entered allmulticast mode [ 1477.794067][T29667] dvmrp12: left allmulticast mode [ 1478.530116][T29684] batman_adv: batadv0: Adding interface: dummy0 [ 1478.539873][T29684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.589145][T29684] batman_adv: batadv0: Interface activated: dummy0 [ 1478.627460][T29687] fuse: Bad value for 'fd' [ 1478.664248][T29691] loop5: detected capacity change from 0 to 7 [ 1478.719505][T29691] Dev loop5: unable to read RDB block 7 [ 1478.763244][T29691] loop5: unable to read partition table [ 1478.781845][T29691] loop5: partition table beyond EOD, truncated [ 1478.811052][T29691] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1479.896404][T17655] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1480.096268][T17655] usb 2-1: Using ep0 maxpacket: 8 [ 1480.145025][T17655] usb 2-1: config 162 has an invalid interface number: 20 but max is 0 [ 1480.194184][T17655] usb 2-1: config 162 has no interface number 0 [ 1480.211786][T17655] usb 2-1: config 162 interface 20 has no altsetting 0 [ 1480.225095][T17655] usb 2-1: New USB device found, idVendor=0586, idProduct=0202, bcdDevice=ec.eb [ 1480.408195][T17655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.436734][T17655] usb 2-1: Product: syz [ 1480.458456][T17655] usb 2-1: Manufacturer: syz [ 1480.463103][T17655] usb 2-1: SerialNumber: syz [ 1480.615151][T29720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.061732][T29727] netlink: 'syz.0.6080': attribute type 27 has an invalid length. [ 1481.094724][T29728] fuse: Unknown parameter '0x0000000000000003' [ 1481.210451][T29727] batman_adv: batadv0: Interface deactivated: dummy0 [ 1481.246279][T29727] bridge0: left promiscuous mode [ 1481.317189][T29729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.325535][T29729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.388010][T29729] batman_adv: batadv0: Interface activated: dummy0 [ 1481.404653][T29729] batadv0: mtu less than device minimum [ 1481.420607][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.432453][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.443869][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.455354][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.466837][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.478381][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.489887][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.501288][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.512790][T29729] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1481.834023][T17655] usb 2-1: USB disconnect, device number 85 [ 1482.204597][T29751] netlink: 'syz.1.6086': attribute type 7 has an invalid length. [ 1482.359122][T29753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1482.867086][T29769] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1483.886235][T17655] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1484.067823][T17655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1484.079664][T17655] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1484.144628][T17655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.196611][T17655] usb 3-1: config 0 descriptor?? [ 1484.470913][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.478000][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.970573][T17655] ntrig 0003:1B96:0009.003D: unknown main item tag 0x0 [ 1485.023066][T17655] ntrig 0003:1B96:0009.003D: unknown main item tag 0x0 [ 1485.097534][T17655] ntrig 0003:1B96:0009.003D: unknown main item tag 0x0 [ 1485.123242][T17655] ntrig 0003:1B96:0009.003D: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 1485.140190][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6091'. [ 1485.216401][T17655] ntrig 0003:1B96:0009.003D: Firmware version: 1.1.18.2.1 (4672 5940) [ 1485.334418][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1485.482577][T29788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.524151][T29788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.616216][T17655] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1485.747056][T17655] usb 5-1: device descriptor read/64, error -71 [ 1485.996383][T17655] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1486.102788][T29810] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1486.122861][T29810] team0: Port device batadv3 added [ 1486.166216][T17655] usb 5-1: device descriptor read/64, error -71 [ 1486.250759][T29812] fuse: Invalid rootmode [ 