last executing test programs: 12.474111111s ago: executing program 4 (id=81): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x6, 0xa2, &(0x7f0000000040)=ANY=[], 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000240)="c945b9411f3008685636000000000000", 0x10}) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002700)=0x1d, 0x4) r2 = syz_io_uring_setup(0x467c, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r4, 0x54a6) 11.388788283s ago: executing program 4 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_uring_enter(r2, 0x47f6, 0xfd, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x2090) 9.53559911s ago: executing program 2 (id=89): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80, 0x1ac) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000540)='./cgroup\x00', 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x810, r2, 0xc3d33000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=v', 0xc}], 0x2) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x1003}, 0x4) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0x80000019, 0xc83b, 0xd, 0x5, 0x7fd}, {0x4, 0xfffffffd, 0x3, 0xa07, 0xffff0000}, {0x80000002, 0x1f2c056, 0xe15, 0x1, 0x2}, {0x80000019, 0x3, 0x9, 0xf34, 0x7f}]}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x1d, 0x0, 0x0) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) (rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = socket$inet6(0xa, 0x7, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904"], 0x0) (async) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r8, &(0x7f0000000180)='e', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x1}, 0x1c) close(r8) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64) 8.819173029s ago: executing program 0 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xf2ff, 0x2, 0x9, 0xfffff800, {0x8f, 0x0, 0x10, 0x13b0, 0x200}, {0x10, 0x2, 0x200, 0x1, 0x7, 0x7}, 0x9, 0x7fff, 0x8a}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x78}}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f804090507020002040266072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000480)='squashfs\x00', 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000640)={0x24, &(0x7f00000004c0)={0x40, 0x6, 0x51, {0x51, 0x23, "ee09f74d2b762a3a38cc60c653401acbe7c43de57d282449389f15f78863e77d938f58da331f3c08d8c71e657539f6649274edf3b48efb92ad7525eb91d767c959d6c5885d7533fc850c409850842b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f00000008c0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x9, "43311857"}, @local=@item_012={0x2, 0x2, 0xa, '~B'}, @global=@item_012={0x2, 0x1, 0x1, 'Mg'}, @global=@item_4={0x3, 0x1, 0x4, "79b10209"}, @global=@item_4={0x3, 0x1, 0x2, "52c12943"}, @global=@item_4={0x3, 0x1, 0x8, "686707d7"}, @main=@item_012={0x1, 0x0, 0x8, 'g'}, @main=@item_012={0x1, 0x0, 0x0, 'I'}, @main=@item_012={0x2, 0x0, 0xb, "9e02"}, @global]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3bf, 0x0, 0x1, {0x22, 0x6a6}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0x13, 0x35, "7cffff000000000000920d69361875c022a2edbd455c411e4d3e3cf3680d51790bb4114b4a48f34e09c0868f213dcc000000000000"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x1, 0xf6, "78e24b93f207e0c503051489dbf95a4bb0e567e63bc6bd56517d89f9dd4ab5a115ef1b6fb5431579099efc0cbe76748177dc0a25104e2403951aeef5ca931480b03cbbf22119831578c583904dad955288eeffc213559ac128f4159a3ca726f93dd40e9acfa3afe94f981dc221b158db7fd2a72f7a4bb7a4ceb8854d69f01d9de33bb48d9ed6f61c3069e2c96b0e62289b7ae9efd525ae6a82b7785d9ea35ec9aecaea0e141ccd6cf8fe3ae44acb145f5b1c3f34cc4d1e3f7354efcfd8d72087b002887e245e0b41aaac7d10a1e28e0ee63d9506239d5df262eed4d00466b280bc225f327a6307b5f66972d67d53794920d8b3acdbdd"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x8b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x3}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x4, 0x31}]}, 0x24}], 0x1}, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) (rerun: 32) fsmount(r4, 0x1, 0x5) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x62, {0x62, 0xb, "d0ee44b867edc4e7d1752ba363b7defe459dc7cc528e3417500a6b3f593432b678e2b9297ccdf280fd3968dcda2b8b4dd7e1f1bae9dabd54e953e46a3bce6d3cd09800277deac753ef4ab32d940d000ac74010d8d5e249a659fc011e6ea587b0"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x1, 0x4a, "3431b0be14eb5aaf1ce6dade576a1ccd88bf6680e96638a9da2af3a3d3890a70f915e0f654e08cc142286588deecbce5252a8dd3df10657e5770080f47d28a9bef5037f1c5f9c56fa4d8"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8e3, 0x3, 0x9, 0x10, 0x4, 0xf, 0x6, 0x1, 0xd887, 0xaa5, 0x3, 0x5ac}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xd}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xfffa}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_disconnect(r3) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async, rerun: 32) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) (async, rerun: 32) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991e00000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 8.798962933s ago: executing program 4 (id=92): renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd1, 0xaf, 0xb6, 0x40, 0x24cf, 0x59e4, 0x943, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x800, 0x311e40) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x6a9f4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.770622155s ago: executing program 2 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x80, 0x2011, 0x0, 0x0}], 0x1}) 7.237604548s ago: executing program 1 (id=96): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f0000ffffffa1000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.035215601s ago: executing program 1 (id=97): r0 = socket$inet(0x2, 0x3, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @private2={0xfc, 0x2, '\x00', 0x13}, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r9, 0x9}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3, @ANYRES8=r10, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4008814) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) shutdown(r1, 0xc603e21d3a442f96) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1}, &(0x7f0000000080)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2414a27e78e6f1c2d92e979234a8d0e03ecc521cc3b8463676fe7e050d724ec382c45874baf79c660cf807ab1d2dedf8a9f493cde49ba992077891376dc3664627505a3947d9138dec825862d5b54bfd081faab9afdae5cfb02e3f91250755856a2a4600ddaad1ddb95a0e174e9440afbf3ac02a5bdceae4dece110090e74f35e565bd79544afe40ce6d18a22e7d63854d073b5964aa6267339a6bfebc90d5cc37acb3822f0ae1afa9f7e705811ac2e77778e827bf8c6eea8f96c5792e25be7d6604b04e80eeadb3", @ANYRES16, @ANYRES8=r11, @ANYRESOCT, @ANYRESDEC=r2], 0x50) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000003c0)=0x1b) ioctl$TCSETS2(r14, 0x402c542b, 0x0) connect$inet(r13, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6.592287441s ago: executing program 0 (id=98): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400889b27f356607d7b73e0a1df785415d98cc8a2d621a4d3459fbfe3f3d562c0832668553525b88d"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r4, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.954710667s ago: executing program 1 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x80, 0x10, 0xfffffff5, 0x2, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x66, 0x0, 0xf, 0x4, 0x0, @broadcast, @remote, {[@noop, @rr={0x7, 0x7, 0xb1, [@multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x49920d862a92153b, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8a1d1, 0x74500}}}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040044) 5.825314261s ago: executing program 1 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x638182) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x101, 0x458040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02000200a80006002c00128009000100626f6e64000000001c00028005000c000d000000050001000100000008000b00", @ANYRES32=0x0, @ANYBLOB="3964c26c762500a09b3c3c9a615984f5db025fbc478b8007e1243a952b20ded530752f7b91b7a932"], 0x4c}}, 0x24008040) 5.531337533s ago: executing program 4 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2211, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r6, 0x80000000, 0x0, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0x17, 0x2, r6}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x264, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x234, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x18}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x18}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x11, "04c208b93e063c0dcd72a2533d35fa56d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.656384756s ago: executing program 0 (id=102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_uring_enter(r2, 0x47f6, 0xfdff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x2090) 3.328237263s ago: executing program 3 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000008980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.290888093s ago: executing program 1 (id=105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082100fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x80) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@rnullb, 0xee00, &(0x7f0000000240)={0x101, 0x6, 0x1, 0x1}) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x84}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.696689016s ago: executing program 4 (id=106): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000'], 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100000000000000000000a0000000000000000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x34}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x5}, {0x9, 0x9}, {0x9, 0x1}}, ["", ""]}, 0x24}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x5}, {0x9, 0x9}, {0x9, 0x1}}, ["", ""]}, 0x24}}, 0x24040084) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00=* ']) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0x0, 0x21}, 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0x0, 