last executing test programs: 9.519343395s ago: executing program 0 (id=18): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000600)="cd5bf2ab2fd552bbcc8f065bbe83dc5c6ca0c5ed710bc1756945fbd5e7377774dde701fe69b768329b292579975246b99176dce165a395efb7b48ad8b4499d236c60c3be8ebf1a1cf6923c416048041b25f92a27bd3780d549bafd0ff0607061e2a69fd61a6815efda0c0182204b0716bcb612f411c8115bb5f2fff2c241864de2af12df2d5636865d15da8686402d295b85991210158f803b1e843bfbfa7a5bb8be8ce5f59b3a58d968f2204448127f4496ff0e7138abf17505481d1d9d98b636194db7aa1cf3de4e62e498ccdc95f6bb5b50ab05be6bd6a06a3e2fdf", &(0x7f0000000480)=""/179, 0x4}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000540)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_CREATE2(r2, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xb8, 0x6, 0x3, 0x7, 0x7, 0x9, "bd73de9ff14a9bf0331f21533fb916efcc668b099223a0711d9c4b76fcb235394272bba740a992c554b9264483e7b13a9df2b18e13456aebe4398cc4134f139e8a0edec51d291c23a40bfdf17b435a5bbde3c21be2dab6ddd2b18fe302a9f54902038e43c3c4d6bf2b76948c6bd3900e16248ec11195294eb6694740776eab3c14b1e47efc2d87ac9bdb9c858fa8fd809c9a44130b846a345f66f1c94217e33c94e62f682a49729eb8db442013397b53a72acdce12de2717"}}, 0x1d0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000000000)) 9.350307925s ago: executing program 2 (id=19): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 9.291352759s ago: executing program 4 (id=20): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xf07) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x6) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x5) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000140)={0xfffffffffffffffb, 0x8239, 0x0, 0x2, 0x3, [0x91a8, 0xfffff73b, 0x69cf, 0x5]}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf0d}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) cachestat(r5, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280), 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$tun(r6, &(0x7f0000000300)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1c) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000340)) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000380)={0xd, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000003c0)={0x5, r3, 'id1\x00'}) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000440)) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000480)={0x9, 0x6, 0x5, 0x0, 0x3, 0x0, [{0x100000000, 0x7, 0x0, '\x00', 0x1386}, {0x0, 0xffffffff, 0xfd2, '\x00', 0x1000}, {0x6, 0x10001, 0x7, '\x00', 0x100}]}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) ioctl$TIOCMBIS(r8, 0x5416, &(0x7f00000005c0)=0x7ff) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x80000) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000640)={0x5, {0x8001, 0x5, 0x0, 0x5}, {0x200, 0x0, 0x9, 0x1}, {0x5, 0xffffffff}}) r10 = creat(&(0x7f0000000680)='./file0\x00', 0x21) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000006c0)={0x0, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000ac0)={r11, 0xfff, 0x1, [0x0, 0xffffffffffffffff, 0x7, 0xd, 0x1000], [0x3ff, 0x200, 0x9, 0x7, 0x1, 0x5, 0x8000, 0x1, 0x0, 0x18, 0x8001, 0x1000, 0x6, 0x4, 0x4, 0x9, 0x400000000, 0x7, 0x400, 0x8, 0x7, 0x5, 0x75a, 0x6ab, 0xfffffffffffffc01, 0x3, 0x0, 0x3, 0x3, 0x8, 0xb, 0x2, 0x9, 0x18, 0x6, 0x1, 0x3be, 0x61, 0xa, 0x9, 0x733, 0x9, 0x8, 0xf0, 0x7fffffffffffffff, 0x7c, 0x6, 0x0, 0x5, 0x9bc7, 0x1, 0x0, 0x1f, 0x2a7, 0x3, 0x5, 0xbeda, 0x9, 0x9, 0x6, 0x7fff, 0x7, 0x2, 0xfffffffffffffff9, 0x6, 0xa, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0x3, 0xcc0, 0x6, 0x7, 0x9, 0x2f0305c7, 0x1, 0x3, 0x4, 0x7, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x4da6, 0x8, 0x6, 0x8a0000000000, 0x5, 0x4, 0x8, 0xb, 0x80000000, 0x5, 0xfff, 0x646, 0xfffffffffffff000, 0x8, 0x8, 0x1ff, 0x4b6, 0x3, 0x6, 0x3, 0xffffffffffff0001, 0x200, 0xe000000000000, 0x4, 0x9, 0x6, 0x8, 0x3, 0x100000000, 0x3, 0x5, 0xfffffffffffff477, 0x101]}) 9.071285761s ago: executing program 4 (id=22): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x56, 0x1, 0x6, {0x1017, 0x1}, {0x61, 0x1}, @cond=[{0x5, 0x6, 0x8, 0x8003, 0x3ecb, 0x9}, {0x40, 0x8400, 0x4, 0x4, 0x1ab1, 0xe00}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x62, 0xda, 0x20, 0x2040, 0x4901, 0x4777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x30, 0x8e, 0x72, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000000001010400000000141a000002f0ff00240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c000280050001000000000008000740000000011c00108008000240000000070800012708000480040003"], 0x88}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 8.942989565s ago: executing program 3 (id=24): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x9) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0xc8) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="5e0f0457ee75f9000000"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000c00)={0x20, 0x15, 0x4, "a547b314"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.448457799s ago: executing program 2 (id=27): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3fffffffffffed5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x7fff, 0x6, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=r1], &(0x7f0000000140)=""/56, 0x97, 0x38, 0x1, 0x2, 0xb084bc3c7a3a145b}, 0x28) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x5e1, &(0x7f00000004c0)={0x0, 0xdd97, 0x1000, 0xfffffffe, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000003c0)=[0x6000, 0x8], 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000440)={{0x7f, 0x4}, {0x4, 0x4}, 0x80, 0x2, 0x1}) 7.976611996s ago: executing program 3 (id=28): mmap(&(0x7f00006f1000/0x1000)=nil, 0x1000, 0x1000009, 0x8031, 0xffffffffffffffff, 0xada5000) mbind(&(0x7f0000716000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xd, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 7.396835715s ago: executing program 3 (id=29): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x3f00, 0x2000001, 0x0, 0x0, 0x0, 0xfffffc01}}, &(0x7f0000000180)='syzkaller\x00', 0xd, 0xff5, &(0x7f00000003c0)=""/4085, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d190c7d"], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x3, 0xa11, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x5, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x59, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1e, r6, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7.279378549s ago: executing program 4 (id=30): syz_usb_connect(0x2, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000db42f1107104882066c60000f600090224000100519f7b6004000202e31b67d809050b00ff03020930090503030002fb009b"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000200)) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000400)=""/30, 0x1e}], 0x5) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000006d40)="53000000796631d655a92e064b578623046e932885cc8daa0cddbe9f8851e2e43374152a", 0x24}], 0x2) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000bc0)) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000000c0)={0x13, "d7669b118a8339102cea79b9ffebb812544e5a"}) syz_usb_connect(0x2, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000db42f1107104882066c60000f600090224000100519f7b6004000202e31b67d809050b00ff03020930090503030002fb009b"], 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000200)) (async) dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000400)=""/30, 0x1e}], 0x5) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000006d40)="53000000796631d655a92e064b578623046e932885cc8daa0cddbe9f8851e2e43374152a", 0x24}], 0x2) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000bc0)) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000000c0)={0x13, "d7669b118a8339102cea79b9ffebb812544e5a"}) (async) 7.278392579s ago: executing program 0 (id=31): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x246) getdents(r0, &(0x7f0000000100)=""/237, 0xed) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/ip_tables_matches\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xffff, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) 6.94487549s ago: executing program 0 (id=32): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'pimreg0\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) r2 = syz_usb_connect$cdc_ecm(0x6, 0x62, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xa, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0xec, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x3, 0x1}, [@obex={0x5, 0x24, 0x15, 0x98}, @dmm={0x7, 0x24, 0x14, 0xfffd, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x7, 0x57}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3, 0x64, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0xf20f5ad8f83a0c1d, 0x4, 0x3, 0x81}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x3, 0x9, 0x8, 0x7}, 0x23, &(0x7f0000000200)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x7f, 0x97, 0x1800}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "95d1148bf4a5dd987cecd2b0051b665e"}]}, 0x8, [{0xba, &(0x7f0000000240)=@string={0xba, 0x3, "0ea6a71712f60758e09feaaf4f324546fa404c5252aaaac89fd0c98f901d269373c30766c221d39fc2827a61be31d391a77feca586f049ac477cdd4075750be969209e9608f99b51549acd0a2f06046870339c689094efef3c6b0f5c527919f3b1b7fbf1c93d5e52ed9d4a83ed5e47c8f311c7e149ff4e7c6f0a348b9e0f6988eba31c22343944b56a31867a1fc47bdb4f1e633eef7d394119321c0bb5b6910768aafbcd0fd013e3011fe83ec79524a3253c00400dfa63a2"}}, {0x2e, &(0x7f0000000300)=@string={0x2e, 0x3, "7f29095b2806ea3089f9f3f5c140bbe47b4a9334acbd4bd6cfe78553d6b421b5b79a0d861dd3c6fe7f78b423"}}, {0xa, &(0x7f0000000340)=@string={0xa, 0x3, "796737860a685906"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1007}}, {0xe0, &(0x7f00000005c0)=@string={0xe0, 0x3, "3a6aba080529760ad6c969a5975012d9c3e15d20821b0ccbfa06226f9c05fccab2569c55a723aca1e390a21134954fcbde57f811ea435a924a64454557a1afb8838a7482eecb4820c56731266c83c4e197c4bfc91e225cb38981e4c0ee92a9546ccf545211a696f014b7dc04cf24aa0e586642ac3979df8832a7b5c01c7e9582c94bfdd12ddbf50c9002ef82ed9d4f059b09d9d109ba6823e233e66b2de93357a8c65c60a8921bae6bfdf432acc54ed9f3339a5ed32ef64887d05fd2ce30799f3427cecc2bfecba8c7294deb7b3a79d982c23897d3e6978d67992f3ec3ba"}}, {0xcd, &(0x7f00000006c0)=@string={0xcd, 0x3, "f9a23674efb4d0ff854a0cb3c15880c4679e40f5e1b4b625476a7e002aa549c73865d3ed5f016af4f426df0a34281157f4f9e2a4882ccd1f4d3af9f224a0c2992eee20c2fdb3f6d3fb9de646cadfa7d481b3bb46e1355909acca9bd2007c88e72b8ee2ffcf4f3827fdc2312a51b4d4eae8f6b92938842e6c0f4838638b1cc136af6e185168a3aec9cd3712993c71f33c99e3e32fcc2a64d8be43c7f0f849d0dae1a36b6b4c712fb2935a470cc841ca46293e47a2e6de76b0a0858be738a15a36d7e30110bfd19316d04efb"}}]}) syz_usb_control_io(r2, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x0, 0x6, 0x4b, {0x4b, 0x6, "7e1e4b3175bf3b9898411ccd7ff50e3e5c5a6b3b6854936a457020b47f2e43b349b3b6986273dd85fc6e2d41f4e9c331f80558ec05f61c7afb525addc6a5599faca665d51a85d9f325"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000880)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x81, 0x7, 0x3ff, 0x97}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "5722082d237e683fc162b37e2d4229d1"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "c33ff0cf54a48c1e8ef3ee1f30340e4e"}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x9, 0x8, "efc89092", "d1afba06"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x24, 0x3, 0x9, 0x7f, 0x2, 0x5, 0xfff3}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a80)={0x40, 0xc, 0xa1, "45f2e965e75e4a13c0c63c27c70aa5f87b07093db7972bbaa866f059b4c0b15048410b108a356047f85683ec320d70ba1a381c85526d1fbb44a6c3f12a5760989cb01f91a198739a70f311ada718a8b6b9d9f4fd80d55c1da15638c5f4b8f21799f48adcf5cdafa5bee4775c5a5e29b280ec21eae7bf0cbba05608c92fdeb18b7653711af157946fa0835513a6acdeb77bb19cf562fe0fd7348d862ce0b3a8d38c"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x70}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "bdd2"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, 'Go'}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = getpid() r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045503, &(0x7f0000002a40)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x10, r7) ptrace(0x420e, r7) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f80), 0x248840, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) r10 = creat(&(0x7f0000000fc0)='./file0\x00', 0x49) sendmsg$nl_route(r3, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@RTM_NEWNSID={0x4c, 0x58, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8, 0x3, r8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x8040) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000240)=0x10) 6.785893452s ago: executing program 2 (id=33): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0x5, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x30d000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) 5.939587947s ago: executing program 0 (id=34): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x800}, 0x1c) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x4b73}], 0x1, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) 5.399008709s ago: executing program 0 (id=35): socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000080)={0x88, 0x5, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8a, 0xfffe, [0x7]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x80, [0x7]}}, @jumbo={0xc2, 0x4, 0xa42}]}, 0x38) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x63, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x87, 0x7e, 0x71, 0x20, 0x763, 0x1021, 0x74b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x28, 0xe, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x2f, 0x7, 0xff, 0x2d, 0x53, 0x0, [], [{{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x4, 0x51, 0x4}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x8, 0x6, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x2, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2, 0x2, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x52, 0x8b}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c000) syz_emit_ethernet(0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaa8435d656a80d00810021190010"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000100)="e90cd22005893a642063401f3f414b757c9eeb65d88e0a2448d9237a979579d7677171e871b37d500f87114ac67443ccec3639ac058c7c71fcbbc7c6a163e11aa69983cad959bad44eb3d8ba737045e1a16a62ba6883682aeae63ed3749ebb0bb46308e0ed115253d1f78d5a309c1dca3d7ab8c60a66da9740d122289cb40fb0c9922a") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x40900) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) r6 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) 5.319500837s ago: executing program 1 (id=36): unshare(0x6a040000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014003500110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000300)) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000000c0)={0x148, 0x6, &(0x7f0000000980)="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"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a", 0x2e}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r7 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 4.9837641s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.478912722s ago: executing program 2 (id=38): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000788"], 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000001180)={0x1c, &(0x7f0000000c00)=ANY=[@ANYBLOB="4013ffffef00"], 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x100000, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000007c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000200)='0', 0x1) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0x1, 0x0) semget(0x1, 0x4, 0x10) readahead(0xffffffffffffffff, 0x100, 0x96) 4.187709723s ago: executing program 3 (id=39): landlock_create_ruleset(0x0, 0x0, 0x5) (async) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000002, 0x0, 0xd}]}) (async) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.055460181s ago: executing program 4 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="f78d9ca38fdc00f3be52163448412ba8d5d72c63e8de51f666efc53ce67f4fcb", 0x20}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e22, 0xca, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x2d, 0x0, "79503aebf397c09cf73691e3bae9fb89d0dbc048c17dbf8fd0aed382971152cd1d98fda61b149f48f6b5716990967e8c7ee477343f77c247f3d72c0960a3c5adfe286f42379cbf9bfa877323e3fa85a0"}, 