last executing test programs: 18.710488102s ago: executing program 4 (id=3176): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000740)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) 16.290908169s ago: executing program 3 (id=3180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000000)={0x0, 0x804521, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 15.079600294s ago: executing program 4 (id=3183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df", 0xa7}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r3, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000002240), 0x80) 14.705987831s ago: executing program 3 (id=3184): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r3}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.747440011s ago: executing program 2 (id=3186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000000)={0x0, 0x804521, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 12.298048911s ago: executing program 1 (id=3188): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x2, 0x7, 0x5a, @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80, 0x7800, 0x3, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x66, 0x102, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x10, 0xe}, {0x8, 0xffff}, {0x2, 0x2}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffff6, 0x3) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xffffffffffffff29) openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000540), 0xc) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661757d7420ab91f884fdf1667e757365723a73797a2030301030306095360411000000"], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = epoll_create1(0x80000) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000002080)={0xe15, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_int(r3, &(0x7f0000000380)=0xfffffffffffffffe, 0x12) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0xffffffff, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) 11.556062961s ago: executing program 1 (id=3189): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r4, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) 10.964711442s ago: executing program 3 (id=3191): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000740)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) 10.779767341s ago: executing program 2 (id=3192): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2c0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x2c020600) r6 = msgget$private(0x0, 0xef) msgctl$IPC_RMID(r6, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979dd1e00d96072000001eb8e3ef667d775f36e6627021420a5e82168304c633fc1ef600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265e1776f306000"}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 10.46570965s ago: executing program 4 (id=3193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df96", 0xa8}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r3, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000002240), 0x80) 9.198534629s ago: executing program 2 (id=3194): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000740)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) 8.533959807s ago: executing program 4 (id=3195): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 8.089501964s ago: executing program 0 (id=3196): syz_usb_connect(0x4, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa2, 0x90, 0x40, 0x20, 0x3f0, 0x581d, 0x1a14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x0, 0x0, 0xe0, 0x44, [{{0x9, 0x4, 0xc8, 0x0, 0x2, 0xff, 0x1, 0x7, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "5dba373fc934"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0xbc4, 0x25}, {0x6, 0x24, 0x1a, 0xebac}}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8}}]}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f00000005c0)="a50dafd420eb", 0x6}], 0x1, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = getpid() process_vm_readv(r11, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffe5}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2cf, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x2, 0x10380464527a7c49, 0x3, [{{0x9, 0x4, 0x0, 0x5f, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xb3f2, 0x4, 0xf6c, 0x5}, [@mdlm_detail={0x4, 0x24, 0x13, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x2, 0x4a}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 8.022216492s ago: executing program 1 (id=3197): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) readv(r3, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 7.629030381s ago: executing program 3 (id=3198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm, @timestamp], 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r6, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x27, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.069815756s ago: executing program 0 (id=3199): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000300)='./file7\x00', 0x2) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x39, 0xa, 0x0, "0506ddff0600000000000000000000ea0000001000", 0x50565559}) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendfile(r3, r0, 0x0, 0x558410e9) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 6.605494677s ago: executing program 4 (id=3200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1}) 5.941820554s ago: executing program 1 (id=3201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r4, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcaf", 0x4f, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, 0x0, 0x0) 5.823117577s ago: executing program 2 (id=3202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x674081, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8040480) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x44, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r6, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x2, r6, 0x1}) fcntl$notify(r4, 0x402, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xe, "03f37fe99f4da288"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r6}) unshare(0x2a020480) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {0x0, 0x1}, 0x1b300000, 0x0, 0x0, 0x8000, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'gre0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) 5.787615114s ago: executing program 0 (id=3203): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, 0x0, 0x8820) close(r4) 5.01175997s ago: executing program 3 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x54, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 4.848951388s ago: executing program 4 (id=3205): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "faecbbebfcc6087d6c06a94682a00cec"}) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0xfffffffe}) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) close(0x3) 4.544848344s ago: executing program 0 (id=3206): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000740)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) 3.351227887s ago: executing program 1 (id=3207): r0 = socket$inet6(0xa, 0x1, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000002100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0xc) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) dup2(r5, r6) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x8000) close(0x3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x6}]}, 0x8) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x24d, &(0x7f0000000280)={@empty, @remote, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "bccfa1", 0x213, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, {[@fragment={0x75, 0x0, 0x2, 0x1, 0x0, 0x10, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x4e, 0x3, [], "97cf3a3cae5f625c3e38d177b649f0f8e3369bbe067af968d853270a73aee7aed79fead9374818a1f7151b42bd1b83248a030ec09f332e24c715f223b9c8864df071a61913ecaa0f6f021f192e93"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x4, 0x2], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x3, 0x7], "487459a81fe4017949b7b7a089dc2f962dc6fd0e198d08f2f3e7bcbdd87486cb658ed87ad04fb37e8ddd73497beb2f66446b67d7c8054f1d46d9f985fb39892fa9933710af5135d7963a7a9d1bb71167797ec51c7cb017da6dfe5423ab90596569acb274b77812e895a7cd78d6845a5926a2"}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0xbf, 0x0, 0x1, 0x1, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x3, 0x1, 0x0, 0x2, 0x0, 0x2}, 0x2, {0x4098, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 2.856250828s ago: executing program 3 (id=3208): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0xffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.727053645s ago: executing program 2 (id=3209): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x80010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) chdir(&(0x7f0000000540)='./cgroup\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) open(&(0x7f0000000080)='./file0\x00', 0x80bc1, 0x108) r6 = syz_io_uring_setup(0x3eeb, &(0x7f0000000480)={0x0, 0x8000, 0x800}, &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x1000000, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000500)=0x625, 0x4) madvise(&(0x7f000079b000/0x1000)=nil, 0x1000, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffdff5}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x28000600) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r10, 0x0, r10, 0x0, 0x276) 1.962986204s ago: executing program 2 (id=3210): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$video(0x0, 0x101, 0xab02) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000100)='limits\x00') setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "4ec97e01", "12772541f8eb02bb"}, 0x28) shutdown(r6, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffdffffe) 1.736030746s ago: executing program 1 (id=3211): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000000)=@x86={0x6, 0xa, 0xa, 0x0, 0x3, 0xad, 0xce, 0x1c, 0xc8, 0xa4, 0x27, 0x8, 0x0, 0x6, 0x7fff, 0x82, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="03030000000000000000110000000800", @ANYRES32, @ANYBLOB="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"], 0x1c}}, 0x0) 1.287443431s ago: executing program 0 (id=3212): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) readv(r3, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 0s ago: executing program 0 (id=3213): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "110388", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000740)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) syz_usb_connect$cdc_ecm(0x1, 0xe6, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x9, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x8e6508b68b82e830}, @mdlm_detail={0x70, 0x24, 0x13, 0xfb, "4481ceb91f5f1b0f2c12cf2e877fb87bc4f9632e91c81a424e97e3aab74fe0cd8ca5ff37f4cd626395900005b1977e90ff4320a51993f996b28217ca2e29911b3ba83692afdf1827480b4ea860ba5e75d604269dd4c10ce7c55f0f79c395052fb70b27b816c111832e96e9f2"}, @mdlm={0x15, 0x24, 0x12, 0xbe0f}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xa8de}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6d, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0x80, 0x10, 0x80}, 0x5d, &(0x7f0000000440)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xf0f, 0x3, [0xc000, 0xff00ff, 0xff0030, 0x3f18]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x0, 0x99e6, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0xb, 0x7, 0xe205, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a618664b386a9e502d15a40067938632"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x65, 0x2}, @generic={0x8, 0x10, 0x2, "271f084caa"}]}, 0x4, [{0xa0, &(0x7f00000004c0)=@string={0xa0, 0x3, "da6c72522538a22e8f3ca0eda81d5eaf4e1d67c1aba6df754c89e5245708d281f187d3b8a38300a57fe67d803f0d585aa724a9d304d8dc950ffcab4bb31df2df7eeff1587af8b1b7cb00386b3b0b90eece168e1d65d518734f9de4f6919809041fa224881fc48aa26232386d203dce2c1ea1e311989b3f7c2ebead5b2ae08ff2f842ce65a3dba1f7e86dedfa9e6127ba56889e6d0753dc7f18fd49ee413a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xb8, &(0x7f0000000680)=@string={0xb8, 0x3, "106dc1199610d3961330e5031ad47b14ee09d6bbbb1d37905128dbf8f41015e5410421f33b7a70468fdd53a54786c0c484188edc92811ffe666d9e3c98d6891786134f7a713f5743423d592087ac6d1c6b72187043e7068979d540964e996efe352ced8cae226c3eaeef47b0dcbd668fbd44f765b995039af7424e5619c725691773d9be609c8e88ee2c642d7bd7697299fc8c0ff924621f36ec17713b8c3ba94fd2a61b3e1961fd0640219cbf6c906069e50b0d1248"}}]}) kernel console output (not intermixed with test programs): lmulticast mode [ 1282.001671][T19987] syz_tun: entered allmulticast mode [ 1282.103930][T19987] syz_tun: left allmulticast mode [ 1282.127551][T19987] syz_tun: left promiscuous mode [ 1282.146167][T12299] usb 3-1: USB disconnect, device number 67 [ 1282.236373][ T5913] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1282.345909][T19992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1282.784971][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 1283.858428][T20007] fuse: Unknown parameter 'use00000000000000000000' [ 1284.244590][T20010] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1284.328885][T20010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.342461][T20010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.482410][T20012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.503226][T20012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.908851][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1284.920110][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1284.945189][ T5913] usb 4-1: can't read configurations, error -71 [ 1285.199351][T20022] binder: 20017:20022 ioctl 4018620d 0 returned -22 [ 1285.223760][T20022] binder: 20017:20022 ioctl c0306201 80000080 returned -14 [ 1285.293424][T20020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.627419][T20021] binder: 20017:20021 ioctl d000941e 0 returned -22 [ 1287.686070][T20043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.722484][T20043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.084700][T20047] input: syz0 as /devices/virtual/input/input60 [ 1288.424590][T20055] input: syz0 as /devices/virtual/input/input61 [ 1288.850022][T20065] input: syz0 as /devices/virtual/input/input62 [ 1288.931954][T20070] lo: left promiscuous mode [ 1288.936647][T20070] lo: left allmulticast mode [ 1288.950470][T20070] tunl0: left promiscuous mode [ 1288.985876][T20070] tunl0: left allmulticast mode [ 1289.007615][T20070] gre0: left promiscuous mode [ 1289.024656][T20070] gre0: left allmulticast mode [ 1289.068327][T20070] gretap0: left promiscuous mode [ 1289.073371][T20070] gretap0: left allmulticast mode [ 1289.248129][T20070] erspan0: left promiscuous mode [ 1289.254278][T20070] erspan0: left allmulticast mode [ 1289.455636][T20070] ip_vti0: left promiscuous mode [ 1289.462333][T20070] ip_vti0: left allmulticast mode [ 1289.580065][T20070] ip6_vti0: left promiscuous mode [ 1289.674074][T20070] ip6_vti0: left allmulticast mode [ 1289.763918][T20070] sit0: left promiscuous mode [ 1289.770479][T20070] sit0: left allmulticast mode [ 1289.875889][T20070] ip6tnl0: left promiscuous mode [ 1289.880882][T20070] ip6tnl0: left allmulticast mode [ 1289.907445][T20070] ip6gre0: left promiscuous mode [ 1289.907472][T20070] ip6gre0: left allmulticast mode [ 1289.909190][T20070] syz_tun: left promiscuous mode [ 1289.909212][T20070] syz_tun: left allmulticast mode [ 1289.960681][T20079] fuse: Unknown parameter 'use00000000000000000000' [ 1290.022207][T20070] ip6gretap0: left promiscuous mode [ 1290.046136][T20070] ip6gretap0: left allmulticast mode [ 1290.097573][T20070] bond0: left promiscuous mode [ 1290.121039][T20070] veth0_to_hsr: left promiscuous mode [ 1290.154184][T20070] bond0: left allmulticast mode [ 1290.159388][T20070] veth0_to_hsr: left allmulticast mode [ 1290.247393][T20070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.257841][T20070] dummy0: left promiscuous mode [ 1290.262738][T20070] dummy0: left allmulticast mode [ 1290.409821][T20070] nlmon0: left promiscuous mode [ 1290.415242][T20070] nlmon0: left allmulticast mode [ 1291.107055][T20070] caif0: left promiscuous mode [ 1291.116474][T20070] caif0: left allmulticast mode [ 