0x21}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) dup3(r7, r5, 0x0) (async) dup3(r7, r5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r8) (async) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="3e2e6465670f820080360fb96600ba2000b0e7ee36ad0f01c4360fc7ba54bf2e0f18dc660f388179fab800008ed045", 0x2f}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="3e2e6465670f820080360fb96600ba2000b0e7ee36ad0f01c4360fc7ba54bf2e0f18dc660f388179fab800008ed045", 0x2f}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) r10 = open$dir(&(0x7f0000000300)='./file0\x00', 0x36b902, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r11, 0x2000009) sendfile(r10, r11, 0x0, 0x7ffff000) (async) sendfile(r10, r11, 0x0, 0x7ffff000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x144, 0x28, 0x4ee4e6a52ff56541, 0x4401, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xb}, {0x2, 0xa}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0x870, 0x5464, 0x0, 0x74000000, 0x1, 0x8}}, {0x14, 0x2, [0x8, 0x4, 0x1, 0x100, 0x3, 0x2640, 0x1000, 0x5]}}, {{0x1c, 0x1, {0x5, 0x8, 0x37, 0x6, 0x2, 0x9, 0xffff3c88}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x57, 0x7c, 0x81, 0x0, 0x0, 0x3, 0x4}}, {0xc, 0x2, [0x2b8, 0x6, 0x7f, 0x10]}}]}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc0, 0x6, 0x1000, 0x4, 0x2, 0x9, 0x8, 0x9}}, {0x16, 0x2, [0x5, 0x3, 0x2, 0xad91, 0xfffc, 0x8, 0x6ea6, 0x5, 0xffc0]}}, {{0x1c, 0x1, {0x0, 0xba, 0x0, 0x3, 0x1, 0x7ff, 0xff, 0x2}}, {0x8, 0x2, [0x7, 0xc000]}}, {{0x1c, 0x1, {0xb, 0x1, 0x9, 0x4, 0x0, 0x6339, 0xfffffffe, 0x7}}, {0x12, 0x2, [0x8001, 0x905, 0x7f, 0x8, 0x5, 0x8, 0x81]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.495906395s ago: executing program 0 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'ip6erspan0\x00', 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0xc0000) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4093, 0xffd}], 0x1}, 0x102) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc010}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) 2.400801697s ago: executing program 2 (id=108): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x1, 0x7, 0xffffffffffffffff}) r3 = socket(0x25, 0x3, 0x800fa) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffff800, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@noop]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0xd2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x4, 0x2, {0x9, 0x21, 0x25f4, 0x2d, 0x1, {0x22, 0xe27}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x4, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x4, 0x2}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0xfc, 0x2, 0x40, 0x1}, 0x7b, &(0x7f0000000100)={0x5, 0xf, 0x7b, 0x5, [@generic={0x47, 0x10, 0x3, "be493bc47ef50532367ecd47386abee3eae9eefc972167e76bbd921ed8b527daf50dbad3faf97faebc6982c055f1c8dcbc49bc87fcb0cc024bc561e1e70a8e993c979c7d"}, @ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0x4, 0xf, 0x8001, [0xffc0f0, 0x6f60c34194ccc1f3]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x4, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x4, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x9, 0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2426}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x0, 0x28, 0x9e, {0x9e, 0x6, "1ed702e4b9bc2345ef4e393d5d341b1455df3a8a6ad25c7f03b8c82ea51e732df67207552a91619bf2ebfc330ec3bfe5c867c6a2ffa5816583211c76862147ea820f7ce2acb2df8aef756dfa007e0120d6ef0cf2ed360dd64cd2cef23abed39bdd67a82d1a74e0ded698204f5fe55afba6d908e27be7f897b1b89c3aa7ce3e1168784b907b0ab9fb91ce82bec94bacad7179b64274d9d1fa5800fb6b"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000000780)=ANY=[@ANYBLOB="002209000000372f850b6fde922a9624d8d5559f7064b7508c7cfa81e3e3b39549a57b4993cdee61774efbf653786d53f08b8a7da2ff7aefb48872b18b5e1a0348853c5b"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xdec}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x20, 0x31, 0xbf, "8b4ebe6841205cb74d94431adeddae6810e125a952a67054d9372f963de6f971c9d9e821b3835a362df60bd5757b9cf3defdfe39bca8c906eed01101ed07f161a51a83e6aab3de248239eb3e602c6bcbd74d73dede4d3acf6ff750422295b16fcdd2a1f6bd5937031d51aa5df23c4b5c9a6d02f81f6d8ba4930b39b01ea9bc89dafeca9501e09e71f470d6763ada68b57ad402612aa36119720e8d03838b88cef075fb5d7e567f5d73b58c4c63884449ef10f4b63aafe818a204d4081235f9"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x1, 0x66, "55034603e356818f37b0909a08be3f7ae2b99f8c5f26f9fd5feff2f38a8c41b04b1b46b6d910cb2488a3d4c99b30cb43ecbf1d277dcfae6a823c1daa58b164e21e5fbb96663967af1bbc48daa197d40fad6f7d93983a5fa358b29994d024706eb19229af1d29"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x3}}) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 2.346583672s ago: executing program 3 (id=109): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_settime(0x7ffffffff000, 0x0) 2.06387316s ago: executing program 3 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x3ff, 0x6, 0x401, 0x8, 0x2]}, @CTA_NAT_SRC={0x4}]}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002802a05acc88305000100000000003c00198008000100200200000800010048000000080002001000000008000100800c0000080002004409000008000200000a0000080002009101000008000740000000002c00068014000500fe800000000000000000000000000000040020010000000000000000000000000001"], 0xc0}}, 0x0) 1.815801417s ago: executing program 3 (id=111): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x3, 0x10, &(0x7f0000000080)=""/16}) 1.636950175s ago: executing program 3 (id=112): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r2 = syz_open_dev$evdev(&(0x7f0000001140), 0xd09b, 0x200) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001180)=""/7) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x20000001, 0x0, &(0x7f00000000c0)) (async, rerun: 64) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3}) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0xb3ffb8ec2ba4c6d}, 0x2404c010) 1.479670869s ago: executing program 4 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELRULE={0x220, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x75}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa9}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x59}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6e}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfa}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x298}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4122, 0x101a}], 0x1, 0x8001, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x84}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000100)={0x2000, 0x13000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r12, 0x3554000) socket$nl_route(0x10, 0x3, 0x0) fadvise64(r12, 0x85f5, 0x4000000005, 0x4) 1.307448169s ago: executing program 3 (id=114): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0xfffffffffffffcce) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r0, 0x82, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.22406907s ago: executing program 2 (id=115): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.110912651s ago: executing program 0 (id=116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) write(r0, 0x0, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000040)={"760d064a24f6b6a3f92f4024b20f2127411320f93d8d24dc9f19e05e104d", 0x248, 0x1, 0x1, 0x0, 0x40, 0x80, 0x9, 0x2, [0x59d, 0xf, 0x6, 0x8, 0x4, 0x8, 0x4, 0x100, 0x1, 0x3, 0x2, 0x1ff, 0x9, 0x1, 0x0, 0x4, 0xe08e, 0x57]}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r2, 0x58, 0x5791, 0x4}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40000) close(0x3) 1.04862793s ago: executing program 1 (id=117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 936.920946ms ago: executing program 0 (id=118): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0xb8, 0x11, 0x0, 0x0}, {0x80, 0x2011, 0x0, 0x0}], 0x2}) 885.285835ms ago: executing program 2 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x6, 0x25dfdc03, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000}}, 0x1c}}, 0x4044000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="60ffffffea0601080000000000777aa9719c380db20007800800114000000000050015a5ad5911cd03e01077f64e0002000000050001000600000005080a00000005000400008000fbffffff007379f29dcb24e5619c7a30000000001400d0245b1e271a301615badf86738a50a116b77e85910a9ab5c9e44b7f369d95a34ea68e8eb54431f9fbe63a853abcb3f7fc7f066ce911a7a25eaaa1b4a2248c820ea1390000"], 0x60}}, 0x0) 0s ago: executing program 2 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="997425bd7000fbdbdf2515000000400001"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250c00d855"], 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4044005) getsockname$inet(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x6}, {0xa}, {0xa, 0x9}}, ["", "", "", "", "", ""]}, 0x24}}, 0x4c844) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010025bd7000f9675f6cd5a81234bbd82b9242ffdbd72500000000a7eca7cbf5ec6f6ebe8af349cf4513663232a7c9890726", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 81.648168][ T5811] cgroup: Unknown subsys name 'net' [ 81.758775][ T5811] cgroup: Unknown subsys name 'cpuset' [ 