0xd8) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x50, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140040000000010300000000000000001e0092f67441691b10b81ea334abafeb39ee1018ffd2ceaa767562fca6d98cb294bd1f1cec88e9f9e22636fb0d87286919edbe3b46d7a34e599217ee34b2eec416372da0a66333df5c88430f81ef90ad4967e311a674b16af87fc92cd1745a9db0fe02562ae0027e5dd90bf871d65d71481e"], 0x14}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r6) close(r5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.366883736s ago: executing program 3 (id=41): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x1e97c1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfff0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000007c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60000163, 0x0) syz_usb_disconnect(r0) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x8, 0xf645, {}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x19, 0x2, 0x0, 0x0, "0b471e090570f95dca6f54707bae6345a75f4db1eaeb6c82cdaa787cb0817b69dfe83feac325ddd266e81fcf4c48cef4254fdba9b0037a51cc2532d54fca9e79"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c004) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 3.353729281s ago: executing program 1 (id=42): r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='c'], 0x0, 0x0, 0x2) 2.987622681s ago: executing program 1 (id=43): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x4008af24, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r1], 0x18}, 0x40c0) 2.797883029s ago: executing program 1 (id=44): r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x7, 0x4}, 0x4}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x5) 2.510191521s ago: executing program 1 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000123afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800000000ffff0040fdffffff1f00"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c8, 0x0, 0x3, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa68d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7448}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc94}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x733}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x138}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbe9, @mcast2, 0xfffffff7}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x440008c4}, 0x4010) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) 2.199565068s ago: executing program 1 (id=46): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x6, 0x31d040) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8003, 0x22, &(0x7f0000000140)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x1, 0x610, 0x0, 0x0}], 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x4120}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ffffffff86dd604dd3180018060400000000b10000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000008020000"], 0x0) 1.867011193s ago: executing program 4 (id=47): r0 = epoll_create(0x5) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1d6}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xeeef0000, 0xeeef0000, 0xeeee8000], 0x6, 0xc, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000100)={0x10003, 0x400, 0x300, &(0x7f00000003c0)=[0x450fd3d7, 0xfffffffffffffcda, 0xfb, 0x8, 0x10001, 0x4, 0xfffffffffffffff9, 0x3, 0x5, 0x23b, 0x8, 0x2b, 0xb79d, 0x4, 0x2, 0x9, 0x9, 0x4ce3d10b, 0x3, 0x1, 0x35b, 0x1, 0x8, 0x7, 0x6, 0xf8, 0x8, 0x3, 0x6, 0x10, 0xffffffff, 0x101, 0x100000001, 0x338c, 0xa4d, 0x1, 0x2, 0x3, 0x65, 0x40000000000, 0x10000, 0x1, 0x527, 0x100, 0xe1c1, 0x6, 0x8, 0x8, 0xb48, 0x4fcd, 0x2, 0x9, 0x200, 0x4596371f, 0x8, 0x7, 0x8, 0x44ce, 0x6, 0xfffffffffffffffc, 0x8, 0x1, 0x10001, 0x3, 0x3, 0x0, 0x1, 0x7f, 0x2, 0x1, 0xffffffffffffff00, 0xffffffffffffff7a, 0x7ff, 0x3ff, 0x1, 0x0, 0x100, 0x5, 0x6, 0x33, 0x8f0, 0xffffffffffffffff, 0x8, 0x7fffffffffffffff, 0xfffffffffffffff8, 0x8e2f, 0x10000, 0x0, 0x0, 0xa, 0x3, 0x0, 0x7, 0xc0, 0xff, 0x0, 0x9, 0x7, 0x7fff, 0x0, 0x9, 0x1, 0x0, 0x9649, 0x0, 0x0, 0x3, 0x0, 0x6, 0x4, 0xb36f, 0x1, 0x4, 0x8, 0x4, 0x10000, 0x8, 0x3, 0x3cc, 0x3, 0x4, 0x5, 0x2, 0x0, 0x915a, 0x6, 0x7, 0x9]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000007c0)=[@cpuid={0x14, 0x18, {0x4, 0xc260}}, @wrmsr={0x1e, 0x20, {0xbb5, 0x1b}}, @rdmsr={0x32, 0x18, {0x347}}, @wr_crn={0x46, 0x20, {0x0, 0x8000}}], 0x70}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) select(0x40, &(0x7f00000003c0)={0x6, 0x6, 0x5, 0x1, 0x169c, 0x80000000000000, 0x6048f42e, 0x10}, 0x0, &(0x7f00000004c0)={0x9, 0x3, 0x1ff, 0x5, 0x1000, 0x401, 0x10000000002, 0x5}, &(0x7f00000009c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x82}, {0x3, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x101, 0x101, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x8c, 0x0, 0x20, 0x101, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28800}, 0x4000) 1.668996422s ago: executing program 4 (id=48): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 1.526902439s ago: executing program 0 (id=49): r0 = socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0xa, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.355484853s ago: executing program 3 (id=50): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x100002) ioctl$I2C_SLAVE(r1, 0x703, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000003c80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0xc, @dev={0xfe, 0x80, '\x00', 0x37}, 0x804}, 0x1c, &(0x7f0000000e40)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x83, &(0x7f0000000080)="1a00000002000000", 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x8000}) r10 = fcntl$dupfd(r9, 0x406, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) close_range(r0, 0xffffffffffffffff, 0x0) rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x88000000, 0x0, {[0xfffffffffffffffe]}}, 0x0, 0x8, &(0x7f00000002c0)) syz_clone3(&(0x7f0000001380)={0x181040000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 2 (id=51): r0 = socket(0x10, 0x803, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x2, 0x0, 0x1, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1c2a, 0x10100, 0x1, 0x1c5, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 84.921508][ T5816] cgroup: Unknown subsys name 'net' [ 85.057264][ T5816] cgroup: Unknown subsys name 'cpuset' [ 85.066463][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.874086][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.723619][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.744358][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.752299][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.760969][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.816347][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.824272][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.825287][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.832076][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.840254][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.846627][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.860384][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.868760][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.876542][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.887665][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.894838][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.903483][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.909280][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.919696][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.927534][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.954960][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.987180][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.996552][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.013502][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.021774][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.033525][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.612097][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.630594][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.881519][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.907816][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.962556][ T43] cfg80211: failed to load regulatory.db [ 92.050108][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.058346][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.066044][ T5841] bridge_slave_0: entered allmulticast mode [ 92.073588][ T5841] bridge_slave_0: entered promiscuous mode [ 92.081984][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.121424][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.128786][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.136356][ T5847] bridge_slave_0: entered allmulticast mode [ 92.144415][ T5847] bridge_slave_0: entered promiscuous mode [ 92.152348][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.159987][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.167327][ T5847] bridge_slave_1: entered allmulticast mode [ 92.175347][ T5847] bridge_slave_1: entered promiscuous mode [ 92.195323][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.202456][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.209758][ T5841] bridge_slave_1: entered allmulticast mode [ 92.217007][ T5841] bridge_slave_1: entered promiscuous mode [ 92.322361][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.329809][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.337531][ T5844] bridge_slave_0: entered allmulticast mode [ 92.344805][ T5844] bridge_slave_0: entered promiscuous mode [ 92.355386][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.372886][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.390671][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.412954][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.420221][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.427749][ T5844] bridge_slave_1: entered allmulticast mode [ 92.435139][ T5844] bridge_slave_1: entered promiscuous mode [ 92.444290][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.528491][ T5841] team0: Port device team_slave_0 added [ 92.574610][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.581861][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.589162][ T5845] bridge_slave_0: entered allmulticast mode [ 92.596783][ T5845] bridge_slave_0: entered promiscuous mode [ 92.606005][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.613286][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.620459][ T5845] bridge_slave_1: entered allmulticast mode [ 92.627956][ T5845] bridge_slave_1: entered promiscuous mode [ 92.636119][ T5841] team0: Port device team_slave_1 added [ 92.658704][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.669459][ T5847] team0: Port device team_slave_0 added [ 92.715239][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.739495][ T5847] team0: Port device team_slave_1 added [ 92.745896][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.753653][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.760999][ T5846] bridge_slave_0: entered allmulticast mode [ 92.769316][ T5846] bridge_slave_0: entered promiscuous mode [ 92.794244][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.807727][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.842422][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.849723][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.857158][ T5846] bridge_slave_1: entered allmulticast mode [ 92.864446][ T5846] bridge_slave_1: entered promiscuous mode [ 92.872130][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.879268][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.905733][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.918957][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.925986][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.952309][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.977259][ T5844] team0: Port device team_slave_0 added [ 92.993943][ T5148] Bluetooth: hci3: command tx timeout [ 92.993949][ T5829] Bluetooth: hci2: command tx timeout [ 93.003634][ T5839] Bluetooth: hci1: command tx timeout [ 93.006522][ T5829] Bluetooth: hci0: command tx timeout [ 93.049464][ T5844] team0: Port device team_slave_1 added [ 93.056184][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.063431][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.089528][ T5829] Bluetooth: hci4: command tx timeout [ 93.095438][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.107691][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.114767][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.140774][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.166022][ T5845] team0: Port device team_slave_0 added [ 93.192263][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.205243][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.215887][ T5845] team0: Port device team_slave_1 added [ 93.275307][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.282297][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.309457][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.322494][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.329703][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.355679][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.427489][ T5841] hsr_slave_0: entered promiscuous mode [ 93.434672][ T5841] hsr_slave_1: entered promiscuous mode [ 93.442934][ T5846] team0: Port device team_slave_0 added [ 93.450256][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.457281][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.483948][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.515438][ T5847] hsr_slave_0: entered promiscuous mode [ 93.521810][ T5847] hsr_slave_1: entered promiscuous mode [ 93.528161][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 93.534027][ T5847] Cannot create hsr debugfs directory [ 93.542581][ T5846] team0: Port device team_slave_1 added [ 93.549311][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.556430][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.582382][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.695998][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.703397][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.729593][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.751657][ T5844] hsr_slave_0: entered promiscuous mode [ 93.758229][ T5844] hsr_slave_1: entered promiscuous mode [ 93.764529][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 93.770269][ T5844] Cannot create hsr debugfs directory [ 93.797748][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.804836][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.830862][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.906896][ T5845] hsr_slave_0: entered promiscuous mode [ 93.913816][ T5845] hsr_slave_1: entered promiscuous mode [ 93.919908][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 93.925819][ T5845] Cannot create hsr debugfs directory [ 94.104158][ T5846] hsr_slave_0: entered promiscuous mode [ 94.110670][ T5846] hsr_slave_1: entered promiscuous mode [ 94.117026][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 94.122771][ T5846] Cannot create hsr debugfs directory [ 94.459552][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.473426][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.503692][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.522871][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.590650][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.602057][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.615750][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.637367][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.714327][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.729572][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.741790][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.776743][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.854739][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.865895][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.883636][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.894117][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.936506][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.034586][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.047803][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.058823][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.073641][ T5829] Bluetooth: hci0: command tx timeout [ 95.074889][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.079080][ T5829] Bluetooth: hci3: command tx timeout [ 95.091242][ T5839] Bluetooth: hci1: command tx timeout [ 95.091264][ T5148] Bluetooth: hci2: command tx timeout [ 95.104590][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.147105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.154488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.166071][ T5148] Bluetooth: hci4: command tx timeout [ 95.186814][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.194148][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.216547][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.260296][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.295205][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.319046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.326256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.345276][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.362248][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.369453][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.425156][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.432288][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.458216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.465375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.514240][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.575796][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.614599][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.621738][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.650978][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.666508][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.673704][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.714011][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.737569][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.806708][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.820997][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.838654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.845816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.871032][ T5847] veth0_vlan: entered promiscuous mode [ 95.887968][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.895151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.918998][ T5847] veth1_vlan: entered promiscuous mode [ 96.016464][ T5847] veth0_macvtap: entered promiscuous mode [ 96.040920][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.061551][ T5847] veth1_macvtap: entered promiscuous mode [ 96.088246][ T5841] veth0_vlan: entered promiscuous mode [ 96.109909][ T5844] veth0_vlan: entered promiscuous mode [ 96.177107][ T5841] veth1_vlan: entered promiscuous mode [ 96.190714][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.209741][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.225835][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.236527][ T5844] veth1_vlan: entered promiscuous mode [ 96.269597][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279529][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288804][ T5845] veth0_vlan: entered promiscuous mode [ 96.308837][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.318376][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.338800][ T5845] veth1_vlan: entered promiscuous mode [ 96.397741][ T5841] veth0_macvtap: entered promiscuous mode [ 96.413596][ T5844] veth0_macvtap: entered promiscuous mode [ 96.436623][ T5844] veth1_macvtap: entered promiscuous mode [ 96.471442][ T5841] veth1_macvtap: entered promiscuous mode [ 96.490775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.501980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.524913][ T5845] veth0_macvtap: entered promiscuous mode [ 96.538479][ T5845] veth1_macvtap: entered promiscuous mode [ 96.558234][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.578593][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.604006][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.626200][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.634818][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.645413][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.656551][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.668933][ T5846] veth0_vlan: entered promiscuous mode [ 96.687944][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.714874][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744491][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.753682][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.771013][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.801416][ T5846] veth1_vlan: entered promiscuous mode [ 96.834129][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.907914][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919959][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.945585][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.952495][ T5921] loop5: detected capacity change from 0 to 7 [ 96.959852][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.971568][ T5921] loop5: [ 96.974765][ T5921] loop5: partition table partially beyond EOD, truncated [ 96.976217][ T5846] veth0_macvtap: entered promiscuous mode [ 97.022517][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052194][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061136][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.092325][ T5846] veth1_macvtap: entered promiscuous mode [ 97.105164][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.106794][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.122782][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.150984][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.154665][ T5148] Bluetooth: hci2: command tx timeout [ 97.164591][ T5829] Bluetooth: hci3: command tx timeout [ 97.164619][ T5148] Bluetooth: hci1: command tx timeout [ 97.170091][ T5839] Bluetooth: hci0: command tx timeout [ 97.190317][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.223374][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.232062][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.239585][ T5829] Bluetooth: hci4: command tx timeout [ 97.239594][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.239613][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.247377][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.312612][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.354189][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.358601][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.372013][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.372398][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.382613][ T1326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.436991][ T1326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.480253][ T1326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.499545][ T1326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.510151][ T5924] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 97.641989][ T5924] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 97.707599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.735205][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.840340][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.934244][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.043476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.054251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.064854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.095413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.104701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.113215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 98.338825][ T5934] ipip0: entered promiscuous mode [ 98.344107][ T5934] ipip0: entered allmulticast mode [ 98.465881][ T1209] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.497346][ T5939] Zero length message leads to an empty skb [ 98.670295][ T1209] usb 3-1: device descriptor read/64, error -71 [ 98.744033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.752852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.763294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.771671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.924204][ T1209] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.084474][ T1209] usb 3-1: device descriptor read/64, error -71 [ 99.124635][ T5918] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.143101][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.195637][ T1209] usb usb3-port1: attempt power cycle [ 99.236001][ T5829] Bluetooth: hci1: command tx timeout [ 99.241532][ T5839] Bluetooth: hci2: command tx timeout [ 99.249123][ T5834] Bluetooth: hci3: command tx timeout [ 99.249136][ T5148] Bluetooth: hci0: command tx timeout [ 99.258677][ T5950] dummy0: entered promiscuous mode [ 99.290620][ T5950] macsec1: entered promiscuous mode [ 99.293101][ T5917] usb 4-1: device descriptor read/64, error -71 [ 99.333747][ T5839] Bluetooth: hci4: command tx timeout [ 99.339873][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.354404][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 99.382751][ T5918] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 99.396683][ T5950] dummy0: left promiscuous mode [ 99.416307][ T5918] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 99.458619][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.481080][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.500539][ T5918] usb 5-1: Product: syz [ 99.510653][ T5918] usb 5-1: Manufacturer: syz [ 99.520772][ T5918] usb 5-1: SerialNumber: syz [ 99.549943][ T5943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.565978][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.576412][ T5918] cdc_mbim 5-1:1.0: skipping garbage [ 99.583147][ T1209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.649249][ T1209] usb 3-1: device descriptor read/8, error -71 [ 99.688136][ T5955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.708669][ T5955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 99.715704][ T5955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.723485][ T5917] usb 4-1: device descriptor read/64, error -71 [ 99.743738][ T5955] vhci_hcd vhci_hcd.0: Device attached [ 99.770490][ T5943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.779290][ T5943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.827467][ T5956] vhci_hcd: connection closed [ 99.829000][ T1326] vhci_hcd: stop threads [ 99.842377][ T1326] vhci_hcd: release socket [ 99.847960][ T5917] usb usb4-port1: attempt power cycle [ 99.848047][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.862262][ T1326] vhci_hcd: disconnect device [ 99.913369][ T1209] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.963643][ T1209] usb 3-1: device descriptor read/8, error -71 [ 100.015048][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.016136][ T5918] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 100.027104][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 100.056647][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.057089][ T5918] cdc_mbim 5-1:1.0: bind() failure [ 100.081357][ T5918] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 100.081585][ T1209] usb usb3-port1: unable to enumerate USB device [ 100.091639][ T5918] cdc_ncm 5-1:1.1: bind() failure [ 100.104534][ T10] usb 1-1: config 0 descriptor?? [ 100.233283][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.257539][ T5917] usb 4-1: device descriptor read/8, error -71 [ 100.503121][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.524637][ T5917] usb 4-1: device descriptor read/8, error -71 [ 100.653932][ T5917] usb usb4-port1: unable to enumerate USB device [ 100.722513][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 100.729761][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 100.742951][ T10] usb 1-1: USB disconnect, device number 2 [ 100.903150][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.085456][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 101.111332][ T5910] usb 2-1: config index 0 descriptor too short (expected 22546, got 18) [ 101.135044][ T5910] usb 2-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 101.156229][ T5910] usb 2-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 101.174070][ T5910] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 101.188344][ T5910] usb 2-1: New USB device found, idVendor=3994, idProduct=da60, bcdDevice=8f.99 [ 101.206122][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.223098][ T5910] usb 2-1: Product: syz [ 101.227501][ T5910] usb 2-1: Manufacturer: syz [ 101.263604][ T5910] usb 2-1: SerialNumber: syz [ 101.290641][ T5910] usb 2-1: config 0 descriptor?? [ 101.547701][ T5910] usb 2-1: USB disconnect, device number 2 [ 101.832449][ T43] usb 5-1: USB disconnect, device number 2 [ 101.834632][ T5985] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 101.889727][ T5985] gretap1: entered promiscuous mode [ 101.947390][ T5988] macvlan2: entered promiscuous mode [ 101.965598][ T5988] macvlan2: entered allmulticast mode [ 101.983260][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.009951][ T5990] QAT: Invalid ioctl -1006595043 [ 102.173236][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 102.185511][ T5910] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 102.199869][ T5910] usb 1-1: config 4 has no interface number 0 [ 102.209800][ T5910] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.222429][ T5910] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.253558][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.262812][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.282803][ T5910] hub 1-1:4.128: USB hub found [ 102.388560][ T5959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.429948][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.474128][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.496369][ T5910] hub 1-1:4.128: 2 ports detected [ 102.507594][ T5910] hub 1-1:4.128: Using single TT (err -22) [ 102.563143][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 102.570176][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.581092][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 102.592865][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 102.610336][ T5959] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 102.625044][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.635674][ T5959] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 102.647361][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.675287][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 102.678314][ T5959] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 102.691090][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.700318][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.708816][ T43] usb 4-1: config 0 has no interface number 0 [ 102.708868][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 102.711704][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 102.743269][ T5959] usb 5-1: Product: syz [ 102.748315][ T5959] usb 5-1: Manufacturer: syz [ 102.757442][ T5959] usb 5-1: SerialNumber: syz [ 102.762841][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.782390][ T43] usb 4-1: Product: syz [ 102.787452][ T5959] usb 5-1: config 0 descriptor?? [ 102.790140][ T43] usb 4-1: Manufacturer: syz [ 102.797188][ T43] usb 4-1: SerialNumber: syz [ 102.802812][ T5994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.817485][ T43] usb 4-1: config 0 descriptor?? [ 102.839620][ T43] smsc75xx v1.0.0 [ 102.962370][ T5910] usb 1-1: USB disconnect, device number 3 [ 102.967211][ T6009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.067405][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 103.093070][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.120210][ T5994] netlink: 'syz.4.22': attribute type 3 has an invalid length. [ 103.140368][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 103.148167][ T5959] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 103.184520][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 103.190051][ T5959] hdpvr 5-1:0.0: device init failed [ 103.435634][ T9] usb 2-1: device descriptor read/64, error -71 [ 103.535722][ T5959] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 103.547570][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 103.562216][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 103.580037][ T43] usb 4-1: USB disconnect, device number 6 [ 103.609122][ T5959] usb 5-1: USB disconnect, device number 3 [ 