1291.123157][T20070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1291.559428][T20101] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1291.599010][T20101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.641668][T20101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.251618][T20113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.265489][T20113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.802021][T20102] F2FS-fs: Conflicting test_dummy_encryption options [ 1293.142736][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1293.151887][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1293.238581][T20125] netlink: 'syz.0.2881': attribute type 13 has an invalid length. [ 1293.291367][T20125] gretap0: refused to change device tx_queue_len [ 1293.298550][T20125] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1293.425082][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1293.425102][ T30] audit: type=1326 audit(1769222939.646:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.481437][ T30] audit: type=1326 audit(1769222939.646:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.643053][ T30] audit: type=1326 audit(1769222939.646:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.775130][ T30] audit: type=1326 audit(1769222939.646:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.862242][ T30] audit: type=1326 audit(1769222939.666:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.891984][ T30] audit: type=1326 audit(1769222939.666:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1293.927653][ T30] audit: type=1326 audit(1769222939.666:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1294.085223][ T30] audit: type=1326 audit(1769222939.686:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1294.124926][ T30] audit: type=1326 audit(1769222939.836:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1294.156606][ T30] audit: type=1326 audit(1769222939.836:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.2.2880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x7ffc0000 [ 1294.415477][T20136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1294.422033][T20136] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1294.449683][T20136] vhci_hcd vhci_hcd.0: Device attached [ 1294.792041][T20135] fuse: Bad value for 'fd' [ 1294.847693][T20137] vhci_hcd: connection closed [ 1294.853573][T17265] vhci_hcd vhci_hcd.4: stop threads [ 1294.866427][T17265] vhci_hcd vhci_hcd.4: release socket [ 1294.880238][T17265] vhci_hcd vhci_hcd.4: disconnect device [ 1295.393014][T20146] input: syz0 as /devices/virtual/input/input63 [ 1296.003603][T20160] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1296.010219][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1296.038591][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1296.096300][T20160] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 1296.102918][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1296.121852][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1296.157591][T20160] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 1296.164206][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1296.183664][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1296.226178][T20160] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1296.277457][T20160] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 1296.284069][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1296.295182][ T5913] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1296.313182][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1296.332467][T20170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(23) [ 1296.339081][T20170] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1296.366295][T20170] vhci_hcd vhci_hcd.0: Device attached [ 1296.397110][T20160] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1296.435138][T20160] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(25) [ 1296.441746][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1296.453320][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1296.477734][T20160] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1296.533328][T20173] vhci_hcd: connection closed [ 1296.533585][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.533926][T20171] vhci_hcd: connection closed [ 1296.544385][T20168] vhci_hcd: connection closed [ 1296.549729][T20166] vhci_hcd: connection closed [ 1296.554666][T20164] vhci_hcd: connection closed [ 1296.559625][T20162] vhci_hcd: connection reset by peer [ 1296.585101][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.601208][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1296.613270][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.626000][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.642489][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1296.655643][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.669583][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.686893][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1296.695166][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.704127][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.725526][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1296.740500][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.758429][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.769843][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1296.783740][ T175] vhci_hcd vhci_hcd.0: stop threads [ 1296.805709][ T175] vhci_hcd vhci_hcd.0: release socket [ 1296.819003][ T175] vhci_hcd vhci_hcd.0: disconnect device [ 1297.021686][T20181] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1297.305053][T19532] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1297.527634][T19532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1297.549543][T19532] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1297.584616][T19532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1297.626446][T19532] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1297.730429][T19532] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1297.744143][T19532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.774466][T19532] usb 3-1: Product: syz [ 1297.795846][T19532] usb 3-1: Manufacturer: syz [ 1297.803388][T19532] usb 3-1: SerialNumber: syz [ 1297.825371][T19532] usb 3-1: config 0 descriptor?? [ 1297.840055][T19532] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1297.850324][T19532] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1297.879314][T19532] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1298.379974][T20199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.498434][T20199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.668212][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1298.745794][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1298.805190][ T6228] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1298.822853][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1298.843375][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1298.925127][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1298.996218][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1299.129012][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1299.147900][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1299.157116][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1299.166309][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1299.231686][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1299.284980][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1299.376356][ T6228] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1299.384141][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1299.409046][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1299.518221][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1299.604969][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1299.606575][ T5899] usb 3-1: USB disconnect, device number 68 [ 1299.715147][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1299.742724][ T6228] usb usb1-port1: attempt power cycle [ 1299.758305][ T6228] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1299.780705][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1299.885754][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1299.913243][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1300.059452][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.068198][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.145447][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1300.205092][ T6228] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1300.235156][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1300.242449][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1300.375959][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1300.383237][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1300.455221][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1300.518247][ T6228] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1300.531445][T20229] fuse: Unknown parameter 'group_00000000000000000000' [ 1300.555225][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1300.572700][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1300.590756][T20233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.624184][T20233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.703144][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1300.719821][ T6228] usb usb1-port1: unable to enumerate USB device [ 1300.906733][T20205] hub 1-0:1.0: USB hub found [ 1300.912868][T20205] hub 1-0:1.0: 1 port detected [ 1300.935234][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1301.008589][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1301.085544][ T5899] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1301.093378][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1301.100745][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1301.175029][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1301.245054][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1301.354982][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1301.368095][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1301.435594][ T5913] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1301.455074][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1301.516594][ T5899] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1301.529365][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1301.537233][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1301.615214][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1301.685275][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1301.773527][T20242] netlink: 'syz.2.2900': attribute type 3 has an invalid length. [ 1301.807942][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1301.816948][ T5899] usb usb1-port1: attempt power cycle [ 1301.823803][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1301.835463][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1301.915420][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1301.924957][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1302.136529][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1302.195085][ T5899] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1302.216336][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1302.223639][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1302.334994][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1302.352230][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1302.444974][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1302.506007][ T5899] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1302.525152][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1302.540918][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1302.641532][T20255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1302.657546][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1302.665034][ T5899] usb usb1-port1: unable to enumerate USB device [ 1302.735764][T18194] usb usb34-port1: attempt power cycle [ 1302.789158][T20258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.812803][T20258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.297229][T18194] usb usb34-port1: unable to enumerate USB device [ 1303.479155][T20267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1305.123294][T20286] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 1305.190570][T20287] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 1305.199761][T20287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2907'. [ 1305.568021][T20286] batadv0: left promiscuous mode [ 1305.613749][T20286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.673516][T20286] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1305.709484][T20287] batadv0: entered promiscuous mode [ 1305.741775][T20287] batadv0: entered allmulticast mode [ 1305.785256][T20287] bond0: (slave batadv0): Releasing backup interface [ 1305.826465][T20287] bridge0: port 1(batadv0) entered blocking state [ 1305.940973][T20287] bridge0: port 1(batadv0) entered disabled state [ 1306.112845][T20296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1306.170161][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.216297][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.375320][T20298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.387484][T20298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.495164][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1306.505280][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1306.726921][T20302] fuse: Unknown parameter '0x0000000000000007' [ 1306.996827][T20308] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1307.064443][T20308] tipc: Started in network mode [ 1307.080231][T20308] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1307.095792][T20308] tipc: Enabling of bearer rejected, failed to enable media [ 1307.870975][T20316] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1308.090525][T20316] tipc: New replicast peer: 0.0.0.0 [ 1308.153595][T20317] fuse: Bad value for 'fd' [ 1308.178676][T20316] tipc: Enabled bearer , priority 10 [ 1308.250499][T20317] tipc: New replicast peer: 172.30.1.3 [ 1308.664074][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1308.664090][ T30] audit: type=1800 audit(1769222954.886:984): pid=20324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2916" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1309.504742][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1309.585105][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1309.674289][ T5899] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1309.691569][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1309.699573][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1309.757037][T20346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1309.775233][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1309.810300][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.825700][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.855090][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1309.901682][T20348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.917424][T20348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.965052][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1309.984511][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1310.065171][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1310.135315][ T5899] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1310.151401][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1310.159572][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1310.236750][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1310.305125][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1310.436615][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1310.469957][ T5899] usb usb1-port1: attempt power cycle [ 1310.482913][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1310.553921][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1310.635004][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1310.642232][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1310.816659][T20352] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1310.855028][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1310.902916][T20352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.915171][ T5899] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1310.933241][T20352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.945229][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1310.952618][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1311.065698][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1311.075456][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1311.094584][T20357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.121385][T20357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.143761][T20358] syz_tun: entered promiscuous mode [ 1311.149905][T20358] macsec1: entered allmulticast mode [ 1311.158736][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1311.167469][T20358] syz_tun: entered allmulticast mode [ 1311.185043][T20358] syz_tun: left allmulticast mode [ 1311.191319][T20358] syz_tun: left promiscuous mode [ 1311.234992][ T5899] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1311.275192][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1311.282449][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1311.395459][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1311.407092][ T5899] usb usb1-port1: unable to enumerate USB device [ 1311.651129][T20361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1311.975176][ T5913] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1312.177848][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1312.187995][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1312.200534][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1312.216169][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1312.230797][ T5913] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1312.248510][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.265440][ T5913] usb 4-1: Product: syz [ 1312.270775][ T5913] usb 4-1: Manufacturer: syz [ 1312.276561][ T5913] usb 4-1: SerialNumber: syz [ 1312.287127][ T5913] usb 4-1: config 0 descriptor?? [ 1312.300865][ T5913] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1312.315705][ T5913] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1312.331344][ T5913] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1312.617132][T20372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.645106][T19784] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1312.668683][T20372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.811707][T19784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1312.824182][T19784] usb 3-1: not running at top speed; connect to a high speed hub [ 1312.835588][T19784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.847308][T19784] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.861319][T19784] usb 3-1: string descriptor 0 read error: -22 [ 1312.869138][T19784] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1312.878853][T19784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.903619][T19784] usb 3-1: 0:2 : does not exist [ 1313.173926][T20376] fuse: Bad value for 'fd' [ 1313.770979][T20382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1313.785959][T20382] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1313.795390][T20382] netlink: 'syz.0.2929': attribute type 3 has an invalid length. [ 1313.844567][T20382] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1314.252355][T20389] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1314.275870][T20389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.286853][T20389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.403253][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.433745][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.710641][ T5913] usb 4-1: USB disconnect, device number 80 [ 1314.944188][T20398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1315.202220][T20400] binder: 20395:20400 ioctl 4018620d 0 returned -22 [ 1315.229269][T20400] binder: 20395:20400 ioctl c0306201 80000080 returned -14 [ 1315.274960][ T5899] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1315.317640][T20401] binder: 20395:20401 ioctl d000941e 0 returned -22 [ 1315.446977][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1315.456914][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1315.472082][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1315.499753][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1315.598090][ T5899] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1315.613418][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.624234][ T5899] usb 4-1: Product: syz [ 1315.630322][ T5899] usb 4-1: Manufacturer: syz [ 1315.635531][ T5899] usb 4-1: SerialNumber: syz [ 1315.660078][ T5899] usb 4-1: config 0 descriptor?? [ 1315.677914][ T5899] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1315.687171][ T5899] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1315.697361][ T5899] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1316.043742][T20412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.074520][T20412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.604446][T20425] syz_tun: entered promiscuous mode [ 1317.610895][T20425] macsec1: entered allmulticast mode [ 1317.616846][T20425] syz_tun: entered allmulticast mode [ 1317.633245][T20425] syz_tun: left allmulticast mode [ 1317.651084][T20425] syz_tun: left promiscuous mode [ 1318.048671][ T5899] usb 4-1: USB disconnect, device number 81 [ 1318.585513][T20433] Cannot find add_set index 3 as target [ 1318.860698][T19784] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1318.890409][T19784] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1318.893925][T19784] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1318.952058][T19784] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1319.238143][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.238354][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.649990][T20453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.650702][T20453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.662340][T20447] fuse: Bad value for 'fd' [ 1319.992928][T20457] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1319.999501][T20457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1320.044901][T20457] vhci_hcd vhci_hcd.0: Device attached [ 1320.295361][T19784] usb 36-1: SetAddress Request (10) to port 0 [ 1320.301600][T19784] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1320.725265][T20458] vhci_hcd: connection reset by peer [ 1320.730970][ T175] vhci_hcd vhci_hcd.1: stop threads [ 1320.737639][ T175] vhci_hcd vhci_hcd.1: release socket [ 1320.743761][ T175] vhci_hcd vhci_hcd.1: disconnect device [ 1320.772821][T20468] binder: 20461:20468 ioctl 40046205 0 returned -22 [ 1320.953039][ T30] audit: type=1326 audit(1769222967.166:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.018081][ T30] audit: type=1326 audit(1769222967.176:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.075049][ T30] audit: type=1326 audit(1769222967.176:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.101796][ T30] audit: type=1326 audit(1769222967.176:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.140844][ T30] audit: type=1326 audit(1769222967.176:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.169657][ T30] audit: type=1326 audit(1769222967.216:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.202214][ T30] audit: type=1326 audit(1769222967.216:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.253639][ T30] audit: type=1326 audit(1769222967.246:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.311729][ T30] audit: type=1326 audit(1769222967.246:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1321.381831][ T30] audit: type=1326 audit(1769222967.246:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20463 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1322.489249][T20489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.587878][T20489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.824367][T20490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.925265][T20490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.464310][T20519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1324.590042][T20517] syz_tun: entered promiscuous mode [ 1324.605502][T20517] macsec1: entered allmulticast mode [ 1324.702590][T20517] syz_tun: entered allmulticast mode [ 1324.805835][T20517] syz_tun: left allmulticast mode [ 1324.875486][T20517] syz_tun: left promiscuous mode [ 1325.071656][T20526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1325.335035][T19784] usb 36-1: device descriptor read/8, error -110 [ 1325.737687][T19784] usb usb36-port1: attempt power cycle [ 1326.305816][T19784] usb usb36-port1: unable to enumerate USB device [ 1327.463987][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1327.464004][ T30] audit: type=1326 audit(1769222973.686:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.500464][ T30] audit: type=1326 audit(1769222973.726:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.556098][ T30] audit: type=1326 audit(1769222973.726:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.594956][ T30] audit: type=1326 audit(1769222973.726:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.641830][ T30] audit: type=1326 audit(1769222973.726:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.681326][ T30] audit: type=1326 audit(1769222973.776:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.733798][ T30] audit: type=1326 audit(1769222973.776:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1327.748062][T20551] tipc: Enabling of bearer rejected, already enabled [ 1327.827595][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2959'. [ 1327.869338][T20552] tipc: Disabling bearer [ 1328.515728][T20561] input: syz0 as /devices/virtual/input/input65 [ 1328.877398][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1330.100543][T20575] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1330.354564][T20585] fuse: Bad value for 'fd' [ 1330.434643][T19784] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1330.613921][T19784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1330.628236][T19784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1330.660734][T19784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1330.673126][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1330.696588][T19784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1330.758471][T19784] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1330.775390][T19784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.799686][T19784] usb 4-1: Product: syz [ 1330.806736][T19784] usb 4-1: Manufacturer: syz [ 1330.813391][T19784] usb 4-1: SerialNumber: syz [ 1330.826275][T19784] usb 4-1: config 0 descriptor?? [ 1330.848600][T19784] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1330.865282][T19784] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1330.881123][T19784] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1330.965019][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1330.969905][T20585] ipip0: entered promiscuous mode [ 1330.979247][T20585] ipip0: entered allmulticast mode [ 1331.085460][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1331.171610][T20595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.185582][T20595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.968452][T20601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.768373][ T5913] usb 4-1: USB disconnect, device number 83 [ 1333.173518][ T30] audit: type=1326 audit(1769222979.396:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.246783][ T30] audit: type=1326 audit(1769222979.426:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.307217][ T30] audit: type=1326 audit(1769222979.426:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.338975][ T30] audit: type=1326 audit(1769222979.426:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.395220][ T30] audit: type=1326 audit(1769222979.426:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.417940][ T30] audit: type=1326 audit(1769222979.426:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.461027][ T30] audit: type=1326 audit(1769222979.436:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.516270][ T30] audit: type=1326 audit(1769222979.436:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.568280][ T30] audit: type=1326 audit(1769222979.436:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1333.598995][ T30] audit: type=1326 audit(1769222979.436:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20627 comm="syz.4.2974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 1335.620719][T20651] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1335.653113][T20651] tipc: Enabling of bearer rejected, already enabled [ 1335.662878][T20651] fuse: Bad value for 'fd' [ 1335.669574][T20651] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1336.134147][T20667] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1336.458823][T20674] fuse: Bad value for 'fd' [ 1336.482568][T20674] ipip0: entered promiscuous mode [ 1336.518486][T20674] ipip0: entered allmulticast mode [ 1336.715185][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1336.746015][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1336.767449][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1337.819185][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1337.895063][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1338.014957][T19784] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1338.033094][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1338.040608][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1338.115025][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1338.174960][T19784] usb 1-1: device descriptor read/64, error -32 [ 1338.284994][T19784] raw-gadget.2 gadget.0: failed to queue suspend event [ 1338.296852][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1338.376654][T20695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1338.395125][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1338.465365][T19784] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1338.473156][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1338.480914][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1338.515421][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.555094][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1338.573049][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.614965][T19784] usb 1-1: device descriptor read/64, error -32 [ 1338.705816][T20692] fuse: Unknown parameter 'fd0x0000000000000007' [ 1338.725056][T19784] raw-gadget.2 gadget.0: failed to queue suspend event [ 1338.748576][T19784] usb usb1-port1: attempt power cycle [ 1338.795343][T19784] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1338.810172][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1338.866364][T20699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.916525][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1338.925371][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1338.952413][T20699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.145085][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1339.205004][T19784] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1339.235757][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1339.242973][T19784] usb 1-1: device descriptor read/8, error -32 [ 1339.355136][T19784] raw-gadget.2 gadget.0: failed to queue suspend event [ 1339.362468][T19784] raw-gadget.2 gadget.0: failed to queue reset event [ 1339.445035][T19784] raw-gadget.2 gadget.0: failed to queue resume event [ 1339.525065][T19784] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1339.555236][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1339.562433][T19784] usb 1-1: device descriptor read/8, error -32 [ 1339.651760][T20707] fuse: Unknown parameter 'fd0x0000000000000007' [ 1339.675082][T19784] raw-gadget.2 gadget.0: failed to queue suspend event [ 1339.685720][T19784] usb usb1-port1: unable to enumerate USB device [ 1339.718857][T20687] hub 1-0:1.0: USB hub found [ 1339.724224][T20687] hub 