81.767872][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.397109][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.464607][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.475460][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.483789][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.493309][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.501283][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.554958][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.575193][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.589240][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.597710][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.605378][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.614365][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.621923][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.630482][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.638004][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.645796][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.656979][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.664472][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.674758][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.683056][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.683714][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.753941][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.762354][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.770583][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.779679][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.788052][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.077533][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.328064][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.335943][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.343439][ T5835] bridge_slave_0: entered allmulticast mode [ 86.352070][ T5835] bridge_slave_0: entered promiscuous mode [ 86.391108][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.398331][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.405834][ T5835] bridge_slave_1: entered allmulticast mode [ 86.412949][ T5835] bridge_slave_1: entered promiscuous mode [ 86.480184][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.494335][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.513211][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.618471][ T5835] team0: Port device team_slave_0 added [ 86.649258][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.662618][ T5835] team0: Port device team_slave_1 added [ 86.724089][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.736329][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.759337][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.766922][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.794094][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.839195][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.846320][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.872995][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.954726][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.961933][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.969889][ T5840] bridge_slave_0: entered allmulticast mode [ 86.977631][ T5840] bridge_slave_0: entered promiscuous mode [ 87.022803][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.030475][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.037865][ T5840] bridge_slave_1: entered allmulticast mode [ 87.045079][ T5840] bridge_slave_1: entered promiscuous mode [ 87.216068][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.223862][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.231504][ T5843] bridge_slave_0: entered allmulticast mode [ 87.240115][ T5843] bridge_slave_0: entered promiscuous mode [ 87.259364][ T5835] hsr_slave_0: entered promiscuous mode [ 87.267147][ T5835] hsr_slave_1: entered promiscuous mode [ 87.274115][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.282860][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.291234][ T5841] bridge_slave_0: entered allmulticast mode [ 87.299432][ T5841] bridge_slave_0: entered promiscuous mode [ 87.311745][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.326362][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.352685][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.361805][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.369703][ T5843] bridge_slave_1: entered allmulticast mode [ 87.377790][ T5843] bridge_slave_1: entered promiscuous mode [ 87.386409][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.393933][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.402267][ T5841] bridge_slave_1: entered allmulticast mode [ 87.409708][ T5841] bridge_slave_1: entered promiscuous mode [ 87.439749][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.447209][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.455094][ T5837] bridge_slave_0: entered allmulticast mode [ 87.462317][ T5837] bridge_slave_0: entered promiscuous mode [ 87.504820][ T5840] team0: Port device team_slave_0 added [ 87.520702][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.528407][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.535754][ T5837] bridge_slave_1: entered allmulticast mode [ 87.543777][ T5837] bridge_slave_1: entered promiscuous mode [ 87.563534][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.576566][ T5840] team0: Port device team_slave_1 added [ 87.601878][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.612632][ T5830] Bluetooth: hci0: command tx timeout [ 87.618272][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.631178][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.716628][ T5841] team0: Port device team_slave_0 added [ 87.732637][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.754112][ T5841] team0: Port device team_slave_1 added [ 87.760837][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.769270][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.775084][ T52] Bluetooth: hci3: command tx timeout [ 87.798884][ T5826] Bluetooth: hci1: command tx timeout [ 87.799613][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.821589][ T5830] Bluetooth: hci2: command tx timeout [ 87.837439][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.855045][ T5830] Bluetooth: hci4: command tx timeout [ 87.865741][ T5843] team0: Port device team_slave_0 added [ 87.882390][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.889780][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.917495][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.948924][ T5843] team0: Port device team_slave_1 added [ 87.980298][ T5837] team0: Port device team_slave_0 added [ 87.997659][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.004838][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.032597][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.046287][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.053390][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.080545][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.100183][ T5837] team0: Port device team_slave_1 added [ 88.159288][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.166987][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.193710][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.239403][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.247735][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.275443][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.293529][ T5840] hsr_slave_0: entered promiscuous mode [ 88.300532][ T5840] hsr_slave_1: entered promiscuous mode [ 88.307594][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.313948][ T5840] Cannot create hsr debugfs directory [ 88.329869][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.338469][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.365820][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.405393][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.412631][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.439420][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.520005][ T5841] hsr_slave_0: entered promiscuous mode [ 88.526856][ T5841] hsr_slave_1: entered promiscuous mode [ 88.533568][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 88.540220][ T5841] Cannot create hsr debugfs directory [ 88.617282][ T5843] hsr_slave_0: entered promiscuous mode [ 88.624218][ T5843] hsr_slave_1: entered promiscuous mode [ 88.631276][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 88.637571][ T5843] Cannot create hsr debugfs directory [ 88.666933][ T5837] hsr_slave_0: entered promiscuous mode [ 88.674367][ T5837] hsr_slave_1: entered promiscuous mode [ 88.682307][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 88.688830][ T5837] Cannot create hsr debugfs directory [ 89.004940][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.054372][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.111925][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.143062][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.236689][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.249747][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.260788][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.274784][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.402615][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.422119][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.451367][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.483265][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.508592][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.561475][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.572546][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.595993][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.611492][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.644575][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.664688][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.671994][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.685168][ T5830] Bluetooth: hci0: command tx timeout [ 89.719942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.727776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.793855][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.808179][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.818658][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.829655][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.845554][ T5830] Bluetooth: hci3: command tx timeout [ 89.851653][ T5830] Bluetooth: hci2: command tx timeout [ 89.857916][ T52] Bluetooth: hci1: command tx timeout [ 89.861147][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.925592][ T5830] Bluetooth: hci4: command tx timeout [ 89.954827][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.003172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010714][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.038156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.045545][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.057793][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.144218][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.160739][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.188360][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.195619][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.236267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.243954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.310099][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.350762][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.367076][ T5835] veth0_vlan: entered promiscuous mode [ 90.406463][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.420065][ T5835] veth1_vlan: entered promiscuous mode [ 90.429008][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.490673][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.500104][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.507937][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.518842][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.526478][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.561065][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568412][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.580560][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.587738][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.610643][ T5835] veth0_macvtap: entered promiscuous mode [ 90.633487][ T5835] veth1_macvtap: entered promiscuous mode [ 90.729881][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.762993][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.772982][ T5840] veth0_vlan: entered promiscuous mode [ 90.798849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.833258][ T5840] veth1_vlan: entered promiscuous mode [ 90.846588][ T1090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.857722][ T1090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888822][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.896154][ T1090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.907117][ T1090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.947458][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.050932][ T5841] veth0_vlan: entered promiscuous mode [ 91.062341][ T5840] veth0_macvtap: entered promiscuous mode [ 91.091653][ T5840] veth1_macvtap: entered promiscuous mode [ 91.132127][ T5841] veth1_vlan: entered promiscuous mode [ 91.134138][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.148246][ T5837] veth0_vlan: entered promiscuous mode [ 91.160937][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.209291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.220299][ T5837] veth1_vlan: entered promiscuous mode [ 91.226719][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.258766][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.294254][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.319735][ T5843] veth0_vlan: entered promiscuous mode [ 91.342143][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372784][ T5841] veth0_macvtap: entered promiscuous mode [ 91.383653][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.386042][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.418833][ T5843] veth1_vlan: entered promiscuous mode [ 91.426130][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.436292][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.481401][ T5841] veth1_macvtap: entered promiscuous mode [ 91.516474][ T5837] veth0_macvtap: entered promiscuous mode [ 91.529856][ T5837] veth1_macvtap: entered promiscuous mode [ 91.621784][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.636777][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.650939][ T5843] veth0_macvtap: entered promiscuous mode [ 91.659947][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.677577][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.694958][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.716399][ T5843] veth1_macvtap: entered promiscuous mode [ 91.731052][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.760557][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.770865][ T5830] Bluetooth: hci0: command tx timeout [ 91.783571][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.880598][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.890529][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.902605][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.915021][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.924358][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.933505][ T5830] Bluetooth: hci3: command tx timeout [ 91.940652][ T52] Bluetooth: hci2: command tx timeout [ 91.940663][ T5826] Bluetooth: hci1: command tx timeout [ 91.942423][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.965185][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.971074][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.984415][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.998148][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008803][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.019239][ T5830] Bluetooth: hci4: command tx timeout [ 92.035368][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.091701][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120273][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.144617][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.151649][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.175392][ T915] cfg80211: failed to load regulatory.db [ 92.181688][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.186029][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209995][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.364096][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.404033][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.577281][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.602767][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.672652][ T5929] syzkaller0: entered promiscuous mode [ 92.682468][ T5929] syzkaller0: entered allmulticast mode [ 92.740835][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.758765][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.853823][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.865376][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.914144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.923931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.933205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.942455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.951588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.960595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.969871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.047553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.087047][ T915] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.119072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.206358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.221445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.627821][ T915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.652694][ T915] usb 1-1: not running at top speed; connect to a high speed hub [ 93.697003][ T915] usb 1-1: config 56 has an invalid interface number: 218 but max is 0 [ 93.721279][ T915] usb 1-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 93.761727][ T915] usb 1-1: config 56 has no interface number 0 [ 93.761794][ T915] usb 1-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.761822][ T915] usb 1-1: config 56 interface 218 has no altsetting 0 [ 93.767708][ T915] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 93.767731][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.767742][ T915] usb 1-1: Product: syz [ 93.767751][ T915] usb 1-1: Manufacturer: syz [ 93.767760][ T915] usb 1-1: SerialNumber: syz [ 93.814822][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.845509][ T5830] Bluetooth: hci0: command tx timeout [ 93.945143][ T5942] macsec1: entered promiscuous mode [ 93.950427][ T5942] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 93.975054][ T5942] macsec1: entered allmulticast mode [ 93.975342][ T5915] usb 5-1: device descriptor read/64, error -71 [ 93.985050][ T5942] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 93.986995][ T5940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.006332][ T52] Bluetooth: hci3: command tx timeout [ 94.012095][ T5826] Bluetooth: hci2: command tx timeout [ 94.014646][ T5830] Bluetooth: hci1: command tx timeout [ 94.037106][ T915] radioshark2 1-1:56.218: Invalid radioSHARK2 device [ 94.049504][ T915] radioshark2 1-1:56.218: probe with driver radioshark2 failed with error -22 [ 94.062491][ T915] usbhid 1-1:56.218: couldn't find an input interrupt endpoint [ 94.068498][ T915] usb 1-1: USB disconnect, device number 2 [ 94.090749][ T5826] Bluetooth: hci4: command tx timeout [ 94.235219][ T5946] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.251000][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.407301][ T5915] usb 5-1: device descriptor read/64, error -71 [ 94.525082][ T5915] usb usb5-port1: attempt power cycle [ 94.914633][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.945515][ T5915] usb 5-1: device descriptor read/8, error -71 [ 95.214751][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.253637][ T5915] usb 5-1: device descriptor read/8, error -71 [ 95.364427][ T5955] process 'syz.1.11' launched '/dev/fd/6' with NULL argv: empty string added [ 95.386377][ T5915] usb usb5-port1: unable to enumerate USB device [ 95.436882][ T5957] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 