last executing test programs: 2m52.355185276s ago: executing program 4 (id=397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x12fbab, 0x2976b1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000440000008000000"], 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r7 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r7, 0x16) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @local}}) 2m52.03465232s ago: executing program 4 (id=400): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x20000009, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x2000000, @remote, 0x8}}}, &(0x7f0000000240)=0x84) 2m51.88409196s ago: executing program 4 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'pcl730\x00', [0x33d, 0x10001, 0x33c, 0x40, 0x0, 0xc88d, 0x401, 0x8, 0xffffffff, 0x6, 0xa, 0x5, 0x0, 0x2c30, 0xea3f5b, 0x8, 0x6, 0x7, 0xefb3, 0x313, 0x10000002, 0xfff, 0x1, 0x5, 0x3, 0x1, 0x9, 0x9, 0xd141, 0x3, 0x80000001, 0x1]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="145f3f2c0000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000552cc8ac303c07773222b7e8c839000000030a010207000000000000000100fffe090001007379b90e20027a30000000000900030073797a30000000005c0003000000000000000000000000000100000008000b400000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180fffffffd0900010073797a300000000014"], 0xd0}}, 0x0) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r4 = socket(0x25, 0xa, 0x1) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) (async) r7 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) (async) close(r7) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r9, 0x2}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', r3, 0x4, 0x5, 0x9, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x70f, 0x40, 0x5, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv4_getaddr={0x3c, 0x16, 0x100, 0x70bd2d, 0x25dfdbfc, {0x2, 0x38, 0x10, 0xfe, r10}, [@IFA_LABEL={0x14, 0x3, 'vlan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async) r11 = eventfd(0xb5) readahead(r11, 0x40000000000, 0x10000) 2m49.712933392s ago: executing program 4 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x95) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x9983}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c085}, 0x0) 2m46.450780334s ago: executing program 4 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,usrquota_inode=hardlimit=7,\x00']) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x20, 0x1, 0x1, @private0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8000, 0x0, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x60, r1, 0x304, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x40}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x20000001) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m45.991487338s ago: executing program 4 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x400, 0x9, 0x0, r0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8ca31, 0xffffffffffffffff, 0x3d59b000) madvise(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x15) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m30.728271294s ago: executing program 32 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x400, 0x9, 0x0, r0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8ca31, 0xffffffffffffffff, 0x3d59b000) madvise(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x15) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 50.261365525s ago: executing program 2 (id=725): syz_usb_connect(0x0, 0x4f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904540003ccc8ac00090504041806d8030409044299d83e091515090505022000836282090512002000000a0c07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x4000000000004) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="0100000200373a4541062101a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697a793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c", 0x77, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) stat(0x0, 0x0) r3 = msgget$private(0x0, 0x101) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="020000f64c5aae95e000000000000000c800e9904721fdc5e4d511"], 0x4, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x5800) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 46.151310282s ago: executing program 2 (id=736): syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) listen(r0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0xa0, 0xe000000000000000) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7fff) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10913b7e"], 0x0}, 0x0) 42.535364004s ago: executing program 2 (id=746): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB], 0x14}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) r5 = syz_open_procfs(0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000feff0108010200b87d790e420000000000000900010072797a30000000000000000000d8296770f109158bad70453891c9f8e49e810c7e455106e5f07d"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4100) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x4}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r10, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x4}}], 0x1c) (async) write$sndseq(r7, &(0x7f00000006c0)=[{0xfa, 0x0, 0x4b, 0xff, @tick=0xfff, {0x6, 0x6}, {0x11, 0xe5}, @note={0x8, 0x3, 0x1, 0x54, 0x4}}, {0xd8, 0xf9, 0x0, 0x3, @tick=0xd, {0x9, 0x40}, {0x2, 0x8}, @addr={0x4}}, {0x6, 0xff, 0x18, 0x6, @time={0x4039, 0xfb3}, {0x4, 0x2}, {0x3c}, @control={0x7, 0x5, 0x8}}, {0x2, 0xb8, 0x5, 0x8, @tick=0x1, {0x3, 0x5}, {0xc, 0xc}, @time=@time={0x7, 0xc}}, {0x80, 0xf9, 0x6, 0x2, @tick=0x4, {0xd4, 0x5}, {0x2, 0x8}, @result={0x337, 0x41}}], 