1-0:1.0: 1 port detected [ 1339.747639][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1339.831143][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1339.895129][T18194] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1339.908872][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1339.916219][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1339.985094][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1340.057780][T18194] usb 1-1: device descriptor read/64, error -32 [ 1340.180755][T18194] raw-gadget.2 gadget.0: failed to queue suspend event [ 1340.193808][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1340.295128][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1340.385030][T18194] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1340.394753][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1340.403143][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1340.475084][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1340.551552][T18194] usb 1-1: device descriptor read/64, error -32 [ 1340.665267][T18194] raw-gadget.2 gadget.0: failed to queue suspend event [ 1340.672447][T18194] usb usb1-port1: attempt power cycle [ 1340.679375][T18194] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1340.697147][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1340.785087][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1340.796741][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1341.025098][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1341.085526][T18194] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1341.116804][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1341.124048][T18194] usb 1-1: device descriptor read/8, error -32 [ 1341.235223][T18194] raw-gadget.2 gadget.0: failed to queue suspend event [ 1341.244216][T18194] raw-gadget.2 gadget.0: failed to queue reset event [ 1341.327410][T18194] raw-gadget.2 gadget.0: failed to queue resume event [ 1341.344448][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1341.344465][ T30] audit: type=1326 audit(1769222987.566:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.391833][ T30] audit: type=1326 audit(1769222987.566:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.391890][T18194] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1341.467329][ T30] audit: type=1326 audit(1769222987.566:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.492754][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1341.500356][T18194] usb 1-1: device descriptor read/8, error -32 [ 1341.525198][ T30] audit: type=1326 audit(1769222987.566:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.573311][T20737] fuse: Bad value for 'fd' [ 1341.580168][ T30] audit: type=1326 audit(1769222987.736:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.615938][T18194] raw-gadget.2 gadget.0: failed to queue suspend event [ 1341.635112][T18194] usb usb1-port1: unable to enumerate USB device [ 1341.648256][ T30] audit: type=1326 audit(1769222987.736:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.706796][ T30] audit: type=1326 audit(1769222987.926:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.753778][ T30] audit: type=1326 audit(1769222987.926:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1341.808650][ T30] audit: type=1326 audit(1769222987.926:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.2991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1347.617192][T20818] input: syz0 as /devices/virtual/input/input67 [ 1348.697969][T20826] fuse: Unknown parameter '0x0000000000000007' [ 1349.798324][ T30] audit: type=1326 audit(1769222996.026:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1349.935182][ T30] audit: type=1326 audit(1769222996.026:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1349.977497][ T30] audit: type=1326 audit(1769222996.056:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.000050][ T30] audit: type=1326 audit(1769222996.056:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.022609][ T30] audit: type=1326 audit(1769222996.056:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.079130][ T30] audit: type=1326 audit(1769222996.056:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.115358][ T30] audit: type=1326 audit(1769222996.056:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.158653][ T30] audit: type=1326 audit(1769222996.056:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.200610][T20843] binder: 20833:20843 ioctl 40046205 0 returned -22 [ 1350.207617][ T30] audit: type=1326 audit(1769222996.076:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1350.233740][ T30] audit: type=1326 audit(1769222996.076:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.0.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1351.174509][T20853] fuse: Bad value for 'fd' [ 1353.307702][T20877] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1353.329245][T20877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.339124][T20877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.223423][T20895] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 1354.380951][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 1354.575941][T20902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3020'. [ 1354.686863][T20901] fuse: Unknown parameter '0x0000000000000007' [ 1355.196526][T20915] input: syz0 as /devices/virtual/input/input68 [ 1355.497495][T20922] fuse: Bad value for 'fd' [ 1356.646013][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1356.701724][T20935] fuse: Unknown parameter 'group_id00000000000000000000' [ 1356.715969][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1356.786454][ T5899] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1356.812316][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1356.828524][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1356.933478][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1357.005003][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1357.135076][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1357.146865][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1357.225016][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1357.309182][ T5899] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1357.336450][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1357.359545][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1357.459218][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1357.524974][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1357.643712][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1357.651961][ T5899] usb usb1-port1: attempt power cycle [ 1357.660981][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1357.668774][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1357.745017][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1357.752200][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1357.975307][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1358.057851][ T5899] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1358.086316][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1358.093596][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1358.205045][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1358.212359][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1358.285228][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1358.345040][ T5899] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1358.369207][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1358.378096][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1358.391530][T20952] Cannot find add_set index 3 as target [ 1358.445650][T20954] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 1358.477219][T20954] !: entered promiscuous mode [ 1358.491409][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1358.506359][ T5899] usb usb1-port1: unable to enumerate USB device [ 1358.615565][T20953] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 1358.625087][T20953] !: left promiscuous mode [ 1358.696453][T20938] hub 1-0:1.0: USB hub found [ 1358.754672][T20938] hub 1-0:1.0: 1 port detected [ 1358.786650][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1358.855976][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1358.924958][ T5899] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1358.942672][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1358.950496][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1359.025317][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1359.093172][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1359.205645][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1359.215360][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1359.285106][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1359.355014][ T5899] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1359.365219][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1359.372704][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1359.445027][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1359.515175][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1359.625096][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1359.634351][ T5899] usb usb1-port1: attempt power cycle [ 1359.640421][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1359.650775][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1359.725195][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1359.732372][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1359.945032][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1360.038833][ T5899] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1360.085409][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1360.085981][T20974] input: syz0 as /devices/virtual/input/input69 [ 1360.099007][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1360.215012][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1360.285277][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1360.355032][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1360.435573][ T5899] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1360.476736][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1360.494128][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1360.605016][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1360.624830][ T5899] usb usb1-port1: unable to enumerate USB device [ 1361.497343][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.503652][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.080343][T20995] input: syz0 as /devices/virtual/input/input70 [ 1362.111120][T20995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.128364][T20995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.161406][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1362.161420][ T30] audit: type=1804 audit(1769223008.386:1070): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3037" name="/newroot/616/file0" dev="fuse" ino=1 res=1 errno=0 [ 1363.028172][T21006] input: syz0 as /devices/virtual/input/input71 [ 1363.226217][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1363.245009][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1363.259210][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1364.209774][T21031] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔ' [ 1364.226196][T21031] CPU: 1 UID: 0 PID: 21031 Comm: syz.0.3044 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.226231][T21031] Tainted: [L]=SOFTLOCKUP [ 1364.226239][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1364.226253][T21031] Call Trace: [ 1364.226263][T21031] [ 1364.226274][T21031] dump_stack_lvl+0xe8/0x150 [ 1364.226307][T21031] sysfs_warn_dup+0x8e/0xa0 [ 1364.226331][T21031] sysfs_do_create_link_sd+0xc0/0x110 [ 1364.226357][T21031] device_add_class_symlinks+0x1cf/0x240 [ 1364.226394][T21031] device_add+0x475/0xb70 [ 1364.226430][T21031] wiphy_register+0x1d6c/0x2d50 [ 1364.226474][T21031] ? __pfx_wiphy_register+0x10/0x10 [ 1364.226500][T21031] ? __pfx_netdev_run_todo+0x10/0x10 [ 1364.226529][T21031] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1364.226558][T21031] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1364.226595][T21031] ieee80211_register_hw+0x34d2/0x4150 [ 1364.226613][T21031] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.226646][T21031] ? ieee80211_register_hw+0x13d1/0x4150 [ 1364.226674][T21031] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1364.226710][T21031] ? __hrtimer_setup+0x181/0x200 [ 1364.226736][T21031] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1364.226763][T21031] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1364.226827][T21031] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1364.226857][T21031] ? kstrndup+0xbf/0x160 [ 1364.226898][T21031] hwsim_new_radio_nl+0xf85/0x1c30 [ 1364.226937][T21031] ? __pfx___nla_validate_parse+0x10/0x10 [ 1364.226973][T21031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1364.227012][T21031] ? rcu_is_watching+0x15/0xb0 [ 1364.227043][T21031] ? __nla_parse+0x40/0x60 [ 1364.227067][T21031] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1364.227106][T21031] genl_family_rcv_msg_doit+0x22a/0x330 [ 1364.227143][T21031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1364.227185][T21031] ? bpf_lsm_capable+0x9/0x20 [ 1364.227209][T21031] ? security_capable+0x7e/0x2c0 [ 1364.227242][T21031] genl_rcv_msg+0x61c/0x7a0 [ 1364.227274][T21031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1364.227298][T21031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1364.227328][T21031] ? __pfx_ref_tracker_free+0x10/0x10 [ 1364.227364][T21031] netlink_rcv_skb+0x232/0x4b0 [ 1364.227388][T21031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1364.227417][T21031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1364.227437][T21031] ? genl_rcv+0x19/0x40 [ 1364.227481][T21031] ? down_read+0x272/0x2e0 [ 1364.227500][T21031] ? genl_rcv+0xd/0x40 [ 1364.227528][T21031] genl_rcv+0x28/0x40 [ 1364.227553][T21031] netlink_unicast+0x80f/0x9b0 [ 1364.227593][T21031] ? __pfx_netlink_unicast+0x10/0x10 [ 1364.227621][T21031] ? __alloc_skb+0x193/0x390 [ 1364.227645][T21031] ? netlink_sendmsg+0x650/0xb40 [ 1364.227664][T21031] ? skb_put+0x11b/0x210 [ 1364.227698][T21031] netlink_sendmsg+0x813/0xb40 [ 1364.227731][T21031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1364.227757][T21031] ? __asan_memset+0x22/0x50 [ 1364.227786][T21031] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1364.227817][T21031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1364.227836][T21031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1364.227868][T21031] __sock_sendmsg+0x21c/0x270 [ 1364.227897][T21031] ____sys_sendmsg+0x4d7/0x810 [ 1364.227928][T21031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1364.227964][T21031] ___sys_sendmsg+0x2a5/0x360 [ 1364.227983][T21031] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.228008][T21031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1364.228038][T21031] ? futex_wait+0x29a/0x380 [ 1364.228094][T21031] ? __fget_files+0x2a/0x420 [ 1364.228120][T21031] ? __fget_files+0x3a0/0x420 [ 1364.228158][T21031] __sys_sendmsg+0x183/0x260 [ 1364.228181][T21031] ? __pfx___sys_sendmsg+0x10/0x10 [ 1364.228212][T21031] ? rcu_is_watching+0x15/0xb0 [ 1364.228252][T21031] __do_fast_syscall_32+0x1d2/0x540 [ 1364.228283][T21031] ? lockdep_hardirqs_on+0x7a/0x110 [ 1364.228310][T21031] ? do_fast_syscall_32+0x33/0x70 [ 1364.228339][T21031] ? asm_int80_emulation+0x1a/0x20 [ 1364.228359][T21031] ? do_int80_emulation+0x20e/0x400 [ 1364.228394][T21031] do_fast_syscall_32+0x33/0x70 [ 1364.228425][T21031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1364.228451][T21031] RIP: 0023:0xf7fd7539 [ 1364.228470][T21031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1364.228488][T21031] RSP: 002b:00000000f545450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1364.228510][T21031] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 1364.228525][T21031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1364.228537][T21031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.228549][T21031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1364.228562][T21031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.228594][T21031] [ 