last executing test programs: 15m1.20714517s ago: executing program 4 (id=284): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15m1.05505384s ago: executing program 4 (id=285): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (fail_nth: 1) 15m0.784929334s ago: executing program 4 (id=289): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x135}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='1', 0xfffffffffffffc21, 0x10008095, 0x0, 0x21) 15m0.297003361s ago: executing program 4 (id=291): socket(0xa, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40603d10, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r9}) r10 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001680)) 14m58.576321498s ago: executing program 4 (id=299): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fa734e08f0030c0700000102030109021200010600200009047102d98e7c4900e3f68af1"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x36, 0x2, 0x10, "8baadc68379dd10000419d6bc2cb00", 0x32314742}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) cachestat(r4, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r6, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x28, 0x41, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208240505"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 14m54.069291633s ago: executing program 4 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000002c0)=""/143) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x4bfe9adb, r1, 0xd, {0x1, 0x7}, 0x40}, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000d0a010800000000000000000a0000010900020073797a3100eae404e8584ff4cab850995c5cbfd3a10002000900010073797a31000000002400038020000080080003400000000204000a80"], 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x8801) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 14m38.720495346s ago: executing program 32 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000002c0)=""/143) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x4bfe9adb, r1, 0xd, {0x1, 0x7}, 0x40}, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000d0a010800000000000000000a0000010900020073797a3100eae404e8584ff4cab850995c5cbfd3a10002000900010073797a31000000002400038020000080080003400000000204000a80"], 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x8801) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x0) 12m54.140798687s ago: executing program 0 (id=864): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f00000007c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1, 0x0, 0x1, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)}, {0x0}, {&(0x7f0000000440)}, {&(0x7f00000005c0)="f3f42e2be94442e2a37303a3797c578c045aaf191d8bd64d534fbe6a746abe542813a53cb57fb532434480260b478fb0cea2ff74bbb8e70cc842c2e24b24dbb654df6d3c449ae74afa5272f460c0eb2ff20c82178ef8827c6dd11cf1ae77ad3d762fa3722c377639628bc7f0fefc4c681879e41c743d54372e31ce8eb411defd833a35182af7bf62b7e28028e564a537889cda6604fdad4560d018e25689af2a67a289ce9e6a67d9cb6608164cecf769c81e4a69d4d9fa3b2d85d6aef981f16c53", 0xc1}, {&(0x7f00000003c0)="614e8b4020f03e9d86950aca7c9f", 0xe}, {&(0x7f0000000500)}], 0x6, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0xf542}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x682}}, @mark={{0x14, 0x1, 0x24, 0xa3}}, @txtime={{0x18, 0x1, 0x3d, 0x6b35}}], 0x78}, 0x40040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r7, @ANYBLOB="03000200000000000011070000000c001600f9ffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 12m54.021963457s ago: executing program 0 (id=865): syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="dbf797943688aaaaaaaaaa0086dd60f53ae3ff373a01fe8000000000000000000000000000bbff02000000000000000000000000000101009078800000006824b55003ff33fffe8000000000000000000000000000bbfc0000000000000000000000000000013b000400044003003c91e267c61d4a7bb56f0a99d8a51fb6cc9f526c005c091392ba930bd79bdaaa6b98d8b232fb7e69a43bec909676a32c9f4443e077996fe5c92161e125992c2297a816015aab73635b48c8b0b1b2ebd07d2e9174d474a93e2bb12403ee"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000093e455fdd7807eff8ec29decd6ea9d002018bca316e4633dd7000000000600000000000000000099af2a732a2e8745a93173f658c15db50f749835fcf69ea4d782b6651d0d90d22109aecb0e4b9b8b772f7c15cb907e3bd219ad9a0796df3b299274e3b04d364bfc33b54ecb5d678798fc846cb4dc95787e71372cbb537f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) 12m52.75835011s ago: executing program 0 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000600070000000900010073797a300000000060000000090a010400000000000000000700000008000840000400010900010073797a30000000001c000980100002800c0001800800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 12m52.650560527s ago: executing program 0 (id=869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x80000001, 0x6, 0x0, 0x500, 0x6, 0x150222}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d00000000a0a010100000000002000000a000009"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_destroy(r5) io_setup(0x8, &(0x7f0000000600)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x890b, &(0x7f0000000000)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88900) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) recvmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000540)=""/110, 0x6e}], 0x8, &(0x7f0000000900)=""/219, 0xdb}, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x0, @ax25={0x3, @bcast, 0x2}, @hci={0x1f, 0x2}, @llc={0x1a, 0x201, 0x8, 0x0, 0x6, 0x9e}, 0x10, 0x0, 0x0, 0x0, 0xa7a, &(0x7f0000000080)='veth1_vlan\x00', 0x6, 0x10000, 0x2}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 12m51.420858534s ago: executing program 0 (id=875): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f00000007c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1, 0x0, 0x1, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)}, {0x0}, {&(0x7f0000000440)}, {&(0x7f00000005c0)="f3f42e2be94442e2a37303a3797c578c045aaf191d8bd64d534fbe6a746abe542813a53cb57fb532434480260b478fb0cea2ff74bbb8e70cc842c2e24b24dbb654df6d3c449ae74afa5272f460c0eb2ff20c82178ef8827c6dd11cf1ae77ad3d762fa3722c377639628bc7f0fefc4c681879e41c743d54372e31ce8eb411defd833a35182af7bf62b7e28028e564a537889cda6604fdad4560d018e25689af2a67a289ce9e6a67d9cb6608164cecf769c81e4a69d4d9fa3b2d85d6aef981f16c53", 0xc1}, {&(0x7f00000003c0)="614e8b4020f03e9d86950aca7c9f", 0xe}, {&(0x7f0000000500)}], 0x6, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0xf542}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x682}}, @mark={{0x14, 0x1, 0x24, 0xa3}}, @txtime={{0x18, 0x1, 0x3d, 0x6b35}}], 0x78}, 0x40040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r7, @ANYBLOB="03000200000000000011070000000c001600f9ffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 12m51.092302353s ago: executing program 0 (id=878): syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="dbf797943688aaaaaaaaaa0086dd60f53ae3ff373a01fe8000000000000000000000000000bbff02000000000000000000000000000101009078800000006824b55003ff33fffe8000000000000000000000000000bbfc0000000000000000000000000000013b000400044003003c91e267c61d4a7bb56f0a99d8a51fb6cc9f526c005c091392ba930bd79bdaaa6b98d8b232fb7e69a43bec909676a32c9f4443e077996fe5c92161e125992c2297a816015aab73635b48c8b0b1b2ebd07d2e9174d474a93e2bb12403ee"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000093e455fdd7807eff8ec29decd6ea9d002018bca316e4633dd7000000000600000000000000000099af2a732a2e8745a93173f658c15db50f749835fcf69ea4d782b6651d0d90d22109aecb0e4b9b8b772f7c15cb907e3bd219ad9a0796df3b299274e3b04d364bfc33b54ecb5d678798fc846cb4dc95787e71372cbb537f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) 12m50.620224722s ago: executing program 33 (id=878): syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="dbf797943688aaaaaaaaaa0086dd60f53ae3ff373a01fe8000000000000000000000000000bbff02000000000000000000000000000101009078800000006824b55003ff33fffe8000000000000000000000000000bbfc0000000000000000000000000000013b000400044003003c91e267c61d4a7bb56f0a99d8a51fb6cc9f526c005c091392ba930bd79bdaaa6b98d8b232fb7e69a43bec909676a32c9f4443e077996fe5c92161e125992c2297a816015aab73635b48c8b0b1b2ebd07d2e9174d474a93e2bb12403ee"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000093e455fdd7807eff8ec29decd6ea9d002018bca316e4633dd7000000000600000000000000000099af2a732a2e8745a93173f658c15db50f749835fcf69ea4d782b6651d0d90d22109aecb0e4b9b8b772f7c15cb907e3bd219ad9a0796df3b299274e3b04d364bfc33b54ecb5d678798fc846cb4dc95787e71372cbb537f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) 2m51.391730528s ago: executing program 6 (id=3185): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x80, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xf}, {0x10, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x7}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_vlan\x00'}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x7ff}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xfffb}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_to_batadv\x00'}]}}]}, 0x80}}, 0x4040004) 2m50.359475364s ago: executing program 6 (id=3188): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82802, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x4, 0x4) close(r0) 2m47.772255002s ago: executing program 6 (id=3194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4401}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xbcca}]}, 0x50}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 2m47.172928077s ago: executing program 6 (id=3196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) pipe(0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000300)=0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xd}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x338, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2c8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@cgroup0={{0x28}, {0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8841}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(0x0, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f063096244fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea5349", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x8044, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e2f, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) 2m45.941452641s ago: executing program 6 (id=3200): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x26004041}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, 0x0, 0x24044041) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x81, 0x1, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x7, 0x6, 0x2e4}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @remote, @loopback}, &(0x7f0000000640)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000680)={@loopback, 0x0}, &(0x7f00000006c0)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r13, @ANYBLOB="000000000000000008000d0000001600050021"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec040000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="d801028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002bffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000b30000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="b801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r13, @ANYBLOB="2401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400e400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000001003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB], 0x4ec}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 2m43.669070269s ago: executing program 6 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x86, 0x3, 0x5, 0x2, 0x2, 0x80, 0x10001, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2m33.196325308s ago: executing program 3 (id=3241): syz_emit_ethernet(0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="e90c630faca2aaaaaaaaaabb08004500001f0000e000001190780000000000005d0000000000000b9078cbe66f1cfaffffe78839902983ce94878ebdc0e5dd33354c9ff6e5f9ad7b4ed981920f6fbddcf5fde9689d0a0f14369794716f2cc01c6c2084b8879a3770095507a464880c797da84a63a8fdbe6b3e0e88bcda67d8727eec3150a33f7f2366af49a18adbc1a2"], 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r1) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a15"], 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x3, 0x3, 0x2, {0x5, @sdr={0x34324142, 0x6}}, 0x3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m30.864411146s ago: executing program 3 (id=3245): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000140)={0x18, r4, 0x2, 0x0, &(0x7f0000000380)=[{0x8000000, 0x4000000000000e8}, {0xfffffffffffffffb, 0xffffffffffffffff}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r4, 0x0, &(0x7f0000000180)='\x00', 0x1, 0x31b}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x24048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="bb26cf017af076fd52f9c7ae62025c772eb0e25affde00"/34, 0x22, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m29.056677643s ago: executing program 3 (id=3250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x50b, 0x8, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000014000180060005004e2400050000060010000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 2m28.38366235s ago: executing program 34 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x86, 0x3, 0x5, 0x2, 0x2, 0x80, 0x10001, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2m26.445587618s ago: executing program 3 (id=3256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14, 0x11, 0x1, 0xf5ffffff}}, 0x88}}, 0x0) 2m26.23685024s ago: executing program 3 (id=3257): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101, 0x1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r8 = dup(0xffffffffffffffff) read$FUSE(r8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m23.763706191s ago: executing program 3 (id=3263): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r2, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x3, 0x5, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec) socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8912, &(0x7f00000000c0)={'virt_wifi0\x00', @random="cffaeefdb7c5"}) 2m8.57935458s ago: executing program 35 (id=3263): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r2, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x3, 0x5, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec) socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8912, &(0x7f00000000c0)={'virt_wifi0\x00', @random="cffaeefdb7c5"}) 12.760468871s ago: executing program 2 (id=3575): socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x1000, 0x7, 0xbfe00000}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000003000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 10.638284991s ago: executing program 2 (id=3580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0x80000000, 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 10.429799183s ago: executing program 5 (id=3582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff0000ff, 0xff000000], 'macvtap0\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 10.10426985s ago: executing program 5 (id=3584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = getpgrp(0xffffffffffffffff) tkill(r2, 0x1a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0xa, 0x4) r3 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000000000000700000044140de3891414aa00000005ec"], 0x28}}], 0x1, 0x4000810) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffede}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000050a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 9.763012073s ago: executing program 1 (id=3586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 9.380552566s ago: executing program 1 (id=3587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x5000000) 9.147495611s ago: executing program 8 (id=3589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008c0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x4, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x6c, 0x1b, 0x200, 0x70bd25, 0x25dfdbff, {0xe}, [@generic, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x44, 0x72, 0x0, 0x1, [@nested={0x4, 0x8a}, @nested={0x4, 0xe1}, @generic="a1", @typed={0x9, 0x5b, 0x0, 0x0, @str='--*)\x00'}, @generic="760c55d51462370ac54f193cd6eaaf85daa60e099ff91fb44712012630f359", @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0xd6, 0x0, 0x0, @uid=0xee01}]}, 0x6c}}, 0x20010000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x320) sendfile(r3, r3, 0x0, 0x200000) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r5, &(0x7f00000000c0)=""/152, 0x98) 7.964435013s ago: executing program 1 (id=3590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00') sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000ff6800200026bd7000fedbdf25000003002b000000"], 0x18}, 0x1, 0x0, 0x0, 0x40008000}, 0x41) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x2c, &(0x7f0000000040)={0x0, 0x65a0, 0xdb00, 0x2, 0x65}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x4000800) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x3, 0x3, 0xcd4, 0xa6, 0x4}, &(0x7f0000000040)=0x98) 7.608218672s ago: executing program 1 (id=3591): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x40000021, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, {"f54d2c0cb37c57f3f01329c4d4943591eac3edac53aa3bf1dfb2eed7b728d67109358ba123995bb76cd96532d07b5866db1a1222de4f874b08a71f3ba2540cbee382191ab3e8e9450613a5716e30c47cc21319023edbf0d16e95021ee493fb5880d23ee6e610d3937bddec0122c642e1a50b86af293bad62906615456ebb2fc45b536ee09913632010f59f9aa030f0d3928a0d5908c4538bbdb175524e69f45f1a9d44a15680c3ccc84cc208474c44d1b7a085caf19cf2f5ed74b858823906df13ec57686c7a99ccd627884d170951441f79c482009f840718e4b043bda2ef6b04b4dba1e197fb27469af1e12203d44b8813cce09ae41a4e95a79a2c9a7f361c6b4c2cf5c4dd24f23ed6788661d01c65596307737987a1ffa4402882cdf0a9d6722928ea14f044685c86961328cf97f7eefbf2c653fb7081908d8de099001a1b4c3d5fe49af06e2f450bcb173db2d5a524807b7c60fd273ee7cf3d8a2958692bd5d6abc92975242c1407cc854a8464b1ae6d414e48252fd601a94e82dacb2049b2029316975507bdb508f7b8b7fb42f98787228447185738c8808981ed9ceec5e595aa5f78e890210063847ed409d73c24cf51cee497765e1fb51a96b7e02d7600e5518508dd79316a07c15551abc13fe922d5e47bf180d790af0f8031baec6541abfc929cad2fd05e6d232caabd5cee5ad6fd5cb957e80e688ccb77ac4ff993bb3a127cff27d824dca07d349b87caac4fcb3f7c3c6ca89d49e3a0e7c9bc77a48ec26db2c2675a529560c5554fc8ed72cdea2232f00bdf785df4ea4d7abf57c4669f0111c5d9e99ed8118c4d2f7322e531dfc2fd35e4e302aacb7e80d8dc1ecbf2508c2ff9b8f118511094111e5ee954efc282fe74656703df03de83ad21f56ee6390e64e8a4dd9caf67dc1ffe3231fc63c42471661ea10f64d543990cc3ba267ca0a1d56d315e5e4c6ef1f8b2b219b1d9fe98e83a68baffb603816812d062580e62b538dfb82af13c0cb63c5cfac2d28186957bc1b54009987f4c301181701d9358036ff7df1190cd3049afb1218e7ff04f040556f039ed81d3bf72969e1d778b9e7754dd7c23b15a2a9413c4f020b13340040418f21dc59895f9ff6ea166dd98a634abf7d6387ec5d131b8f11b01971d53456e52476f723745a382f73f34f126a88b04c9ec3226124ed60c504f0ae0d7337f9bf6df277f45723d26cd668f8e315ed587db5ad721d92252e050f442772ef9c405b79ab796587a936102c7345c7d18ad97efb9cec48a761707534418e469d9ff625f58266e2a3d47761f194e7d39c3a9be62d44ee71a2fed814be168dea6f81d01d39470452e89f81b501bddee8784c8c25e5e95cf068288ccec778110c550b1fd5e0f8e2c9b8b8f91077d4375d5159d2cd1c873f5128f38042b547af7a4b5dc4b874f17da1157b2364ca0e773159aae7dede71139500552947c6edb4146dd6d5ceb53db436774c04cf4f166219685c60de1922487cc5aea4aab30e050ff6e8baf9c78aec82ed5526273dd8142421ae6e11b8117cddf5a724e40542d8fc82404445bb1fa9ab2dec6825c49e2c61aeaaf7fc3ce03031fc3a7d8ae9712df5970da12f383f821057a0a1c9cc899d03a9cab876d12ed4df71dcfe32aef390146a04a9ea2ce312bb874c392c6aa087e836bebc43b49f7fe7fb78a76e942ff7f5dfcc1dea345d7f9b299afc55e69ad5b2e332717bac5acc155c29a177a3a70cdb10a833c27c66275d3e50636ede2e5684ad4b499a13bac3e9377aa8ec4397aa739f986044b73d8d7cb562944c7e57af798458a497ce5ad6348024f64e86551c072ad83e9e6a8e6c83dd26e6464dfc6e9a3fb154c141545174f1eb11d46b7c4e8a82b0187c3229bbd07198bfccb1c4d73a902dd838eae097cf977850383015d7192471f3dd2556e99a19fcd08ed5dcbb92e4078e2c07e6355c446f18a727cfb16061eeec872e0939c9918c315791574ab868e1cd2e92c02bdf23632fb379d5fb6247f0afdcedc8524929ba0c6225fe160a9d1a4138ad5f443798e8113e1d18be0b20306e1a462c83d70bcde58dd79d030dd32839c387b66b01c047900baa0e1dc54f339dfb1725b053be9249cdfae96ede55ea172f6f58aecebeaec597a05c64f42493614f1c7a9d67bdbedc9a712b7b46be2b8e9d89a5af307b8d7742630c421efb5475edeec2adcec411ea080c654d9453b6fe1477c77ec4bc59f5bdbe6ef8c3a55f9745ca341e0a2dfafb99b8a2c99fd4658d2503618ae4d3f1db7504613f228854d65d3a6891ad3abaed1a36a75720c40c40d24e48ebf9ff3344976c89f11969b9c64369bc1caca8593e67cd99d919ccd2bd05a966860f783636f455a657419123eb94a97f530924498a5d8b8e0a1d00a61267fe5aa657f05e9e11b50eea984ae15ffc5856fa7224010dd5dc497a6ca6283caafa866e70017958cefef592aa1b8457720309c6b2a262116c853711b78007aa6f19fbf52230acc4e8c19b0dd8d2ffc444127214261af7db30483844aba2d0e725de8c5298d0651d70ba79214b02cc15c2eaf930d8cb67e35ded38bf35416cc01238bae809e875898daf19305e3c97897a7aaf14ad252fb8c3dc14f3960eeee9baf08e1d5584d6d73f315326693844aa445280de3047684e59dca3dab37b3cfca4b8109d11d23109737f52be8208f29abb50baccb920d5798283cb2430dace8b17a7bb311e87ba2d99e41c146bd9d54eef2f6536f7a827f2f8b93cd0f76f795cc685413eea717481ca7362972e9f047337bee7e4b044c0ed73fe6091ce9fd90d67d28da34ee13ca835a58da9ec5b82af5ab4344ff00c32c0fa1649adfb8be8b2ea422ed8ea25d2158b3270a959b83fe488376c351edc4d1eead6d795aaf31438719366b9bd1e2c35f849063374ec10fb3d4252536e56b5e2f51dcd7704734c9f9d7955faf1206b739d6bfb0e0e68ef57e737f90e969c224374771de7964853c6e8d3197dd35beab7692041191839703e06259de5db046171586aac99d494b6d223ea01c149cdceaaa1561ec2c617f11aeb7755df6133bc3915d8bce7023907071272df8f8913168337f18c8ed9806214454bc5b56f198353e64cadabf8c166fa4250aa4a0af9839cf759e85f695c45d6973f16ee79a56e9ec861da935b2aefe6c170aad1e3f399684a0def8a0b88562c7723ff3a5ba81fa475cf7ea766bf089858c13a43c826432726907d8b4f1f677d6c5995280d33a03f91094c9dba0fcaa7e2e2edb4257d7a5ed3e9c16fe09c531080c89de8ddbe1c020231c362e99d28cbf5b3a0d264d7bf84e1eaa0679288cabe92973018ad5331c7f8d47db28e16135e71d32d2b4f43511b150f74e6ca861c97d95ae74f88cb272b0f9174fccbf920961c928826c64021e22bc18bf7aca0aa89bd1d2ada8cb1b12c97ea15440432e80353a65f6fb7e6cd39d82f191b2399c27181b1877ca4a8dbea6f5ce5229db87a1d04c3691b4a35e0b285396316e43d6bab5cd32eda916337dd79ab34abda9648fa8ea7cc38b0aaaed21e1b206c9c5dc59b377c4d6402b97d2bfc15321054da037dc422651dc205c5b98881e3ea813c0df7b7bdf831fbe0293be0537164fac87c3df2ad988fa981c56ab303a07b2cbe82f266cad7ae08f65afe4d348b900fc9a9baf31e7bdcca1a6651a79fdbbfbe7c4c73702a0390eea7a8a9ab2b88abf38b4bb500c1702a3e8f68bd0a697dd76acdfaab85ee184c078c624bf1eca51fd9eece8e3b4014a45db4f11f7405d4e9e8ece45de87ef5f68d8c3316fff948806ae93037f313181bfaf8254e8892e813bcf39acf4b4ca4f60bea3a41a0e616af537750ab549b3f5ad89f60450ab0660d5c1df67042a2b9442faba7491d21d337abab0f8f855e9478a8501de933886e0ab3cbb13461e4773d6c6cd3b4bacb0222a5a354d80e16fbc677194ca51d78a40b90b6ee58b999e7c4274569abf6363ddcabe83640585208032b7f8d2095c8b2dab1309f036d098c022518208ddc8d970ba60ca5547301acbb91a25ea50c2cce971865e610eee258c784e9bedc212647326ec7049534aa7dcbc721decf3a28a6d7bb5af8a81e95f98d6ddebf09c6570737e72575dd8e63a23dc981db3635b35c95bc2cff4f56c928e25279b703414778ce8701a8da1199515ace3d0114f1a050eb1935a7d2df232bc57f3cb02e1306457629c0420ca27867f4496d054f5125dcd135701f3a063beac8260fba6fe68fbd31f67cb41312dad98f84418dd31aa9197fe84624ccaca029212a597cb5c348dc723d9bdf04dac1443f1429a6bbe3c3e625cc6824d6999583906f52f3ac02029b41c40ad3f32c22a5220a1807eee5594d121a17839323773c9976535cf6dbca748d710a3b2dab39323cbcc3ea3ea8fcea23596ba7ecc0b065af750ece4aba4e4d13612bd3ba3344001add5a93475e0500c87e7ccecc533cdc69abf06dbf22ab9d91903798fb45a725930f2349720d76c223f67a27dca86611bb241470287ac1535c5f55e7e26dd2a5f2fcb8cb5ea32cf7273ac3851904153a300276e6ac308a4c446654eaa8a44f5d5a44e7e9ca9790edb044246bc7fabac46f70bba8f72bf645b6bff3fe5a7a2ad0387d171f2e75bb69961edadaac8208c1570bb7588ddc53298459288e17efc4cc24195f980548bb6c9965d86b1a518fc750294e7b5791fa7339ad1d137971c8f06c3fcf980e6c780ff75fca8b1695e566d4cdb1512510b890e8bd29a718e1b7ffe4f9943c808f39c53849224e9d022266aea980889509ab2f8fd6be43b5f3cc86ecc8b1b3dbc36e59edda5f749d441b1837604706897d9be1bcb0b4bd171e5b3ff7e93910f387e5864ed23f3af604c1b94aab2fb125ffa47268309bceaaee4511a35d82b98c5539586bb24566c6d4b6aa2adcbb84ec84ea6f65fe4f68c9c371d10161d14610c4d76207af6efcf93e9dccbb3903f1b0119ec8d4e5ba01fa3b9cf88df14be1eeaa788bf1d3af435523a30d32a2342a6065ee89e0a7b7b4ec35e3639f940ccc5a2e2d4e32c9f10b5d4b0b8a3b50c98dbb1b9e219659a7e51d92c97410bd2e9dcc7d7ecbb8b9cc5719a56c81166bea3f7e9e19a9f67413ddade17f64eb165b946bce3a38893ed1e643c91ad92a3e6649ffd95bbc02d41837196e56618ad8403c7c68efc0ebf7fb94dd4b876ce64fcc5db5de5ea02df8be42a0bff94d224f7825ebe2caadfbc44447d09e5af4b65b362ffccdfc62f7590d5ce62f470e661e956e5a12e9d7dbd3d8789f6b53f486b21bcd63da925cb997860f9a1ad4d177756002e2f185b2ddd2bd0bbc069feb8cf1df8078cc6279023f385a42a05420dbee82760f26d3b2bf4f0d96aa505d482c9271746caffdc4eb47cb81a137c99609eb7d92dd9d6d15c4b43cd0b8f1602366067ab90ce47a71a487b499afac9865df234a84155bf94e75cac57fdfd85738e4cc6615b9c2c3258bbca816c13485950e3d8b18a539f7bfb8d15eb06fb6b2c660a27ed960cef7ce81a1ccf9c618953ee279d67b92bb35e521db3f32989935a68ad94397de66dc296e090b6506a63be39cb5e7caca2dee560fe873c4e88616ce1ae3a09d46a473b36b156b5d39988e3fee4a87c6bf369324ac2997aa5f1895e5b7f6a72a67f54279ae8a178e6c6be240bd4865e780d2247037091c1353b5330c41be7be9707ed33263928fd42a174697c4b612d3085e52a15b317a3e5f1469aedc0b9fa875a3994be35b1db874ff71f095af5bfdc995f8698730be925667d1f462c5706a17b7fcc3040", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) sendmsg$nl_route(r2, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="c40000006d0000002abd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="000100000808040024002200b62bda626c6ad8db7781bfc5959463f1279f7ea6d1ca1e1b520a15e3d6fb7dce0800290097ee0400780018807400018005000600610000000c0002001829247d2b2a210011000200626f6e645f736c6176655f3100000000050006000e000000140005003e32ccd34470e733444f37dbcde1fad914000500193ca198c24d3429c99cec1781e54fc9050006003800000008000100050000000800010054da00b85832c890e7c27c5ae972f8092932544ed22b4940ac221f6a7e31177d3baf2fc5df9c803318fe0ce724dd"], 0xc4}, 0x1, 0x0, 0x0, 0x4008001}, 0x8091) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) eventfd(0xae) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068e000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYRES8=r3, @ANYBLOB="6715581d70999c81dc0b9d63c493830a493e04e055a470df9b58d4a9a28f1f10077fb678d60e7ea31d5b585a51a4f0cbf5165a3302851bac7c", @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r5, @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x2048884}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5830, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x800000005479, 0x1034, 0x200000000006, 0x0, 0x32a, 0xffffffdffffffffb, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x527, &(0x7f00000012c0)={0x0, 0x3cb1, 0x4, 0x1, 0x20002f7}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000001540)=""/186) 6.67520946s ago: executing program 2 (id=3592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002140)=ANY=[@ANYBLOB="000086dd0000120000000000080060fc030010f02c00fe8000000000000000000000000000aaff0200000000000000000040000000012b020003"], 0x1126) 6.337496618s ago: executing program 5 (id=3593): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5.940569968s ago: executing program 2 (id=3594): r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001200)={0x8954000, 0x0, 0x0, 0x0, {0x25}, &(0x7f0000001280)=""/4099, 0x1003, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x1a9}) time(&(0x7f0000000280)) epoll_wait(r0, &(0x7f0000001140)=[{}], 0x1, 0xffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006970766c616e00000c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c0002000100000015000000060003000100000014000c80"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_io_uring_setup(0x4481, &(0x7f0000001040)={0x0, 0x482b, 0x8, 0x0, 0x2ba, 0x0, r3}, &(0x7f00000010c0), &(0x7f0000001100)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x7133) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x0, 0x5, 0x1, 0xdca2, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0xfffff729, 0x2, 0x7a, 0xff, 0x8, 0x45, [0x40005, 0x3]}}) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x200, @empty, 0x6}, {0xa, 0x4e22, 0x9, @private2, 0x4}, 0x1, {[0x294, 0x4, 0x1, 0xf6b, 0x6, 0x0, 0x1, 0x10]}}, 0x5c) 5.89886056s ago: executing program 5 (id=3595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200000000000000000000000000007fff"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff0000ff, 0xff000000], 'macvtap0\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 5.797393115s ago: executing program 8 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x600}}, {{}, {0x95, 0x0, 0x0, 0xf3}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.684377439s ago: executing program 5 (id=3597): landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) 5.652866243s ago: executing program 8 (id=3598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.561774767s ago: executing program 1 (id=3600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000010000008000f4"], 0x4f0280) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x288, 0x0, 0x58}]}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000030003ca60a7b0cccf5c0461c1d67f5394007134cf6ee08000a0e408db0d03d5c14cafcf7ce06bbace8017cbec4c2ee5a7b4f4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb03000000000000009e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad814d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d934570f6954b43370e9701", 0xd8}], 0x1}, 0x8840) 5.243084287s ago: executing program 8 (id=3602): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x620000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x800}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x800}}, './file0\x00'}) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x2df, 0xc, 0x9, 0x8}, 0x8) sendmmsg$sock(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="0ad9bc2b2b765a4a6ee7dc8f19f1bf0706624b065a59d17523a1a5ef0dbd3ddf7e43cf506b4d00cf13025b9dd15e0d706aa574c656c6744e4968f6318f6364ab478d75e744938e4c98e89a48a54408759dd5ab30e95660a249b60de7cae842849133d593ca669d3393937f72d83591c189d49f827e8749b6f29000e3fd3aa9832b3ed85829590ab588967cbcb83c877c821398938693223c6195c3be46a06be831facf4b8eceb730a7135d311e4cb3e4eea1c0017443dc26db62c3c238e7a6d59d61cd76d1f360f03cfc130f1c7d751e", 0xd0}, {&(0x7f00000002c0)="aecfa69c9f5283b272dc8126b4", 0xd}, {&(0x7f0000000300)="a4e194cad9d97c93673f595143520a6fdcb791bbb3d6c15cf99368f2db21681f8a6709be6de75932a0396c28644daf51f4134722abf7d2a9b672ad252892e9357d69fb75e6198770f63addf9318fa7263ba9cfbe7f37701ef8340ef2c522fdfd60e1738ff3f5e12bbbee0d0135b5e267a3786c471eaf3e813f5e7c5ee4089265f0e6fe8d990e30edeb05a3ec91c084911607ccbee6a93fa7560a7b31886ef8ccb02e2371fe5282d6acabb50afd96172e70196c851ee0eddbae23e53fe759f61b89b189b53dbef8f39a5e47cbc0681f2f21d3e2ee59c20292c49c6cbab5da680182ce181eaa51c3af8e06d392b6f6045cf6d8", 0xf2}, {&(0x7f0000000400)="42f5c1cf12fda48336", 0x9}], 0x4, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4d}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0xa8}}, {{&(0x7f0000000540)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)="7582542722d1120fa64fc309cfa8f01fbe31cd51dfe7edb4910bee0457f988f7dd0b0f710d931ad2b7b6058bcd9b301d8464465498bf4ab874b03ab41ffaa942836bd48fd5fd63089cd1e805dd79b417ec9c2ee3bf2376a372bb6749b4660f0f60518b0cfe7203a8b91d077a3680f22c5addbc042604df112cfef3ccdfbe82a1cb5df43db2f988701581ec42746bf92d2e43897aeb7f0918cf113a", 0x9b}, {&(0x7f0000000680)="c8b056bdf5cf5c864fe2b3b1a0beb17a0b9a792696cf2d9e926a3b175cb0b09def25c7bb0adb80b0a72b60b1fdd0804719ab207046340a3fa0c2e9e213391bfb9156331956329c44ed7cc66d45a55b750a8d5c80e471a17ea0234e01ab58f27e428deb2fbd864c390e3735e88e608c9e3b96dfc78dc303d962cec27d111f036310e2fbdf9aecdb47f0ac22796521a49165b15b2bba606521db3c7dae89af413f495546164e7bd101bbbf9e8d", 0xac}, {&(0x7f0000000740)="5ad7a2741213fbca7ecd2287d44107fe1287a7dd0e9a2c44a0970596689c9204a27311451633f3b076de4bc6695c88ba94fd5110637021f50d036dab3a2fe1b7e5616f328be18654bac64656bfc194987ee62bb69d3c562a19a37b17229311fe5261d3aeedd4233f76f3d501939e7b6cd55f4b81d21db258de2748a7fa0f504a0ee4bae62fda3afd5393958522b38f941cb3d460fbd848b6d958bf6c3ba6c3c722cf230d2a1db3297442", 0xaa}, {&(0x7f0000000800)="6307746e72ae109219", 0x9}, {&(0x7f0000000840)="7d56ea3bf303a6ac5ccb9df663df5fc0691921a838b72d83dabd3b53d05820e99d688037d7d4c9b2c18cd760050de6f71e21f5b4c5beadbccf3c9abf1e695aecd08a65232e2a6fa8765538d9bea6f53e5dcad16bb1978eeff54c25c83a35ccdd8e74714add11b0ee3145d9aa60791331552911846cf38b8d9a511c54884186ca499501cbf42a23eab281b657b708e13fc5771de6ee4edb6028e4db071bb784b7c263183fc59f0d4d95d2c8e580fb79a0bc16367e6b47780e62c22439fad395421eacf3080ed4fc5f02ba293dd744b637f053479bc6ef0eccb0b017db6d8d3485c4a917726428fa8e", 0xe8}], 0x5, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x4a080}}, @mark={{0x14, 0x1, 0x24, 0x9b}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8d2}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}], 0xf0}}], 0x2, 0x4000040) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=@gettaction={0xf8, 0x32, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9392}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc81}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x201c0) connect$unix(r1, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r1) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000dc0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x20, 0x0, r1, 0x0, r1, 0x2, 0x0, 0x1, {0x0, r3}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/warn_count', 0x4000, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xffff, '\x00', 0x0, r1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xffff, '\x00', 0x0, r1}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000ec0)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000f80)={0x3}, 0x0) fanotify_init(0x3, 0x2) (async) r5 = fanotify_init(0x3, 0x2) cachestat(r5, &(0x7f0000000fc0)={0x8, 0x7f}, &(0x7f0000001000), 0x0) bind$tipc(r4, &(0x7f0000001040)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1}}, 0x10) (async) bind$tipc(r4, &(0x7f0000001040)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1}}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001080), 0x101100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x2, &(0x7f00000010c0)=[{0x5, 0x8, 0x5, 0xc9}, {0x0, 0xf, 0x0, 0x2}]}) syz_open_dev$vim2m(&(0x7f0000001140), 0xf1, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000001180)={0x1, 0x4, 0xc, 0x1, 0x1}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000001180)={0x1, 0x4, 0xc, 0x1, 0x1}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000011c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000011c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001240)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x10000000000000, 0x0, 0x6, 0x7ea, 0x2, 0x52b8, 0xd0af9b4, 0x0, 0xfffffffffffff2ed, 0x8, 0x3, 0x4, 0x1000, 0xfff]}, &(0x7f0000001340)=0x100) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001240)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x10000000000000, 0x0, 0x6, 0x7ea, 0x2, 0x52b8, 0xd0af9b4, 0x0, 0xfffffffffffff2ed, 0x8, 0x3, 0x4, 0x1000, 0xfff]}, &(0x7f0000001340)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001380)=@assoc_value={r7, 0x80000001}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000015c0)={{r6}, r8, 0x4, @unused=[0x7fffffff, 0x5, 0x2, 0x2497], @name="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"}) r9 = add_key$keyring(&(0x7f00000025c0), &(0x7f0000002600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r9, &(0x7f0000002640)=""/195, 0xc3) 5.053535004s ago: executing program 7 (id=3603): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) socket(0x10, 0x803, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) unshare(0x4020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000003d0001"], 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x0) sendmsg(r3, &(0x7f0000000940)={&(0x7f0000000880)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="9b2af127f64f", 0x6}], 0x1, &(0x7f0000000900)=[{0x38, 0x10a, 0x7ff, "f14cf4a998941e330b2255db316f23e80cbb5b3543a70a78f9c8cac293618703622bc6eea34845"}], 0x38}, 0x4000001) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x7, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0x8aed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="010096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.965231667s ago: executing program 8 (id=3604): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x2b, 0x7ffc1fdb}, {0x6, 0xf9, 0x76, 0x9}]}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xce21, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e"], 0x0) unshare(0x20040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6], 0x1}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) 4.148282929s ago: executing program 7 (id=3605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002140)=ANY=[@ANYBLOB="000086dd0000120000000000080060fc030010f02c00fe8000000000000000000000000000aaff0200000000000000000000010000012b020003"], 0x1126) 3.759401287s ago: executing program 1 (id=3606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000097, 0x0, 0x2}]}) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 3.264315564s ago: executing program 7 (id=3607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0x80000000, 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 2.723609173s ago: executing program 2 (id=3608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d2000000000000000000000000000070fe"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff0000ff, 0xff000000], 