0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000540)="b9800000c00f3235008000000f300f01c32626de5600660f388000ea000001000601c74424007f8d0000c744240203000000c7442406000000000f011424640f01c40f01c2260fc76c51ee2e0f01cf", 0x4f}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf256a0000000c0099561d1bb582a03838044d2142d2260081000000140000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000500d200060000000500d200050000000500d20002000000a92d697b8ae7dc0796222b00982a7e375b28270ce9830a80f5baaa40075a62de0726536c37407c2f44609ad7a732aeb77c5d21fa9a"], 0x5c}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) 41.332885371s ago: executing program 2 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x8}) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) (async, rerun: 64) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r4, 0xfc9}) (async, rerun: 64) ioctl$sock_rose_SIOCADDRT(r2, 0x891e, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x0, 0x7f, 0x7f, 0x6}, {0xcc, 0x9, 0x5, 0x5}, {0x6, 0x7, 0x8d, 0x1cb}]}) (async) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) (rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r6}, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)=@fd={0x3, 0x3, 0x4, 0x4, 0xa27, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x6, 0x10, 0x3, "7653f2a5"}, 0x5, 0x4, {}, 0x6, 0x0, r6}) 40.482441111s ago: executing program 2 (id=754): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000001a6, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6d3cbbb62532c269dca454cb53b975b848259001ac948c5fdb400b57c261c2288359c48f8d9c550fcf34d669d822bc6192565eb908c0134e07f3dd890ca33531", 0x40}, 0x48, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="4200000006"], 0x42) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) keyctl$get_persistent(0x16, r8, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x9793, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f0000000400)=""/152, 0x98, 0xffff827e, 0x7ff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 38.984618393s ago: executing program 2 (id=758): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x17d3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x820c, 0x101, 0x7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000100)=0x8) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f0000002200)='net/netstat\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x318000}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000002280)={'team0\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x4, 0x24, 0x30, @remote, @empty, 0x0, 0x8000, 0x4, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000002600)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f00000023c0)=@bridge_setlink={0x1f0, 0x13, 0x20, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x14080, 0x4400}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1000}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f57ef9005f89ca64dc3f630820daf1ee"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_PROFILE={0x10, 0x2, 'net/netstat\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fb1979ab62211a4ab01d8c9f65af3d74"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\@\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bbfc315cfbb2a4a20bd8b0ca6ee5b909"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9521b749c15c499317721bc5d0b4ca34"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6c7a91c9579ac7e7e82b1b711baeef7d"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4995b56c90759c96b75226276b89c974"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "273bfd00b164f3b90bbed2c5501fd902"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6b0030c970a2a0f3e12684f29df74c54"}, @IFLA_PORT_PROFILE={0x10, 0x2, 'net/netstat\x00'}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7363}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b1b44fb4acef0331ef966d7c936d3bed"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1fd442c5dc5b608a5ce77556b50a7ce"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "00f66e514a55461b0ec4f557accbe6be"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004801}, 0x20008082) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000002640)=r4) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002680), 0x80000, 0x0) connect$pppoe(r8, &(0x7f00000026c0)={0x18, 0x0, {0x4, @broadcast, 'pimreg1\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000002800)={&(0x7f0000002700)=[0x0, 0x0], &(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000002840)={r9}) ptrace$cont(0x7, 0xffffffffffffffff, 0xfffffffffffffcae, 0x10000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f00000028c0)={0x21, 0x3, 0x0, {0x6}}, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000002900)={0x8000, 0x0, 0x1, 0x6, 0x5, 0x5}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000002980)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x3bc083e83ed53e21, &(0x7f00000029c0)=0xf, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000002a00)={0x1, 0x5, 0x2, 0xf, 0x5, 0x5}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000002a80)='./binderfs2\x00', 0x1ff) fstat(r5, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000005040)=[r3, r3, r3, r3, r3, r3, r3, 