103.803118][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.943464][ T9] usb 2-1: device descriptor read/64, error -71 [ 104.054046][ T9] usb usb2-port1: attempt power cycle [ 104.253094][ T1216] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.413480][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.446807][ T9] usb 2-1: device descriptor read/8, error -71 [ 104.473306][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.544016][ T1216] usb 5-1: no configurations [ 104.551305][ T1216] usb 5-1: can't read configurations, error -22 [ 104.683090][ T1216] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 104.693135][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.723570][ T9] usb 2-1: device descriptor read/8, error -71 [ 104.773100][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.797033][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.808536][ T43] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.820222][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.829912][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.839051][ T9] usb usb2-port1: unable to enumerate USB device [ 104.857403][ T1216] usb 5-1: no configurations [ 104.862292][ T1216] usb 5-1: can't read configurations, error -22 [ 104.879344][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.897740][ T1216] usb usb5-port1: attempt power cycle [ 104.912138][ T43] usb 4-1: invalid MIDI out EP 0 [ 104.933074][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 104.949462][ T24] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 104.962741][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.980287][ T24] usb 3-1: Product: syz [ 104.992703][ T24] usb 3-1: Manufacturer: syz [ 104.999361][ T24] usb 3-1: SerialNumber: syz [ 105.105824][ T24] usb 3-1: config 0 descriptor?? [ 105.175426][ T6034] netlink: 2 bytes leftover after parsing attributes in process `syz.3.29'. [ 105.191082][ T24] gspca_main: etoms-2.14.0 probing 102c:6251 [ 105.228353][ T43] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 105.264539][ T1216] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 105.284543][ T1216] usb 5-1: no configurations [ 105.293816][ T1216] usb 5-1: can't read configurations, error -22 [ 105.385395][ T24] usb 3-1: USB disconnect, device number 6 [ 105.463154][ T1216] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 105.527727][ T1216] usb 5-1: no configurations [ 105.543094][ T1216] usb 5-1: can't read configurations, error -22 [ 105.550773][ T1216] usb usb5-port1: unable to enumerate USB device [ 106.298937][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.365199][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.483243][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 106.501214][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.513128][ T43] usb 1-1: config 40 has an invalid interface number: 160 but max is 0 [ 106.553759][ T43] usb 1-1: config 40 has no interface number 0 [ 106.566982][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.579708][ T43] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 106.591183][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.602235][ T43] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 106.613642][ T24] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 106.622707][ T43] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 106.643199][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.660486][ T43] usb 1-1: config 40 interface 160 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 106.717508][ T24] usb 2-1: config 0 descriptor?? [ 106.733428][ T43] usb 1-1: config 40 interface 160 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 106.772561][ T43] usb 1-1: config 40 interface 160 has no altsetting 0 [ 106.802889][ T43] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 106.812757][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.852415][ T43] usb 1-1: Product: syz [ 106.858006][ T43] usb 1-1: Manufacturer: syz [ 106.873639][ T43] usb 1-1: SerialNumber: syz [ 106.990487][ T9] usb 4-1: USB disconnect, device number 7 [ 107.221553][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 107.236747][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.314811][ T24] usb 2-1: USB disconnect, device number 7 [ 108.046184][ T1209] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.253126][ T1209] usb 3-1: Using ep0 maxpacket: 8 [ 108.288621][ T1209] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.301475][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.377534][ T1209] usb 3-1: Product: syz [ 108.407130][ T1209] usb 3-1: Manufacturer: syz [ 108.418166][ T1209] usb 3-1: SerialNumber: syz [ 108.435569][ T1209] usb 3-1: config 0 descriptor?? [ 108.443079][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.667894][ T1209] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 108.713770][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 108.740195][ T5821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.782602][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.832681][ T5821] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 108.849669][ T5821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.881789][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.920443][ T5821] usb 4-1: SerialNumber: syz [ 108.962653][ T5821] hub 4-1:1.0: bad descriptor, ignoring hub [ 108.998177][ T5821] hub 4-1:1.0: probe with driver hub failed with error -5 [ 109.033884][ T5821] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.253122][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.274822][ T5959] usb 4-1: USB disconnect, device number 8 [ 109.453129][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 109.479778][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 109.497117][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.508604][ T9] usb 2-1: Product: syz [ 109.515175][ T9] usb 2-1: Manufacturer: syz [ 109.520023][ T9] usb 2-1: SerialNumber: syz [ 109.544223][ T9] usb 2-1: config 0 descriptor?? [ 109.586756][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.734309][ T43] usb 1-1: USB disconnect, device number 4 [ 109.803238][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:40.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.962828][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 110.012339][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.027031][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 110.035955][ T9] usb 2-1: media controller created [ 110.103229][ T43] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 110.131740][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.184452][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 110.297890][ T5959] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.307300][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 110.316479][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 110.330194][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.340839][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.400030][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.412540][ T43] usb 1-1: Product: syz [ 110.418601][ T43] usb 1-1: Manufacturer: syz [ 110.423707][ T43] usb 1-1: SerialNumber: syz [ 110.475758][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 110.485199][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.499847][ T5959] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.509135][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.533964][ T1209] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 110.548820][ T5959] usb 5-1: config 0 descriptor?? [ 110.882073][ T43] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 110.905314][ T1209] usb 3-1: USB disconnect, device number 7 [ 111.066251][ T5959] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 111.089731][ T5959] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 111.123060][ T5959] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 111.165045][ T5959] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 111.181974][ T5959] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 111.236700][ T5959] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 111.583368][ T30] audit: type=1326 audit(1761835123.773:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f5b8efc9 