1365.207800][T21034] input: syz0 as /devices/virtual/input/input72 [ 1365.877148][T21051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1366.082170][T21059] netlink: 'syz.1.3046': attribute type 2 has an invalid length. [ 1366.192692][T21062] netlink: 'syz.1.3046': attribute type 2 has an invalid length. [ 1366.376310][T21064] netlink: 'syz.4.3050': attribute type 1 has an invalid length. [ 1366.715872][T21059] !: entered promiscuous mode [ 1366.850284][T21062] !: left promiscuous mode [ 1367.227037][T21069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1367.295828][T21069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.323714][T21069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.401091][T21069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.425685][T21069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.575401][T21074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.592086][T21074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.634351][T21074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 1368.506850][T21088] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1369.199638][T21091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.246070][T21091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.655064][ T5899] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1369.814951][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1369.824441][ T5899] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 1369.835495][ T5899] usb 4-1: config 0 has no interface number 0 [ 1369.848713][ T5899] usb 4-1: config 0 interface 249 has no altsetting 0 [ 1369.869440][ T5899] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 1369.885045][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.904474][ T5899] usb 4-1: Product: syz [ 1369.913063][ T5899] usb 4-1: Manufacturer: syz [ 1369.924366][ T5899] usb 4-1: SerialNumber: syz [ 1369.938722][ T5899] usb 4-1: config 0 descriptor?? [ 1370.635961][T21106] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1370.666423][T21106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.679745][T21106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.756148][T21099] F2FS-fs: Conflicting test_dummy_encryption options [ 1372.021945][T21114] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1372.204734][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.255480][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.445089][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.471578][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.583428][ T5899] usb 4-1: USB disconnect, device number 84 [ 1372.946993][T21132] Cannot find add_set index 3 as target [ 1373.460278][T21141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.592770][T21141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.855378][T21143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1374.891708][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.906774][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.953367][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.968947][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.382940][T21152] fuse: Unknown parameter '0x0000000000000007' [ 1376.563506][T21163] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1376.654941][T21163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.684093][T21163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.843977][T21165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.884299][T21171] input: syz0 as /devices/virtual/input/input73 [ 1376.929802][T21165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.647423][T21179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.662499][T21179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.985790][T21191] debugfs: '1^!l1*$pOcɔ' already exists in 'ieee80211' [ 1381.438654][T21223] Cannot find add_set index 3 as target [ 1381.709794][T21220] fuse: Unknown parameter '0x0000000000000007' [ 1383.207566][T21235] input: syz0 as /devices/virtual/input/input74 [ 1384.209678][T21239] input: syz0 as /devices/virtual/input/input75 [ 1384.613035][T21257] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1384.643577][T21258] input: syz0 as /devices/virtual/input/input76 [ 1385.016334][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.114943][T21268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.123702][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.141382][T21268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.288272][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.407935][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.651115][T21275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.670952][T21275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.692777][T21275] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1385.714389][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3092'. [ 1387.209180][T21293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.964487][ T30] audit: type=1326 audit(1769223034.186:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21264 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1388.052027][T21308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1388.074273][T21312] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1388.135312][T21312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.146527][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.157803][T21312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.166007][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.232970][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.262419][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.287735][T21315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.331902][T21315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.708155][T21317] input: syz0 as /devices/virtual/input/input77 [ 1390.043022][T21334] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 1390.055351][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.3.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.055384][T21334] Tainted: [L]=SOFTLOCKUP [ 1390.055392][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1390.055405][T21334] Call Trace: [ 1390.055413][T21334] [ 1390.055421][T21334] dump_stack_lvl+0xe8/0x150 [ 1390.055441][T21334] sysfs_warn_dup+0x8e/0xa0 [ 1390.055453][T21334] sysfs_do_create_link_sd+0xc0/0x110 [ 1390.055467][T21334] device_add_class_symlinks+0x1cf/0x240 [ 1390.055487][T21334] device_add+0x475/0xb70 [ 1390.055505][T21334] wiphy_register+0x1d6c/0x2d50 [ 1390.055528][T21334] ? __pfx_wiphy_register+0x10/0x10 [ 1390.055542][T21334] ? __pfx_netdev_run_todo+0x10/0x10 [ 1390.055560][T21334] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1390.055579][T21334] ieee80211_register_hw+0x34d2/0x4150 [ 1390.055598][T21334] ? ieee80211_register_hw+0x13d1/0x4150 [ 1390.055614][T21334] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1390.055634][T21334] ? __hrtimer_setup+0x181/0x200 [ 1390.055647][T21334] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1390.055661][T21334] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1390.055693][T21334] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1390.055708][T21334] ? kstrndup+0xbf/0x160 [ 1390.055725][T21334] hwsim_new_radio_nl+0xf85/0x1c30 [ 1390.055745][T21334] ? __pfx___nla_validate_parse+0x10/0x10 [ 1390.055763][T21334] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1390.055783][T21334] ? rcu_is_watching+0x15/0xb0 [ 1390.055798][T21334] ? __nla_parse+0x40/0x60 [ 1390.055810][T21334] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1390.055838][T21334] genl_family_rcv_msg_doit+0x22a/0x330 [ 1390.055871][T21334] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1390.055894][T21334] ? bpf_lsm_capable+0x9/0x20 [ 1390.055906][T21334] ? security_capable+0x7e/0x2c0 [ 1390.055923][T21334] genl_rcv_msg+0x61c/0x7a0 [ 1390.055941][T21334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.055955][T21334] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1390.055973][T21334] ? __pfx_ref_tracker_free+0x10/0x10 [ 1390.055994][T21334] netlink_rcv_skb+0x232/0x4b0 [ 1390.056013][T21334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.056039][T21334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1390.056059][T21334] ? genl_rcv+0x19/0x40 [ 1390.056083][T21334] ? down_read+0x272/0x2e0 [ 1390.056094][T21334] ? genl_rcv+0xd/0x40 [ 1390.056108][T21334] genl_rcv+0x28/0x40 [ 1390.056121][T21334] netlink_unicast+0x80f/0x9b0 [ 1390.056141][T21334] ? __pfx_netlink_unicast+0x10/0x10 [ 1390.056157][T21334] ? __alloc_skb+0x193/0x390 [ 1390.056179][T21334] ? netlink_sendmsg+0x650/0xb40 [ 1390.056190][T21334] ? skb_put+0x11b/0x210 [ 1390.056207][T21334] netlink_sendmsg+0x813/0xb40 [ 1390.056224][T21334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.056238][T21334] ? __asan_memset+0x22/0x50 [ 1390.056253][T21334] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1390.056268][T21334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1390.056278][T21334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.056291][T21334] __sock_sendmsg+0x21c/0x270 [ 1390.056307][T21334] ____sys_sendmsg+0x4d7/0x810 [ 1390.056323][T21334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.056342][T21334] ___sys_sendmsg+0x2a5/0x360 [ 1390.056352][T21334] ? __lock_acquire+0x6b5/0x2cf0 [ 1390.056366][T21334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.056384][T21334] ? futex_wait+0x29a/0x380 [ 1390.056435][T21334] ? __fget_files+0x2a/0x420 [ 1390.056451][T21334] ? __fget_files+0x3a0/0x420 [ 1390.056470][T21334] __sys_sendmsg+0x183/0x260 [ 1390.056482][T21334] ? __pfx___sys_sendmsg+0x10/0x10 [ 1390.056497][T21334] ? rcu_is_watching+0x15/0xb0 [ 1390.056518][T21334] __do_fast_syscall_32+0x1d2/0x540 [ 1390.056533][T21334] ? do_fast_syscall_32+0x33/0x70 [ 1390.056548][T21334] ? irqentry_exit+0x10e/0x620 [ 1390.056562][T21334] ? rcu_is_watching+0x15/0xb0 [ 1390.056577][T21334] do_fast_syscall_32+0x33/0x70 [ 1390.056592][T21334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1390.056606][T21334] RIP: 0023:0xf73fd539 [ 1390.056617][T21334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1390.056627][T21334] RSP: 002b:00000000f53e450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1390.056640][T21334] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 1390.056648][T21334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1390.056655][T21334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1390.056661][T21334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1390.056668][T21334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.056684][T21334] [ 1390.917742][T21344] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1390.934578][T21344] bridge0: entered promiscuous mode [ 1390.943897][T21344] bridge0: entered allmulticast mode [ 1391.079964][T21349] input: syz0 as /devices/virtual/input/input78 [ 1391.154398][T21355] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1391.596981][T21359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.609285][T21359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.255249][T21371] fuse: Unknown parameter 'fd0x0000000000000007' [ 1394.062596][T21375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1394.087653][T21381] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1394.200940][T21384] hub 1-0:1.0: USB hub found [ 1394.219990][T21384] hub 1-0:1.0: 1 port detected [ 1394.225423][T21383] SET target dimension over the limit! [ 1394.262526][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1394.355063][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1394.425016][T19532] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1394.436279][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1394.455248][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1394.545213][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1394.615141][T19532] usb 1-1: device descriptor read/64, error -32 [ 1394.745100][T19532] raw-gadget.2 gadget.0: failed to queue suspend event [ 1394.752379][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1394.855228][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1394.931430][T19532] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1394.943040][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1394.966000][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1395.105233][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1395.207480][T19532] usb 1-1: device descriptor read/64, error -32 [ 1395.326038][T19532] raw-gadget.2 gadget.0: failed to queue suspend event [ 1395.333218][T19532] usb usb1-port1: attempt power cycle [ 1395.343329][T19532] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1395.361881][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1395.435150][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1395.442663][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1395.655524][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1395.715844][T19532] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1395.769075][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1395.788603][T19532] usb 1-1: device descriptor read/8, error -32 [ 1395.915059][T19532] raw-gadget.2 gadget.0: failed to queue suspend event [ 1395.925503][T19532] raw-gadget.2 gadget.0: failed to queue reset event [ 1396.005255][T19532] raw-gadget.2 gadget.0: failed to queue resume event [ 1396.065118][T19532] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1396.095171][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1396.102414][T19532] usb 1-1: device descriptor read/8, error -32 [ 1396.215031][T19532] raw-gadget.2 gadget.0: failed to queue suspend event [ 1396.224795][T19532] usb usb1-port1: unable to enumerate USB device [ 1397.120228][T21415] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1397.140268][T21415] bridge0: entered promiscuous mode [ 1397.147268][T21415] bridge0: entered allmulticast mode [ 1397.190672][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3119'. [ 1398.086527][ T6228] hid (null): unknown global tag 0xd [ 1398.092511][ T6228] hid (null): unknown global tag 0x7d [ 1398.117137][ T6228] hid (null): report_id 40248 is invalid [ 1398.131892][ T6228] hid (null): unknown global tag 0xfe [ 1398.143351][T21432] bridge0: left allmulticast mode [ 1398.149185][ T6228] hid (null): unknown global tag 0xd [ 1398.164946][ T6228] hid (null): unknown global tag 0xc4 [ 1398.187961][ T6228] hid (null): unknown global tag 0xe [ 1398.208702][ T6228] hid (null): unknown global tag 0xe [ 1398.238085][ T6228] hid (null): unknown global tag 0xb2 [ 1398.264457][ T6228] hid (null): report_id 334925566 is invalid [ 1398.285149][ T6228] hid (null): unknown global tag 0xc [ 1398.300392][ T6228] hid (null): report_id 0 is invalid [ 1398.310766][ T6228] hid (null): unknown global tag 0xe [ 1398.322608][ T6228] hid (null): invalid report_size 1650067927 [ 1398.338417][ T6228] hid (null): report_id 44173 is invalid [ 1398.351234][ T6228] hid (null): invalid report_size 7251 [ 1398.361636][ T6228] hid (null): unknown global tag 0xe [ 1398.373824][ T6228] hid (null): unknown global tag 0xd [ 1398.393099][ T6228] hid (null): unknown global tag 0xc [ 1398.410753][ T6228] hid (null): report_id 22022 is invalid [ 1398.426282][ T6228] hid (null): unknown global tag 0x72 [ 1398.440774][ T6228] hid (null): unknown global tag 0xe [ 1398.453059][ T6228] hid (null): unknown global tag 0xc [ 1398.471804][ T6228] hid (null): report_id 0 is invalid [ 1398.485287][ T6228] hid (null): unknown global tag 0xf1 [ 1398.535071][ T6228] hid (null): unknown global tag 0xe [ 1398.572434][ T6228] hid (null): global environment stack underflow [ 1398.589214][ T6228] hid (null): bogus close delimiter [ 1398.594479][ T6228] hid (null): report_id 25647 is invalid [ 1398.615450][ T6228] hid (null): global environment stack underflow [ 1398.644904][ T6228] hid (null): unknown global tag 0xe [ 1398.650494][ T6228] hid (null): unknown global tag 0xd [ 1398.706862][ T6228] hid_parser_main: 5 callbacks suppressed [ 1398.706878][ T6228] hid-generic 0058:00FF:0006.0031: unknown main item tag 0x1 [ 1398.731883][ T6228] hid-generic 0058:00FF:0006.0031: unexpected long