0xee00, r3, r3]) lstat(&(0x7f0000005080)='./file0\x00', &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000002ac0)="23410fab5be964bec964fdc05647956bd883b299ad2fa69767c5539db57205ad151c4929ef091835fa17e5d94ec57e7a93b248fcfbffc0d0f143bad6a664b449f5c5da88da05c5c38ba5811a325e7d4084c738be86a9e4d4dd34bf4da4f24f8a53706bcd03a8ec5bc506ebd11870688269c1a48659661b4ee8baf7b7808effec835007027d2592a47c126ed0950b8b638a91eace93a3fd43066de56b8ae2a71bfb720750ec95e0d77793bf9a5cdfa53033a315d97d09042ec345f960288717f7da3e74283a5df9dab23f338f464f78bf68ea044a83ef547d0f59d51c3a42696e8db0bf6db3129aca29b3b9b5c35d6be9d816a95ca121b6f120bfb7e2d58139c2b5850104ec0c463d120ca6648b68bcfed37d7142008f9fd7b7d66c81f2eb81ecb8f2abb45dd633918ac0a90b5462ef3095710dca50b90e689e5a5cf8f90f1203e79d3798f0f4adeb25c679e2d72a3fe6b1d6e86463b51c900b00a9a175a0374f8e29bb5ba64a4b5908a1e7de3c62ec0a2b2eeb06e395370411d4e40eaf9f23f446731facfad5817fd4f7da1fd892217ba62b809d5987452475ee2079b7dd23fb12879e4926cdfaa9d223495cf874b926b718c261889b6ae3915916c2864cdb2ce7df3895b2d9eb58847d825b034f545f590e4443508e323d0a41342e81f4f676f541656be7e8f5718b53a71fb91c87dc7f6f4a09f8446e1fc4ceb8ed900dd1f2287e4b6670c5c0e6d979f75e2d2625a2c3b21e2f5ba10942411c8909e8c4aa40690aaaa80f9112f3259477fd8fc2b35e314fdf9611349232da0c571c14ce0f3e966fb8e9eb21677ea5524f5677aa45fc1e0bfae20f4f77268b2e8bd4a53d9d6327c181434ec874e5f408c0ffe80a0c0fd341c3688a4ce2b31f5b3e9d50420f02277558da0ffcca311cf6ae33d32e1ab7a78e6f1aabbaa573c28fce80848ddb164181b35aa31f4ad0c9f70953d8351da7c34b4525f20aa2d7de9271ed4e47ff0c9623e6c50975f72fe97d2b2f33efce44ed8b6691fbcd28d4137b3502ea033bd8b06111c169e333ae507911c9390d578008df10f90ee52cfcde71be31026138834f87bf369fd81ce5b3846915cd363d05963e57c96f75f3832cd3d91fe5441effe037db588d557bbc8274abcf586084122a6e552d97630e224dfbb0b23ff931410ef0bc93a9acfebbe693c11a797fb8e8543fcc590ba113873d5d3424d8b06cfa812010e6ee568c89323192163c623c71e0990381d3ed9f2cbc6189b2ea6af7c5017ef5203fbedd6d74c96693004073a474353fa9941e64698b79eea842e6310154de275f0f59a5ca393c71a6aac4738dec29e61710c0af55d072987ef40f85acd17ea6ec703e64aa79c570ad4f3b522b3b8129c95a407a0804ce8bdbcf56e315b70d3860677d4dfdcced9b0d940b7ee20330ff6a49ae07a89d70f3c9a75d096a07a72937c6098fff1f28ceb7a6bb87ef9b11e848d20abbae3fca46ef62a86224e4ced30aa35bcd7800ae2edc6f39a4770e257b2ce7bf9286fdb7a22dc44ed779548fd93c168dd49a76f41a6acfc7d6b0b059fab4d717ccc38a9f8052274a72e167a0a63c1ecb87ec0135bb614bfd5330ad9f4f6b88f798cda6bc3a7bdbe6a2a57b8a411213e6e1c4c0345e18759ec82914e1150755d1f0b779cbe57b61107e09142c1f2acafc9c0abbdbcf655287e2500d4fc037ae877f30f9c51017e448279b4e6e6d34df85a6a45e90728189011f58ed95e7313852f18305b763c1f05f3e7aa0935c38c5257297feb2025f0ae90e8ba42728e31a0cf00f8c9a6d209a7022c063b78ba28a947fd1a0a7c4cbfec405ccb54dcc1c4169e06d9190161cffa6c71d1281d7f2bec939a52c6bfa79de31ed50b04a60cfd7cb2fe1f435b118dfaa1255d820e7e40f1a6ee2ff0f80dc3a1ccee0596588e7224289b30b35261dcc074b26377090998df4fc8047f3b54e88654f081fbe6916b1124eb4c0da55a1a669fd346889f8ddc103b31b42518b93db5ff9cd13d0b8d87621082ec070e69e11a6dfd71ad174bfb3548dd74b3ae65efa1af8d349e0852accdd84d967ef00a816bf8264701d35af8d3b11b2628cdc4d7920b9073552f040217fb16206e7435deb81c621d7e2b626ef16bf664c6c4a63016304b2afe03df0562a8efd10ec5a45463beb636acb86373dc0d72a4cfe4118e50efe0fea49ce9c623aea4f443926b8da8470d74b5c393c5aa5135a33013e665851d2039f3b4a323338d13e74b746c9d0c246a55de8aac74d24c8fcce8f4346245e8c1585d88a309316c30c53f2d8283a4486d687829c4ff0b141a8dcd9eccdd853f6e63720b962a349a33c4a8ee317f6ea8a34d7f3c90c717f8a4f62efb7c4da4be10c59e3b5df9d5389b0d2e47f50e2b3d94e5ded0dce654abc7e23dbdbb566e857903014864cd67f171776cc8d0ea86cfb5f73ef1da4f653ca850f23514ba669f03004c089bea62508b76e9d07b7341cc63592766503270344719664ffb9fbb3aada02ede90bf8e0ce383131e7ac747f6d18dfce0b07edf33449d8e051adcd288cf9b22b0235bfbdf1d0f05d1525600caa4c7d577eae2108de48e0b7baafb9fadc5e6c328e728f4c29191196c32ec596cb7397fb741058a5cfcff1761751b3de4eeacc85ccc5d43d3455963cb0ddb7461eefcc117a15c512e863b418bed7ec3f103b23539eddb8d11fd339f2f6eb74a07109680f13772bddeecfa74408c248e43a3a7e37c3a0d8a1617e851408976eeda0b92c41c8c4fa0c3689c052c1b96cb19332b3e6d43011eefec8b34af8a8bdb10e8e01c1ae1340d3ff5f0b2b1a1573f8751b1edd05cfb745088a6064c4f8b4a39d58b9fd9d4ac15a414a09fa30e3162eeada064b4fdb252f3204e27d031160db8ac4ac76ac9d5f85b81973188fe2c76c53b6f865f9d7e571cd9c39d889676d4f8dfc17e8da8f70d070545cccab8f461a14df9f6d98a02dd26be42f2414a5307f1bb44022597e884eb375865cfac492c9487b54d4eccb3ae6a3e0bb4cbb5d8d9e42b8b652bd0986ab688053d85595ebb55509399baddd4faf622d9cdad0995b5d165c985d90f983cc2b52d477584f3d47a41145b34246affd1c6287ee0ed8858e89982229ff10c4a19d2f0ec85a2cf6fa022592b7715bdbbd188a7c997bfbfef2871bb44f35c5e25397daa2a018d1fbb49846afba24525ce30f4aedee4311fffe2c4c0ee7ea774f42956a7a18289f4395b0f73b6edd3b9e4b0b132f884a1396ef7c47c71319b526e1ae55dfbe3369fab76cbbd932c3831d779d2ee60026384fc3ccc6a61509f02baff7dcbf8b242fd15d7f91bda1a680b57987dff16484e0ac0c4fa7560471bfa3724301492fde1058db5a1da22a2d515e5787e5a76e096e4400e2284a60dbd9be6e307cc10dfa88861998f4e3b9887cc7787c58dd68fdb6a29502d360b749cee52ef843e456898a9338bb828f26cf1f46ace53de897a61ee509ba3b0cbac39aec7fcc0ed99e3fc1b7d379551defefd44ef8f6346cbfa5127314eace370ccc376ec421cca23a70673a0e2eab6f532dee960126d0cd998c8c726dbd0055c23250304bb3b68ff5b18bf53a38ab84d288c318b0c11a7e82af968ce34fdc380433d747d5d4cb66f142b6c42a222f2d9c442ba324aa62a0d766f01b08466e7d874604561dd7a85a00159a31c4deeba4abe5c136333a57408384d9d36fb5398e5bec67dbf6c490d922479b0e96e755f2a5df96efd576267f4c413eebe39f06944ec88dd71670fafd3750d0db98b7da8d4437c14b8c0a6a554a7567d81316afdcbe49f94d37ccd92589f844d0b775a141f95777a151122768f8fcba0aaeedfca5e8a4586ef9226b9ae25c39e72e840f0ff986fd819060885b94fccc5ffa8b2fa8dbf8767fb679490cc25591c7c91d2469e4ea1ce6d1f1bea673d3ccc5516bc609ff4db1bbc253fa4725e8cad4167e03b39809e24d4dad3aa59dce361a7ed25bd583e24c64b6e0d0e2d9aea5908e09e294aa5f0e94605f5064e1ec40a94c45d67f6361267e3bff4c02b8a961a5b34ef529a1daa2e86567c4979e1215995e11edd38e233403cb9eb46f6822c76f8366f0a86b968ab3e60af4192435de8b8addaf690c5a06789d2b55e4b3b63bf5589f783958d1e505744557fb2470a093a85e5df0973463714268caf6797946c458a5d350833efe73d517bd3da969a4511f5fcba5b2b8fbe9e5525c574608559564cc8f27d33a03aff5dec9d9a351a139ca56cf6febd3456cb20c2196551d82e5f8ee6fe93058c0eefb0f57b20a78f727ca9c7edbb3b3cf4adf14d51530fd670581d4faedd81f935ea0ff3b92ee43ced38f518bbd7733f6621a5b86d8e45e860993d4