'macvtap0\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 2.598027652s ago: executing program 2 (id=3609): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0xfffffffd, 0x50313459, 0x3, @stepwise={0x1, 0x8497, 0x1000, 0x401, 0x9, 0x400}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') 952.659652ms ago: executing program 8 (id=3610): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x40000021, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) sendmsg$nl_route(r2, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="c40000006d0000002abd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="000100000808040024002200b62bda626c6ad8db7781bfc5959463f1279f7ea6d1ca1e1b520a15e3d6fb7dce0800290097ee0400780018807400018005000600610000000c0002001829247d2b2a210011000200626f6e645f736c6176655f3100000000050006000e000000140005003e32ccd34470e733444f37dbcde1fad914000500193ca198c24d3429c99cec1781e54fc9050006003800000008000100050000000800010054da00b85832c890e7c27c5ae972f8092932544ed22b4940ac221f6a7e31177d3baf2fc5df9c803318fe0ce724dd"], 0xc4}, 0x1, 0x0, 0x0, 0x4008001}, 0x8091) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) eventfd(0xae) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068e000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYRES8=r3, @ANYBLOB="6715581d70999c81dc0b9d63c493830a493e04e055a470df9b58d4a9a28f1f10077fb678d60e7ea31d5b585a51a4f0cbf5165a3302851bac7c", @ANYBLOB="dd6936462a829de123975d273bcbca34a4b90a1b04f40e41d678a89a676627f63fb0bd9f3ef936d372fc9c3c75d44638c10b0dfad1c14d1622c1a1eb8d44956b96a29f33d597276d0bd1a1eeb10af4015101519e4e728404604f531e55bf1411d0a84bb3ba26ad99e4875b80d50c9114d9b1cfba5f0805b44b4d581ed9a70e9819612fe9d48601430b08a1e8e505128b800c483d5291f72a0eee338dfe399512b30cb7158829e0c6b19d864b000bae4ce5628ab563da9b3fd062e6310928790f0d2b9367b1a0b99e181dd6d1d6847570c8ca826a12ece56c7a3bf7dc9ca523b66361d4fc07589cff3309a14a1a0df7425f210a344fd43af2c26955", @ANYRES32, @ANYRESOCT=r5, @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x2048884}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5830, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x800000005479, 0x1034, 0x200000000006, 0x0, 0x32a, 0xffffffdffffffffb, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x527, &(0x7f00000012c0)={0x0, 0x3cb1, 0x4, 0x1, 0x20002f7}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000001540)=""/186) 788.536358ms ago: executing program 5 (id=3611): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x2, [0x2], [0x80ffff], [0x0, 0x0, 0x4], [0x400000000000000]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x64, 0x80, 0x0, 0xb45, 0x1, 0xa, 0x8000000, 0x8001}, 0x0) r4 = shmget$private(0x0, 0x13000, 0x20, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) r8 = openat$cgroup_subtree(r7, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYRES8=r3], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff6000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="150000de0080000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) shmdt(r5) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x44870}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f00000000c0)=""/4, 0x4}], 0x2}, 0x40002140) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) 83.907725ms ago: executing program 7 (id=3612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 74.565568ms ago: executing program 7 (id=3613): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072001fe1ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 7 (id=3614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=', @ANYBLOB=',g', @ANYRESDEC=0x0]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x2000, &(0x7f0000000480)="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", 0x122, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000940)="bf526f47747ae238342d5b47fec28082bd798123f65fc617be7c2f06a5a9a412e41852750c0cb8f15880245c590100000075cadbcdf881367a27ab8616206db6a2df1b4b7859883985f3d5e63619fa3aa659d780f8d806cabea621f8055b522c50e053bad4e32b49b376c86d7c19dc00680d322b4d91ea676b304029f0bad971128efef3e78729d9218695444ff375da3ae9f20606598f57c8ad9e1e80ac088fff6883b3527e570fa3b00dd33805e2a116cb59f05ba27d34ea836e91b9ba4332d8172a415567258a7ebce768ed840bcc46861ddd4f7342628dfd6d6eaad96c98b814458599b5703cf9a285aa216039c9870da5451227e97b6c74969325e046425e5c08d96a79991488c70640323b67710be047ed3c0e265a39e3ccd776542f49c0f3b3dbd685f04d3e4a31eb7c44ca09a589a1ab065c7aec84bffe91ecbc5c6889a30c77c49771cd20aaf42f9fe658e56c32aed27fb173ae8fe6f54e2ded8b567ab2d967fe172633ef081ec5fdc645977100cfe08d2e52e31716b859cbd34f618ac681cbb66d49189b1e659206") ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000400)=r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {0x0}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r5, 0x8, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010328bd700006dcdf25000000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): : new high-speed USB device number 2 using dummy_hcd [ 905.294014][ T5898] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 905.337929][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.374044][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.415174][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.433901][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.442353][ T5905] usb 3-1: SerialNumber: syz [ 905.457250][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 905.469824][ T5898] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 905.491066][ T5898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 905.502285][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.524572][T18100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 905.543524][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.691861][ T5905] usb 3-1: 0:2 : does not exist [ 905.724008][ T5910] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 905.747219][ T5905] usb 3-1: USB disconnect, device number 2 [ 905.766100][ T5878] usb 2-1: USB disconnect, device number 97 [ 905.814884][ T6643] udevd[6643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 905.910550][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 905.935168][ T5910] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 905.950636][ T5910] usb 4-1: config 0 has no interface number 0 [ 905.958200][ T5910] usb 4-1: config 0 interface 184 has no altsetting 0 [ 905.973318][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 905.985966][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.000902][ T5910] usb 4-1: Product: syz [ 906.005752][ T5910] usb 4-1: Manufacturer: syz [ 906.010602][ T5910] usb 4-1: SerialNumber: syz [ 906.026466][ T5910] usb 4-1: config 0 descriptor?? [ 906.036076][ T5910] smsc75xx v1.0.0 [ 906.039755][ T5910] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 906.051878][ T5910] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 906.248957][T18106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.284364][T18106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.323594][ T5878] usb 4-1: USB disconnect, device number 113 [ 906.347348][T18115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3237'. [ 906.383087][T18115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3237'. [ 906.408359][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 906.595171][T18115] hsr_slave_1 (unregistering): left promiscuous mode [ 907.464138][ T5829] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 907.639380][ T5829] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 907.690428][ T5829] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 907.730259][ T5829] usb 4-1: config 220 interface 0 has no altsetting 0 [ 907.763095][ T5829] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 907.789026][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.822296][ T5829] usb 4-1: Product: syz [ 907.833766][ T5829] usb 4-1: Manufacturer: syz [ 907.845591][ T5829] usb 4-1: SerialNumber: syz [ 908.588706][T18133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3242'. [ 908.730141][T18133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 908.791997][T18133] team0: Failed to send port change of device bond3 via netlink (err -105) [ 908.843777][T18133] team0: Failed to send options change via netlink (err -105) [ 908.861764][ T5829] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 908.912089][T18133] team0: Port device bond3 added [ 908.917992][ T5829] uvcvideo 4-1:220.0: No valid video chain found. [ 908.993229][ T5829] usb 4-1: USB disconnect, device number 114 [ 909.016772][T16847] team0: Failed to send port change of device bond3 via netlink (err -105) [ 909.554051][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 909.746885][T18144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.764088][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 909.858828][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.930030][ T5905] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 909.970172][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.014090][ T5905] usb 3-1: config 0 descriptor?? [ 910.108113][T18152] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 910.280094][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.296571][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.538229][ T5905] usbhid 3-1:0.0: can't add hid device: -71 [ 910.565516][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 910.600723][ T5905] usb 3-1: USB disconnect, device number 3 [ 911.315513][T18158] netlink: 'syz.3.3250': attribute type 1 has an invalid length. [ 911.657219][T18160] mac80211_hwsim hwsim42 wlan0: Device is already in use. [ 911.817343][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 911.860566][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 912.127110][T15543] tipc: Resetting bearer [ 912.298182][T15543] tipc: Disabling bearer [ 912.436942][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.448895][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.466551][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.475046][T18174] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 912.501177][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.511668][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 913.409316][T18175] chnl_net:caif_netlink_parms(): no params data found [ 913.900101][T18175] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.921764][T18175] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.939034][T18175] bridge_slave_0: entered allmulticast mode [ 913.952943][T18175] bridge_slave_0: entered promiscuous mode [ 914.007388][T18175] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.045699][T18175] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.073326][T18175] bridge_slave_1: entered allmulticast mode [ 914.100360][T18175] bridge_slave_1: entered promiscuous mode [ 914.302008][T18175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.365605][T18175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.614425][ T5146] Bluetooth: hci0: command tx timeout [ 914.688746][T18175] team0: Port device team_slave_0 added [ 914.765272][T18175] team0: Port device team_slave_1 added [ 914.980783][T18175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.990396][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.024180][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3258'. [ 915.044803][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3258'. [ 915.073930][T18175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.097472][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3258'. [ 915.145418][T18175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.204145][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.348148][T18175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.642209][T18175] hsr_slave_0: entered promiscuous mode [ 915.663602][T18175] hsr_slave_1: entered promiscuous mode [ 916.693973][ T5146] Bluetooth: hci0: command tx timeout [ 917.746916][T18175] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 917.794597][T18175] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 917.824196][T10030] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 917.866165][T18175] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 917.953621][T18175] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 918.054137][T10030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.104047][T10030] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 918.113157][T10030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.211405][T10030] usb 2-1: config 0 descriptor?? [ 918.220961][T18242] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 918.335531][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3268'. [ 918.384238][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3268'. [ 918.422488][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3268'. [ 918.491623][T18175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.551741][T18175] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.573693][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.581024][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.611718][T16847] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.619036][T16847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.666486][T10030] chicony 0003:04F2:1123.0022: collection stack underflow [ 918.692355][T10030] chicony 0003:04F2:1123.0022: item 0 2 0 12 parsing failed [ 918.719703][T10030] chicony 0003:04F2:1123.0022: Chicony hid parse failed: -22 [ 918.754473][T10030] chicony 0003:04F2:1123.0022: probe with driver chicony failed with error -22 [ 918.764034][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 918.774442][ T5146] Bluetooth: hci0: command tx timeout [ 918.900090][T18175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.944588][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 918.970782][ T5878] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 919.045887][ T5878] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.092498][T18175] veth0_vlan: entered promiscuous mode [ 919.108131][ T5878] usb 3-1: config 1 interface 0 has no altsetting 0 [ 919.178070][ T5878] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 919.225045][T18175] veth1_vlan: entered promiscuous mode [ 919.242909][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.282401][ T5878] usb 3-1: Product: ᙽ [ 919.299304][ T5878] usb 3-1: Manufacturer: ံ胹ꜜ鷇蜤ížã›ºéŠ²ê¾»ì‰ƒá¤Ö©ã™â•ã­‡ï†žíšˆî›™áƒ­ë¹é‘œë•’瘖䜂ä‚좨⎡茩诰ì¿ì®’衬㛰糊㺖䆾틺å€ì¤Šï‡´ã½ï²Œå³¢á¾ºíŸ¢ç¶§ë‹¨èŸŽç£œëšèž†î¼ë¬…乷䲞闆ᰑ좠᨜᩿ã©æ˜³ï»¦ê”¥è¨„锑ᡮí˜á°Šè­ˆè…œîµŒå‰˜à¢¸åŠ”验컒é¹ê¿¥ë—€ç‹ƒå§¡é“출뱼〖祄裳抑é˜Ô€èºµá™ˆæ–«ï‚ ì©¯ä¹‚㶴鈲饌剹ç¾ï²»å»”룒盂ḗ駹祥âºê™° [ 919.375089][T18175] veth0_macvtap: entered promiscuous mode [ 919.405924][T18175] veth1_macvtap: entered promiscuous mode [ 919.444454][ T5878] usb 3-1: SerialNumber: syz [ 919.604664][T18175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.681726][T18246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.700245][T18175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.746258][T18246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.790854][T18246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.832861][T18246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.841445][ T8143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.873812][ T8143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.907387][ T8143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.944120][ T5878] usbhid 3-1:1.0: can't add hid device: -71 [ 919.966399][ T8143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.986709][ T5878] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 920.041766][ T5878] usb 3-1: USB disconnect, device number 4 [ 920.418725][ T8143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.473683][ T8143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.658121][T16846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.682268][ T5878] usb 2-1: USB disconnect, device number 98 [ 920.723909][T16846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.854659][ T5146] Bluetooth: hci0: command tx timeout [ 921.023384][T18259] loop9: detected capacity change from 0 to 7 [ 921.082200][T18259] Dev loop9: unable to read RDB block 7 [ 921.092260][T18259] loop9: unable to read partition table [ 921.133191][T18259] loop9: partition table beyond EOD, truncated [ 921.144518][ T5878] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 921.149765][T18259] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 921.348720][ T5878] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 921.389297][ T5878] usb 2-1: config 7 has no interface number 0 [ 921.413723][ T5878] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 921.430489][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.476410][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3252'. [ 921.510065][ T5878] usb 2-1: Product: syz [ 921.528462][ T5878] usb 2-1: Manufacturer: syz [ 921.546102][T18261] netlink: 'syz.7.3252': attribute type 13 has an invalid length. [ 921.558840][ T5878] usb 2-1: SerialNumber: syz [ 921.679190][T18261] gretap0: refused to change device tx_queue_len [ 921.711269][T18261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 921.881292][ T5878] as10x_usb: device has been detected [ 921.898293][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 921.985651][ T5878] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 922.213501][ T5878] as10x_usb: error during firmware upload part1 [ 922.249903][ T5878] Registered device Elgato EyeTV DTT Deluxe [ 922.280847][T18276] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 922.297461][ T5878] usb 2-1: USB disconnect, device number 99 [ 922.415515][ T5878] Unregistered device Elgato EyeTV DTT Deluxe [ 922.421930][ T5878] as10x_usb: device has been disconnected [ 922.655256][T18276] bond1: entered promiscuous mode [ 922.693440][T18276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 923.255035][ T5878] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 923.424493][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 923.477651][ T5878] usb 2-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 923.515038][ T5878] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.547547][ T5878] usb 2-1: New USB device found, idVendor=0064, idProduct=0000, bcdDevice= 0.00 [ 923.569812][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.624921][ T5878] usb 2-1: SerialNumber: syz [ 923.646486][ T5878] usb 2-1: config 0 descriptor?? [ 924.009032][T18289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3277'. [ 925.673966][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 925.859364][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.907839][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.942300][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.955975][ T5910] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.975675][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.019737][ T5910] usb 3-1: config 0 descriptor?? [ 926.566890][ T5910] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 926.624700][ T5910] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 926.915995][T18313] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3286'. [ 926.928759][ T5878] usb 2-1: USB disconnect, device number 100 [ 927.604254][ T5878] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 927.803985][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 927.857219][ T5878] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 927.894223][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.927152][ T5878] usb 2-1: Product: syz [ 927.945540][ T5878] usb 2-1: Manufacturer: syz [ 927.973624][ T5878] usb 2-1: SerialNumber: syz [ 928.003479][ T5878] usb 2-1: config 0 descriptor?? [ 928.063120][ T5878] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 928.112516][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 928.123474][T10027] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 928.192978][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.244592][ T5878] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 928.245400][T18320] dvb-usb: bulk message failed: -22 (3/0) [ 928.254011][ T5878] usb 2-1: media controller created [ 928.405494][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.564176][ T5878] usb 2-1: selecting invalid altsetting 7 [ 928.615240][ T5878] cxusb: set interface failed [ 928.648864][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 928.804023][T10027] usb 3-1: device descriptor read/64, error -71 [ 928.820305][ T5878] DVB: Unable to find symbol lgdt330x_attach() [ 928.837170][ T5878] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 928.974367][ T5910] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 929.064103][ T5878] rc_core: IR keymap rc-dvico-portable not found [ 929.070515][ T5878] Registered IR keymap rc-empty [ 929.084156][T10027] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 929.106440][ T5878] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 929.114247][ T5910] usb 8-1: device descriptor read/64, error -71 [ 929.125236][T10027] usb 3-1: device reset changed ep0 maxpacket size! [ 929.145409][ T5905] usb 3-1: USB disconnect, device number 5 [ 929.165260][ T5878] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input65 [ 929.241336][ T5878] dvb-usb: schedule remote query interval to 100 msecs. [ 929.264229][ T5878] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 929.314750][ T5878] usb 2-1: USB disconnect, device number 101 [ 929.371185][ T5910] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 929.464081][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 929.488315][ T5878] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 929.534036][ T5910] usb 8-1: device descriptor read/64, error -71 [ 929.644576][ T5910] usb usb8-port1: attempt power cycle [ 929.673929][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 929.702858][ T5905] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 929.748025][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.774063][ T5905] usb 3-1: Product: syz [ 929.785290][ T5905] usb 3-1: Manufacturer: syz [ 929.798570][ T5905] usb 3-1: SerialNumber: syz [ 929.825561][ T5905] usb 3-1: config 0 descriptor?? [ 929.873375][ T5905] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 930.005468][ T5910] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 930.098246][ T5910] usb 8-1: device descriptor read/8, error -71 [ 930.384055][ T5910] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 930.434042][ T5905] gspca_stk1135: reg_w 0x2 err -110 [ 930.441417][ T5910] usb 8-1: device descriptor read/8, error -71 [ 930.441959][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.494019][ T5905] gspca_stk1135: Sensor write failed [ 930.499413][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.553914][ T5905] gspca_stk1135: Sensor write failed [ 930.559459][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.565409][ T5910] usb usb8-port1: unable to enumerate USB device [ 930.603949][ T5905] gspca_stk1135: Sensor read failed [ 930.609253][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.646939][ T5905] gspca_stk1135: Sensor read failed [ 930.652327][ T5905] gspca_stk1135: Detected sensor type unknown (0x0) [ 930.700095][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.730547][ T5905] gspca_stk1135: Sensor read failed [ 930.753913][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.760312][ T5905] gspca_stk1135: Sensor read failed [ 930.806227][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.812711][ T5905] gspca_stk1135: Sensor write failed [ 930.853977][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 930.886415][ T5905] gspca_stk1135: Sensor write failed [ 930.891854][ T5905] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 931.417131][T18343] loop2: detected capacity change from 0 to 7 [ 931.448322][T18343] loop2: [ 931.451439][T18343] loop2: partition table partially beyond EOD, truncated [ 931.579513][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.586052][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.813405][ T5878] usb 3-1: USB disconnect, device number 6 [ 932.059990][T18348] random: crng reseeded on system resumption [ 932.377484][T18353] bridge1: entered promiscuous mode [ 932.386717][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 932.397886][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 932.417047][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 932.429163][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 932.462655][T18353] bridge1: entered allmulticast mode [ 932.501373][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 932.555170][T18353] team0: Port device bridge1 added [ 933.160503][ T5829] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 933.426053][ T5829] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 933.469407][ T5829] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 933.529520][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 933.627989][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.710353][T18364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 933.801416][ T5829] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.982151][T18364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.048420][T18358] chnl_net:caif_netlink_parms(): no params data found [ 934.096202][T18364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.390459][T18376] loop8: detected capacity change from 0 to 8 [ 934.433481][T18376] Dev loop8: unable to read RDB block 8 [ 934.476430][T18376] loop8: unable to read partition table [ 934.510947][T18376] loop8: partition table beyond EOD, truncated [ 934.534555][ T5146] Bluetooth: hci6: command tx timeout [ 934.563407][T18376] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 935.026197][T18358] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.061957][T18358] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.117843][T18358] bridge_slave_0: entered allmulticast mode [ 935.192279][T18358] bridge_slave_0: entered promiscuous mode [ 935.263246][T18358] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.298476][T18358] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.320118][T18358] bridge_slave_1: entered allmulticast mode [ 935.355710][T18358] bridge_slave_1: entered promiscuous mode [ 935.449737][T18358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.494439][T18358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.625850][T18358] team0: Port device team_slave_0 added [ 935.667132][T18358] team0: Port device team_slave_1 added [ 935.850679][T18358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.888534][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.932911][ T5910] usb 3-1: USB disconnect, device number 7 [ 935.970207][T18358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.007011][T18386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3304'. [ 936.028336][T18358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.036244][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.068119][T18358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.322110][T18358] hsr_slave_0: entered promiscuous mode [ 936.381261][T18358] hsr_slave_1: entered promiscuous mode [ 936.402374][T18358] debugfs: 'hsr0' already exists in 'hsr' [ 936.431585][T18358] Cannot create hsr debugfs directory [ 936.622542][ T5146] Bluetooth: hci6: command tx timeout [ 937.202496][T18410] FAULT_INJECTION: forcing a failure. [ 937.202496][T18410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.351475][T18410] CPU: 1 UID: 0 PID: 18410 Comm: syz.7.3308 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.351511][T18410] Tainted: [L]=SOFTLOCKUP [ 937.351519][T18410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 937.351531][T18410] Call Trace: [ 937.351539][T18410] [ 937.351549][T18410] dump_stack_lvl+0xe8/0x150 [ 937.351580][T18410] should_fail_ex+0x412/0x560 [ 937.351612][T18410] _copy_from_user+0x2d/0xb0 [ 937.351641][T18410] ___sys_sendmsg+0x1c6/0x360 [ 937.351668][T18410] ? __lock_acquire+0x6b5/0x2cf0 [ 937.351700][T18410] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.351857][T18410] ? __fget_files+0x2a/0x420 [ 937.351880][T18410] ? __fget_files+0x3a0/0x420 [ 937.351913][T18410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 937.351942][T18410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.351978][T18410] ? __pfx_ksys_write+0x10/0x10 [ 937.352016][T18410] do_syscall_64+0xe2/0xf80 [ 937.352036][T18410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.352055][T18410] ? trace_irq_disable+0x37/0x100 [ 937.352075][T18410] ? clear_bhb_loop+0x60/0xb0 [ 937.352099][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.352118][T18410] RIP: 0033:0x7f37cab9aeb9 [ 937.352137][T18410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.352154][T18410] RSP: 002b:00007f37cb975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.352178][T18410] RAX: ffffffffffffffda RBX: 00007f37cae16090 RCX: 00007f37cab9aeb9 [ 937.352193][T18410] RDX: 0000000004040004 RSI: 0000200000000280 RDI: 0000000000000004 [ 937.352206][T18410] RBP: 00007f37cb975090 R08: 0000000000000000 R09: 0000000000000000 [ 937.352218][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.352230][T18410] R13: 00007f37cae16128 R14: 00007f37cae16090 R15: 00007f37caf3fa48 [ 937.352262][T18410] [ 938.704049][ T5146] Bluetooth: hci6: command tx timeout [ 938.775023][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 938.776194][T18358] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 938.864185][T18358] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 938.925176][T18358] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 938.995639][T18358] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 939.394133][T10027] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 939.402092][T18447] FAULT_INJECTION: forcing a failure. [ 939.402092][T18447] name failslab, interval 1, probability 0, space 0, times 0 [ 939.436907][T18447] CPU: 1 UID: 0 PID: 18447 Comm: syz.1.3318 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.436943][T18447] Tainted: [L]=SOFTLOCKUP [ 939.436951][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.436962][T18447] Call Trace: [ 939.436971][T18447] [ 939.436980][T18447] dump_stack_lvl+0xe8/0x150 [ 939.437014][T18447] should_fail_ex+0x412/0x560 [ 939.437044][T18447] should_failslab+0xa8/0x100 [ 939.437070][T18447] kmem_cache_alloc_noprof+0x87/0x6e0 [ 939.437097][T18447] ? __netlink_lookup+0xc6/0x8b0 [ 939.437119][T18447] ? skb_clone+0x212/0x3a0 [ 939.437150][T18447] skb_clone+0x212/0x3a0 [ 939.437181][T18447] __netlink_deliver_tap+0x404/0x850 [ 939.437214][T18447] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.437236][T18447] netlink_deliver_tap+0x19c/0x1b0 [ 939.437258][T18447] netlink_unicast+0x7e3/0x9b0 [ 939.437294][T18447] ? __pfx_netlink_unicast+0x10/0x10 [ 939.437320][T18447] ? __alloc_skb+0x193/0x390 [ 939.437343][T18447] ? netlink_sendmsg+0x650/0xb40 [ 939.437362][T18447] ? skb_put+0x11b/0x210 [ 939.437389][T18447] netlink_sendmsg+0x813/0xb40 [ 939.437420][T18447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.437446][T18447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 939.437472][T18447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 939.437495][T18447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.437515][T18447] ____sys_sendmsg+0xa68/0xad0 [ 939.437541][T18447] ? __might_fault+0xaf/0x130 [ 939.437577][T18447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.437612][T18447] ? import_iovec+0x73/0xa0 [ 939.437644][T18447] ___sys_sendmsg+0x2a5/0x360 [ 939.437670][T18447] ? __lock_acquire+0x6b5/0x2cf0 [ 939.437702][T18447] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.437775][T18447] ? __fget_files+0x2a/0x420 [ 939.437797][T18447] ? __fget_files+0x3a0/0x420 [ 939.437829][T18447] __x64_sys_sendmsg+0x1bd/0x2a0 [ 939.437858][T18447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.437894][T18447] ? __pfx_ksys_write+0x10/0x10 [ 939.437940][T18447] do_syscall_64+0xe2/0xf80 [ 939.437962][T18447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.437980][T18447] ? trace_irq_disable+0x37/0x100 [ 939.437999][T18447] ? clear_bhb_loop+0x60/0xb0 [ 939.438023][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.438043][T18447] RIP: 0033:0x7fa10f19aeb9 [ 939.438061][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.438079][T18447] RSP: 002b:00007fa110001028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.438102][T18447] RAX: ffffffffffffffda RBX: 00007fa10f415fa0 RCX: 00007fa10f19aeb9 [ 939.438117][T18447] RDX: 0000000000000880 RSI: 0000200000000340 RDI: 0000000000000003 [ 939.438131][T18447] RBP: 00007fa110001090 R08: 0000000000000000 R09: 0000000000000000 [ 939.438144][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.438155][T18447] R13: 00007fa10f416038 R14: 00007fa10f415fa0 R15: 00007fa10f53fa48 [ 939.438189][T18447] [ 939.706395][T10027] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 940.035987][T10027] usb 3-1: can't read configurations, error -22 [ 940.148438][T18358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.194071][T10027] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 940.198948][T18358] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.239680][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.246863][ T8143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.301475][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.308737][ T8143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.374052][T10027] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 940.386080][T10027] usb 3-1: can't read configurations, error -22 [ 940.408675][T10027] usb usb3-port1: attempt power cycle [ 940.460353][T18358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.583152][T18358] veth0_vlan: entered promiscuous mode [ 940.616815][T18358] veth1_vlan: entered promiscuous mode [ 940.709770][T18358] veth0_macvtap: entered promiscuous mode [ 940.730675][T18358] veth1_macvtap: entered promiscuous mode [ 940.780579][ T52] Bluetooth: hci6: command tx timeout [ 940.791233][T18358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.793936][T10027] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 940.820384][T18358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.842486][T13202] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.852766][T13202] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.876880][T10027] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 940.887397][T13202] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.905518][T13202] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.914996][T10027] usb 3-1: can't read configurations, error -22 [ 941.076547][T10027] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 941.155852][T10027] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 941.164150][ T8152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.189223][ T8152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.209276][T10027] usb 3-1: can't read configurations, error -22 [ 941.241150][T10027] usb usb3-port1: unable to enumerate USB device [ 941.286539][T18457] x_tables: ip_tables: osf match: only valid for protocol 6 [ 941.309443][T16846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.339767][T16846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.466799][T18459] netlink: 'syz.1.3321': attribute type 10 has an invalid length. [ 941.609925][T18461] program syz.7.3323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.627103][T18459] team0: Port device netdevsim0 added [ 942.034101][T10027] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 942.226193][T10027] usb 8-1: device descriptor read/64, error -71 [ 942.458302][T18474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'. [ 942.495043][T10027] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 942.506226][T18479] netlink: 'syz.2.3326': attribute type 3 has an invalid length. [ 942.674927][T10027] usb 8-1: device descriptor read/64, error -71 [ 942.726227][T18483] random: crng reseeded on system resumption [ 942.787045][T10027] usb usb8-port1: attempt power cycle [ 943.144351][T10027] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 943.177017][T10027] usb 8-1: device descriptor read/8, error -71 [ 943.454105][T10027] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 943.497693][T10027] usb 8-1: device descriptor read/8, error -71 [ 943.511634][T18485] loop2: detected capacity change from 0 to 7 [ 943.536710][ T6643] loop2: [ 943.544672][ T6643] loop2: partition table partially beyond EOD, truncated [ 943.604731][T18485] loop2: [ 943.616100][T18485] loop2: partition table partially beyond EOD, truncated [ 943.625348][T10027] usb usb8-port1: unable to enumerate USB device [ 943.906284][T18491] syzkaller1: entered promiscuous mode [ 943.922011][T18491] syzkaller1: entered allmulticast mode [ 944.041031][T18495] kAFS: unable to lookup cell 'ÿ' [ 944.107585][T18495] kAFS: unable to lookup cell '(,c¾Ì' [ 944.193945][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 944.405539][ T5878] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 944.446786][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.485437][ T5878] usb 3-1: Product: syz [ 944.539576][ T5878] usb 3-1: Manufacturer: syz [ 944.558450][ T5878] usb 3-1: SerialNumber: syz [ 944.598796][ T5878] usb 3-1: config 0 descriptor?? [ 944.836339][ T5878] usb 3-1: ignoring: probably an ADSL modem [ 945.037948][ T30] audit: type=1326 audit(1769818644.740:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.112030][ T30] audit: type=1326 audit(1769818644.740:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc9655b78e code=0x7ffc0000 [ 945.153104][ T30] audit: type=1326 audit(1769818644.740:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.215342][ T30] audit: type=1326 audit(1769818644.760:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc9655b78e code=0x7ffc0000 [ 945.232672][ T5878] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 945.298507][ T30] audit: type=1326 audit(1769818644.760:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.351426][ T30] audit: type=1326 audit(1769818644.760:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.386663][ T30] audit: type=1326 audit(1769818644.790:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.430742][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3336'. [ 945.458167][ T30] audit: type=1326 audit(1769818644.790:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.493097][ T30] audit: type=1326 audit(1769818644.790:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.525543][T18491] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 945.538103][ T30] audit: type=1326 audit(1769818644.790:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.8.