global item [ 1398.749346][ T6228] hid-generic 0058:00FF:0006.0031: probe with driver hid-generic failed with error -22 [ 1399.267556][T21440] fuse: Unknown parameter 'fd0x0000000000000007' [ 1399.282050][T21441] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1399.564667][T21445] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 1400.725646][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1400.796153][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1400.853561][T21462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.874980][ T5899] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1400.883061][ T6228] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1400.901495][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1400.910734][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1400.955805][T21462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.985222][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1401.044931][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1401.110510][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1401.132449][ T5899] usb 4-1: not running at top speed; connect to a high speed hub [ 1401.169394][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.181263][T21465] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1401.190161][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1401.207975][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.208255][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1401.292311][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1401.352687][ T5899] usb 4-1: string descriptor 0 read error: -22 [ 1401.364511][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1401.382831][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.400026][ T6228] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1401.410055][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1401.439019][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1401.452497][ T5899] usb 4-1: 0:2 : does not exist [ 1401.547204][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1401.611120][T21465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.626857][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1401.692745][T21465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.755023][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1401.765215][ T6228] usb usb1-port1: attempt power cycle [ 1401.770725][ T6228] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1401.782275][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1401.863237][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1401.875558][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1402.095162][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1402.098661][T21474] input: syz0 as /devices/virtual/input/input79 [ 1402.162757][T21477] debugfs: '1^!l1*$pOcɔr$Gt' already exists in 'ieee80211' [ 1402.250861][ T6228] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1402.285400][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1402.314264][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1402.436341][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1402.443769][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1402.516387][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1402.585069][ T6228] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1402.605737][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1402.613010][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1402.636366][ T5899] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1402.658107][ T5899] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1402.676070][ T5899] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1402.720675][ T5899] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1402.725092][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1402.737008][ T6228] usb usb1-port1: unable to enumerate USB device [ 1402.765015][ T5899] usb 4-1: USB disconnect, device number 85 [ 1402.937039][T21463] hub 1-0:1.0: USB hub found [ 1402.948577][T21463] hub 1-0:1.0: 1 port detected [ 1402.973126][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1403.055910][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1403.115100][ T6228] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1403.145435][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1403.153631][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1403.225181][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1403.285418][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1403.396157][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1403.415440][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1403.485441][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1403.568562][ T6228] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1403.577336][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1403.587152][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1403.657574][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1403.745015][ T6228] usb 1-1: device descriptor read/64, error -32 [ 1403.864991][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1403.915716][ T6228] usb usb1-port1: attempt power cycle [ 1403.925138][ T6228] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1403.953144][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1403.985616][T21494] netlink: 'syz.3.3132': attribute type 2 has an invalid length. [ 1404.037291][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1404.056249][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1404.175753][T21493] netlink: 'syz.3.3132': attribute type 2 has an invalid length. [ 1404.194641][T21494] !: entered promiscuous mode [ 1404.225591][T21493] !: left promiscuous mode [ 1404.275040][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1404.335019][ T6228] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1404.375233][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1404.382429][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1404.495000][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1404.507581][ T6228] raw-gadget.2 gadget.0: failed to queue reset event [ 1404.600184][ T6228] raw-gadget.2 gadget.0: failed to queue resume event [ 1404.724983][ T6228] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1404.765240][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1404.772650][ T6228] usb 1-1: device descriptor read/8, error -32 [ 1404.861894][T21506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1404.872125][T21506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1404.884985][ T6228] raw-gadget.2 gadget.0: failed to queue suspend event [ 1404.892076][ T6228] usb usb1-port1: unable to enumerate USB device [ 1405.729867][T21520] fuse: Unknown parameter 'fd0x0000000000000007' [ 1406.474059][T21524] tipc: Enabling of bearer rejected, already enabled [ 1406.512305][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 1406.553386][T21522] tipc: Disabling bearer [ 1406.920076][T21529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.931007][T21529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.986291][T21529] netlink: 63 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1407.419701][T21541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.439506][T21541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.468860][T21541] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1407.499556][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3142'. [ 1407.581004][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 1407.692754][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1407.706224][T21547] usb usb8: usbfs: process 21547 (syz.4.3140) did not claim interface 0 before use [ 1407.765011][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1407.824993][ T5899] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1407.851098][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1407.865106][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1407.965450][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1408.035727][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1408.162010][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1408.172553][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1408.274984][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1408.345004][ T5899] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1408.354126][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1408.376048][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1408.455019][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1408.545283][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1408.656192][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1408.675017][ T5899] usb usb1-port1: attempt power cycle [ 1408.697771][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1408.716141][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1408.785131][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1408.792748][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1409.054945][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1409.139772][ T5899] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1409.167201][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1409.174685][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1409.285048][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1409.306217][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1409.396325][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1409.465032][ T5899] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1409.495219][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1409.502401][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1409.617266][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1409.625319][ T5899] usb usb1-port1: unable to enumerate USB device [ 1409.761149][T21543] hub 1-0:1.0: USB hub found [ 1409.856595][T21543] hub 1-0:1.0: 1 port detected [ 1409.997983][T21578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.007650][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1410.028091][T21578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.099397][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1410.166289][T21580] pimreg: entered allmulticast mode [ 1410.180754][ T5899] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1410.201769][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1410.209472][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1410.285111][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1410.345191][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1410.479843][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1410.502120][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1410.585014][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1410.668311][ T5899] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1410.689218][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1410.696732][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1410.776375][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1410.837731][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1410.955024][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1410.962744][ T5899] usb usb1-port1: attempt power cycle [ 1410.973795][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1410.993974][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1411.075122][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1411.126552][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1411.133857][T21573] pimreg: left allmulticast mode [ 1411.345116][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1411.406738][ T5899] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1411.435159][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1411.445643][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1411.575140][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1411.582463][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1411.667831][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1411.711965][T21588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1411.735982][ T5899] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1411.766047][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1411.773234][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1411.807085][T21588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.830544][T21588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.885480][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1411.908114][ T5899] usb usb1-port1: unable to enumerate USB device [ 1412.005184][T21588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.014329][T21588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.925337][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1412.995045][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1413.066934][ T5899] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1413.077213][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1413.085463][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1413.155092][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1413.225516][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1413.355364][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1413.367441][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1413.445071][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1413.493629][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.525183][ T5899] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1413.547470][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1413.566380][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1413.594551][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.675015][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1413.728321][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.736858][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1413.778216][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.816230][T21613] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1413.845117][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1413.885575][ T5899] usb usb1-port1: attempt power cycle [ 1413.895133][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1413.906693][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1413.985077][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1413.992189][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1414.204997][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1414.305141][ T5899] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1414.345198][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1414.352679][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1414.495147][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1414.511553][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1414.596296][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1414.665069][ T5899] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1414.705801][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1414.724657][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1414.845026][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1414.865185][ T5899] usb usb1-port1: unable to enumerate USB device [ 1414.905671][T21627] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3158'. [ 1415.021798][T21608] hub 1-0:1.0: USB hub found [ 1415.033500][T21608] hub 1-0:1.0: 1 port detected [ 1415.057823][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1415.076847][T21630] input: syz0 as /devices/virtual/input/input80 [ 1415.151301][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1415.225060][ T5899] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1415.234217][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1415.263222][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1415.345022][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1415.407872][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1415.525068][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1415.532825][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1415.605047][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1415.675239][ T5899] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1415.696681][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1415.723307][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1415.749059][T21644] ip6t_REJECT: ECHOREPLY is not supported [ 1415.805014][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1415.880288][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1415.995293][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1416.018503][ T5899] usb usb1-port1: attempt power cycle [ 1416.028050][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1416.059049][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1416.135134][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1416.155713][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1416.395006][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1416.477338][ T5899] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1416.515140][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1416.522422][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1416.637152][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1416.654521][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1416.735610][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1416.815921][ T5899] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1416.855268][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1416.862859][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1416.985343][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1417.007698][ T5899] usb usb1-port1: unable to enumerate USB device [ 1417.298230][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1417.375735][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1417.444998][ T5899] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1417.460777][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1417.481220][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1417.505145][ T6228] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1417.565047][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1417.634995][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1417.665059][ T6228] usb 4-1: Using ep0 maxpacket: 32 [ 1417.672346][ T6228] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1417.690731][ T6228] usb 4-1: config 0 has no interface number 0 [ 1417.713879][ T6228] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.744494][ T6228] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.745117][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1417.789183][ T6228] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1417.789425][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1417.838230][ T6228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.868072][ T6228] usb 4-1: config 0 descriptor?? [ 1417.956157][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1418.035441][ T5899] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1418.062315][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1418.086090][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1418.165511][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1418.238936][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1418.365039][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1418.378019][ T5899] usb usb1-port1: attempt power cycle [ 1418.385918][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1418.401388][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1418.490850][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1418.505459][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1418.563861][ T6228] uclogic 0003:28BD:0094.0032: pen parameters not found [ 1418.571008][ T6228] uclogic 0003:28BD:0094.0032: interface is invalid, ignoring [ 1418.735017][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1418.795634][ T5899] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1418.799842][T21661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.815156][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1418.815250][T21661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.824335][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1418.880009][T19532] usb 4-1: USB disconnect, device number 86 [ 1418.945058][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1418.953788][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1419.025037][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1419.117198][ T5899] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1419.163632][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1419.170856][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1419.284991][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1419.292030][ T5899] usb usb1-port1: unable to enumerate USB device [ 1419.315699][T21666] hub 1-0:1.0: USB hub found [ 1419.332949][T21666] hub 1-0:1.0: 1 port detected [ 1419.344262][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1419.425078][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1419.500083][ T5899] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1419.508139][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1419.515489][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1419.585065][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1419.646797][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1419.765021][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1419.777417][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1419.856195][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1419.925003][ T5899] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1419.935261][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1419.950109][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1420.035021][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1420.105453][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1420.225094][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1420.238985][ T5899] usb usb1-port1: attempt power cycle [ 1420.271968][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1420.299359][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1420.405004][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1420.456407][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1420.686606][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1420.697595][T21689] fuse: Unknown parameter 'ԉFfd' [ 1420.765053][ T5899] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1420.785256][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1420.803207][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1420.925209][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1420.947320][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1421.034994][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1421.145005][ T5899] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1421.166199][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1421.173388][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1421.262585][T21695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.285036][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1421.292334][ T5899] usb usb1-port1: unable to enumerate USB device [ 1421.300309][T21695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.312871][T21697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1421.390518][T21698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.410376][T21698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.444181][T21697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.463265][T21697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.540279][T21703] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.592038][T21705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.605367][T21705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.655328][T21698] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 1421.655814][T21695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1421.661963][T21698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1421.719875][T21698] vhci_hcd vhci_hcd.0: Device attached [ 1421.720235][T21703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.786057][T21703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.895023][ T6228] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1421.970211][ T6228] usb 35-6: new full-speed USB device number 3 using vhci_hcd [ 1422.090597][T21716] debugfs: '1^!l1*$pOcɔr$Gt' already exists in 'ieee80211' [ 1422.639883][T21719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1422.775668][T21719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.786243][T21719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.925418][T21720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.939053][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.946374][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.956629][T21720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.248797][T21723] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1423.548212][ T5913] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1423.734664][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1423.749189][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1423.765331][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1423.778318][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1423.871538][ T5913] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1423.885242][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.896715][ T5913] usb 4-1: Product: syz [ 1423.902739][ T5913] usb 4-1: Manufacturer: syz [ 1423.910804][ T5913] usb 4-1: SerialNumber: syz [ 1423.960320][ T5913] usb 4-1: config 0 descriptor?? [ 1423.968125][ T5913] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1423.981106][ T5913] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1423.991334][ T5913] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1424.198779][T21723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.223599][T21723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.233909][ T5899] usb 4-1: USB disconnect, device number 87 [ 1424.597590][T21732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'. [ 1424.625946][T21729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.636831][T21729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.124927][T21706] vhci_hcd: connection reset by peer [ 1425.130923][T17265] vhci_hcd vhci_hcd.1: stop threads [ 1425.136332][T17265] vhci_hcd vhci_hcd.1: release socket [ 1425.157639][T17265] vhci_hcd vhci_hcd.1: disconnect device [ 1426.194614][T21753] fuse: Unknown parameter 'group_id00000000000000000000' [ 1426.413587][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1426.495146][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1426.583669][ T5913] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1426.612616][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1426.623944][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1426.709219][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1426.793072][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1426.935076][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1426.959459][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1427.065054][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1427.105068][ T6228] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1427.135642][ T5913] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1427.158527][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1427.181080][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1427.248954][T21762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.305142][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1427.385025][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1427.497739][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1427.509233][ T5913] usb usb1-port1: attempt power cycle [ 1427.533314][ T5913] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1427.548508][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1427.675097][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1427.686369][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1427.831517][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1427.841958][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1427.915345][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1427.985123][ T5913] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1428.026296][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1428.048501][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1428.165019][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1428.177336][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1428.255009][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1428.334997][ T5913] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1428.375152][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1428.383514][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1428.517058][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1428.537898][ T5913] usb usb1-port1: unable to enumerate USB device [ 1428.698241][T21756] hub 1-0:1.0: USB hub found [ 1428.733138][T21756] hub 1-0:1.0: 1 port detected [ 1428.758535][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1428.839138][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1428.905749][ T5913] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1428.917541][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1428.926708][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1429.005040][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1429.047406][T21780] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 1429.065562][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1429.175068][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1429.175511][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1429.245130][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1429.308883][ T5913] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1429.319788][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1429.327489][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1429.394989][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1429.454950][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1429.580904][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1429.608304][ T5913] usb usb1-port1: attempt power cycle [ 1429.613731][ T5913] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1429.649592][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1429.738387][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1429.756698][T21785] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1429.772775][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1429.893006][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.945665][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.985041][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1429.994534][T21788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1430.044938][T21788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.055456][ T5913] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1430.063295][T21788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.088875][T21786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.105215][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1430.112531][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1430.112772][T21786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.215028][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1430.223770][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1430.243861][T21791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.258937][T21791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.260974][T21793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1430.295721][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1430.375042][ T5913] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1430.435239][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1430.442375][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1430.534991][ T5899] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1430.577424][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1430.584740][ T5913] usb usb1-port1: unable to enumerate USB