f04ac45730455bea4c8f88eb22ba7b5c40ee61e1ced2b62c028bd549274fd7f7b42aad52f827a40bcce58f451bce62b4a4b85bf20aee9b1cf6ba4829084fd10a95bf5b513be4c5e51d361efeaeaabf609ff4db43dd5f87b170e55bdbfa09adba0b4bad37fe2b22ffcb2d4aa4d2443bc61c007f5c2802dc1ca05811bfa16572930309d5586a97ab99a84d7a534db67a91342f3ceb19f53766f0e08544773b387551708548a7d1600bd2a99984f439356b61deef61121a20f0dc012a742c39f0a4e413a7ad1ed1771d626b0bbcf596fba7cb2d322aa5f8bad534e0aa4e49af9c6bdd77332b54215d067dce11eb0715f27d79e291318d8d800c9a1eef272bfd589e61844375b486c2a2b61bd4b1be8095c37ccc433bd7e6bfa4f70fe419b3ebd89fc625d87dc89fc474d3755fa20e78ba9e00b4775e0dbb7b9f53f2ce5919314d66683dc13d3f589bd5c194897e4386222ddf18a1a8b6f1c495c8f7e5c48f3db4a1f54a54ead83ebfd81651d19b84464f833a6fadd3b6392a6f0283d6ac49869231efbeda22448d6aa1b43e6a265800765f66912c095c36366009107042c2d11d6b39a0c5c79e00ff2b7f151564cf0218e7de5ecb8bc145fcb6ef8560d57a4dd8ada4b9b0d566866077ec0071cb08d4984e957b480a1e61394213dbe552814d3ccff84e6c319d7b0f7812dd494fa0690e68118f302f143974b95ec4d666816ce282a54d1d95e1836c4ae63d6f9160f554280d4d5888e26693e3390b385796b66e04acad240329d3f516570188dc417d88567b79d8a8c8a7b499890473c6a78f4db48cd9d40bbcaebab63242369d2da883d824df70b79f59b322aea6f20f87d75b1277a470d1ed11dc112550e2077e0a9af48f562c23bd8e6ac263eb9af9ea5c3e04ade7c1a5fb5a45f75492c9f27bac3a37e94bb0e510dfaa615bfc6872762a0a0b1fc2e367ee211b5397280f1fec8131bc6015e3a32725b17011daf0106d7cbc24338b95c9b6e345c8e33a2a3219b514f5ae2415d8d743a300d0fdc012307b679b576bd3b3a2cafbe18f8e2e3208fbde71fe35398626d5e100589721c18ad8de5fd997d8d80075444662f749cba0b6d8446095ae2faf0274484c11b29cca519a383bb4fa76595a83f54f44c82dee925e3a32ded7cafce3a82af60150d18bdee965ceaea42cc925ae32679af07bdc9a0dc7971d0b61993dbb54d52269629a8646e55c6755243e62fc6a3e8357b18f1d9ad7dfbbdf48b8acb6d3200a6a96f356a9601968d4f4c381023e38c28da972a4fa3eb82545ce6076fa99ea23ece223c812a374ab88ef3dacb56bf5e47aabf99957e924c06a9a59b2b7e34a7dec9f5ca1222707b400bce1e6fec8c1e3767456bc00f693e05f4c03e152484cbae673b8ace603b388465a6542e4573f3a241812a7dace2d837530e9d82a04f200d0f10425661811c4fcd786260160156efcf1c3a3c0bdbea423991efd2b34ccc2ccc31878647cfd106a15b60f7a6049bddcbb70629f30b384bf18d8939c97d035974a7b2b6256889f1075450b5bbb074051f03b9946fbf5ffdeb9663dde0df63e0171e7be1cb314b4b3ece50588a19245b3c958eeae5432b4f0378bd146357576daed67fe21478503bf081baec30dd5a8e6ac147bad24daf2119c9c781b8b43ab883539bf5986188c30027c1b2d2cdb20c0198ba7a03683e4632849f1cf6311e8f4028254accf8d959258ab36c4dc342d846ba9f695b27d33d8bd4a4ca961b35cdc60d094c0aede55855aa649d9a7da15ac611ff3e3d04f646e563a0fa34053a7ac9b421db2f99111eb6352042bc22d021fbd7235e2c62ef56824fd3896123b057e696d80c7f348546eda7c63c50f6ef6f5e6792c6e12a113e8425859104a5e09d00d36d8fef69b873761e2d3752b26ff68a0455a9c618cc226364a260cb3532901dbc91af91f93cdd8de2eab8441043f0aa128bf027d48c2e462ef594ed4b345e17d1af327e9082c2b4a910fc6957a3ea4c980c63854265dcebbecc4d8ba0f257a718afee07cd37e1edbc24baa8326332664d04787f0a423eec9403770024f44835a9fd28cfd9ed809a18a465b0de66899831f1d2c8b8a6ddd4b056209e4e69fc477c15357af1a52289b3f4d8be12441064e05cbd379d32423e6d0a1e2c3cac7f8d02a3296587bd754ac03ef7b9925ce53a6349906d7bafcab45160ae8763f19a17b5e945ce97b2eb14a0afb0058f5b17ad4266e775bd3a7a071bbcfac11ca556aad926030219be76e4e843db14f848222e3b411a72b7911b8203a0dd8672bf6f06cc6ac72ae25899aac5d4b8722224f1ac57f89d7b7c4b667f6dc5adf5104d102231a8c3c008db2d89a7169ba9892900052e0b923db6dc84504dd2ea797cb128820f4e21dc1f336d213c7477fe0fa6115b50bd1f9d67cb1388419a158a1c128a50e23ecfa9ba55710d4cfc9d90348020edb494e26beb18f109472d07bd184c15601824164b28e4975f9fac86fdf8dcd4bd8f36f7831a12cefc4145ad9cf8cad763f0e5f52ec060426a001fdcebee48be08377ca69193dde009d9dd2528d811ad1d5fae069946d4d54567bdae61da4c4844a72f446da1d54ebfc97b45db4b5d2124a69e61c55b0590246ba9477862677b78aa075307f860a3ea85e287d05f7311e6400670b383c65750b2565cf05694bb363a2a972a0a48ead98e5f45ec227a0b88845477d1f0b3290e459a16a4e47f9b77c4f889fdd1376f530f482b318a2629d362adeb0bf63a52927d75259cd9733b2cd7a9144a9841a6d1d3ad4fbd209fc3cdfcf04f18ca4549067309de35de0cbc9cdce266a435e89baff2e1e9d8d48297f29cf71382eebddd9a2a43966f50f288ad7c7bb968b0f5d0561bdd2827f04083fd5d6d3ec4bafc007b110bede0003b3124686954ff610f5ce67d872001d0367e6805504c707f2467f8ae3f9df38f61a9ef0f2276bf3014a9859b985bfcdbc683c469ec9a4612d45ef2b4a239582f5bb2118163d60f079d43fd2e89d57414e1e47e1bc37ceac57dab64197d9c1a3d34ad752fe063fc534e7aa8b150edc0e1f0bc612f7ff93eecf55d9b794e64d5374a275def6bda250c7aba44cb306b234a4b2a649dc80aa3bc481c47a6da5d1389bc4455247d20a2ad01cc56334b0ba85c387a0797aed3f69321ec6ca68c2f61d2124c2bc68a6bcb5430b4a6cc110efe72fe3eee35a0a26f8f636242c69e8b62f1d487c60e3f24ca5f630e1b7d04bd0310897487fbae47d8ac1e270cda93db37de01abd4aa6d0aa68fde8452153685f9f28a8c135338131f44e21c99e30b275481f11432fce7bc3799602dbf25b5fca63f94d1b203257d9fa3d7644922229644d9b07402fb616fa468d1c09048623f221306cfa3077682967f4a07541d0b65b3ccd2ea2bfac25500b8a57785413ea6742bda41fd232679aac13893e2666fc2b80d2a45639063ddab042bb52706bf19b022687eddfc5131253a9c9f25ee02a8dd9ab5b3c47bf0d003045032a23a2ebaac869b92946b9520b468f4527ebc903b524d077ea4222ec8ee3f8dfb6acbec6851dbedaad0803e5c6c8e8d3efa40e2b5f36e0e75f3e6cfae83a6eeb6719ae1c015992bb7fa73e93b2b04b2058b9092a186765bb65c311fe8e01a42effaba1a510bc7a1df98d4f975d4ebc8e4f75bf36c6406bf1768f5b9ec4907e0820f8bcce3fbd729e3a12a106aaae5770a4802bc155d98c8424e3dcc8e2e85743d80265a4a86955dadc1703a362aa0695cd19c36423f6d442b381c5c75e3a5cc3084eb3d0d35ea3b3aff7c4732d43520ae25c4df2225d5d5b9512f99e5b9cf7ace3f7ac26cae7e80eebf402aa9f07f532e69c93017491be479f031c26038c28e99cdafc386cdbf8f33df97f8eb9570bfc44c1fd638f7e13410c274df8183f2e3ad13cf9a612d42f9789e241b6db5d39d1974a930c1af9c034b9a3c5a6368e748c1fa3aac06003e987313cbf1635acbc3365d4bf7f549d1dd80ec77949bd83cc11848c69c4b0dcef0534dfb05068c01f6bf9686d97c332e13cd962340