1486.277393][T17655] usb usb5-port1: attempt power cycle [ 1486.315882][T29815] netlink: 'syz.1.6103': attribute type 27 has an invalid length. [ 1486.392585][T29815] batman_adv: batadv0: Interface deactivated: dummy0 [ 1486.686207][T17655] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1486.797094][T17655] usb 5-1: device descriptor read/8, error -71 [ 1486.823808][T29815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.837606][T29815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.861742][T29815] batman_adv: batadv0: Interface activated: dummy0 [ 1486.878277][T29815] net_ratelimit: 11 callbacks suppressed [ 1486.878284][T29815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.962035][T29821] syzkaller1: entered promiscuous mode [ 1486.967694][T29821] syzkaller1: entered allmulticast mode [ 1487.036272][T17655] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1487.059535][T17655] usb 5-1: device descriptor read/8, error -71 [ 1487.096237][T18474] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1487.176457][T17655] usb usb5-port1: unable to enumerate USB device [ 1487.246955][T18474] usb 2-1: Using ep0 maxpacket: 16 [ 1487.253968][T18474] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1487.262074][T18474] usb 2-1: config 0 has no interface number 0 [ 1487.274125][T18474] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1487.283814][T18474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.293739][T18474] usb 2-1: Product: syz [ 1487.298267][T18474] usb 2-1: Manufacturer: syz [ 1487.303736][T18474] usb 2-1: SerialNumber: syz [ 1487.319543][T18474] usb 2-1: config 0 descriptor?? [ 1487.333882][T18474] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1487.470600][T18933] usb 3-1: USB disconnect, device number 103 [ 1487.809965][T29831] netlink: 'syz.2.6106': attribute type 27 has an invalid length. [ 1487.860727][T18474] gspca_spca1528: reg_w err -110 [ 1487.903651][T18474] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1488.217095][T29831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.224911][T29831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.386849][ T5950] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1488.547833][T29831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.557574][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1488.580375][ T5950] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1488.590231][ T5950] usb 3-1: config 0 has no interface number 0 [ 1488.600147][ T5950] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1488.609941][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.621294][ T5950] usb 3-1: Product: syz [ 1488.628239][ T5950] usb 3-1: Manufacturer: syz [ 1488.642623][ T5950] usb 3-1: SerialNumber: syz [ 1488.652382][T29831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.708134][ T5950] usb 3-1: config 0 descriptor?? [ 1488.754183][ T5950] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1489.274107][ T5950] gspca_spca1528: reg_w err -110 [ 1489.306065][ T5915] usb 2-1: USB disconnect, device number 86 [ 1489.312283][ T5950] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1489.416614][T29861] loop5: detected capacity change from 0 to 7 [ 1489.439366][T29834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.447383][T29861] Dev loop5: unable to read RDB block 7 [ 1489.452995][T29861] loop5: unable to read partition table [ 1489.466447][T29834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.477846][T29861] loop5: partition table beyond EOD, truncated [ 1489.515433][T29861] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1489.527981][T29834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.608334][ T6014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.638609][ T6014] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.658625][ T6014] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.709269][ T6014] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.764274][T29865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.785841][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.805828][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.813999][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.827483][T29865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.842796][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.861121][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.875820][T29867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 