device [ 1430.696904][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1430.707411][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1430.740630][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1430.760266][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1430.775338][ T5899] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1430.785392][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.793551][ T5899] usb 4-1: Product: syz [ 1430.799297][ T5899] usb 4-1: Manufacturer: syz [ 1430.806333][ T5899] usb 4-1: SerialNumber: syz [ 1430.816125][ T5899] usb 4-1: config 0 descriptor?? [ 1430.827175][ T5899] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1430.836470][ T5899] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1430.846780][ T5899] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1430.899069][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1430.975525][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1431.039584][ T5899] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1431.052155][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1431.059633][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1431.135225][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1431.162089][T21807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.204955][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1431.222499][T21807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.325947][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1431.334255][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1431.404986][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1431.465784][ T5899] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1431.476684][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1431.484524][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1431.555003][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1431.615075][ T5899] usb 1-1: device descriptor read/64, error -32 [ 1431.725273][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1431.732458][ T5899] usb usb1-port1: attempt power cycle [ 1431.739588][ T5899] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1431.749019][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1431.835065][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1431.842978][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1431.977105][T21809] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1431.995859][T21809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.004581][T21809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.055029][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1432.083735][T21811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.093797][T21811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.115066][ T5899] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1432.135349][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1432.142695][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1432.265464][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1432.272906][ T5899] raw-gadget.2 gadget.0: failed to queue reset event [ 1432.344983][ T5899] raw-gadget.2 gadget.0: failed to queue resume event [ 1432.404997][ T5899] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1432.425154][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1432.432449][ T5899] usb 1-1: device descriptor read/8, error -32 [ 1432.545000][ T5899] raw-gadget.2 gadget.0: failed to queue suspend event [ 1432.552207][ T5899] usb usb1-port1: unable to enumerate USB device [ 1432.566114][T21804] hub 1-0:1.0: USB hub found [ 1432.572943][T21804] hub 1-0:1.0: 1 port detected [ 1432.584842][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1432.675500][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1432.745075][ T5913] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1432.756200][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1432.763377][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1432.845130][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1432.905025][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1433.017033][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1433.033871][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1433.115435][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1433.190968][ T5913] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1433.205961][T21817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.216878][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1433.224198][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1433.231695][T21817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.258302][T21817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.285933][T21817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.295244][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1433.374960][ T5913] usb 1-1: device descriptor read/64, error -32 [ 1433.398706][ T5899] usb 4-1: USB disconnect, device number 88 [ 1433.499035][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1433.522255][ T5913] usb usb1-port1: attempt power cycle [ 1433.549296][ T5913] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1433.567506][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1433.655240][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1433.674539][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1433.905582][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1433.975008][ T5913] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1433.992733][T21826] debugfs: '1^!l1*$pOcɔr$Gt:' already exists in 'ieee80211' [ 1434.010704][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1434.029501][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1434.145086][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1434.162673][ T5913] raw-gadget.2 gadget.0: failed to queue reset event [ 1434.234973][ T5913] raw-gadget.2 gadget.0: failed to queue resume event [ 1434.295819][ T5913] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1434.333527][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1434.341110][ T5913] usb 1-1: device descriptor read/8, error -32 [ 1434.455896][ T5913] raw-gadget.2 gadget.0: failed to queue suspend event [ 1434.463205][ T5913] usb usb1-port1: unable to enumerate USB device [ 1436.711712][T21865] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1436.790266][T21859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.862740][T21859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.894653][T21865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.918751][T21865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.006682][T21862] bridge_slave_1: entered promiscuous mode [ 1437.040641][T21867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.096996][T21867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.588901][T21879] netlink: 'syz.3.3208': attribute type 4 has an invalid length. [ 1438.596939][T21879] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1438.768641][T21881] delete_channel: no stack [ 1439.681510][T21890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1441.189091][T21903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1441.256474][T21903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.289899][T21903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.436677][T21905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.445927][T21905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.496172][ T31] INFO: task kworker/1:2:19995 blocked for more than 143 seconds. [ 1441.508635][ T31] Tainted: G L syzkaller #0 [ 1441.533987][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1441.543924][ T31] task:kworker/1:2 state:D stack:26520 pid:19995 tgid:19995 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1441.569682][ T31] Workqueue: usb_hub_wq hub_event [ 1441.574817][ T31] Call Trace: [ 1441.578807][ T31] [ 1441.581823][ T31] __schedule+0x14ef/0x4fb0 [ 1441.589371][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1441.595494][ T31] ? __pfx___schedule+0x10/0x10 [ 1441.601709][ T31] ? schedule+0x90/0x360 [ 1441.606684][ T31] schedule+0x164/0x360 [ 1441.611874][ T31] schedule_preempt_disabled+0x13/0x30 [ 1441.619514][ T31] __mutex_lock+0x7fe/0x1300 [ 1441.624480][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1441.630689][ T31] ? hub_event+0x21a2/0x4f30 [ 1441.637406][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1441.643804][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1441.651232][ T31] hub_event+0x21a2/0x4f30 [ 1441.657108][ T31] ? __pfx_hub_event+0x10/0x10 [ 1441.663379][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1441.671170][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1441.677505][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1441.684665][ T31] process_scheduled_works+0xaec/0x17a0 [ 1441.691915][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1441.700170][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1441.707897][ T31] ? assign_work+0x3d3/0x440 [ 1441.714046][ T31] worker_thread+0x89f/0xd90 [ 1441.720036][ T31] ? __kthread_parkme+0x7a/0x1f0 [ 1441.731671][ T31] kthread+0x726/0x8b0 [ 1441.737172][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1441.743870][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.750672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1441.756585][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.761246][ T31] ret_from_fork+0x51b/0xa40 [ 1441.766524][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1441.772563][ T31] ? __switch_to+0xc82/0x1410 [ 1441.778558][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.784047][ T31] ret_from_fork_asm+0x1a/0x30 [ 1441.790150][ T31] [ 1441.793860][ T31] [ 1441.793860][ T31] Showing all locks held in the system: [ 1441.801794][ T31] 1 lock held by khungtaskd/31: [ 1441.806855][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1441.816939][ T31] 2 locks held by getty/5599: [ 1441.821677][ T31] #0: ffff8880307610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1441.833915][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1441.846566][ T31] 2 locks held by syz-executor/5855: [ 1441.852557][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 1441.867956][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1441.878959][ T31] 5 locks held by kworker/0:2/12499: [ 1441.885502][ T31] #0: ffff8880206f2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1441.899298][ T31] #1: ffffc9001c61fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1441.913732][ T31] #2: ffff888144f31198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1441.924758][ T31] #3: ffff888144f34518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1441.937728][ T31] #4: ffff888144bdbc68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1441.949611][ T31] 5 locks held by kworker/1:2/19995: [ 1441.956195][ T31] #0: ffff8880206f2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1441.970554][ T31] #1: ffffc9000ba77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1441.985407][ T31] #2: ffff888029a65198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1442.000577][ T31] #3: ffff888144ba8518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1442.014984][ T31] #4: ffff888144bdbc68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1442.026490][ T31] 2 locks held by syz.3.3208/21881: [ 1442.032703][ T31] 1 lock held by syz.2.3210/21883: [ 1442.039322][ T31] #0: ffffffff8e360b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1442.052028][ T31] 1 lock held by syz.2.3210/21887: [ 1442.058222][ T31] 1 lock held by syz.0.3213/21902: [ 1442.065218][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 1442.078568][ T31] [ 1442.081913][ T31] ============================================= [ 1442.081913][ T31] [ 1442.094931][ T31] NMI backtrace for cpu 1 [ 1442.094953][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.094978][ T31] Tainted: [L]=SOFTLOCKUP [ 1442.094984][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1442.094996][ T31] Call Trace: [ 1442.095004][ T31] [ 1442.095014][ T31] dump_stack_lvl+0xe8/0x150 [ 1442.095038][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1442.095050][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.095062][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1442.095075][ T31] sys_info+0x135/0x170 [ 1442.095084][ T31] watchdog+0xf90/0xfe0 [ 1442.095100][ T31] ? watchdog+0x209/0xfe0 [ 1442.095116][ T31] kthread+0x726/0x8b0 [ 1442.095130][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.095145][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.095159][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.095172][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.095184][ T31] ret_from_fork+0x51b/0xa40 [ 1442.095196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.095205][ T31] ? __switch_to+0xc82/0x1410 [ 1442.095221][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.095233][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.095253][ T31] [ 1442.095257][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1442.220794][ C0] NMI backtrace for cpu 0 [ 1442.220812][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.220833][ C0] Tainted: [L]=SOFTLOCKUP [ 1442.220840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1442.220851][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1442.220876][ C0] Code: 28 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1442.220891][ C0] RSP: 0000:ffffffff8e007dc0 EFLAGS: 00000246 [ 1442.220905][ C0] RAX: 0000000002ab3bc3 RBX: ffffffff819849ed RCX: 0000000080000001 [ 1442.220917][ C0] RDX: 0000000000000001 RSI: ffffffff8dacfa1b RDI: ffffffff8be73880 [ 1442.220928][ C0] RBP: ffffffff8e007eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1442.220940][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fced970 [ 1442.220951][ C0] R13: 1ffffffff1c12a78 R14: 0000000000000000 R15: 0000000000000000 [ 1442.220962][ C0] FS: 0000000000000000(0000) GS:ffff888125928000(0000) knlGS:0000000000000000 [ 1442.220975][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.220986][ C0] CR2: 00000000801b8018 CR3: 0000000029708000 CR4: 00000000003526f0 [ 1442.221000][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1442.221009][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1442.221020][ C0] Call Trace: [ 1442.221027][ C0] [ 1442.221034][ C0] default_idle+0x9/0x20 [ 1442.221048][ C0] default_idle_call+0x72/0xb0 [ 1442.221064][ C0] do_idle+0x1bd/0x500 [ 1442.221080][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1442.221100][ C0] ? __pfx_do_idle+0x10/0x10 [ 1442.221120][ C0] cpu_startup_entry+0x43/0x60 [ 1442.221136][ C0] rest_init+0x2de/0x300 [ 1442.221153][ C0] start_kernel+0x380/0x3d0 [ 1442.221171][ C0] x86_64_start_reservations+0x24/0x30 [ 1442.221193][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1442.221213][ C0] common_startup_64+0x13e/0x147 [ 1442.221239][ C0] [ 1442.455311][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.462189][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.472850][ T31] Tainted: [L]=SOFTLOCKUP [ 1442.477158][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1442.487199][ T31] Call Trace: [ 1442.490481][ T31] [ 1442.493399][ T31] vpanic+0x1e0/0x670 [ 1442.497370][ T31] panic+0xc5/0xd0 [ 1442.501086][ T31] ? __pfx_panic+0x10/0x10 [ 1442.505488][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1442.510860][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1442.517049][ T31] watchdog+0xfda/0xfe0 [ 1442.521233][ T31] ? watchdog+0x209/0xfe0 [ 1442.525589][ T31] kthread+0x726/0x8b0 [ 1442.529681][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.534382][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.538996][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.544214][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.548833][ T31] ret_from_fork+0x51b/0xa40 [ 1442.553444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.558573][ T31] ? __switch_to+0xc82/0x1410 [ 1442.563279][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.567892][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.572780][ T31] [ 1442.576141][ T31] Kernel Offset: disabled [ 1442.580468][ T31] Rebooting in 86400 seconds..