c4da05907fb1185ae1df6235ad5d19a8296bac6a33489e073fe5d06eefe1e05edaca1de392774cbfcf35d71d504dec85952a4cbc810814018228983132583e8ad0b60924cb6208222044b9e9678e702f7bcad5b266138002818f270e6e37e7387edc4452efc3dbc17561caa787cc76ad39999123b3f0520107365ee293da10bfdf12c23ff366cc08622a4fdb877176b468df82d9e2a6c91577439099ab3e91ed09943af845058ab64a64d2332133f8fe8a42bc96d6138382426e47985d190201b661e188c41033c2e0e4180ad137eb7d7fae05867ea00ce379a0b5f25cff049bf477bb0e65608c06a48be57461ec71984904dc9f3fc4e901fe88154da4757cc3e3460a0d617b82ff2b5810c8e44dd48fbd4357449ab093ce4e5fddd839942cb82bc04a62dbce2a6e2cc901986953db1b79ef8c236f2319fe4635818d79815dc565af6d2ca73b12650d59ca67da0741b45fbc8efe1c176574963703d1526d485c7873bb57c1e1e0640e68b91abf984851d354434eaae28fe11f1e2a1ce5c58904dbcf0dceb3ea4a9c979c83fcb4140446da8f7c2f119f9d1e37cf7e6b13a3ddec981eabc35ecdd3c64b618edb991775c4c13ec4e91e09e4bcec103a8b9450dddeb849cd7ac650d5e020c0ff2647ad43bbf225b50fe29d504b1bfcc8820b030a4ba6423c9f441e6383a1292ff9c1e4e7f02175277f4a8536b4fe85bff636e6cc032c4be889b2ff6f4a2f41819ddbc890da89b6e313821abc44aec75b5c5320a837e8948c193ec55ca9de8ce850ebf5858012f79380b027c62fa7fea69274d0f866f3b6a0946c35cf54fc1535d4db7486644177a61cb32e149e982b7d980dfd58068e655cfeaf24724743f86ca13e6c0561c824ddeea06ff92059eec7a90c9fe7132bf147d5c5f7925f16f62b7a6ad24b1e3f187b8ed6c7ebdcc52fddb644f29ee50ce3a4378129b1cd52f1b8e5f993d349a77dc101d6ded06555626ffd03805ff4a11581a4bce9cb6a1eb6c7c2581b0e0778497d716b1861ed168fa39300585d12ceb455a876be95c2755bd8500371b7731b391c1f461d33ead741c2db3853d1e1946c6d6c84c54b8119c0c8e12a3fd54655e8d2ce9d3681a1b866d9eea6edca473c6b3fa733b5ed9d28b6c22c943e9e27e5fe2afac93ba8d64a947f354ff0918a07cdf5f8f13c2e6abb9d73088ef679316bd045d0695537cded0152da5a483879ba5b851798462d3fe6b8e451e5d28d0559e5a9e7af42f2c09721c0a6455b2431321287b9bcdace25f96b87310ce7ab60f2a814b708dfe5e884a873a50bb8a7a0cd9c3512c9f93ce9369f97b7cd96a6fe918bd1c05ee69e57f456d31b4331f04bbd62c582f3c742eece1e8d2f854bd22348e4542c873cdaea7848d3bd87d11fd9c67618216bb5b4f9899a7c67a714af27924ae3773803dcdd91e3c6fc03d16e5f81b6fc6aed19e37f5c561d6bf2ae28a32059458b76697227a1545c5d41f81e8d801353a91f6316b272a79d118bea99bc7cf16b22449400f989f138dd2f9e8a446a129d7f193ccf59ff7a8e412a37e0b2ff2f4d408e27f12cf07b83b9ff4b09957d5459f8dfc89f670f7e9f3e92eb22c230ad7f0722448acbf7321547728e1a75a9d60ed8bd0becd14d8f72bc9bcaeb3728c59337d1730a76249ffe0c01f54eaf17a34c70ecd834d20dba8d5f19922cf92863b8f840de87d504a437a5a515ad3553fe7a70f4d13dd2506108018758a3b8609b4175e2fce79cdd95b789bf7c6f0e1490ca2a24298bf1d0a3c33e8fd2ff4ee24204eee947927a295750c15a35f9ac0b46726490f9d12fcf5ad9b08fd72b15cd42c8d349bd7f48e1cc4320ec4292d9b8a1fdf27541c390ee6916a478400f86d6fd94ceb181403d32263aad79d90d6870d2a9e1e0da66765562514c4ed701a57d7621d38c4d27a69bc245b6a4fc29752f6c9bc215c9b91aedb95cade9c4815f7e5022e72f617a47cde95d361c6d326f2d7044b2cd1fe1b372c96ea98610a60063c4d0d81455e23765ccb4b2ad2d54e3051ece84740fedb60397a87cf27b26ba7f6d83a5c624a621d35094d797520be744ad7b513e7e1e7e8df9061d78322b072afdd629b3f7a1c4f411074d6cab89d5caf8550e40b122e0f854c6b4616aed61a62947d30a0a1210aa5448cef72783bceb2764dee82630c919b10f1e6801249b37ed06d15b2f51d58692662cf27022e87892d5cc9a8c9c4d576eebd86cce65ebbe0cde753f402c4bd9b226ae858819d5fcef1ef084668ac9c7ae8de1b22900afa35449d1e5bda7f86a1c5e552dbd36936c69e10efd7fcc740cb92e4864dd9f49ce74e8123b87f15a6f4a16aea5f8521172d1f9425a4613ecff6b0ad920b629af5098929956ce097bb4bb968e4800551012f133fa04e3afe1b1e40deefa8de05412425f4cbc752cde21874197b7fc10a41ed956536e658ba590728f37c2ba143c84b3a4ada5c93a15a0a33088ab92a7c4dd29d68325a0c8ff4476dda31857e2a2ab6e3036814b274770f650c8a9b01a0504e2aa34bb3edc1fdb27a352511420ac20a42fb5bd7ffb356d4156b43405368889a25e0bb29901a2369ea3ed7596389383ca08c8c9822979d31ef89b44cbcc8a7c8836f2aecb41fceface0a67174d70c1801de084816e0a421287fe817abd51bf625c8dadbc6ed774343dcee3c48c2f3d6354d3acc7cb8ae304fda1a8b07a747fbcc676d540f28dfc385fe8efeb57f290f07a0bac3aa7346033a0884b23e1e9a71fa7a7363bd446ede0607e56559b5d29644d4c0373c9a4ba4079ab2eb14030fb0be14650665801a878e352b6c495b9ef431c085b4d8bd599efda8ab94f52931acd97661cd877cbcef1f4cb69951930b99bdf1fae907e82ebc09297ad06d4ae7c169e2a4466f013adf29634343d07a8962889870595160bf60700f4aa46cfb65499c056e23cbee893e736edef65f0c51865fcc11f3545df5c34dec10990f7bf38bd8c85979ec7321ce99d36a06223d72b3c46b310cb0ebec51286bd7ddf531c2338cd0b63e78e00a653046d7e94c370cf8fcf7240a2d9c7419a960df5e6f313b86bbf1e7c768ba101d1c1846d8e0e36554da41a6bd704b0281ea347417088b7c082e0825214e744af4811bcaadb2ddb1fecbdc60311ba5be8b2c6b25929bed123c7753d", 0x2000, &(0x7f0000005ac0)={&(0x7f0000004ac0)={0x50, 0xb, 0x8, {0x7, 0x2b, 0x7, 0x20600c82, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x20, 0x6}}, &(0x7f0000004b40)={0x18, 0x0, 0x20000000000000, {0xffffffff}}, &(0x7f0000004b80)={0x18, 0x0, 0x7ff, {0xffff}}, &(0x7f0000004bc0)={0x18, 0x0, 0x8, {0x10000}}, &(0x7f0000004c00)={0x18, 0xfffffffffffffff5, 0x7, {0x30}}, &(0x7f0000004c40)={0x28, 0x0, 0x7fff, {{0x3, 0x3ff, 0x2, r4}}}, &(0x7f0000004c80)={0x60, 0x0, 0x2, {{0x8000000000000001, 0x3, 0xf, 0x4, 0x8, 0xc, 0x2, 0x2}}}, &(0x7f0000004d00)={0x18, 0x0, 0xcd4, {0x2}}, &(0x7f0000004d40)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000004d80)={0x20, 0xfffffffffffffff5, 0x10000, {0x0, 0x1d}}, &(0x7f0000004dc0)={0x78, 0xffffffffffffffda, 0x6, {0xffffffff, 0x2, 0x0, {0x5, 0x8, 0x7, 0x7, 0x6, 0x9, 0x0, 0x6, 0xe, 0x4000, 0x5, r2, r3, 0x65, 0x5}}}, &(0x7f0000004e40)={0x90, 0xfffffffffffffffe, 0x7, {0x6, 0x3, 0xf98, 0x6, 0x6d, 0x3, {0x4, 0x40000000, 0x8, 0x5, 0x0, 0x7, 0x5, 0x3, 0x6, 0x2000, 0x10001, r2, r3, 0x5, 0x1}}}, &(0x7f0000004f00)={0x88, 0x0, 0x200, [{0x4, 0x5, 0xa, 0x5, '/dev/vcsu\x00'}, {0x3, 0x7, 0x0, 0x1ff}, {0x6, 0x8c7, 0x0, 0x3}, {0x3, 0xffff, 0x6, 0x0, 'team0\x00'}]}, &(0x7f0000005200)={0x668, 0x0, 