code=0x7ffc0000 [ 111.605868][ T6082] ------------[ cut here ]------------ [ 111.612766][ T6082] usb 2-1: BOGUS control dir, pipe 80000880 doesn't match bRequestType c0 [ 111.621648][ T30] audit: type=1326 audit(1761835123.773:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f5b8efc9 code=0x7ffc0000 [ 111.655936][ T6082] WARNING: CPU: 1 PID: 6082 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 111.666306][ T6082] Modules linked in: [ 111.670405][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 111.680186][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.690605][ T6082] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 111.696365][ T6082] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 a4 23 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 111.717683][ T6082] RSP: 0018:ffffc900035f75e0 EFLAGS: 00010246 [ 111.724889][ T6082] RAX: e1a2b19ca2488600 RBX: ffff888077bb6200 RCX: 0000000000080000 [ 111.732937][ T6082] RDX: ffffc9000c8e5000 RSI: 000000000000373e RDI: 000000000000373f [ 111.741017][ T6082] RBP: 1ffff1100f20b4ac R08: 0000000000000003 R09: 0000000000000004 [ 111.749100][ T6082] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88802030f100 [ 111.757163][ T6082] R13: ffff88807905a560 R14: 0000000080000880 R15: ffff888078db0e20 [ 111.765292][ T6082] FS: 00007f39069e96c0(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 111.774279][ T6082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.780899][ T6082] CR2: 00002000001bc000 CR3: 000000007730c000 CR4: 00000000003526f0 [ 111.788936][ T6082] Call Trace: [ 111.792260][ T6082] [ 111.803084][ T6082] usb_start_wait_urb+0x114/0x4c0 [ 111.810605][ T6082] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 111.816277][ T6082] usb_control_msg+0x232/0x3e0 [ 111.822391][ T6082] dtv5100_i2c_msg+0x250/0x330 [ 111.828267][ T6082] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 111.833225][ T6082] __i2c_transfer+0x874/0x2170 [ 111.838059][ T6082] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.843356][ T6082] ? __pfx___i2c_transfer+0x10/0x10 [ 111.848594][ T6082] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 111.854052][ T6082] ? i2c_transfer+0x120/0x3a0 [ 111.858794][ T6082] i2c_transfer+0x25b/0x3a0 [ 111.863371][ T6082] ? __pfx_i2c_transfer+0x10/0x10 [ 111.868449][ T6082] ? __might_fault+0xb0/0x130 [ 111.873508][ T6082] i2c_transfer_buffer_flags+0x105/0x190 [ 111.879177][ T6082] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 111.885436][ T6082] ? _copy_from_user+0x94/0xb0 [ 111.890273][ T6082] i2cdev_write+0x112/0x1b0 [ 111.894897][ T6082] vfs_writev+0x4b6/0x960 [ 111.899296][ T6082] ? __pfx_i2cdev_write+0x10/0x10 [ 111.904384][ T6082] ? __pfx_vfs_writev+0x10/0x10 [ 111.909281][ T6082] ? __fget_files+0x2a/0x420 [ 111.913948][ T6082] ? __fget_files+0x3a0/0x420 [ 111.918659][ T6082] ? __fget_files+0x2a/0x420 [ 111.925657][ T6082] __x64_sys_pwritev+0x197/0x2a0 [ 111.930687][ T6082] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 111.936270][ T6082] ? do_syscall_64+0xbe/0xfa0 [ 111.940994][ T6082] do_syscall_64+0xfa/0xfa0 [ 111.945558][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.951687][ T6082] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.958301][ T6082] ? clear_bhb_loop+0x60/0xb0 [ 111.963078][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.969018][ T6082] RIP: 0033:0x7f3905b8efc9 [ 111.973506][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.993225][ T6082] RSP: 002b:00007f39069e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 112.001693][ T6082] RAX: ffffffffffffffda RBX: 00007f3905de5fa0 RCX: 00007f3905b8efc9 [ 112.009741][ T6082] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004 [ 112.017894][ T6082] RBP: 00007f3905c11f91 R08: 00000000000000b2 R09: 0000000000000000 [ 112.026983][ T6082] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 112.036053][ T6082] R13: 00007f3905de6038 R14: 00007f3905de5fa0 R15: 00007f3905f0fa28 [ 112.044117][ T6082] [ 112.047200][ T6082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.054497][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 112.063635][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.073698][ T6082] Call Trace: [ 112.076989][ T6082] [ 112.079959][ T6082] dump_stack_lvl+0x99/0x250 [ 112.084579][ T6082] ? __asan_memcpy+0x40/0x70 [ 112.089194][ T6082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.094405][ T6082] ? __pfx__printk+0x10/0x10 [ 112.099027][ T6082] vpanic+0x237/0x6d0 [ 112.103070][ T6082] ? __pfx_vpanic+0x10/0x10 [ 112.107700][ T6082] panic+0xb9/0xc0 [ 112.111442][ T6082] ? __pfx_panic+0x10/0x10 [ 112.115925][ T6082] __warn+0x31b/0x4b0 [ 112.119953][ T6082] ? usb_submit_urb+0x114d/0x18b0 [ 112.125006][ T6082] ? usb_submit_urb+0x114d/0x18b0 [ 112.130079][ T6082] report_bug+0x2be/0x4f0 [ 112.134446][ T6082] ? usb_submit_urb+0x114d/0x18b0 [ 112.139497][ T6082] ? usb_submit_urb+0x114d/0x18b0 [ 112.144554][ T6082] ? usb_submit_urb+0x114f/0x18b0 [ 112.149597][ T6082] handle_bug+0x84/0x160 [ 112.153864][ T6082] exc_invalid_op+0x1a/0x50 [ 112.158399][ T6082] asm_exc_invalid_op+0x1a/0x20 [ 112.163281][ T6082] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 112.168943][ T6082] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 a4 23 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 112.188578][ T6082] RSP: 0018:ffffc900035f75e0 EFLAGS: 00010246 [ 112.194666][ T6082] RAX: e1a2b19ca2488600 RBX: ffff888077bb6200 RCX: 0000000000080000 [ 112.202659][ T6082] RDX: ffffc9000c8e5000 RSI: 000000000000373e RDI: 000000000000373f [ 112.210634][ T6082] RBP: 1ffff1100f20b4ac R08: 0000000000000003 R09: 0000000000000004 [ 112.218619][ T6082] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88802030f100 [ 112.226616][ T6082] R13: ffff88807905a560 R14: 0000000080000880 R15: ffff888078db0e20 [ 112.234632][ T6082] usb_start_wait_urb+0x114/0x4c0 [ 112.239689][ T6082] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 112.245281][ T6082] usb_control_msg+0x232/0x3e0 [ 112.250077][ T6082] dtv5100_i2c_msg+0x250/0x330 [ 112.254871][ T6082] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 112.259754][ T6082] __i2c_transfer+0x874/0x2170 [ 112.264533][ T6082] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.269780][ T6082] ? __pfx___i2c_transfer+0x10/0x10 [ 112.275009][ T6082] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 112.280409][ T6082] ? i2c_transfer+0x120/0x3a0 [ 112.285107][ T6082] i2c_transfer+0x25b/0x3a0 [ 112.289640][ T6082] ? __pfx_i2c_transfer+0x10/0x10 [ 112.294690][ T6082] ? __might_fault+0xb0/0x130 [ 112.299399][ T6082] i2c_transfer_buffer_flags+0x105/0x190 [ 112.305054][ T6082] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 112.311231][ T6082] ? _copy_from_user+0x94/0xb0 [ 112.316020][ T6082] i2cdev_write+0x112/0x1b0 [ 112.320537][ T6082] vfs_writev+0x4b6/0x960 [ 112.324878][ T6082] ? __pfx_i2cdev_write+0x10/0x10 [ 112.329940][ T6082] ? __pfx_vfs_writev+0x10/0x10 [ 112.334832][ T6082] ? __fget_files+0x2a/0x420 [ 112.339439][ T6082] ? __fget_files+0x3a0/0x420 [ 112.344126][ T6082] ? __fget_files+0x2a/0x420 [ 112.348763][ T6082] __x64_sys_pwritev+0x197/0x2a0 [ 112.353734][ T6082] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 112.359244][ T6082] ? do_syscall_64+0xbe/0xfa0 [ 112.363945][ T6082] do_syscall_64+0xfa/0xfa0 [ 112.368472][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.374545][ T6082] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.380704][ T6082] ? clear_bhb_loop+0x60/0xb0 [ 112.385395][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.391297][ T6082] RIP: 0033:0x7f3905b8efc9 [ 112.395721][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.415350][ T6082] RSP: 002b:00007f39069e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 112.423783][ T6082] RAX: ffffffffffffffda RBX: 00007f3905de5fa0 RCX: 00007f3905b8efc9 [ 112.431765][ T6082] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004 [ 112.439755][ T6082] RBP: 00007f3905c11f91 R08: 00000000000000b2 R09: 0000000000000000 [ 112.447747][ T6082] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 112.455774][ T6082] R13: 00007f3905de6038 R14: 00007f3905de5fa0 R15: 00007f3905f0fa28 [ 112.463806][ T6082] [ 112.467174][ T6082] Kernel Offset: disabled [ 112.471501][ T6082] Rebooting in 86400 seconds..