1489.896255][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.906009][T18933] hid-generic 00A0:0006:0003.003E: unknown main item tag 0x0 [ 1489.957127][T18933] hid-generic 00A0:0006:0003.003E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1489.986936][T18935] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1490.146737][T18935] usb 2-1: Using ep0 maxpacket: 16 [ 1490.178708][T18935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.217483][T29880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6117'. [ 1490.522861][T29889] loop5: detected capacity change from 0 to 7 [ 1490.549965][T29889] Dev loop5: unable to read RDB block 7 [ 1490.565924][T29889] loop5: unable to read partition table [ 1490.576311][T29889] loop5: partition table beyond EOD, truncated [ 1490.596957][T29889] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1490.753762][T29899] loop5: detected capacity change from 0 to 7 [ 1490.770677][ T6236] Dev loop5: unable to read RDB block 7 [ 1490.776698][ T6236] loop5: unable to read partition table [ 1490.798897][ T6236] loop5: partition table beyond EOD, truncated [ 1490.815078][T29899] Dev loop5: unable to read RDB block 7 [ 1490.848696][T29899] loop5: unable to read partition table [ 1490.859020][T29899] loop5: partition table beyond EOD, truncated [ 1490.884594][T29899] loop_reread_partitions: partition scan of loop5 (被x RE) failed (rc=-5) [ 1490.903608][T18474] usb 3-1: USB disconnect, device number 104 [ 1491.181697][T29908] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.223226][T29909] bond2: option primary_reselect: invalid value (13) [ 1491.350445][T29909] bond2 (unregistering): Released all slaves [ 1491.507089][T18933] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1491.946289][T18933] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1491.977176][T18933] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1491.988797][T18933] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1492.094488][T18933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1492.148751][T18933] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1492.170511][T18933] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1492.195088][T18933] usb 3-1: Product: syz [ 1492.206172][T18933] usb 3-1: Manufacturer: syz [ 1492.226401][T18933] usb 3-1: SerialNumber: syz [ 1492.237077][T18933] usb 3-1: config 0 descriptor?? [ 1492.254150][T29914] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1492.293180][T18933] usb 3-1: selecting invalid altsetting 0 [ 1492.464694][T29914] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 1492.541747][T18933] usb 3-1: USB disconnect, device number 105 [ 1492.541752][ C0] usb 3-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1492.541966][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1492.578537][T29924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.613065][T29924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.647339][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.766650][T29925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.817897][T29925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.151858][T29943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.217429][T29943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.264507][T18474] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1494.328471][T29949] loop5: detected capacity change from 0 to 7 [ 1494.367045][T29949] Dev loop5: unable to read RDB block 7 [ 1494.410004][T29949] loop5: unable to read partition table [ 1494.426699][T29949] loop5: partition table beyond EOD, truncated [ 1494.436231][T18474] usb 3-1: Using ep0 maxpacket: 32 [ 1494.444686][T18474] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1494.455504][T29949] loop_reread_partitions: partition scan of loop5 (被x ھ) failed (rc=-5) [ 1494.465783][T18474] usb 3-1: config 0 has no interface number 0 [ 1494.482978][T18474] usb 3-1: config 0 interface 128 has no altsetting 0 [ 1494.494754][T18474] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=a5.bc [ 1494.515714][T18474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.550734][T18474] usb 3-1: Product: syz [ 1494.555021][T18474] usb 3-1: Manufacturer: syz [ 1494.581810][T18474] usb 3-1: SerialNumber: syz [ 1494.598839][T18474] usb 3-1: config 0 descriptor?? [ 1494.619419][T18474] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1494.628366][T18474] usb 3-1: setting power ON [ 