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 945.597259][ T5910] usb 3-1: USB disconnect, device number 12 [ 945.768527][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3337'. [ 946.852608][T18528] loop8: detected capacity change from 0 to 8 [ 946.866752][T18528] Dev loop8: unable to read RDB block 8 [ 946.881779][T18528] loop8: unable to read partition table [ 946.898098][T18528] loop8: partition table beyond EOD, truncated [ 946.923185][T18528] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 947.888027][T18544] can: request_module (can-proto-0) failed. [ 950.611677][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 950.611698][ T30] audit: type=1326 audit(1769818650.310:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.660305][ T30] audit: type=1326 audit(1769818650.350:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.711853][ T30] audit: type=1326 audit(1769818650.360:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.765978][ T30] audit: type=1326 audit(1769818650.360:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.827125][ T30] audit: type=1326 audit(1769818650.360:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.882583][ T30] audit: type=1326 audit(1769818650.360:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.940478][ T30] audit: type=1326 audit(1769818650.360:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 950.991595][ T30] audit: type=1326 audit(1769818650.360:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 951.184667][T18587] FAULT_INJECTION: forcing a failure. [ 951.184667][T18587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.262733][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.1.3356 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.262770][T18587] Tainted: [L]=SOFTLOCKUP [ 951.262777][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 951.262789][T18587] Call Trace: [ 951.262797][T18587] [ 951.262803][T18587] dump_stack_lvl+0xe8/0x150 [ 951.262826][T18587] should_fail_ex+0x412/0x560 [ 951.262844][T18587] _copy_from_iter+0x1d3/0x1670 [ 951.262864][T18587] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 951.262885][T18587] ? __pfx__copy_from_iter+0x10/0x10 [ 951.262900][T18587] ? __build_skb_around+0x22d/0x3c0 [ 951.262917][T18587] ? __alloc_skb+0x193/0x390 [ 951.262930][T18587] ? netlink_sendmsg+0x650/0xb40 [ 951.262943][T18587] ? skb_put+0x11b/0x210 [ 951.262959][T18587] netlink_sendmsg+0x6c0/0xb40 [ 951.262977][T18587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.262991][T18587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 951.263007][T18587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 951.263021][T18587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.263033][T18587] ____sys_sendmsg+0xa68/0xad0 [ 951.263049][T18587] ? __might_fault+0xaf/0x130 [ 951.263070][T18587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.263090][T18587] ? import_iovec+0x73/0xa0 [ 951.263109][T18587] ___sys_sendmsg+0x2a5/0x360 [ 951.263124][T18587] ? __lock_acquire+0x6b5/0x2cf0 [ 951.263144][T18587] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.263178][T18587] ? __fget_files+0x2a/0x420 [ 951.263191][T18587] ? __fget_files+0x3a0/0x420 [ 951.263209][T18587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.263227][T18587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.263248][T18587] ? __pfx_ksys_write+0x10/0x10 [ 951.263272][T18587] do_syscall_64+0xe2/0xf80 [ 951.263284][T18587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.263296][T18587] ? trace_irq_disable+0x37/0x100 [ 951.263307][T18587] ? clear_bhb_loop+0x60/0xb0 [ 951.263321][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.263333][T18587] RIP: 0033:0x7fa10f19aeb9 [ 951.263345][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.263356][T18587] RSP: 002b:00007fa110001028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.263371][T18587] RAX: ffffffffffffffda RBX: 00007fa10f415fa0 RCX: 00007fa10f19aeb9 [ 951.263380][T18587] RDX: 000000002000c010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 951.263388][T18587] RBP: 00007fa110001090 R08: 0000000000000000 R09: 0000000000000000 [ 951.263395][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.263402][T18587] R13: 00007fa10f416038 R14: 00007fa10f415fa0 R15: 00007fa10f53fa48 [ 951.263420][T18587] [ 951.883909][ T30] audit: type=1326 audit(1769818651.240:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 951.911198][ T30] audit: type=1326 audit(1769818651.240:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.5.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee1d9aeb9 code=0x7ffc0000 [ 955.228215][T18641] FAULT_INJECTION: forcing a failure. [ 955.228215][T18641] name failslab, interval 1, probability 0, space 0, times 0 [ 955.460808][T18641] CPU: 1 UID: 0 PID: 18641 Comm: syz.2.3368 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.460843][T18641] Tainted: [L]=SOFTLOCKUP [ 955.460851][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 955.460863][T18641] Call Trace: [ 955.460871][T18641] [ 955.460881][T18641] dump_stack_lvl+0xe8/0x150 [ 955.460913][T18641] should_fail_ex+0x412/0x560 [ 955.460941][T18641] should_failslab+0xa8/0x100 [ 955.460966][T18641] kmem_cache_alloc_noprof+0x87/0x6e0 [ 955.460995][T18641] ? __netlink_lookup+0xc6/0x8b0 [ 955.461018][T18641] ? skb_clone+0x212/0x3a0 [ 955.461050][T18641] skb_clone+0x212/0x3a0 [ 955.461084][T18641] __netlink_deliver_tap+0x404/0x850 [ 955.461118][T18641] ? netlink_deliver_tap+0x2e/0x1b0 [ 955.461141][T18641] netlink_deliver_tap+0x19c/0x1b0 [ 955.461163][T18641] netlink_unicast+0x7e3/0x9b0 [ 955.461202][T18641] ? __pfx_netlink_unicast+0x10/0x10 [ 955.461230][T18641] ? __alloc_skb+0x193/0x390 [ 955.461252][T18641] ? netlink_sendmsg+0x650/0xb40 [ 955.461271][T18641] ? skb_put+0x11b/0x210 [ 955.461297][T18641] netlink_sendmsg+0x813/0xb40 [ 955.461329][T18641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.461353][T18641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 955.461378][T18641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.461402][T18641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.461422][T18641] ____sys_sendmsg+0xa68/0xad0 [ 955.461448][T18641] ? __might_fault+0xaf/0x130 [ 955.461483][T18641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.461518][T18641] ? import_iovec+0x73/0xa0 [ 955.461551][T18641] ___sys_sendmsg+0x2a5/0x360 [ 955.461575][T18641] ? __lock_acquire+0x6b5/0x2cf0 [ 955.461607][T18641] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.461672][T18641] ? __fget_files+0x2a/0x420 [ 955.461691][T18641] ? __fget_files+0x3a0/0x420 [ 955.461724][T18641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 955.461754][T18641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.461845][T18641] ? __pfx_ksys_write+0x10/0x10 [ 955.461885][T18641] do_syscall_64+0xe2/0xf80 [ 955.461906][T18641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.461925][T18641] ? trace_irq_disable+0x37/0x100 [ 955.461944][T18641] ? clear_bhb_loop+0x60/0xb0 [ 955.461968][T18641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.461986][T18641] RIP: 0033:0x7fe474f9aeb9 [ 955.462005][T18641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.462023][T18641] RSP: 002b:00007fe475f43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.462045][T18641] RAX: ffffffffffffffda RBX: 00007fe475215fa0 RCX: 00007fe474f9aeb9 [ 955.462060][T18641] RDX: 000000002000c010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 955.462073][T18641] RBP: 00007fe475f43090 R08: 0000000000000000 R09: 0000000000000000 [ 955.462086][T18641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.462098][T18641] R13: 00007fe475216038 R14: 00007fe475215fa0 R15: 00007fe47533fa48 [ 955.462132][T18641] [ 955.953369][T18644] loop8: detected capacity change from 0 to 8 [ 956.021007][T18644] Dev loop8: unable to read RDB block 8 [ 956.087524][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 956.087544][ T30] audit: type=1326 audit(1769818655.790:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.101538][T18644] loop8: unable to read partition table [ 956.174534][ T30] audit: type=1326 audit(1769818655.820:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.198334][T18644] loop8: partition table beyond EOD, truncated [ 956.261288][T18644] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 956.279395][ T30] audit: type=1326 audit(1769818655.830:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.325570][ T30] audit: type=1326 audit(1769818655.830:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.371557][ T30] audit: type=1326 audit(1769818655.860:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.410223][ T30] audit: type=1326 audit(1769818655.860:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.434873][ T30] audit: type=1326 audit(1769818655.860:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.477607][ T30] audit: type=1326 audit(1769818655.860:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.518914][ T30] audit: type=1326 audit(1769818655.860:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 956.563780][ T30] audit: type=1326 audit(1769818656.250:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.7.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 958.252517][ T5146] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 958.267093][ T5146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 958.284278][ T5146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 958.302916][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 958.311139][ T5146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 958.593148][T18679] chnl_net:caif_netlink_parms(): no params data found [ 958.828777][T18679] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.848681][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.872015][T18679] bridge_slave_0: entered allmulticast mode [ 958.888995][T18679] bridge_slave_0: entered promiscuous mode [ 958.905318][T18679] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.912659][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.972251][T18679] bridge_slave_1: entered allmulticast mode [ 959.056279][T18679] bridge_slave_1: entered promiscuous mode [ 959.469095][T18679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.688982][T18679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.894750][T13202] wlan0: Trigger new scan to find an IBSS to join [ 960.071353][T18679] team0: Port device team_slave_0 added [ 960.102460][T18679] team0: Port device team_slave_1 added [ 960.374372][ T5146] Bluetooth: hci7: command tx timeout [ 960.578602][T18679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.664032][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.819089][T18679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.892922][T18679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.940919][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.070001][T18679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.164579][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 961.164599][ T30] audit: type=1326 audit(1769818660.140:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.2.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 961.647996][T18679] hsr_slave_0: entered promiscuous mode [ 961.697250][T18679] hsr_slave_1: entered promiscuous mode [ 961.724534][T18679] debugfs: 'hsr0' already exists in 'hsr' [ 961.730463][T18679] Cannot create hsr debugfs directory [ 962.112325][T18707] loop8: detected capacity change from 0 to 8 [ 962.156062][T18707] Dev loop8: unable to read RDB block 8 [ 962.184156][T18707] loop8: unable to read partition table [ 962.190153][T18707] loop8: partition table beyond EOD, truncated [ 962.241668][T18707] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 962.463878][ T52] Bluetooth: hci7: command tx timeout [ 962.608048][T18716] fuse: Bad value for 'fd' [ 962.786254][T16846] bridge_slave_0: left allmulticast mode [ 962.792134][T16846] bridge_slave_0: left promiscuous mode [ 962.824663][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.938093][T13202] wlan0: Trigger new scan to find an IBSS to join [ 963.641771][T18687] syz.7.3379 (18687): drop_caches: 1 [ 963.682708][T18688] syz.7.3379 (18688): drop_caches: 1 [ 964.254160][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 964.374053][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 964.535084][ T5146] Bluetooth: hci7: command tx timeout [ 965.026326][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 965.888174][ T30] audit: type=1326 audit(1769818665.590:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 965.897827][ T8152] wlan0: Trigger new scan to find an IBSS to join [ 966.096833][ T30] audit: type=1326 audit(1769818665.590:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.177680][ T30] audit: type=1326 audit(1769818665.640:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.262794][ T30] audit: type=1326 audit(1769818665.640:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.353149][ T30] audit: type=1326 audit(1769818665.640:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.422054][ T30] audit: type=1326 audit(1769818665.640:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.467822][ T30] audit: type=1326 audit(1769818665.640:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.518305][ T30] audit: type=1326 audit(1769818665.640:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.563919][ T30] audit: type=1326 audit(1769818665.640:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.617700][ T5146] Bluetooth: hci7: command tx timeout [ 966.667358][ T30] audit: type=1326 audit(1769818665.640:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.770653][ T30] audit: type=1326 audit(1769818665.640:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 966.850448][ T30] audit: type=1326 audit(1769818665.640:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18748 comm="syz.8.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 967.043098][ T8143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.618722][T16846] bond1 (unregistering): Released all slaves [ 968.640886][T16846] bond2 (unregistering): Released all slaves [ 971.075583][T16846] team0: Port device bond0 removed [ 971.151175][T16846] bond0 (unregistering): Released all slaves [ 971.619492][T16846] team0: Port device bond3 removed [ 971.627709][T16846] bond3 (unregistering): Released all slaves [ 971.704375][ T5829] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 971.854983][T18765] loop8: detected capacity change from 0 to 8 [ 971.877709][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 971.891056][ T5829] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 971.912756][T18765] Dev loop8: unable to read RDB block 8 [ 971.916538][ T5829] usb 3-1: config 0 has no interface number 0 [ 971.927809][ T5829] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.934873][T18765] loop8: unable to read partition table [ 971.941663][ T5829] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 971.956796][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.964302][T18765] loop8: partition table beyond EOD, truncated [ 971.969526][ T5829] usb 3-1: Product: syz [ 971.971101][T18765] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 971.991271][ T5829] usb 3-1: Manufacturer: syz [ 972.005839][ T5829] usb 3-1: SerialNumber: syz [ 972.019950][ T5829] usb 3-1: config 0 descriptor?? [ 972.051773][ T5829] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 972.085090][ T5829] em28xx 3-1:0.132: Video interface 132 found: [ 972.287088][T18749] geneve2: entered promiscuous mode [ 972.292406][T18749] geneve2: entered allmulticast mode [ 972.496416][T16846] m1Ie5nè‹Ò: left promiscuous mode [ 972.686794][T16846] tipc: Disabling bearer [ 972.708380][T16846] tipc: Left network mode [ 973.574589][ T5829] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 973.672391][ T5829] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 973.699630][ T5829] em28xx 3-1:0.132: board has no eeprom [ 973.783971][ T5829] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 973.813552][ T5829] em28xx 3-1:0.132: analog set to bulk mode. [ 973.842098][ T5898] em28xx 3-1:0.132: Registering V4L2 extension [ 974.173493][ T5898] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 974.217778][ T5898] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 974.388871][ T5910] usb 3-1: USB disconnect, device number 13 [ 974.395632][ T5898] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 974.428620][ T5910] em28xx 3-1:0.132: Disconnecting em28xx [ 974.637619][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 974.637638][ T30] audit: type=1326 audit(1769818674.340:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 974.748039][ T30] audit: type=1326 audit(1769818674.340:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 974.892780][ T30] audit: type=1326 audit(1769818674.340:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 974.960853][ T5898] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 974.998520][ T5898] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 975.036631][ T5898] em28xx 3-1:0.132: No AC97 audio processor [ 975.043950][ T30] audit: type=1326 audit(1769818674.340:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 975.103780][ T5898] usb 3-1: Decoder not found [ 975.134433][ T5898] em28xx 3-1:0.132: failed to create media graph [ 975.141025][ T5898] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 975.191884][ T30] audit: type=1326 audit(1769818674.340:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 975.235171][ T5898] em28xx 3-1:0.132: Remote control support is not available for this card. [ 975.285405][ T5910] em28xx 3-1:0.132: Closing input extension [ 975.328498][ T30] audit: type=1326 audit(1769818674.340:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe474f5b78e code=0x7ffc0000 [ 975.340490][ T5910] em28xx 3-1:0.132: Freeing device [ 975.421542][T18679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 975.454004][ T30] audit: type=1326 audit(1769818674.340:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 975.529121][ T30] audit: type=1326 audit(1769818674.340:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe474f5b78e code=0x7ffc0000 [ 975.634048][ T30] audit: type=1326 audit(1769818674.340:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 975.714005][ T30] audit: type=1326 audit(1769818674.340:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474f9aeb9 code=0x7ffc0000 [ 976.078074][T18679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 976.940736][T18679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 977.037768][T18679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 977.191758][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 977.380625][T18679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.451374][T18843] loop8: detected capacity change from 0 to 8 [ 977.468438][T18843] Dev loop8: unable to read RDB block 8 [ 977.482455][T18843] loop8: unable to read partition table [ 977.495380][T18843] loop8: partition table beyond EOD, truncated [ 977.507390][T18843] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 977.888011][T18679] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.929380][T13208] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.936855][T13208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.945512][ T5829] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 977.989060][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.996416][ T8152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.093954][ T5829] usb 8-1: device descriptor read/64, error -71 [ 978.334776][ T5829] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 978.503931][ T5829] usb 8-1: device descriptor read/64, error -71 [ 978.594285][T18679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.626469][ T5829] usb usb8-port1: attempt power cycle [ 978.706664][T18679] veth0_vlan: entered promiscuous mode [ 978.741518][T18679] veth1_vlan: entered promiscuous mode [ 978.812897][T18679] veth0_macvtap: entered promiscuous mode [ 978.833437][T18679] veth1_macvtap: entered promiscuous mode [ 978.889214][T18679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.920865][T18679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.955905][T13208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.970196][T13208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.983925][ T5829] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 979.008080][ T8152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.022074][ T8152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.031585][ T5829] usb 8-1: device descriptor read/8, error -71 [ 979.375238][ T5829] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 979.435937][ T5829] usb 8-1: device descriptor read/8, error -71 [ 979.450341][T16847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.482691][T16847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.566749][ T5829] usb usb8-port1: unable to enumerate USB device [ 979.755958][T16844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.788546][T16844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.850247][T16846] hsr_slave_0: left promiscuous mode [ 979.862829][T16846] hsr_slave_1: left promiscuous mode [ 979.869174][T16846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.881998][T16846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.309890][T16846] team0 (unregistering): Port device team_slave_1 removed [ 981.640685][T16846] team0 (unregistering): Port device team_slave_0 removed [ 982.563150][T18881] loop8: detected capacity change from 0 to 8 [ 982.606823][T18881] Dev loop8: unable to read RDB block 8 [ 982.612438][T18881] loop8: unable to read partition table [ 982.632032][T18881] loop8: partition table beyond EOD, truncated [ 982.640638][T18881] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 983.134071][ T5941] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 983.272609][T18878] syzkaller0: entered promiscuous mode [ 983.290001][T18878] syzkaller0: entered allmulticast mode [ 983.313895][ T5941] usb 8-1: Using ep0 maxpacket: 16 [ 983.334051][ T5941] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 986.058177][ T5941] usb 8-1: string descriptor 0 read error: -71 [ 986.077354][ T5941] usb 8-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 986.140183][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.260363][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 986.260377][ T30] audit: type=1326 audit(1769818685.960:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.276941][ T5941] r8152-cfgselector 8-1: Unknown version 0x0000 [ 986.323176][ T30] audit: type=1326 audit(1769818685.960:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.383021][ T30] audit: type=1326 audit(1769818686.000:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.429597][T18907] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 986.440499][ T5941] r8152-cfgselector 8-1: rejected 8 configurations due to insufficient available bus power [ 986.506528][ T5941] r8152-cfgselector 8-1: no configuration chosen from 8 choices [ 986.554401][ T5941] r8152-cfgselector 8-1: USB disconnect, device number 14 [ 986.721160][ T30] audit: type=1326 audit(1769818686.000:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.824042][ T30] audit: type=1326 audit(1769818686.000:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.903032][ T30] audit: type=1326 audit(1769818686.020:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 986.971338][ T30] audit: type=1326 audit(1769818686.020:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 987.144152][ T30] audit: type=1326 audit(1769818686.020:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 987.244338][ T30] audit: type=1326 audit(1769818686.020:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 987.303980][ T30] audit: type=1326 audit(1769818686.020:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 990.354089][ T5898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 990.600621][ T5898] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 990.619501][ T5898] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 990.638386][ T5898] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 990.677643][ T5898] usb 3-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.692429][ T5898] usb 3-1: config 16 interface 0 has no altsetting 0 [ 990.711948][ T5898] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 990.726285][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.954285][T10030] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 993.032643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.039435][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.149663][T10030] usb 8-1: Using ep0 maxpacket: 16 [ 993.172810][T10030] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 993.195631][T10030] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.220957][T10030] usb 8-1: config 0 has no interface number 0 [ 993.245577][T10030] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 993.267710][T10030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.276784][T10030] usb 8-1: Product: syz [ 993.283070][T10030] usb 8-1: Manufacturer: syz [ 993.299125][T10030] usb 8-1: SerialNumber: syz [ 993.347658][T10030] usb 8-1: config 0 descriptor?? [ 994.486083][ T5898] usb 3-1: string descriptor 0 read error: -71 [ 994.513520][ T5898] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 994.606644][ T5898] imon 3-1:16.0: unable to initialize intf0, err -19 [ 994.637908][ T5898] imon:imon_probe: failed to initialize context! [ 994.679276][ T5898] imon 3-1:16.0: unable to register, err -19 [ 994.747470][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 994.747489][ T30] audit: type=1326 audit(1769818694.450:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 994.784968][ T5898] usb 3-1: USB disconnect, device number 14 [ 994.921750][ T30] audit: type=1326 audit(1769818694.540:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.146201][ T30] audit: type=1326 audit(1769818694.590:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.232323][ T30] audit: type=1326 audit(1769818694.590:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.410993][ T30] audit: type=1326 audit(1769818694.590:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.448457][T18971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.615073][ T30] audit: type=1326 audit(1769818695.180:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.711055][ T30] audit: type=1326 audit(1769818695.180:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 995.813875][ T30] audit: type=1326 audit(1769818695.180:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01a99aeb9 code=0x7ffc0000 [ 996.188168][ T5910] usb 8-1: USB disconnect, device number 16 [ 996.398819][T18983] xt_hashlimit: size too large, truncated to 1048576 [ 997.369777][ T5941] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 997.584549][ T5941] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 997.650645][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.686100][ T5941] usb 8-1: Product: syz [ 997.702638][ T5941] usb 8-1: Manufacturer: syz [ 997.731957][ T5941] usb 8-1: SerialNumber: syz [ 997.829653][ T5941] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 997.919355][ T5905] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 999.144632][ T5898] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 999.308582][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 999.356872][ T5898] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 999.372963][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.396805][ T5898] usb 2-1: Product: syz [ 999.406283][ T5898] usb 2-1: Manufacturer: syz [ 999.422442][ T5898] usb 2-1: SerialNumber: syz [ 999.464061][ T5898] usb 2-1: config 0 descriptor?? [ 999.492097][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 999.974002][ T5905] usb 8-1: Service connection timeout for: 258 [ 1000.051840][ T5905] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1000.200027][ T5905] ath9k_htc: Failed to initialize the device [ 1000.326841][ T5905] usb 8-1: ath9k_htc: USB layer deinitialized [ 1000.480059][ T5910] usb 8-1: USB disconnect, device number 17 [ 1000.644037][ T5898] gspca_sonixj: i2c_w8 err -71 [ 1000.724866][ T5898] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1000.771896][ T5898] usb 2-1: USB disconnect, device number 102 [ 1000.919781][ T30] audit: type=1326 audit(1769818700.620:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1000.973569][ T30] audit: type=1326 audit(1769818700.620:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.059718][ T30] audit: type=1326 audit(1769818700.650:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.109493][ T30] audit: type=1326 audit(1769818700.650:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.142884][ T30] audit: type=1326 audit(1769818700.650:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.236372][T19029] fuse: Unknown parameter '‘Y…´S—X¡‘-"„ç¡„?Ÿi׃îH‘Á’ûHŒu<Ž¡Ÿ´ÕyVe~—Ø^Ë(gŸýIôÝ›€ê0x0000000000000009' [ 1001.251294][ T30] audit: type=1326 audit(1769818700.650:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.273921][ T5905] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1001.300750][ T30] audit: type=1326 audit(1769818700.650:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.336763][ T30] audit: type=1326 audit(1769818700.650:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.409444][ T30] audit: type=1326 audit(1769818700.670:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.438460][ T30] audit: type=1326 audit(1769818700.670:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.7.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1001.496661][ T5905] usb 2-1: config index 0 descriptor too short (expected 1340, got 1332) [ 1001.497814][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 1001.623866][ T5905] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 1001.632138][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.834444][ T5905] usb 2-1: config 0 has no interface number 0 [ 1001.865847][ T5905] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1001.963897][ T5905] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1002.007585][ T5905] usb 2-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1002.062466][T19046] bridge_slave_0: left allmulticast mode [ 1002.097345][ T5905] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1002.113460][T19046] bridge_slave_0: left promiscuous mode [ 1002.138665][T19046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.147482][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.189772][T19046] bridge_slave_1: left allmulticast mode [ 1002.211253][T19046] bridge_slave_1: left promiscuous mode [ 1002.213855][ T5905] usb 2-1: Product: syz [ 1002.257413][T19046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.284029][ T5905] usb 2-1: Manufacturer: syz [ 1002.299112][ T5905] usb 2-1: SerialNumber: syz [ 1002.309025][T19046] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.349799][ T5905] usb 2-1: config 0 descriptor?? [ 1002.388778][T19046] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.420549][ T5905] ldusb 2-1:0.224: Interrupt in endpoint not found [ 1002.451143][T19046] team0: Port device team_slave_0 removed [ 1002.513133][T19046] team0: Port device team_slave_1 removed [ 1002.586581][T19046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.632404][T19046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.721451][T19046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.773895][T19046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.825615][T19046] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1002.979998][ T5905] usb 2-1: USB disconnect, device number 103 [ 1002.980882][T19050] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1003.716520][T19061] tipc: Enabling of bearer rejected, failed to enable media [ 1003.996770][T19067] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1004.003436][T19067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1004.098064][T19067] vhci_hcd vhci_hcd.0: Device attached [ 1004.142783][T19071] vhci_hcd vhci_hcd.0: port 0 already used [ 1004.195430][T19068] vhci_hcd: connection closed [ 1004.195718][ T8143] vhci_hcd vhci_hcd.1: stop threads [ 1004.271302][ T8143] vhci_hcd vhci_hcd.1: release socket [ 1004.300016][ T8143] vhci_hcd vhci_hcd.1: disconnect device [ 1005.182513][ T5898] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1005.264008][ T5941] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1005.374198][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1005.401109][ T5898] usb 3-1: config 7 has an invalid interface number: 29 but max is 0 [ 1005.440067][ T5898] usb 3-1: config 7 has no interface number 0 [ 1005.480876][ T5898] usb 3-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 1005.551491][ T5898] usb 3-1: config 7 interface 29 has no altsetting 0 [ 1005.617531][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 1005.638274][ T5898] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 1005.666565][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.683996][ T5941] usb 8-1: Using ep0 maxpacket: 16 [ 1005.708194][ T5941] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.755957][ T5898] i2c-tiny-usb 3-1:7.29: version a2.36 found at bus 003 address 015 [ 1005.808838][ T5941] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1005.948543][ T5941] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1006.079555][ T5941] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1006.083612][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1006.083633][ T30] audit: type=1326 audit(1769818705.770:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1006.218706][ T5941] usb 8-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1006.305808][ T5941] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 1006.402914][ T5941] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.453411][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.503961][ T5941] usb 8-1: Product: syz [ 1006.526136][ T5941] usb 8-1: Manufacturer: syz [ 1006.545201][ T30] audit: type=1326 audit(1769818705.900:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1006.659948][ T30] audit: type=1326 audit(1769818706.020:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1006.664406][ T5941] usb 8-1: SerialNumber: syz [ 1006.812776][ T30] audit: type=1326 audit(1769818706.020:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1006.922919][ T30] audit: type=1326 audit(1769818706.140:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.053134][ T30] audit: type=1326 audit(1769818706.150:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.137614][ T30] audit: type=1326 audit(1769818706.150:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.226699][ T30] audit: type=1326 audit(1769818706.190:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.326138][ T30] audit: type=1326 audit(1769818706.190:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.421220][ T30] audit: type=1326 audit(1769818706.190:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.8.