0x8001, [{{0x5, 0x0, 0xb573, 0x3, 0x9, 0x8, {0x2, 0x2, 0x32a, 0x5, 0x3, 0x0, 0x4, 0xff, 0x3, 0x1000, 0x0, r11, r3, 0x7e00000, 0x401}}, {0x2, 0x1600, 0x8, 0x7, 'pimreg1\x00'}}, {{0x4, 0x1, 0xffffffff, 0x8, 0x9, 0x8, {0x6, 0x4cea, 0xa3, 0x8, 0x3, 0x7, 0x4, 0xfffffffe, 0x3, 0x6000, 0x2, r2, r3, 0xa}}, {0x4, 0x0, 0x2, 0x3, '/\''}}, {{0x3, 0x0, 0xffffffffffffff94, 0x10001, 0x7fffffff, 0xfffff800, {0x2, 0x1, 0x8, 0xffffffffffff00fb, 0x9, 0xb, 0x7, 0x4, 0xfff, 0x4000, 0x0, r2, r3, 0x0, 0x3}}, {0x5, 0xc00000000000, 0x4, 0x5, '{*}-'}}, {{0x2, 0x1, 0x9, 0x5, 0x6, 0xb0, {0x4, 0x101, 0x0, 0x3, 0x4, 0x6, 0x6, 0x4, 0x18ac, 0x8000, 0x6, r2, r3, 0x8, 0x6}}, {0x6, 0x8, 0xa, 0x8b6, '$\'+^@&[{)%'}}, {{0x4, 0x1, 0xffffffffffffffff, 0x8001, 0x2, 0x7, {0x1, 0x800, 0x135d, 0x5, 0x8, 0xc, 0x90, 0x35, 0x9c, 0x6000, 0x8, r2, r12, 0xfffff9bf, 0x2}}, {0x3, 0x4, 0x0, 0x2}}, {{0x6, 0x3, 0x0, 0x9, 0x8, 0x1, {0x0, 0x9, 0x3ff, 0xee13, 0x8, 0x8, 0x5, 0x60, 0x0, 0xa000, 0x5, r13, 0xffffffffffffffff}}, {0x4, 0x400000000, 0x8, 0x0, 'pimreg1\x00'}}, {{0x5, 0x3, 0x8000, 0x4ee0, 0x4, 0x5, {0x2, 0x2, 0x9, 0x5, 0x9, 0x8001, 0x6, 0x3, 0xa678, 0x4000, 0x3, r2, 0x0, 0x0, 0x8000}}, {0x4, 0x8, 0xc, 0x9, './binderfs2\x00'}}, {{0x5, 0x2, 0x8, 0x10000, 0xffff9686, 0xe24, {0x1, 0x1, 0x8, 0x6, 0xa, 0xde, 0x7, 0x9, 0x172c, 0x8000, 0xa, r2, r3, 0x8, 0xc}}, {0x1, 0xffffffffffffff7e, 0x9, 0x4, 'ip6_vti0\x00'}}, {{0x4, 0x2, 0x7, 0x5, 0x80, 0x6, {0x0, 0x5, 0x7, 0x80000000, 0x400, 0x9, 0x80, 0x80000000, 0x11a, 0x1000, 0xe83f, r2, r3, 0x10000, 0x5}}, {0x6, 0xf, 0x1, 0x4, '-'}}, {{0x4, 0x3, 0x4, 0x3, 0x800, 0x2, {0x3, 0x80000001, 0x2, 0x9, 0xd, 0x400, 0x2, 0x1000, 0x9, 0x4000, 0xffff0001, r2, r3, 0xa, 0x200}}, {0x3, 0x9, 0x9, 0x5, 'ip6_vti0\x00'}}]}, &(0x7f0000005880)={0xa0, 0xfffffffffffffffe, 0x3, {{0x3, 0x0, 0xf, 0x9, 0x200, 0x8, {0x5, 0x1, 0x8, 0x6, 0x2, 0x9, 0xffffffff, 0x0, 0x3, 0x4000, 0x7, r2, 0xee01, 0x6, 0x6}}, {0x0, 0x7}}}, &(0x7f0000005940)={0x20, 0x0, 0x9, {0x9, 0x4, 0x3b, 0x1}}, &(0x7f0000005980)={0x130, 0xffffffffffffffda, 0xe34e, {0x0, 0x1620, 0x0, '\x00', {0xdd208bd64afb17bc, 0x7fb, 0x5, 0x9, r2, r3, 0x1000, '\x00', 0x7fffffff, 0x3, 0xeb, 0x9584, {0x1, 0x200}, {0x4, 0x101}, {0x100000001, 0x7}, {}, 0x8, 0x1ff, 0x8000, 0x7}}}}) 37.463335594s ago: executing program 33 (id=758): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x17d3}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x820c, 0x101, 0x7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000100)=0x8) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f0000002200)='net/netstat\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x318000}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000002280)={'team0\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x4, 0x24, 0x30, @remote, @empty, 0x0, 0x8000, 0x4, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000002600)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f00000023c0)=@bridge_setlink={0x1f0, 0x13, 0x20, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x14080, 0x4400}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1000}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f57ef9005f89ca64dc3f630820daf1ee"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_PROFILE={0x10, 0x2, 'net/netstat\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fb1979ab62211a4ab01d8c9f65af3d74"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\@\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bbfc315cfbb2a4a20bd8b0ca6ee5b909"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9521b749c15c499317721bc5d0b4ca34"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6c7a91c9579ac7e7e82b1b711baeef7d"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4995b56c90759c96b75226276b89c974"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "273bfd00b164f3b90bbed2c5501fd902"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6b0030c970a2a0f3e12684f29df74c54"}, @IFLA_PORT_PROFILE={0x10, 0x2, 'net/netstat\x00'}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7363}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b1b44fb4acef0331ef966d7c936d3bed"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1fd442c5dc5b608a5ce77556b50a7ce"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "00f66e514a55461b0ec4f557accbe6be"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004801}, 0x20008082) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000002640)=r4) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002680), 0x80000, 0x0) connect$pppoe(r8, &(0x7f00000026c0)={0x18, 0x0, {0x4, @broadcast, 'pimreg1\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000002800)={&(0x7f0000002700)=[0x0, 0x0], &(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000002840)={r9}) ptrace$cont(0x7, 0xffffffffffffffff, 0xfffffffffffffcae, 0x10000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f00000028c0)={0x21, 0x3, 0x0, {0x6}}, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000002900)={0x8000, 0x0, 0x1, 0x6, 0x5, 0x5}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000002980)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x3bc083e83ed53e21, &(0x7f00000029c0)=0xf, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000002a00)={0x1, 0x5, 0x2, 0xf, 0x5, 0x5}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000002a80)='./binderfs2\x00', 0x1ff) fstat(r5, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000005040)=[r3, r3, r3, r3, r3, r3, r3, 0xee00, r3, r3]) lstat(&(0x7f0000005080)='./file0\x00', &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000002ac0)="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", 0x2000, &(0x7f0000005ac0)={&(0x7f0000004ac0)={0x50, 0xb, 0x8, {0x7, 0x2b, 0x7, 0x20600c82, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x20, 