1494.633361][T18474] dvb-usb: bulk message failed: -22 (2/0) [ 1494.650935][T18474] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1494.663555][T18474] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1494.682118][T18474] usb 3-1: media controller created [ 1494.705147][T18474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1494.791443][T18474] usb 3-1: digital interface selection failed (-22) [ 1494.810934][T29945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.822188][T18474] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1494.826892][T29945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.885243][T18474] usb 3-1: setting power OFF [ 1494.905507][T18474] dvb-usb: bulk message failed: -22 (2/0) [ 1494.924147][T18474] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1494.954553][T18474] (NULL device *): no alternate interface [ 1495.030416][T18474] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1495.070443][T18474] usb 3-1: USB disconnect, device number 106 [ 1495.216299][ T5915] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1495.267269][T18935] usb 2-1: string descriptor 0 read error: -32 [ 1495.297003][T18935] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1495.316558][T18935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.362949][T18935] usb 2-1: config 0 descriptor?? [ 1495.384925][T18935] usb 2-1: can't set config #0, error -71 [ 1495.386259][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 1495.409804][ T5915] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1495.419615][ T5915] usb 5-1: config 0 has no interface number 0 [ 1495.435339][ T5915] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1495.458609][ T5915] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1495.458898][T18935] usb 2-1: USB disconnect, device number 87 [ 1495.484027][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.503832][ T5915] usb 5-1: Product: syz [ 1495.513881][ T5915] usb 5-1: Manufacturer: syz [ 1495.523968][ T5915] usb 5-1: SerialNumber: syz [ 1495.554872][ T5915] usb 5-1: config 0 descriptor?? [ 1495.578151][ T5915] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1495.596520][ T5915] em28xx 5-1:0.132: Video interface 132 found: [ 1496.000786][ T5915] em28xx 5-1:0.132: chip ID is em2710/2820 [ 1496.125213][T29971] fuse: Bad value for 'user_id' [ 1496.131345][T29971] fuse: Bad value for 'user_id' [ 1496.836481][ T5915] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1496.844047][ T5915] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1497.096248][ T5915] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1497.123389][ T5915] em28xx 5-1:0.132: analog set to bulk mode. [ 1497.142800][ T5893] em28xx 5-1:0.132: Registering V4L2 extension [ 1497.286204][T18474] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1497.436977][T18474] usb 3-1: Using ep0 maxpacket: 16 [ 1497.445458][T18474] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1497.473932][T18474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1497.494218][T18474] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1497.505646][T18474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.514015][T18474] usb 3-1: Product: syz [ 1497.518702][T18474] usb 3-1: Manufacturer: syz [ 1497.523415][T18474] usb 3-1: SerialNumber: syz [ 1497.542729][T18474] usb 3-1: config 0 descriptor?? [ 1497.565815][T18474] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1497.590643][T18474] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1497.866948][T18474] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1497.873537][T18474] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1497.887267][T18474] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1497.894287][T18474] em28xx 3-1:0.0: No AC97 audio processor [ 1497.916213][T18935] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1497.972024][ T5893] em28xx 5-1:0.132: failed to trigger write to i2c address 0x4a (error=-5) [ 1497.972267][T18933] usb 5-1: USB disconnect, device number 36 [ 1497.995056][ T5893] em28xx 5-1:0.132: failed to trigger write to i2c address 0x4a (error=-19) [ 1498.012797][T18933] em28xx 5-1:0.132: Disconnecting em28xx [ 1498.093760][T30005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1498.102794][T30005] netlink: 'syz.0.6149': attribute type 5 has an invalid length. [ 1498.110608][T30005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1498.139605][T18935] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1498.235430][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1498.247301][T30005] geneve2: entered promiscuous mode [ 1498.255125][T30005] geneve2: entered allmulticast mode [ 1498.270917][T18935] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1498.430174][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1498.462063][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1498.529625][T18935] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1498.540409][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1498.573018][ T5893] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1498.592712][ T5893] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1498.594442][T18935] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1498.667504][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1498.679061][ T5893] em28xx 5-1:0.132: No AC97 audio processor [ 1498.679228][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1498.697780][T18935] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1498.698529][ T5893] usb 5-1: Decoder not found [ 1498.705423][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1498.729208][T18935] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1498.741364][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1498.741713][ T5893] em28xx 5-1:0.132: failed to create media graph [ 1498.772632][T18935] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1498.784027][ T5893] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1498.889301][ T5893] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1498.899703][T30013] ================================================================== [ 1498.907772][T30013] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1498.915131][T30013] Read of size 8 at addr ffff888079878740 by task v4l_id/30013 [ 1498.922649][T30013] [ 1498.924961][T30013] CPU: 0 UID: 0 PID: 30013 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.924976][T30013] Tainted: [L]=SOFTLOCKUP [ 1498.924981][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1498.924988][T30013] Call Trace: [ 1498.924995][T30013] [ 1498.925001][T30013] dump_stack_lvl+0xe8/0x150 [ 1498.925016][T30013] print_report+0xba/0x230 [ 1498.925027][T30013] ? v4l2_fh_open+0xac/0x420 [ 1498.925040][T30013] kasan_report+0x117/0x150 [ 1498.925052][T30013] ? v4l2_fh_open+0xac/0x420 [ 1498.925065][T30013] v4l2_fh_open+0xac/0x420 [ 1498.925077][T30013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1498.925093][T30013] em28xx_v4l2_open+0x157/0x9a0 [ 1498.925106][T30013] ? do_raw_spin_lock+0x12b/0x2f0 [ 1498.925120][T30013] v4l2_open+0x1bf/0x3a0 [ 1498.925134][T30013] chrdev_open+0x4cd/0x5e0 [ 1498.925147][T30013] ? __pfx_chrdev_open+0x10/0x10 [ 1498.925157][T30013] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1498.925172][T30013] ? __pfx_chrdev_open+0x10/0x10 [ 1498.925181][T30013] do_dentry_open+0x7ce/0x1420 [ 1498.925196][T30013] vfs_open+0x3b/0x340 [ 1498.925207][T30013] ? path_openat+0x346e/0x3e20 [ 1498.925216][T30013] path_openat+0x3486/0x3e20 [ 1498.925230][T30013] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1498.925245][T30013] ? getname_flags+0xb7/0x540 [ 1498.925256][T30013] ? __pfx_path_openat+0x10/0x10 [ 1498.925265][T30013] ? __lock_acquire+0x6b5/0x2cf0 [ 1498.925277][T30013] do_filp_open+0x22d/0x490 [ 1498.925286][T30013] ? __pfx_do_filp_open+0x10/0x10 [ 1498.925299][T30013] ? _raw_spin_unlock+0x28/0x50 [ 1498.925310][T30013] ? alloc_fd+0x64b/0x6c0 [ 1498.925323][T30013] do_sys_openat2+0x12f/0x220 [ 1498.925335][T30013] ? __pfx_do_sys_openat2+0x10/0x10 [ 1498.925347][T30013] ? exc_page_fault+0x6a/0xc0 [ 1498.925360][T30013] ? do_user_addr_fault+0xc7c/0x1360 [ 1498.925371][T30013] __x64_sys_openat+0x138/0x170 [ 1498.925384][T30013] do_syscall_64+0xe2/0xf80 [ 1498.925396][T30013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.925406][T30013] ? trace_irq_disable+0x37/0x100 [ 1498.925418][T30013] ? clear_bhb_loop+0x60/0xb0 [ 1498.925429][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.925439][T30013] RIP: 0033:0x7fd288ea7407 [ 1498.925450][T30013] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1498.925459][T30013] RSP: 002b:00007ffd6878e510 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1498.925470][T30013] RAX: ffffffffffffffda RBX: 00007fd289658880 RCX: 00007fd288ea7407 [ 1498.925478][T30013] RDX: 0000000000000000 RSI: 00007ffd6878ef1a RDI: ffffffffffffff9c [ 