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1007.605533][ T5941] usb 8-1: USB disconnect, device number 18 [ 1007.728765][T18901] udevd[18901]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.895381][ T5898] (null): failure setting delay to 10us [ 1007.901138][ T5898] i2c-tiny-usb 3-1:7.29: probe with driver i2c-tiny-usb failed with error -5 [ 1008.127729][T19105] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1008.315420][T10030] usb 3-1: USB disconnect, device number 15 [ 1008.360837][T19108] fuse: blksize only supported for fuseblk [ 1008.572906][T19117] netlink: 'syz.2.3467': attribute type 21 has an invalid length. [ 1009.016847][T19125] netlink: 'syz.1.3463': attribute type 13 has an invalid length. [ 1009.738951][T19131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.400993][T19125] gretap0: refused to change device tx_queue_len [ 1010.448860][T19125] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1010.889586][ T5146] Bluetooth: hci3: ACL packet for unknown connection handle 2761 [ 1011.668042][T19148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.531920][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1012.531942][ T30] audit: type=1326 audit(1769818712.230:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1012.685272][ T30] audit: type=1326 audit(1769818712.360:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1012.824180][ T30] audit: type=1326 audit(1769818712.360:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1012.914023][ T30] audit: type=1326 audit(1769818712.360:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1013.013872][ T30] audit: type=1326 audit(1769818712.590:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1013.104037][T10030] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1013.159427][ T30] audit: type=1326 audit(1769818712.860:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1013.313984][T10030] usb 8-1: device descriptor read/64, error -71 [ 1013.343392][ T30] audit: type=1326 audit(1769818712.880:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1013.574130][T10030] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1013.691796][T19170] binder: BINDER_SET_CONTEXT_MGR already set [ 1013.720854][T19170] binder: 19168:19170 ioctl 4018620d 200000000100 returned -16 [ 1013.743911][T10030] usb 8-1: device descriptor read/64, error -71 [ 1013.889530][T10030] usb usb8-port1: attempt power cycle [ 1014.229362][T19177] geneve2: entered allmulticast mode [ 1014.313941][ T5905] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1014.344046][T10030] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1014.408590][T10030] usb 8-1: device descriptor read/8, error -71 [ 1014.544450][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1014.612349][ T5905] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 1014.649697][ T5905] usb 2-1: config 0 has no interface number 0 [ 1014.686479][T10030] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1014.716173][ T5905] usb 2-1: config 0 interface 161 has no altsetting 0 [ 1014.746346][T10030] usb 8-1: device descriptor read/8, error -71 [ 1014.763988][ T5905] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1014.823856][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.864155][T10030] usb usb8-port1: unable to enumerate USB device [ 1014.921272][ T5905] usb 2-1: Product: syz [ 1014.957060][ T5905] usb 2-1: Manufacturer: syz [ 1014.961683][ T5905] usb 2-1: SerialNumber: syz [ 1015.017011][ T5905] usb 2-1: config 0 descriptor?? [ 1015.068989][ T5905] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 1015.145439][ T5905] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1016.194882][ T5905] usb 2-1: USB disconnect, device number 104 [ 1016.297130][T19194] netlink: 'syz.1.3481': attribute type 13 has an invalid length. [ 1016.434371][T19201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1016.543301][T19194] gretap0: refused to change device tx_queue_len [ 1016.576314][T19194] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1016.712551][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1016.868227][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1018.795481][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1018.824592][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1018.845702][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1018.963948][ T5905] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1019.128718][ T5905] usb 8-1: config 0 has no interfaces? [ 1019.167324][ T5905] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1019.197436][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.242760][ T5905] usb 8-1: Product: syz [ 1019.294190][T19240] netlink: 'syz.5.3498': attribute type 13 has an invalid length. [ 1019.302521][ T5905] usb 8-1: Manufacturer: syz [ 1019.313211][ T5905] usb 8-1: SerialNumber: syz [ 1019.376386][T19240] gretap0: refused to change device tx_queue_len [ 1019.386888][ T5905] usb 8-1: config 0 descriptor?? [ 1019.390729][T19240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1019.642057][T19248] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1019.659534][T19251] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1019.859265][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1019.965364][T19259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1020.437671][ T5898] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1021.548632][T19270] netlink: 194768 bytes leftover after parsing attributes in process `syz.5.3504'. [ 1021.652265][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1021.714758][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1021.718104][ T5941] usb 8-1: USB disconnect, device number 23 [ 1021.803656][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.854909][ T5898] usb 2-1: config 0 descriptor?? [ 1022.199890][T19259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.223001][T19259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.309766][T19279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1023.393731][ T5898] usb 2-1: USB disconnect, device number 105 [ 1023.955303][ T5898] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1024.135482][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 1024.162183][ T5898] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1024.204429][ T5898] usb 2-1: config 2 has no interface number 0 [ 1024.210599][ T5898] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1024.296946][ T5898] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1024.341914][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.382080][ T5898] usb 2-1: Product: syz [ 1024.400573][ T5898] usb 2-1: Manufacturer: syz [ 1024.431129][ T5898] usb 2-1: SerialNumber: syz [ 1025.594039][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1025.804362][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 1025.851196][ T5910] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1025.903260][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.990798][ T5898] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1026.008789][ T5910] usb 3-1: Product: syz [ 1026.027190][ T5910] usb 3-1: Manufacturer: syz [ 1026.031850][ T5910] usb 3-1: SerialNumber: syz [ 1026.043730][ T5898] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1026.074876][ T5910] usb 3-1: config 0 descriptor?? [ 1026.107202][ T5898] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1026.130429][ T5910] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1026.182108][ T5898] usb 2-1: USB disconnect, device number 106 [ 1026.254115][ T24] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1026.444593][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1026.479753][ T24] usb 8-1: config 5 has an invalid interface number: 168 but max is 0 [ 1026.545915][ T24] usb 8-1: config 5 has no interface number 0 [ 1026.582015][ T24] usb 8-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1026.664250][ T5910] gspca_stk1135: reg_w 0x2 err -110 [ 1026.669601][ T24] usb 8-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1026.700200][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.741503][ T24] usb 8-1: config 5 interface 168 has no altsetting 0 [ 1026.758587][ T5910] gspca_stk1135: Sensor write failed [ 1026.807956][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.830084][ T24] usb 8-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1026.849567][ T5910] gspca_stk1135: Sensor write failed [ 1026.890128][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.911989][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.988682][ T5910] gspca_stk1135: Sensor read failed [ 1026.994866][ T24] usb 8-1: Product: syz [ 1027.009750][ T24] usb 8-1: Manufacturer: syz [ 1027.014959][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.021288][ T5910] gspca_stk1135: Sensor read failed [ 1027.037552][ T24] usb 8-1: SerialNumber: syz [ 1027.058186][ T5910] gspca_stk1135: Detected sensor type unknown (0x0) [ 1027.074999][T19301] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 1027.084202][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.137038][ T5910] gspca_stk1135: Sensor read failed [ 1027.151066][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.169127][ T5910] gspca_stk1135: Sensor read failed [ 1027.181037][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.223341][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1027.255505][ T5910] gspca_stk1135: Sensor write failed [ 1027.260917][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.289780][ T5910] gspca_stk1135: Sensor write failed [ 1027.303409][ T5910] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1027.337144][ T5910] usb 3-1: USB disconnect, device number 16 [ 1028.896252][T19321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.970497][T19321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.254456][ T24] pn533_usb 8-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1029.280837][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1029.310328][ T24] usb 8-1: USB disconnect, device number 24 [ 1029.453921][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 1029.545535][ T5910] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1029.677059][ T5910] usb 3-1: config 0 has no interface number 0 [ 1029.856172][ T5910] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.047619][ T5910] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1030.141348][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1030.229850][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.300824][ T5910] usb 3-1: Product: syz [ 1030.343984][ T5910] usb 3-1: Manufacturer: syz [ 1030.392830][ T5910] usb 3-1: SerialNumber: syz [ 1030.519628][ T5910] usb 3-1: config 0 descriptor?? [ 1030.626454][ T30] audit: type=1326 audit(1769818730.330:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1030.854027][ T30] audit: type=1326 audit(1769818730.330:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1030.968929][ T30] audit: type=1326 audit(1769818730.360:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.105333][ T30] audit: type=1326 audit(1769818730.360:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.233232][ T5910] appletouch 3-1:0.85: Failed to request geyser raw mode [ 1031.244362][ T5910] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1031.259192][ T5910] usb 3-1: USB disconnect, device number 17 [ 1031.302863][ T30] audit: type=1326 audit(1769818730.360:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.390176][ T30] audit: type=1326 audit(1769818730.400:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.435430][ T30] audit: type=1326 audit(1769818730.420:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.536181][T19348] batman_adv: batadv0: Adding interface: dummy0 [ 1031.544338][ T30] audit: type=1326 audit(1769818730.420:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1031.585930][T19348] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.654230][T19348] batman_adv: batadv0: Interface activated: dummy0 [ 1031.856413][ T30] audit: type=1326 audit(1769818730.420:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1032.017174][ T30] audit: type=1326 audit(1769818730.420:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.7.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cab9aeb9 code=0x7ffc0000 [ 1032.017328][ T5878] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1032.047899][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3520'. [ 1032.283190][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 1032.356112][ T5878] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1032.384890][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.403352][T19357] team1: entered promiscuous mode [ 1032.450059][T19357] team1: entered allmulticast mode [ 1032.460708][ T5878] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1032.488860][ T5878] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1032.488892][T19357] 8021q: adding VLAN 0 to HW filter on device team1 [ 1032.556036][ T5878] usb 2-1: Manufacturer: syz [ 1032.580516][ T5878] usb 2-1: config 0 descriptor?? [ 1032.783457][T19364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1032.844254][ T5878] rc_core: IR keymap rc-hauppauge not found [ 1032.956984][ T5878] Registered IR keymap rc-empty [ 1033.124361][ T5878] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1033.217390][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1033.319609][ T5878] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 1033.447566][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1034.289870][ T5905] usb 2-1: USB disconnect, device number 107 [ 1035.216143][T19384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1035.233759][T19384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.265240][T19384] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.300481][T19384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1035.322122][T19384] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1035.358342][T19384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.379832][T19384] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1035.424872][T19384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1035.445181][T19384] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1035.487140][T19384] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1035.519800][T19384] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1035.582960][T19384] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1035.636185][T19384] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1035.645049][T19384] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1035.691970][T19384] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1036.174142][T19393] syzkaller1: entered promiscuous mode [ 1036.204068][T19393] syzkaller1: entered allmulticast mode [ 1036.564035][ T5898] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1036.748840][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1036.758425][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 1036.806123][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1036.861082][ T5898] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1036.885387][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.934294][ T5898] usb 2-1: Product: syz [ 1036.939148][ T5898] usb 2-1: Manufacturer: syz [ 1036.943771][ T5898] usb 2-1: SerialNumber: syz [ 1037.020482][ T5898] usb 2-1: config 0 descriptor?? [ 1037.060794][ T5898] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1037.264664][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 1037.264690][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1037.278300][ T24] usb 2-1: USB disconnect, device number 108 [ 1037.320378][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3544'. [ 1037.334076][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1037.342279][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1037.414011][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.493987][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 1037.495045][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 1037.577088][ T5878] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1037.633201][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.660962][ T5146] Bluetooth: hci7: command 0x0c1a tx timeout [ 1037.811855][ T5878] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1037.922926][ T5878] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1037.990127][ T5878] usb 3-1: Manufacturer: syz [ 1037.998209][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 1037.998230][ T30] audit: type=1326 audit(1769818737.700:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.045966][T19428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1038.105476][ T30] audit: type=1326 audit(1769818737.730:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.230558][ T5878] usb 3-1: config 0 descriptor?? [ 1038.244254][ T30] audit: type=1326 audit(1769818737.740:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.385644][ T30] audit: type=1326 audit(1769818737.740:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.477543][ T30] audit: type=1326 audit(1769818737.740:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.500741][ T5878] rc_core: IR keymap rc-hauppauge not found [ 1038.511193][T19431] loop8: detected capacity change from 0 to 8 [ 1038.530730][T19431] Dev loop8: unable to read RDB block 8 [ 1038.556598][T19431] loop8: unable to read partition table [ 1038.587489][ T5878] Registered IR keymap rc-empty [ 1038.594366][T19431] loop8: partition table beyond EOD, truncated [ 1038.600705][ T30] audit: type=1326 audit(1769818737.740:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.638592][T19431] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1038.689119][ T5878] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1038.715402][T19425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1038.732520][ T30] audit: type=1326 audit(1769818737.740:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.832304][ T30] audit: type=1326 audit(1769818737.740:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.919463][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1038.924496][ T5878] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input69 [ 1038.943125][ T30] audit: type=1326 audit(1769818737.740:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1038.981312][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.008699][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.041154][ T30] audit: type=1326 audit(1769818737.740:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19427 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10f19aeb9 code=0x7ffc0000 [ 1039.069361][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.109391][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.136611][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.220364][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.251410][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1039.298460][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1039.334547][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 1039.415494][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 1039.474291][ T5878] usb 3-1: USB disconnect, device number 18 [ 1039.503940][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 1039.574571][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 1039.585274][ T5146] Bluetooth: hci6: command 0x0c1a tx timeout [ 1039.735085][ T5146] Bluetooth: hci7: command 0x0c1a tx timeout [ 1039.813963][ T24] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1039.995715][ T24] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1040.013130][ T24] usb 8-1: config 0 has no interface number 0 [ 1040.026145][ T24] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1040.048998][ T24] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1040.081680][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.148957][ T24] usb 8-1: Product: syz [ 1040.169711][ T24] usb 8-1: Manufacturer: syz [ 1040.199800][ T24] usb 8-1: SerialNumber: syz [ 1040.237635][ T24] usb 8-1: config 0 descriptor?? [ 1040.580473][ T24] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1040.624985][ T24] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1040.672974][ T24] usb 8-1: USB disconnect, device number 25 [ 1040.705912][T19447] netlink: 'syz.2.3554': attribute type 13 has an invalid length. [ 1040.850256][T19447] gretap0: refused to change device tx_queue_len [ 1040.884469][ T5878] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1041.170355][ T5878] usb 2-1: config 0 has no interfaces? [ 1041.210386][ T5878] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1041.222592][T19447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1041.273965][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.304061][ T5878] usb 2-1: Product: syz [ 1041.313831][ T5878] usb 2-1: Manufacturer: syz [ 1041.332024][ T5878] usb 2-1: SerialNumber: syz [ 1041.365570][T19466] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1041.413726][ T5878] usb 2-1: config 0 descriptor?? [ 1041.651240][T19470] loop8: detected capacity change from 0 to 8 [ 1041.659048][ T5146] Bluetooth: hci6: command 0x0c1a tx timeout [ 1041.692946][T19018] Dev loop8: unable to read RDB block 8 [ 1041.699974][T19018] loop8: unable to read partition table [ 1041.710460][T19018] loop8: partition table beyond EOD, truncated [ 1041.733140][T19470] Dev loop8: unable to read RDB block 8 [ 1041.783414][T19470] loop8: unable to read partition table [ 1041.814843][ T5146] Bluetooth: hci7: command 0x0c1a tx timeout [ 1041.844140][T19472] netlink: 'syz.5.3560': attribute type 21 has an invalid length. [ 1041.858092][T19470] loop8: partition table beyond EOD, truncated [ 1041.864991][T19470] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1042.004347][T19472] netlink: 'syz.5.3560': attribute type 5 has an invalid length. [ 1042.272668][T19475] loop2: detected capacity change from 0 to 7 [ 1042.327607][T19475] loop2: [ 1042.340179][T19475] loop2: partition table partially beyond EOD, truncated [ 1043.355342][T19472] __nla_validate_parse: 47 callbacks suppressed [ 1043.355364][T19472] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3560'. [ 1045.077520][ T5941] usb 2-1: USB disconnect, device number 109 [ 1045.897825][T19505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1046.754048][T19518] kAFS: unable to lookup cell 'ÿ' [ 1046.769806][T19518] kAFS: unable to lookup cell '(,c¾Ì' [ 1047.717384][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1048.364991][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3576'. [ 1048.425280][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3576'. [ 1048.467213][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3576'. [ 1049.960134][T19547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.096217][T19542] netlink: 'syz.2.3580': attribute type 13 has an invalid length. [ 1050.171595][T19542] gretap0: refused to change device tx_queue_len [ 1050.195919][T19542] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1050.708302][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3584'. [ 1051.013368][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1051.048370][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1051.101764][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1051.934356][ T5910] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1052.458848][ T5910] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.474067][ T5910] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1052.514780][ T5910] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.537401][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.632487][ T5910] usb 8-1: Product: syz [ 1052.638647][ T5910] usb 8-1: Manufacturer: syz [ 1052.677585][ T5910] usb 8-1: SerialNumber: syz [ 1052.738920][ T5910] cdc_mbim 8-1:1.0: skipping garbage [ 1052.968786][T19567] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1052.993932][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1053.215583][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1053.264338][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.309403][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1053.333278][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1053.367525][ T24] usb 2-1: Manufacturer: syz [ 1053.393747][ T24] usb 2-1: config 0 descriptor?? [ 1053.430730][T19567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.491358][T19567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.574002][ T24] rc_core: IR keymap rc-hauppauge not found [ 1053.617953][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.620534][T19567] gtp0: entered promiscuous mode [ 1053.648576][ T24] Registered IR keymap rc-empty [ 1053.678370][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1053.698966][T19567] gtp0: entered allmulticast mode [ 1053.739750][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.773746][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70 [ 1053.825148][T19583] syzkaller1: entered promiscuous mode [ 1053.839715][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1053.863974][T19583] syzkaller1: entered allmulticast mode [ 1053.957656][ T5910] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 1053.979748][ T5910] cdc_mbim 8-1:1.0: bind() failure [ 1054.061795][ T5910] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1054.067181][T19587] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1054.133287][ T24] usb 2-1: USB disconnect, device number 110 [ 1054.149614][ T5910] cdc_ncm 8-1:1.1: bind() failure [ 1054.193228][ T5910] usb 8-1: USB disconnect, device number 26 [ 1054.470007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.478653][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.714659][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1054.779075][T19603] loop8: detected capacity change from 0 to 8 [ 1054.794987][T19603] Dev loop8: unable to read RDB block 8 [ 1054.805466][T19603] loop8: unable to read partition table [ 1054.816794][T19603] loop8: partition table beyond EOD, truncated [ 1054.834742][T19603] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1054.983319][T19605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1055.042755][T19611] loop8: detected capacity change from 0 to 8 [ 1055.062080][T19611] Dev loop8: unable to read RDB block 8 [ 1055.072077][T19611] loop8: unable to read partition table [ 1055.083006][T19611] loop8: partition table beyond EOD, truncated [ 1055.090300][T19611] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1055.128294][T19605] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1055.480336][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1055.480356][ T30] audit: type=1326 audit(1769818755.180:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.546984][ T30] audit: type=1326 audit(1769818755.180:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.620875][ T30] audit: type=1326 audit(1769818755.210:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.706519][ T30] audit: type=1326 audit(1769818755.210:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.785627][ T30] audit: type=1326 audit(1769818755.210:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.853848][ T30] audit: type=1326 audit(1769818755.210:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1055.938550][ T30] audit: type=1326 audit(1769818755.210:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1056.021212][ T30] audit: type=1326 audit(1769818755.230:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1056.093209][ T30] audit: type=1326 audit(1769818755.230:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1056.286794][ T30] audit: type=1326 audit(1769818755.230:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.8.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9659aeb9 code=0x7ffc0000 [ 1056.624807][T19624] syzkaller1: entered promiscuous mode [ 1056.632161][T19624] syzkaller1: entered allmulticast mode [ 1056.871494][T19631] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1057.004387][T19631] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1057.228390][T19639] netlink: 'syz.7.3607': attribute type 13 has an invalid length. [ 1057.685497][T19639] gretap0: refused to change device tx_queue_len [ 1057.697079][T19639] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1060.106481][T19657] loop2: detected capacity change from 0 to 7 [ 1060.127451][T19657] loop2: [ 1060.136710][T19657] loop2: partition table partially beyond EOD, truncated [ 1060.219809][ T31] INFO: task syz.6.3204:18006 blocked for more than 143 seconds. [ 1060.249271][ T31] Tainted: G L syzkaller #0 [ 1060.287598][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1060.324146][ T31] task:syz.6.3204 state:D stack:28064 pid:18006 tgid:18005 ppid:9254 task_flags:0x400140 flags:0x00080002 [ 1060.359860][ T31] Call Trace: [ 1060.363207][ T31] [ 1060.410791][ T31] __schedule+0x14ea/0x5050 [ 1060.433946][ T31] ? __pfx___schedule+0x10/0x10 [ 1060.444265][ T31] ? schedule+0x90/0x360 [ 1060.453401][ T31] schedule+0x164/0x360 [ 1060.464904][ T31] schedule_preempt_disabled+0x13/0x30 [ 1060.478921][ T31] __mutex_lock+0x7fe/0x1300 [ 1060.493016][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1060.514996][ T31] ? usbdev_open+0x182/0x770 [ 1060.532700][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1060.552573][T19661] fuse: Bad value for 'fd' [ 1060.592106][ T31] ? bus_find_device+0x27d/0x2d0 [ 1060.727780][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1060.767051][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1060.878692][ T31] ? usbdev_open+0xa7/0x770 [ 1060.929459][ T31] usbdev_open+0x182/0x770 [ 1060.961027][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 1061.009601][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1061.035090][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1061.071960][ T31] chrdev_open+0x4cd/0x5e0 [ 1061.087263][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1061.113875][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1061.147394][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1061.184410][ T31] do_dentry_open+0x7ce/0x1420 [ 1061.207003][ T31] vfs_open+0x3b/0x340 [ 1061.227754][ T31] ? path_openat+0x346e/0x3e20 [ 1061.249314][ T31] path_openat+0x3486/0x3e20 [ 1061.277797][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1061.319583][ T31] ? getname_flags+0xb7/0x540 [ 1061.360030][ T31] ? __pfx_path_openat+0x10/0x10 [ 1061.374627][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1061.402634][ T31] do_filp_open+0x22d/0x490 [ 1061.432030][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1061.458630][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1061.484069][ T31] ? alloc_fd+0x64b/0x6c0 [ 1061.519122][ T31] do_sys_openat2+0x12f/0x220 [ 1061.576057][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1061.651254][ T31] ? exc_page_fault+0x6a/0xc0 [ 1061.690031][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 1061.745258][ T31] __x64_sys_openat+0x138/0x170 [ 1061.778885][ T31] do_syscall_64+0xe2/0xf80 [ 1061.809518][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.848263][ T31] ? trace_irq_disable+0x37/0x100 [ 1061.877504][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1061.905802][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.946753][ T31] RIP: 0033:0x7f5df4f5b78e [ 1061.970746][ T31] RSP: 002b:00007f5df5f15b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.029472][ T31] RAX: ffffffffffffffda RBX: 00007f5df5f166c0 RCX: 00007f5df4f5b78e [ 1062.074730][ T31] RDX: 0000000000000082 RSI: 00007f5df5f15c00 RDI: ffffffffffffff9c [ 1062.118637][ T31] RBP: 00007f5df5f15c00 R08: 0000000000000000 R09: 0000000000000000 [ 1062.162426][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1062.178659][ T31] R13: 00007f5df5216038 R14: 00007f5df5215fa0 R15: 00007f5df533fa48 [ 1062.208560][ T31] [ 1062.217049][ T31] [ 1062.217049][ T31] Showing all locks held in the system: [ 1062.257237][ T31] 1 lock held by khungtaskd/31: [ 1062.290592][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1062.325119][ T31] 2 locks held by getty/5588: [ 1062.341735][ T31] #0: ffff8880304fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1062.390747][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1062.425203][ T31] 5 locks held by kworker/0:9/10028: [ 1062.445082][ T31] 1 lock held by syz.6.3204/18006: [ 1062.469375][ T31] #0: ffff8880288b4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1062.513440][ T31] 1 lock held by syz.3.3263/18228: [ 1062.539167][ T31] #0: ffff8880288b4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1062.569246][ T31] 1 lock held by udevd/18935: [ 1062.588594][ T31] 1 lock held by syz.2.3609/19645: [ 1062.603502][ T31] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1062.640923][ T31] 1 lock held by syz.7.3614/19661: [ 1062.669636][ T31] 2 locks held by syz.7.3614/19663: [ 1062.686293][ T31] [ 1062.697750][ T31] ============================================= [ 1062.697750][ T31] [ 1062.729792][ T31] NMI backtrace for cpu 1 [ 1062.729819][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.729847][ T31] Tainted: [L]=SOFTLOCKUP [ 1062.729855][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1062.729866][ T31] Call Trace: [ 1062.729875][ T31] [ 1062.729884][ T31] dump_stack_lvl+0xe8/0x150 [ 1062.729915][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1062.729943][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1062.729975][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1062.730004][ T31] sys_info+0x135/0x170 [ 1062.730027][ T31] watchdog+0xf90/0xfe0 [ 1062.730052][ T31] ? watchdog+0x209/0xfe0 [ 1062.730079][ T31] kthread+0x726/0x8b0 [ 1062.730105][ T31] ? __pfx_watchdog+0x10/0x10 [ 1062.730123][ T31] ? __pfx_kthread+0x10/0x10 [ 1062.730148][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1062.730177][ T31] ? __pfx_kthread+0x10/0x10 [ 1062.730200][ T31] ret_from_fork+0x51b/0xa40 [ 1062.730232][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.730258][ T31] ? __switch_to+0xc82/0x1410 [ 1062.730286][ T31] ? __pfx_kthread+0x10/0x10 [ 1062.730309][ T31] ret_from_fork_asm+0x1a/0x30 [ 1062.730351][ T31] [ 1062.730359][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1062.859576][ C0] NMI backtrace for cpu 0 [ 1062.859597][ C0] CPU: 0 UID: 0 PID: 16846 Comm: kworker/u8:29 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.859620][ C0] Tainted: [L]=SOFTLOCKUP [ 1062.859627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1062.859637][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1062.859663][ C0] RIP: 0010:sched_clock+0x35/0x60 [ 1062.859687][ C0] Code: 65 ff 05 6e 8e 88 11 e8 29 b2 2c 0a 48 89 c3 31 f6 65 ff 0d 5d 8e 88 11 40 0f 94 c5 40 0f 94 c6 bf 02 00 00 00 e8 6b 58 5a 00 <40> 84 ed 75 10 e8 61 55 5a 00 48 89 d8 5b 5d c3 cc cc cc cc cc e8 [ 1062.859708][ C0] RSP: 0018:ffffc900152575e8 EFLAGS: 00000093 [ 1062.859722][ C0] RAX: ffffffff816a21e5 RBX: 000000f77865544a RCX: 0000000000000000 [ 1062.859735][ C0] RDX: ffff8880255ddb80 RSI: 0000000000000000 RDI: 0000000000000002 [ 1062.859745][ C0] RBP: ffffc90015257600 R08: ffffffff819e6cc3 R09: ffff8880b8624588 [ 1062.859757][ C0] R10: dffffc0000000000 R11: ffffed1004abbb71 R12: 0000000000000001 [ 1062.859768][ C0] R13: dffffc0000000000 R14: ffffc90015257660 R15: 1ffff92002a4aec8 [ 1062.859780][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 1062.859794][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.859805][ C0] CR2: 00002000003cf030 CR3: 000000000e346000 CR4: 00000000003526f0 [ 1062.859822][ C0] Call Trace: [ 1062.859829][ C0] [ 1062.859837][ C0] sched_clock_cpu+0x74/0x440 [ 1062.859860][ C0] ? psi_task_switch+0x53/0x880 [ 1062.859876][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1062.859901][ C0] psi_task_switch+0x5b/0x880 [ 1062.859917][ C0] ? psi_account_irqtime+0x171/0x750 [ 1062.859935][ C0] __schedule+0x24fc/0x5050 [ 1062.859958][ C0] ? static_key_enable+0x1a/0x20 [ 1062.859981][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1062.859999][ C0] ? __pfx___schedule+0x10/0x10 [ 1062.860018][ C0] ? schedule+0x90/0x360 [ 1062.860034][ C0] schedule+0x164/0x360 [ 1062.860049][ C0] toggle_allocation_gate+0x17c/0x290 [ 1062.860066][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1062.860083][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1062.860103][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1062.860125][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1062.860154][ C0] process_scheduled_works+0xaec/0x17a0 [ 1062.860185][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1062.860205][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1062.860224][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1062.860239][ C0] ? schedule+0x90/0x360 [ 1062.860257][ C0] worker_thread+0xda6/0x1360 [ 1062.860287][ C0] kthread+0x726/0x8b0 [ 1062.860305][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1062.860325][ C0] ? __pfx_kthread+0x10/0x10 [ 1062.860343][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1062.860365][ C0] ? __pfx_kthread+0x10/0x10 [ 1062.860381][ C0] ret_from_fork+0x51b/0xa40 [ 1062.860405][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.860425][ C0] ? __switch_to+0xc82/0x1410 [ 1062.860446][ C0] ? __pfx_kthread+0x10/0x10 [ 1062.860463][ C0] ret_from_fork_asm+0x1a/0x30 [ 1062.860490][ C0] [ 1063.251802][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1063.258811][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.269697][ T31] Tainted: [L]=SOFTLOCKUP [ 1063.274040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1063.284116][ T31] Call Trace: [ 1063.287532][ T31] [ 1063.290487][ T31] vpanic+0x1e0/0x670 [ 1063.294514][ T31] panic+0xc5/0xd0 [ 1063.298350][ T31] ? __pfx_panic+0x10/0x10 [ 1063.303058][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1063.308484][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1063.314765][ T31] watchdog+0xfda/0xfe0 [ 1063.318964][ T31] ? watchdog+0x209/0xfe0 [ 1063.323593][ T31] kthread+0x726/0x8b0 [ 1063.327692][ T31] ? __pfx_watchdog+0x10/0x10 [ 1063.332477][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.337101][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1063.342523][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.347147][ T31] ret_from_fork+0x51b/0xa40 [ 1063.351790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.357025][ T31] ? __switch_to+0xc82/0x1410 [ 1063.361744][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.366363][ T31] ret_from_fork_asm+0x1a/0x30 [ 1063.371258][ T31] [ 1063.374845][ T31] Kernel Offset: disabled [ 1063.379171][ T31] Rebooting in 86400 seconds..