0x6}}, &(0x7f0000004b40)={0x18, 0x0, 0x20000000000000, {0xffffffff}}, &(0x7f0000004b80)={0x18, 0x0, 0x7ff, {0xffff}}, &(0x7f0000004bc0)={0x18, 0x0, 0x8, {0x10000}}, &(0x7f0000004c00)={0x18, 0xfffffffffffffff5, 0x7, {0x30}}, &(0x7f0000004c40)={0x28, 0x0, 0x7fff, {{0x3, 0x3ff, 0x2, r4}}}, &(0x7f0000004c80)={0x60, 0x0, 0x2, {{0x8000000000000001, 0x3, 0xf, 0x4, 0x8, 0xc, 0x2, 0x2}}}, &(0x7f0000004d00)={0x18, 0x0, 0xcd4, {0x2}}, &(0x7f0000004d40)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000004d80)={0x20, 0xfffffffffffffff5, 0x10000, {0x0, 0x1d}}, &(0x7f0000004dc0)={0x78, 0xffffffffffffffda, 0x6, {0xffffffff, 0x2, 0x0, {0x5, 0x8, 0x7, 0x7, 0x6, 0x9, 0x0, 0x6, 0xe, 0x4000, 0x5, r2, r3, 0x65, 0x5}}}, &(0x7f0000004e40)={0x90, 0xfffffffffffffffe, 0x7, {0x6, 0x3, 0xf98, 0x6, 0x6d, 0x3, {0x4, 0x40000000, 0x8, 0x5, 0x0, 0x7, 0x5, 0x3, 0x6, 0x2000, 0x10001, r2, r3, 0x5, 0x1}}}, &(0x7f0000004f00)={0x88, 0x0, 0x200, [{0x4, 0x5, 0xa, 0x5, '/dev/vcsu\x00'}, {0x3, 0x7, 0x0, 0x1ff}, {0x6, 0x8c7, 0x0, 0x3}, {0x3, 0xffff, 0x6, 0x0, 'team0\x00'}]}, &(0x7f0000005200)={0x668, 0x0, 0x8001, [{{0x5, 0x0, 0xb573, 0x3, 0x9, 0x8, {0x2, 0x2, 0x32a, 0x5, 0x3, 0x0, 0x4, 0xff, 0x3, 0x1000, 0x0, r11, r3, 0x7e00000, 0x401}}, {0x2, 0x1600, 0x8, 0x7, 'pimreg1\x00'}}, {{0x4, 0x1, 0xffffffff, 0x8, 0x9, 0x8, {0x6, 0x4cea, 0xa3, 0x8, 0x3, 0x7, 0x4, 0xfffffffe, 0x3, 0x6000, 0x2, r2, r3, 0xa}}, {0x4, 0x0, 0x2, 0x3, '/\''}}, {{0x3, 0x0, 0xffffffffffffff94, 0x10001, 0x7fffffff, 0xfffff800, {0x2, 0x1, 0x8, 0xffffffffffff00fb, 0x9, 0xb, 0x7, 0x4, 0xfff, 0x4000, 0x0, r2, r3, 0x0, 0x3}}, {0x5, 0xc00000000000, 0x4, 0x5, '{*}-'}}, {{0x2, 0x1, 0x9, 0x5, 0x6, 0xb0, {0x4, 0x101, 0x0, 0x3, 0x4, 0x6, 0x6, 0x4, 0x18ac, 0x8000, 0x6, r2, r3, 0x8, 0x6}}, {0x6, 0x8, 0xa, 0x8b6, '$\'+^@&[{)%'}}, {{0x4, 0x1, 0xffffffffffffffff, 0x8001, 0x2, 0x7, {0x1, 0x800, 0x135d, 0x5, 0x8, 0xc, 0x90, 0x35, 0x9c, 0x6000, 0x8, r2, r12, 0xfffff9bf, 0x2}}, {0x3, 0x4, 0x0, 0x2}}, {{0x6, 0x3, 0x0, 0x9, 0x8, 0x1, {0x0, 0x9, 0x3ff, 0xee13, 0x8, 0x8, 0x5, 0x60, 0x0, 0xa000, 0x5, r13, 0xffffffffffffffff}}, {0x4, 0x400000000, 0x8, 0x0, 'pimreg1\x00'}}, {{0x5, 0x3, 0x8000, 0x4ee0, 0x4, 0x5, {0x2, 0x2, 0x9, 0x5, 0x9, 0x8001, 0x6, 0x3, 0xa678, 0x4000, 0x3, r2, 0x0, 0x0, 0x8000}}, {0x4, 0x8, 0xc, 0x9, './binderfs2\x00'}}, {{0x5, 0x2, 0x8, 0x10000, 0xffff9686, 0xe24, {0x1, 0x1, 0x8, 0x6, 0xa, 0xde, 0x7, 0x9, 0x172c, 0x8000, 0xa, r2, r3, 0x8, 0xc}}, {0x1, 0xffffffffffffff7e, 0x9, 0x4, 'ip6_vti0\x00'}}, {{0x4, 0x2, 0x7, 0x5, 0x80, 0x6, {0x0, 0x5, 0x7, 0x80000000, 0x400, 0x9, 0x80, 0x80000000, 0x11a, 0x1000, 0xe83f, r2, r3, 0x10000, 0x5}}, {0x6, 0xf, 0x1, 0x4, '-'}}, {{0x4, 0x3, 0x4, 0x3, 0x800, 0x2, {0x3, 0x80000001, 0x2, 0x9, 0xd, 0x400, 0x2, 0x1000, 0x9, 0x4000, 0xffff0001, r2, r3, 0xa, 0x200}}, {0x3, 0x9, 0x9, 0x5, 'ip6_vti0\x00'}}]}, &(0x7f0000005880)={0xa0, 0xfffffffffffffffe, 0x3, {{0x3, 0x0, 0xf, 0x9, 0x200, 0x8, {0x5, 0x1, 0x8, 0x6, 0x2, 0x9, 0xffffffff, 0x0, 0x3, 0x4000, 0x7, r2, 0xee01, 0x6, 0x6}}, {0x0, 0x7}}}, &(0x7f0000005940)={0x20, 0x0, 0x9, {0x9, 0x4, 0x3b, 0x1}}, &(0x7f0000005980)={0x130, 0xffffffffffffffda, 0xe34e, {0x0, 0x1620, 0x0, '\x00', {0xdd208bd64afb17bc, 0x7fb, 0x5, 0x9, r2, r3, 0x1000, '\x00', 0x7fffffff, 0x3, 0xeb, 0x9584, {0x1, 0x200}, {0x4, 0x101}, {0x100000001, 0x7}, {}, 0x8, 0x1ff, 0x8000, 0x7}}}}) 17.775716797s ago: executing program 3 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/37, 0x25}], 0x2, &(0x7f0000000540)=""/104, 0x68}, 0x18}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/183, 0xb7}, {&(0x7f0000001800)=""/61, 0x3d}], 0x5, &(0x7f00000018c0)=""/41, 0x29}, 0x9}, {{&(0x7f0000001900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/145, 0x91}, {&(0x7f0000001a40)=""/117, 0x75}], 0x2}, 0x7f}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/145, 0x91}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f0000001e00)=""/97, 0x61}, 0x4}], 0x4, 0x2003, 0x0) (async) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/37, 0x25}], 0x2, &(0x7f0000000540)=""/104, 0x68}, 0x18}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/183, 0xb7}, {&(0x7f0000001800)=""/61, 0x3d}], 0x5, &(0x7f00000018c0)=""/41, 0x29}, 0x9}, {{&(0x7f0000001900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/145, 0x91}, {&(0x7f0000001a40)=""/117, 0x75}], 0x2}, 0x7f}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/145, 0x91}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f0000001e00)=""/97, 0x61}, 0x4}], 0x4, 0x2003, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0xfffffbff) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0xfffffbff) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xeef1, 0x0, 0x3, 0x309}, &(0x7f0000000180), 0x0) (async) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xeef1, 0x0, 0x3, 0x309}, &(0x7f0000000180), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) 13.514468797s ago: executing program 3 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000380)=""/99, 0x63}, &(0x7f00000001c0), 0x44}, 0x20) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) unshare(0x68040200) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000048fad00e414bd2519eceacf5924ded7a2828889435dc76b8b3effdf12e7edba092217b61feb3891723d47decf3afcc67bb3fca9ccd156f21a43bd6de69dd68149f094466c539311a18631c2248"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 13.22856179s ago: executing program 5 (id=820): openat$mice(0xffffffffffffff9c, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 10.31205549s ago: executing program 1 (id=824): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @local}, 0x2}}, 