95.949362][ T5965] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.030769][ T5978] netlink: 'syz.3.15': attribute type 15 has an invalid length. [ 96.045250][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.079340][ T5978] Zero length message leads to an empty skb [ 96.092067][ T5953] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.103324][ T5953] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.169043][ T5953] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.180892][ T5953] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.200935][ T5979] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 96.260080][ T5979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.265225][ T5966] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.299811][ T5985] loop5: detected capacity change from 0 to 4095 [ 96.316238][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.337616][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.412740][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.463975][ T5979] tc_dump_action: action bad kind [ 96.510846][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.542965][ T5980] tc_dump_action: action bad kind [ 96.596459][ T5981] vlan2: entered allmulticast mode [ 96.602235][ T5981] veth0_to_bond: entered allmulticast mode [ 96.682745][ T5988] trusted_key: syz.4.18 sent an empty control message without MSG_MORE. [ 97.416137][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21'. [ 97.628091][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.777509][ T5915] usb 2-1: device descriptor read/64, error -71 [ 97.794623][ T5940] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.964584][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 97.975722][ T5940] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 97.984204][ T5940] usb 3-1: config 8 has no interface number 0 [ 97.994098][ T5940] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 98.026556][ T5940] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 98.044760][ T5915] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.223155][ T5940] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 98.243006][ T5940] usb 3-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.258266][ T5940] usb 3-1: config 8 interface 206 has no altsetting 0 [ 98.280992][ T5940] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 98.291710][ T5915] usb 2-1: device descriptor read/64, error -71 [ 98.299067][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.307719][ T5940] usb 3-1: Product: syz [ 98.312117][ T5940] usb 3-1: Manufacturer: syz [ 98.321590][ T5940] usb 3-1: SerialNumber: syz [ 98.405320][ T5915] usb usb2-port1: attempt power cycle [ 98.558597][ T5940] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 98.600433][ T5940] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 98.661576][ T5940] usb 3-1: USB disconnect, device number 3 [ 98.727341][ T5940] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 98.754695][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.767003][ T5940] garmin_gps 3-1:8.206: device disconnected [ 98.796306][ T5915] usb 2-1: device descriptor read/8, error -71 [ 98.980207][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.085484][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.140231][ T5915] usb 2-1: device descriptor read/8, error -71 [ 99.247517][ T6027] pimreg: entered allmulticast mode [ 99.290208][ T5915] usb usb2-port1: unable to enumerate USB device [ 99.544611][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.624676][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.645196][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.674763][ T5902] usb 5-1: device descriptor read/64, error -71 [ 99.794770][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 99.796459][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.812232][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.838530][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.864154][ T9] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 99.878997][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.889678][ T9] usb 3-1: config 0 descriptor?? [ 99.912549][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.914655][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.944555][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.952779][ T5915] usb 4-1: SerialNumber: syz [ 100.064732][ T5902] usb 5-1: device descriptor read/64, error -71 [ 100.180593][ T5902] usb usb5-port1: attempt power cycle [ 100.195749][ T5915] usb 4-1: 0:2 : does not exist [ 100.244976][ T5915] usb 4-1: USB disconnect, device number 2 [ 100.344286][ T9] zydacron 0003:13EC:0006.0001: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 100.555246][ T5902] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.597745][ T5902] usb 5-1: device descriptor read/8, error -71 [ 100.725916][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.875486][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.887327][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 100.899933][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.910985][ T5902] usb 5-1: device descriptor read/8, error -71 [ 100.920926][ T5888] usb 2-1: config 40 has an invalid interface number: 160 but max is 0 [ 100.936477][ T5888] usb 2-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 100.974657][ T5888] usb 2-1: config 40 has no interface number 0 [ 101.018372][ T5888] usb 2-1: config 40 interface 160 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 101.034232][ T5888] usb 2-1: config 40 interface 160 has no altsetting 0 [ 101.041841][ T5902] usb usb5-port1: unable to enumerate USB device [ 101.052334][ T5888] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 101.081138][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.088987][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.099158][ T5888] usb 2-1: Product: syz [ 101.103998][ T5888] usb 2-1: Manufacturer: syz [ 101.119602][ T5888] usb 2-1: SerialNumber: syz [ 101.168802][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 101.182458][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 101.244625][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 101.264833][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.277047][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.289033][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.304576][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.318502][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.338554][ T9] usb 4-1: config 0 descriptor?? [ 101.365915][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.669197][ T5888] snd-usb-audio 2-1:40.160: probe with driver snd-usb-audio failed with error -2 [ 101.692974][ T5888] usb 2-1: USB disconnect, device number 6 [ 101.759121][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.787163][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.802139][ T9] microsoft 0003:045E:07DA.0002: item fetching failed at offset 31/34 [ 101.821285][ T9] microsoft 0003:045E:07DA.0002: parse failed [ 101.830419][ T9] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 101.864881][ T5915] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.970378][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:40.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.024990][ T5888] usb 4-1: USB disconnect, device number 3 [ 102.064613][ T5915] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 102.083243][ T5915] usb 1-1: config 0 has no interface number 0 [ 102.119456][ T5915] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 102.283227][ T5915] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.285888][ T6026] pimreg: left allmulticast mode [ 102.382853][ T5915] usb 1-1: config 0 interface 113 has no altsetting 0 [ 102.491444][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 102.501425][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.510426][ T5915] usb 1-1: Product: syz [ 102.515138][ T5915] usb 1-1: Manufacturer: syz [ 102.520033][ T5915] usb 1-1: SerialNumber: syz [ 102.528424][ T5915] usb 1-1: config 0 descriptor?? [ 102.631784][ T5915] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 102.644584][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.707337][ T5888] usb 3-1: USB disconnect, device number 4 [ 102.756340][ T6049] input: syz0 as /devices/virtual/input/input5 [ 102.779769][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.805532][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 102.923388][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.053090][ T9] usb 5-1: device descriptor read/64, error -71 [ 103.084674][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 103.100337][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.111564][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.130369][ T5913] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 103.139924][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.150257][ T5913] usb 2-1: Product: syz [ 103.155670][ T5913] usb 2-1: Manufacturer: syz [ 103.161807][ T5913] usb 2-1: SerialNumber: syz [ 103.169748][ T5913] usb 2-1: config 0 descriptor?? [ 103.181111][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 103.201495][ T5913] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 103.315356][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.458591][ T9] usb 5-1: device descriptor read/64, error -71 [ 103.625970][ T9] usb usb5-port1: attempt power cycle [ 103.652043][ T5913] rc_core: IR keymap rc-imon-pad not found [ 103.660207][ T5913] Registered IR keymap rc-empty [ 103.682167][ T5913] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 103.714202][ T5913] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 103.775091][ T5913] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 103.809019][ T5913] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 103.875103][ T5913] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:7> initialized [ 103.975817][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.025508][ T9] usb 5-1: device descriptor read/8, error -71 [ 104.336401][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.406915][ T9] usb 5-1: device descriptor read/8, error -71 [ 104.442087][ T5913] usb 1-1: USB disconnect, device number 3 [ 104.538418][ T9] usb usb5-port1: unable to enumerate USB device [ 104.640002][ T6071] syz.3.37 (6071): drop_caches: 2 [ 104.848975][ T6079] tipc: Started in network mode [ 104.858377][ T6079] tipc: Node identity 322833e76dc, cluster identity 4711 [ 104.867612][ T6079] tipc: Enabled bearer , priority 0 [ 104.887381][ T6079] syzkaller0: entered promiscuous mode [ 104.893760][ T6079] syzkaller0: entered allmulticast mode [ 104.901783][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.000519][ T6079] tipc: Resetting bearer [ 105.067794][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 105.082514][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.121758][ T5913] usb 1-1: config 0 descriptor?? [ 105.148636][ T5913] gspca_main: spca508-2.14.0 probing 8086:0110 [ 105.240122][ T6078] tipc: Resetting bearer [ 105.265540][ T6078] tipc: Disabling bearer [ 105.666218][ T5913] gspca_spca508: reg_read err -110 [ 105.682047][ T5913] gspca_spca508: reg_read err -32 [ 105.688494][ T5913] gspca_spca508: reg_read err -32 [ 105.694009][ T5913] gspca_spca508: reg_read err -32 [ 105.700267][ T5913] gspca_spca508: reg_read err -32 [ 105.706111][ T5913] gspca_spca508: reg write: error -32 [ 105.711777][ T5913] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 105.836502][ T5913] usb 1-1: USB disconnect, device number 4 [ 106.879564][ T5888] usb 2-1: USB disconnect, device number 7 [ 107.404766][ T5872] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 107.586359][ T5872] usb 5-1: not running at top speed; connect to a high speed hub [ 107.603784][ T5872] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.624255][ T5872] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 107.677187][ T5872] usb 5-1: config 1 has an invalid interface number: 9 but max is 2 [ 107.707067][ T5872] usb 5-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 107.744672][ T5872] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.794611][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.832779][ T5872] usb 5-1: config 1 has no interface number 1 [ 107.855557][ T5872] usb 5-1: too many endpoints for config 1 interface 9 altsetting 80: 202, using maximum allowed: 30 [ 107.921346][ T5872] usb 5-1: config 1 interface 9 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 107.955860][ T5872] usb 5-1: config 1 interface 9 has no altsetting 0 [ 107.998950][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.014567][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 108.033472][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.052654][ T5913] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 108.092790][ T5872] usb 5-1: Product: syz [ 108.102104][ T5913] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 108.132478][ T5872] usb 5-1: Manufacturer: syz [ 108.137598][ T5872] usb 5-1: SerialNumber: syz [ 108.154558][ T5913] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.194695][ T5913] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 108.253789][ T5913] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 108.276135][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.320842][ T5913] usb 2-1: Product: syz [ 108.339296][ T5913] usb 2-1: Manufacturer: syz [ 108.363294][ T5913] usb 2-1: SerialNumber: syz [ 108.368238][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.423271][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 108.436692][ T5872] usb 5-1: 0:2 : does not exist [ 108.474866][ T5913] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input8 [ 108.542204][ T5872] usb 5-1: USB disconnect, device number 14 [ 108.584103][ T5940] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 108.608185][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.628582][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 108.637396][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.639039][ T5940] usb 3-1: Product: syz [ 108.665222][ T5913] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 108.697958][ T5913] (id 0x00) [ 108.704955][ T5940] usb 3-1: Manufacturer: syz [ 108.715516][ T5940] usb 3-1: SerialNumber: syz [ 108.735651][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.742649][ T5940] usb 3-1: config 0 descriptor?? [ 108.835243][ T5913] rc_core: IR keymap rc-imon-pad not found [ 108.841451][ T5913] Registered IR keymap rc-empty [ 108.855362][ T5913] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 108.865976][ T5913] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 108.906875][ T5913] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 108.917996][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 108.921040][ T5913] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input9 [ 108.941163][ T9] usb 1-1: config 1 interface 0 altsetting 155 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.941970][ T5913] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:8> initialized [ 108.984157][ T9] usb 1-1: config 1 interface 0 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.054539][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 109.095002][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.104203][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.154596][ T9] usb 1-1: Product: చ [ 109.159007][ T9] usb 1-1: Manufacturer: 嚟㰚狸鿷ꬂⱯꓼ겣샍⟤婱켼톾솔篋맒䆤혗Ꙡ⼹⪤ꗳ끓鎜飣‧憳ᦊ뇐䚣郏䥠冀㙸᳂Ꟊ☹忧湼崩漽뤬됽㋢☤딉᳘邸멃윑н꣑䠰䇨⛚ꝭ⓴믕⪡붔}㾳憊렞艭鸧㸈늳币鲋찊ﷅ齕뻲ᤤ뾸 [ 109.190499][ T9] usb 1-1: SerialNumber: 橧 [ 109.245162][ T5913] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 109.347208][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.414639][ T5913] usb 4-1: Invalid ep0 maxpacket: 32 [ 109.505187][ T9] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 155 proto 1 vid 0x0525 pid 0xA4A8 [ 109.506652][ T5872] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 109.541109][ T9] usb 1-1: USB disconnect, device number 5 [ 109.541138][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.557180][ T5913] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 109.585120][ T5872] usb 5-1: config 0 descriptor?? [ 109.595661][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.611258][ T9] usblp1: removed [ 109.612426][ T5872] gspca_main: spca508-2.14.0 probing 8086:0110 [ 109.633667][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.651224][ T5940] usb 3-1: Firmware version (0.0) predates our first public release. [ 109.662407][ T5940] usb 3-1: Please update to version 0.2 or newer [ 109.734917][ T5913] usb 4-1: Invalid ep0 maxpacket: 32 [ 109.753320][ T5913] usb usb4-port1: attempt power cycle [ 109.792364][ T5940] usb 3-1: USB disconnect, device number 5 [ 110.056082][ T5872] gspca_spca508: reg_read err -71 [ 110.063393][ T5872] gspca_spca508: reg_read err -71 [ 110.069361][ T5872] gspca_spca508: reg_read err -71 [ 110.077825][ T5872] gspca_spca508: reg_read err -71 [ 110.083339][ T5872] gspca_spca508: reg_read err -71 [ 110.091462][ T5872] gspca_spca508: reg write: error -71 [ 110.097938][ T5872] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 110.138394][ T5872] usb 5-1: USB disconnect, device number 15 [ 110.155416][ T5913] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 110.206822][ T5913] usb 4-1: Invalid ep0 maxpacket: 32 [ 110.344617][ T5913] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 110.395254][ T5913] usb 4-1: Invalid ep0 maxpacket: 32 [ 110.400008][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.401367][ T5913] usb usb4-port1: unable to enumerate USB device [ 110.650646][ T6156] tipc: Started in network mode [ 110.656103][ T6156] tipc: Node identity a213173a03ff, cluster identity 4711 [ 110.666392][ T6156] tipc: Enabled bearer , priority 0 [ 110.674332][ T6156] syzkaller0: entered promiscuous mode [ 110.682309][ T6156] syzkaller0: entered allmulticast mode [ 110.754617][ T6156] tipc: Resetting bearer [ 110.835395][ T6155] tipc: Resetting bearer [ 111.799474][ T984] usb 2-1: USB disconnect, device number 8 [ 112.104776][ T915] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 112.135676][ T6155] tipc: Disabling bearer [ 112.375090][ T915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.469693][ T915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.578984][ T915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.609962][ T915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.639452][ T915] usb 3-1: Product: syz [ 112.664636][ T915] usb 3-1: Manufacturer: syz [ 112.669482][ T915] usb 3-1: SerialNumber: syz [ 112.927477][ T5913] tipc: Node number set to 2716604218 [ 112.993306][ T915] usb 3-1: 0:2 : does not exist [ 113.039612][ T915] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 113.173010][ T915] usb 3-1: USB disconnect, device number 6 [ 113.325486][ T6214] fuse: blksize only supported for fuseblk [ 113.367585][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.438333][ T984] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.611269][ T6221] tipc: Enabling of bearer rejected, failed to enable media [ 113.643457][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 113.671165][ T984] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 113.706181][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.743110][ T984] usb 2-1: config 0 descriptor?? [ 113.790121][ T6224] macvlan2: entered allmulticast mode [ 113.817625][ T6224] veth1_vlan: entered allmulticast mode [ 113.843526][ T6224] veth1_vlan: left allmulticast mode [ 113.978780][ T984] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 114.036504][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.055551][ T984] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 114.073978][ T984] usb 2-1: media controller created [ 114.196914][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.521400][ T984] DVB: Unable to find symbol dib7000p_attach() [ 114.555497][ T984] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 115.050137][ T6246] netlink: zone id is out of range [ 115.055437][ T6246] netlink: zone id is out of range [ 115.060687][ T6246] netlink: zone id is out of range [ 115.066008][ T6246] netlink: zone id is out of range [ 115.071153][ T6246] netlink: zone id is out of range [ 115.077483][ T6246] netlink: zone id is out of range [ 115.082726][ T6246] netlink: zone id is out of range [ 115.088004][ T6246] netlink: zone id is out of range [ 115.093273][ T6246] netlink: zone id is out of range [ 115.098454][ T6246] netlink: zone id is out of range [ 115.117349][ T6227] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.66'. [ 115.169565][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 115.188382][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 115.259001][ T30] audit: type=1326 audit(1769639728.863:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 115.484424][ T984] rc_core: IR keymap rc-dib0700-rc5 not found [ 115.553046][ T984] Registered IR keymap rc-empty [ 115.558232][ T30] audit: type=1326 audit(1769639728.863:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 115.597153][ T30] audit: type=1326 audit(1769639728.