1498.925485][T30013] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1498.925491][T30013] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1498.925497][T30013] R13: 00007ffd6878e760 R14: 00007fd2897bf000 R15: 00005571d3b564d8 [ 1498.925508][T30013] [ 1498.925512][T30013] [ 1499.208347][T30013] Allocated by task 5893: [ 1499.212653][T30013] kasan_save_track+0x3e/0x80 [ 1499.217309][T30013] __kasan_kmalloc+0x93/0xb0 [ 1499.221876][T30013] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1499.227221][T30013] em28xx_v4l2_init+0x10b/0x2e70 [ 1499.232136][T30013] em28xx_init_extension+0x120/0x1c0 [ 1499.237396][T30013] process_scheduled_works+0xaec/0x17a0 [ 1499.242917][T30013] worker_thread+0x89f/0xd90 [ 1499.247483][T30013] kthread+0x726/0x8b0 [ 1499.251571][T30013] ret_from_fork+0x51b/0xa40 [ 1499.256139][T30013] ret_from_fork_asm+0x1a/0x30 [ 1499.260904][T30013] [ 1499.263213][T30013] Freed by task 5893: [ 1499.267166][T30013] kasan_save_track+0x3e/0x80 [ 1499.271818][T30013] kasan_save_free_info+0x46/0x50 [ 1499.276828][T30013] __kasan_slab_free+0x5c/0x80 [ 1499.281566][T30013] kfree+0x1be/0x650 [ 1499.285439][T30013] em28xx_v4l2_init+0x1683/0x2e70 [ 1499.290442][T30013] em28xx_init_extension+0x120/0x1c0 [ 1499.295701][T30013] process_scheduled_works+0xaec/0x17a0 [ 1499.301224][T30013] worker_thread+0x89f/0xd90 [ 1499.305794][T30013] kthread+0x726/0x8b0 [ 1499.309844][T30013] ret_from_fork+0x51b/0xa40 [ 1499.314411][T30013] ret_from_fork_asm+0x1a/0x30 [ 1499.319157][T30013] [ 1499.321463][T30013] The buggy address belongs to the object at ffff888079878000 [ 1499.321463][T30013] which belongs to the cache kmalloc-8k of size 8192 [ 1499.335490][T30013] The buggy address is located 1856 bytes inside of [ 1499.335490][T30013] freed 8192-byte region [ffff888079878000, ffff88807987a000) [ 1499.349439][T30013] [ 1499.351746][T30013] The buggy address belongs to the physical page: [ 1499.358141][T30013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79878 [ 1499.366880][T30013] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1499.375356][T30013] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1499.383222][T30013] page_type: f5(slab) [ 1499.387182][T30013] raw: 00fff00000000040 ffff88813ff27280 ffffea00016cfc00 dead000000000003 [ 1499.395741][T30013] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1499.404302][T30013] head: 00fff00000000040 ffff88813ff27280 ffffea00016cfc00 dead000000000003 [ 1499.412950][T30013] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1499.421596][T30013] head: 00fff00000000003 ffffea0001e61e01 00000000ffffffff 00000000ffffffff [ 1499.430242][T30013] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1499.438883][T30013] page dumped because: kasan: bad access detected [ 1499.445272][T30013] page_owner tracks the page as allocated [ 1499.450961][T30013] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10557, tgid 10543 (syz.0.1211), ts 363735623808, free_ts 352692594858 [ 1499.472466][T30013] post_alloc_hook+0x228/0x280 [ 1499.477211][T30013] get_page_from_freelist+0x24dc/0x2580 [ 1499.482737][T30013] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1499.488520][T30013] alloc_pages_mpol+0x232/0x4a0 [ 1499.493347][T30013] allocate_slab+0x86/0x3a0 [ 1499.497829][T30013] ___slab_alloc+0xd82/0x1760 [ 1499.502486][T30013] __slab_alloc+0x65/0x100 [ 1499.506881][T30013] __kmalloc_noprof+0x46c/0x7e0 [ 1499.511706][T30013] n_hdlc_alloc_buf+0x9f/0x280 [ 1499.516452][T30013] n_hdlc_tty_open+0x261/0x490 [ 1499.521200][T30013] tty_ldisc_open+0xa1/0x100 [ 1499.525768][T30013] tty_set_ldisc+0x373/0x560 [ 1499.530340][T30013] tty_ioctl+0xc37/0xde0 [ 1499.534560][T30013] __se_sys_ioctl+0xfc/0x170 [ 1499.539129][T30013] do_syscall_64+0xe2/0xf80 [ 1499.543610][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.549477][T30013] page last free pid 24 tgid 24 stack trace: [ 1499.555433][T30013] __free_frozen_pages+0xbb0/0xd10 [ 1499.560522][T30013] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1499.566221][T30013] __apply_to_page_range+0xbdc/0x1420 [ 1499.571570][T30013] __kasan_release_vmalloc+0xa2/0xd0 [ 1499.576830][T30013] purge_vmap_node+0x21c/0x8e0 [ 1499.581571][T30013] __purge_vmap_area_lazy+0x77a/0xb00 [ 1499.586920][T30013] drain_vmap_area_work+0x27/0x40 [ 1499.591923][T30013] process_scheduled_works+0xaec/0x17a0 [ 1499.597443][T30013] worker_thread+0x89f/0xd90 [ 1499.602010][T30013] kthread+0x726/0x8b0 [ 1499.606059][T30013] ret_from_fork+0x51b/0xa40 [ 