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 115.856421][ T30] audit: type=1326 audit(1769639728.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 115.948100][ T30] audit: type=1326 audit(1769639728.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 116.063888][ T30] audit: type=1326 audit(1769639728.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 116.143888][ T30] audit: type=1326 audit(1769639728.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 116.259808][ T30] audit: type=1326 audit(1769639728.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9259aeb9 code=0x7ffc0000 [ 116.374609][ T30] audit: type=1326 audit(1769639728.863:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf9255b78e code=0x7ffc0000 [ 116.454601][ T30] audit: type=1326 audit(1769639728.873:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf9255b78e code=0x7ffc0000 [ 117.204690][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.414842][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 117.432555][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 117.447971][ T9] usb 4-1: config 0 has no interface number 0 [ 117.478297][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 117.559480][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.584541][ T9] usb 4-1: Product: syz [ 117.599222][ T9] usb 4-1: Manufacturer: syz [ 117.604531][ T9] usb 4-1: SerialNumber: syz [ 117.633097][ T9] usb 4-1: config 0 descriptor?? [ 117.744391][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 117.785326][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 117.785326][ T9] [ 117.792753][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 117.792753][ T9] [ 117.881948][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.884787][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 117.895090][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.934318][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 117.958420][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.992932][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 118.034663][ T9] usb 4-1: media controller created [ 118.074936][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 118.119276][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 118.181239][ T9] dvb-usb: MAC address reading failed. [ 118.268984][ T6256] bond1: option arp_interval: invalid value (18446744071947943938) [ 118.320572][ T6256] bond1: option arp_interval: allowed values 0 - 2147483647 [ 118.370402][ T6256] bond1 (unregistering): Released all slaves [ 118.430475][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.746293][ T9] DVB: Unable to find symbol stb0899_attach() [ 118.752462][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 119.073928][ T9] rc_core: IR keymap rc-tt-1500 not found [ 119.102658][ T9] Registered IR keymap rc-empty [ 119.121841][ T9] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 119.193776][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input11 [ 119.214801][ T984] dvb-usb: could not initialize remote control. [ 119.224575][ T984] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 119.298105][ T984] usb 2-1: USB disconnect, device number 9 [ 119.314657][ T915] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 119.316106][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 119.378965][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 119.378965][ T9] [ 119.424583][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 119.493700][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 119.500873][ T9] usb 4-1: USB disconnect, device number 8 [ 119.513137][ T984] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 119.524657][ T915] usb 1-1: device descriptor read/64, error -71 [ 119.540971][ T5888] dvb-usb: error -22 while querying for an remote control event. [ 119.858497][ T915] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 120.000081][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 120.020816][ T915] usb 1-1: device descriptor read/64, error -71 [ 120.192350][ T915] usb usb1-port1: attempt power cycle [ 120.745732][ T915] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 120.864637][ T915] usb 1-1: device descriptor read/8, error -71 [ 120.937875][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.025025][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 121.134676][ T915] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 121.142937][ T5913] usb 2-1: device descriptor read/64, error -71 [ 121.168097][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 121.275398][ T915] usb 1-1: device descriptor read/8, error -71 [ 121.396725][ T915] usb usb1-port1: unable to enumerate USB device [ 121.544597][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.704777][ T5913] usb 2-1: device descriptor read/64, error -71 [ 121.878894][ T5913] usb usb2-port1: attempt power cycle [ 122.292016][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.381278][ T5913] usb 2-1: device descriptor read/8, error -71 [ 122.599151][ T5888] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.664665][ T5913] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.693653][ T5872] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.734421][ T5913] usb 2-1: device descriptor read/8, error -71 [ 122.764614][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.801255][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 122.826909][ T5888] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 122.866121][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.870297][ T5913] usb usb2-port1: unable to enumerate USB device [ 122.893522][ T6329] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 122.905067][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 122.918813][ T6329] net_ratelimit: 488 callbacks suppressed [ 122.918833][ T6329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.933982][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.936533][ T5888] usb 3-1: config 0 descriptor?? [ 122.943758][ T5872] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 122.971004][ T5872] usb 1-1: config 13 has no interface number 0 [ 122.984708][ T9] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 122.992856][ T9] usb 5-1: config 0 has no interface number 0 [ 123.006455][ T5872] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 123.039829][ T9] usb 5-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 123.046746][ T5872] usb 1-1: config 13 interface 50 has no altsetting 0 [ 123.070041][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.095934][ T5872] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 123.105770][ T9] usb 5-1: config 0 descriptor?? [ 123.125334][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.153812][ T9] usb-storage 5-1:0.33: USB Mass Storage device detected [ 123.161439][ T5872] usb 1-1: Product: syz [ 123.161462][ T5872] usb 1-1: Manufacturer: syz [ 123.161477][ T5872] usb 1-1: SerialNumber: syz [ 123.179887][ T6322] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 123.229521][ T5888] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 123.288710][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.368086][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 123.421818][ T5888] usb 3-1: media controller created [ 123.546519][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.702895][ T6321] netlink: 'syz.0.91': attribute type 49 has an invalid length. [ 123.967644][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.031914][ T5872] usb 1-1: MIDIStreaming interface descriptor not found [ 124.182825][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.229705][ T5872] usb 1-1: USB disconnect, device number 10 [ 124.242467][ T5888] DVB: Unable to find symbol dib7000p_attach() [ 124.262190][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 124.357976][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 124.376941][ T5889] usb 4-1: config 0 has no interfaces? [ 124.389280][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.423336][ T5889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.463527][ T5889] usb 4-1: Manufacturer: syz [ 124.521743][ T5889] usb 4-1: config 0 descriptor?? [ 124.546346][ T5888] rc_core: IR keymap rc-dib0700-rc5 not found [ 124.560654][ T5888] Registered IR keymap rc-empty [ 125.029721][ T5872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.227933][ T5872] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 125.237912][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.260581][ T5872] usb 1-1: config 0 descriptor?? [ 125.303355][ T5872] gspca_main: spca508-2.14.0 probing 8086:0110 [ 125.355070][ T984] usb 