1499.610622][T30013] ret_from_fork_asm+0x1a/0x30 [ 1499.615365][T30013] [ 1499.617665][T30013] Memory state around the buggy address: [ 1499.623270][T30013] ffff888079878600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.631307][T30013] ffff888079878680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.639343][T30013] >ffff888079878700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.647379][T30013] ^ [ 1499.653505][T30013] ffff888079878780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.661542][T30013] ffff888079878800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.669579][T30013] ================================================================== [ 1499.707144][T18933] em28xx 5-1:0.132: Closing input extension [ 1499.858361][T18474] usb 3-1: USB disconnect, device number 107 [ 1499.887069][T18474] em28xx 3-1:0.0: Disconnecting em28xx [ 1499.911230][T18935] usb 2-1: string descriptor 0 read error: -22 [ 1499.918043][T18935] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1499.948138][T18935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.956975][T18474] em28xx 3-1:0.0: Freeing device [ 1500.026227][T18935] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1500.099713][T30013] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1500.106940][T30013] CPU: 1 UID: 0 PID: 30013 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.117515][T30013] Tainted: [L]=SOFTLOCKUP [ 1500.121825][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1500.131872][T30013] Call Trace: [ 1500.135148][T30013] [ 1500.138069][T30013] vpanic+0x1e0/0x670 [ 1500.142048][T30013] panic+0xc5/0xd0 [ 1500.145766][T30013] ? __pfx_panic+0x10/0x10 [ 1500.150165][T30013] ? preempt_schedule_common+0x82/0xd0 [ 1500.155612][T30013] ? v4l2_fh_open+0xac/0x420 [ 1500.160218][T30013] check_panic_on_warn+0x89/0xb0 [ 1500.165146][T30013] ? v4l2_fh_open+0xac/0x420 [ 1500.169723][T30013] end_report+0x6f/0x140 [ 1500.173958][T30013] kasan_report+0x128/0x150 [ 1500.178447][T30013] ? v4l2_fh_open+0xac/0x420 [ 1500.183025][T30013] v4l2_fh_open+0xac/0x420 [ 1500.187426][T30013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1500.193405][T30013] em28xx_v4l2_open+0x157/0x9a0 [ 1500.198248][T30013] ? do_raw_spin_lock+0x12b/0x2f0 [ 1500.203270][T30013] v4l2_open+0x1bf/0x3a0 [ 1500.207506][T30013] chrdev_open+0x4cd/0x5e0 [ 1500.211910][T30013] ? __pfx_chrdev_open+0x10/0x10 [ 1500.216847][T30013] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1500.223176][T30013] ? __pfx_chrdev_open+0x10/0x10 [ 1500.228102][T30013] do_dentry_open+0x7ce/0x1420 [ 1500.232863][T30013] vfs_open+0x3b/0x340 [ 1500.236920][T30013] ? path_openat+0x346e/0x3e20 [ 1500.241675][T30013] path_openat+0x3486/0x3e20 [ 1500.246275][T30013] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1500.251899][T30013] ? getname_flags+0xb7/0x540 [ 1500.256568][T30013] ? __pfx_path_openat+0x10/0x10 [ 1500.261494][T30013] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.266422][T30013] do_filp_open+0x22d/0x490 [ 1500.270915][T30013] ? __pfx_do_filp_open+0x10/0x10 [ 1500.275985][T30013] ? _raw_spin_unlock+0x28/0x50 [ 1500.280827][T30013] ? alloc_fd+0x64b/0x6c0 [ 1500.285151][T30013] do_sys_openat2+0x12f/0x220 [ 1500.289821][T30013] ? __pfx_do_sys_openat2+0x10/0x10 [ 1500.295012][T30013] ? exc_page_fault+0x6a/0xc0 [ 1500.299686][T30013] ? do_user_addr_fault+0xc7c/0x1360 [ 1500.304965][T30013] __x64_sys_openat+0x138/0x170 [ 1500.309809][T30013] do_syscall_64+0xe2/0xf80 [ 1500.314312][T30013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.320379][T30013] ? trace_irq_disable+0x37/0x100 [ 1500.325415][T30013] ? clear_bhb_loop+0x60/0xb0 [ 1500.330089][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.335973][T30013] RIP: 0033:0x7fd288ea7407 [ 1500.340375][T30013] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1500.359971][T30013] RSP: 002b:00007ffd6878e510 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1500.368375][T30013] RAX: ffffffffffffffda RBX: 00007fd289658880 RCX: 00007fd288ea7407 [ 1500.376337][T30013] RDX: 0000000000000000 RSI: 00007ffd6878ef1a RDI: ffffffffffffff9c [ 1500.384303][T30013] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1500.392262][T30013] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1500.400221][T30013] R13: 00007ffd6878e760 R14: 00007fd2897bf000 R15: 00005571d3b564d8 [ 1500.408190][T30013] [ 1500.411518][T30013] Kernel Offset: disabled [ 1500.415826][T30013] Rebooting in 86400 seconds..