5-1: USB disconnect, device number 16 [ 125.787700][ T6358] bond1: option primary_reselect: invalid value (13) [ 125.822039][ T6358] bond1 (unregistering): Released all slaves [ 125.855031][ T5872] gspca_spca508: reg_read err -110 [ 125.862728][ T5872] gspca_spca508: reg_read err -32 [ 125.921703][ T5872] gspca_spca508: reg_read err -71 [ 125.934660][ T5872] gspca_spca508: reg_read err -71 [ 125.971232][ T5872] gspca_spca508: reg_read err -71 [ 125.996204][ T5872] gspca_spca508: reg write: error -71 [ 126.042633][ T5872] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 126.100777][ T5872] usb 1-1: USB disconnect, device number 11 [ 126.123251][ T6361] syzkaller1: entered promiscuous mode [ 126.134707][ T6361] syzkaller1: entered allmulticast mode [ 126.299079][ T915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 126.523043][ T915] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 126.532959][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.544929][ T915] usb 5-1: Product: syz [ 126.550702][ T915] usb 5-1: Manufacturer: syz [ 126.564062][ T915] usb 5-1: SerialNumber: syz [ 126.604199][ T915] usb 5-1: config 0 descriptor?? [ 126.824829][ T915] hso 5-1:0.0: Failed to find BULK IN ep [ 127.047564][ T9] usb 4-1: USB disconnect, device number 9 [ 127.161613][ T915] usb-storage 5-1:0.0: USB Mass Storage device detected [ 127.352028][ T915] usb 5-1: USB disconnect, device number 17 [ 128.602581][ T5888] dvb-usb: could not initialize remote control. [ 128.608397][ T6385] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 128.627658][ T5888] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 128.722422][ T5888] usb 3-1: USB disconnect, device number 7 [ 128.794255][ T6382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.937887][ T5888] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 128.972071][ T6393] netlink: 112 bytes leftover after parsing attributes in process `syz.3.110'. [ 129.001856][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 129.911139][ T6408] netlink: 52 bytes leftover after parsing attributes in process `syz.2.115'. [ 130.116292][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.152685][ T6415] netlink: 148 bytes leftover after parsing attributes in process `syz.3.114'. [ 130.401282][ T915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.684598][ T915] usb 1-1: Using ep0 maxpacket: 32 [ 130.738934][ T915] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 130.976117][ T915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.008776][ T915] usb 1-1: config 0 descriptor?? [ 131.294157][ T915] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 131.468186][ T6420] ------------[ cut here ]------------ [ 131.473904][ T6420] usb 1-1: BOGUS control dir, pipe 80000c80 doesn't match bRequestType c0 [ 131.483344][ T6420] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.0.118/6420 [ 131.494359][ T6420] Modules linked in: [ 131.499102][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.0.118 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.510677][ T6420] Tainted: [L]=SOFTLOCKUP [ 131.515645][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.526250][ T6420] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 131.532418][ T6420] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 131.554672][ T6420] RSP: 0018:ffffc9001accf948 EFLAGS: 00010246 [ 131.560886][ T6420] RAX: 0000000000000000 RBX: ffff888078ea3200 RCX: 0000000080000c80 [ 131.568921][ T6420] RDX: ffff8880345fa180 RSI: ffffffff8c5dcc40 RDI: ffffffff8ffc2c70 [ 131.576927][ T6420] RBP: 1ffff11003f52498 R08: 00000000000000c0 R09: 0000000000000000 [ 131.585109][ T6420] R10: ffffc9001accfa40 R11: fffff52003599f54 R12: ffff8880202f9100 [ 131.593076][ T6420] R13: ffff88801fa924c0 R14: 0000000080000c80 R15: ffff8880345fa180 [ 131.601281][ T6420] FS: 00007fba477826c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 131.610938][ T6420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.617767][ T6420] CR2: 000000110c38c1dd CR3: 000000003148c000 CR4: 00000000003526f0 [ 131.626499][ T6420] Call Trace: [ 131.629845][ T6420] [ 131.632841][ T6420] ? __init_swait_queue_head+0xa9/0x150 [ 131.638916][ T6420] usb_start_wait_urb+0x12b/0x510 [ 131.644105][ T6420] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 131.649813][ T6420] usb_control_msg+0x232/0x3e0 [ 131.654642][ T6420] dib0700_i2c_xfer+0xbb2/0xf80 [ 131.659543][ T6420] __i2c_transfer+0x79a/0x1ee0 [ 131.664440][ T6420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.670317][ T6420] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 131.676157][ T6420] ? i2c_transfer+0xc8/0x2d0 [ 131.680747][ T6420] i2c_transfer+0x1cc/0x2d0 [ 131.685367][ T6420] i2cdev_ioctl_rdwr+0x460/0x740 [ 131.690315][ T6420] i2cdev_ioctl+0x6a5/0x880 [ 131.694974][ T6420] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.699999][ T6420] ? __fget_files+0x3a0/0x420 [ 131.704715][ T6420] ? __fget_files+0x2a/0x420 [ 131.709388][ T6420] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.714608][ T6420] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.719635][ T6420] __se_sys_ioctl+0xfc/0x170 [ 131.724855][ T6420] do_syscall_64+0xe2/0xf80 [ 131.729565][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.736250][ T6420] ? trace_irq_disable+0x37/0x100 [ 131.741376][ T6420] ? clear_bhb_loop+0x60/0xb0 [ 131.746097][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.752103][ T6420] RIP: 0033:0x7fba4699aeb9 [ 131.756639][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.776752][ T6420] RSP: 002b:00007fba47782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.786327][ T6420] RAX: ffffffffffffffda RBX: 00007fba46c15fa0 RCX: 00007fba4699aeb9 [ 131.795176][ T6420] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 131.803615][ T6420] RBP: 00007fba46a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 131.811741][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.819928][ T6420] R13: 00007fba46c16038 R14: 00007fba46c15fa0 R15: 00007fba46d3fa48 [ 131.828540][ T6420] [ 131.831756][ T6420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.839070][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.0.118 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.849930][ T6420] Tainted: [L]=SOFTLOCKUP [ 131.854257][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.864962][ T6420] Call Trace: [ 131.868486][ T6420] [ 131.871623][ T6420] vpanic+0x1e0/0x670 [ 131.875709][ T6420] panic+0xc5/0xd0 [ 131.879435][ T6420] ? __pfx_panic+0x10/0x10 [ 131.883967][ T6420] __warn+0x315/0x4a0 [ 131.888084][ T6420] ? usb_submit_urb+0x1052/0x18b0 [ 131.893161][ T6420] ? usb_submit_urb+0x1052/0x18b0 [ 131.898413][ T6420] __report_bug+0x29a/0x540 [ 131.903119][ T6420] ? usb_submit_urb+0x1052/0x18b0 [ 131.909138][ T6420] ? __pfx___report_bug+0x10/0x10 [ 131.914387][ T6420] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.919857][ T6420] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 131.925878][ T6420] report_bug_entry+0x19a/0x290 [ 131.930881][ T6420] ? usb_submit_urb+0x1114/0x18b0 [ 131.935945][ T6420] ? usb_submit_urb+0x1119/0x18b0 [ 131.941173][ T6420] handle_bug+0xca/0x200 [ 131.945537][ T6420] exc_invalid_op+0x1a/0x50 [ 131.950160][ T6420] asm_exc_invalid_op+0x1a/0x20 [ 131.955049][ T6420] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 131.960973][ T6420] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 131.980949][ T6420] RSP: 0018:ffffc9001accf948 EFLAGS: 00010246 [ 131.987226][ T6420] RAX: 0000000000000000 RBX: ffff888078ea3200 RCX: 0000000080000c80 [ 131.995222][ T6420] RDX: ffff8880345fa180 RSI: ffffffff8c5dcc40 RDI: ffffffff8ffc2c70 [ 132.003380][ T6420] RBP: 1ffff11003f52498 R08: 00000000000000c0 R09: 0000000000000000 [ 132.011360][ T6420] R10: ffffc9001accfa40 R11: fffff52003599f54 R12: ffff8880202f9100 [ 132.019427][ T6420] R13: ffff88801fa924c0 R14: 0000000080000c80 R15: ffff8880345fa180 [ 132.027504][ T6420] ? usb_submit_urb+0x10a3/0x18b0 [ 132.032635][ T6420] ? __init_swait_queue_head+0xa9/0x150 [ 132.038230][ T6420] usb_start_wait_urb+0x12b/0x510 [ 132.043471][ T6420] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 132.049079][ T6420] usb_control_msg+0x232/0x3e0 [ 132.053970][ T6420] dib0700_i2c_xfer+0xbb2/0xf80 [ 132.058898][ T6420] __i2c_transfer+0x79a/0x1ee0 [ 132.063787][ T6420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.069858][ T6420] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 132.075695][ T6420] ? i2c_transfer+0xc8/0x2d0 [ 132.080310][ T6420] i2c_transfer+0x1cc/0x2d0 [ 132.084828][ T6420] i2cdev_ioctl_rdwr+0x460/0x740 [ 132.089891][ T6420] i2cdev_ioctl+0x6a5/0x880 [ 132.094546][ T6420] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.099673][ T6420] ? __fget_files+0x3a0/0x420 [ 132.104440][ T6420] ? __fget_files+0x2a/0x420 [ 132.109068][ T6420] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.114233][ T6420] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.119380][ T6420] __se_sys_ioctl+0xfc/0x170 [ 132.124200][ T6420] do_syscall_64+0xe2/0xf80 [ 132.128747][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.135040][ T6420] ? trace_irq_disable+0x37/0x100 [ 132.140115][ T6420] ? clear_bhb_loop+0x60/0xb0 [ 132.145073][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.151147][ T6420] RIP: 0033:0x7fba4699aeb9 [ 132.155655][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.175526][ T6420] RSP: 002b:00007fba47782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.184035][ T6420] RAX: ffffffffffffffda RBX: 00007fba46c15fa0 RCX: 00007fba4699aeb9 [ 132.192204][ T6420] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 132.200396][ T6420] RBP: 00007fba46a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 132.208840][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.217106][ T6420] R13: 00007fba46c16038 R14: 00007fba46c15fa0 R15: 00007fba46d3fa48 [ 132.225886][ T6420] [ 132.229448][ T6420] Kernel Offset: disabled [ 132.233786][ T6420] Rebooting in 86400 seconds..