0x2e) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010000108000000000000000000000000b96f7dfd4a34cca7a6d67f18030000daad57d1e9f73466f80d107c69dc4079d794cc9c1864d7c955aa9b0395208b59d586bfefa7d8eb58b837e8da42dde35bd30c7745c4e64fd9abd421a268058e57f132d527dd817b26", @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r2], 0x3c}}, 0x24048090) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010000108000000000000000000000000b96f7dfd4a34cca7a6d67f18030000daad57d1e9f73466f80d107c69dc4079d794cc9c1864d7c955aa9b0395208b59d586bfefa7d8eb58b837e8da42dde35bd30c7745c4e64fd9abd421a268058e57f132d527dd817b26", @ANYBLOB="76db203a5172ea227921b7bb7e0192f9994b2fa1cecd431c3c4cfcb0e275c9d5b2af8b430b1b60cba33b0917d9695e456679eeca06089f638cba7d0532927702ad29d94f72eef2e2b45d42c1aaf656d0e1a4ef5db43db8621e7de45cd9d324547c109162c71357d2734676c0b1d3723fceaab7d1740050153a97b1d37441e699d953866ee8c43bd449c1daef9939e9111feb24a39a10e7ea9bb66c6b8eb9d95021cb14e4a80d40fdf632e3c95e3957344b687d9fb6f8c47d9f09dfe74a50f0de0f716252e644bb02824d33f6579f26ef3004ef475e510472dacf98a2d623c85491ae5a0777d2549d2c2164c2e1b9039a43c66cab3b06d8ccc5771aab8d0ed414db7a3d4deef2befb021576406554efbeb85168868829bdf706d5c772664789325ed4489fc03cbfb678626d235c15a8971820655c594e39223dd9163902d4ea4d5185b4c6c43593920cb126a6b6a005be035c2277b3d6786bc184838c1cbcb65e219f16e99559353f787e86ae518ee46adb30c3bb90bc8fb45910f90f50196a67bce4d2180ae84b4556987781036477e99598433623bc38118e020e721c657ed03603bcdcadf9ba956504b0e30897aed447c905919f851949d2ccedcc0ad91b895da6fb5b89e83b6110e17394c27f6588b9f80a82c84b171d775d900d866f243b984ac08ed3d385c38881eea3094a5c8db5eba2615bfe97eda2697d576f66299006c19c7b7522454c40d8884561dac987ff0a11d915daaa434aefa00e0021132fef2644b655bdc8b6f110df75abf981f350ee2fd55c99192f281fbd5cf2ae1f5a2ec5380a071de929cea6435661f9dfe7a638e36975532fbb9d1aae5b2310aa7b99249673ea9ef8f28d7840028daeb650a95041e5b7d875718b742e69241a6397196674ced6f08833f06328d279af5ed1e0abafd920aa4bd700d39eaa137a6725136fe7b625169eec6ed1c4b969723560742661701a665bd9124a6189b72ceb2ae5d82ccda4f6588d90498d9ea07c18e93314786f5bd9fd76f8c2b5e7d6a8183fdc3f67f246032060de524d294670814327bdee5b9fbbbd207af4ec7c5ce29b7d58cad04b6e9bfb8e1f8533db91c79a74f8836153743aa0e55520c0d39552b9d8f9625cf81ed0dd2d917de6f7ad26104433df6da207592fa38589b3b598734d13a1aaf6a6a8b13745508ce19f15f54962219b707411dfeaaea0e952d065360eba61e385d15b344f31d0145a13af13cf63cc02aa1e9ca796ffc754eba74a17e01425f2f00121778feed4f9978a7fccb17cb77fc2cd1d10fdc40d069c2aa664fdb0569572740eb43c58892679544a18396b8135e69b8c9e826071f25de07520d157ff8b10f6c94fa6d35799f8b2179b97c65aa894bc8a34aab29d8958deb70ae4d4ce052c8257a71f530e7043b84c4e91add71f768bae7f15af63edc5698fc440b746e3999c545a5122252ad8f4130ab7e3475e5c6fd188e5cd5a0c523db4ac50f71bf3dfea3baf9bb0c7c9b58252fada73d103e4244435ee558b228a6d67d162a98ff46e41758d1db824732cbc00f40103ff440c51a5409ed9afcee451053e865023be16e697562c2b87292eb3ab2ebd0ec472bd9bac0677992171225b34c343be8910b8ffdc645e870fa6c996a0cb0a310254c74d9b3aa6b70d92558a399e27e042f08ac9eb0639e16c505dfd23864ba3e83afee7c73d70da7237819d65f594d38f18a8d03985900fd8b2f5eb8f2c707ba84070c7cf3ec1324886031ccd7b32b12dcf776aad12689b15c55bd28d16dcc4807ddf4d2ca37e1f27ac1a5733b473a41dbfd69ca14d6b848027a62fdcc524b4dea753b302af33646c87b48f21ff349cbb732b016529157517e8abf2bacd95830b93633bc4382593727cb08b2a6b39b6b238f52b276495cda7d84bd0dde81589667d4f0dfd33ae98ac10f0899f9b7259cecf907beda0cebd5fe2a97518a0b37fd385118a20373c814b47fcc3066407b770216adb6c8a3409160768d0814508769df7b3bf590c08e311c35c620aeddfacdcf9fb70fed37ff744ee326b7f8200497bb3659ba9d5b5dacabe21c3333240ad876e0c5a1b166e40eecd4b30b1345861d539364478cf855863c4593f036f40956d9842913f5e2c952ce01182e97ff7ea30f09d947ac0d875a1b2f002368ac7325af2f1ed0169fc0846a10165706c1ff4d9035a623a23addd76de071c4fad1c2440ee9d1d03a9838bfd653acb2bb9c68f45502fb63510dcb2fe70c663fd9ea163893816bbe2e48c3403b635fdd9bb1911d629c4a4aa3c13f8ba6d42db951d9f5c6c001aa3684e55d3c284050393577eb9b82a3f6203d36e29c9b11f5e226897ce72b36f4c3abce7034b00c94fbee0d7d9ba5545af115adfbf2ba074d0a2e4ee976b0c39294c77c42c573e7f5c560bf1def1e84ba0b09dad2ec5293f37aa05d224079299fcf2d5013c04f872ccf1f1400520450ab86093af90b111287ff4f4f3e2728d3913a9d65695ff2d5af90a0ea143e935e5decce5163a28826a4a20115f3adbbaba889bb4a244c6feb01488822daf6c58dab92a71436e3fc73f665a053fae0c81d494e7cb3386906bca9648bf29c465b0b66c5bc4dbcc11008207475e6af35ebdbadcc89eabf1785a42537ad96321e16885435f6104b4e11e0d68b24c6036d1acc565f216c09320609c1ea0bad27d03c0b41c539bb2c25a77142703c7f33a2ce42ba58c1849851175a4d92bb8eca362d6ee3385604f5a7ffc8cf4baf8968a12b0806d13a6278797777152b8b76d5415ba19375cfa0f713d48c71ff7c965bfae816339407e5a0c116f9f58d75d84a6a9191dba332e574c8401bc7831f9a8b1268b207643959dc6971ae2aac5fc6b91da254d921fb1ba67585b8f65e7e9ba7d3ce5a5e4b14bdd5b295aedeacd215adbed4056635e508f6c02e7c2e446c92fb51e78b3f6d099b2323c8af8f09bb36615e843c64c636d23964ae9aacd068855965da842f5cb885a07ac23826b863f499ae3fb51359da1134da4685c78dd410bbd14d25687ad5b694a55e2837dd5d1413a392b0eff899ff43772277debccbcde136ca1ddb7c6d726b027944340e0c957388a5c9a61b568cb47f5d7d8a178cd1b76db7991d11711945310b5f965b0d3096cb3d6542aaa269fe2f4da53076f5813da552f5e8286b1ced2f5434c5a7676821deaede4670caea724be30cdc1c16f2cf759196657761a32a24d4d507a5809d363066c3a31d12254c8670cea848eb394d69d144e9909e3de12a5d7b8e670d8c8ab65878555815e7aa284689297f0a046616e863c49395f8d936575b3b4d587cf50fa283114897f2a6444640aece48e96d8a222566f22ba0222c4a5e3b5dba7cc3fcb43860edae2c2828a176ea37ce67924559d84edea3fe5da4c547ce4fb0bf07816ee8c81f9f0c9a8119449de8215804dbb0dc0f6cabc2684a33dbec5abf58144c3220e397ca1a338b1a99c8a9e4abdb5f5453963ff615a43a1372a527bdbeffcdf61bdf0321bc576721e1eabb11009da18783b46416ababf4290f9f3c142d6179a094cb11d397429490a6b4f216ab0af01159270805534b999620af979ad128fce484debb8c675b29eda420b73ef93e51386d94dd8f9a9ec40d85ea33cfb08a991b74bab9419541c5a6cf7afafd698762dc9c0c6d4dc6b8b1123c169f57546ef7b8b416f7791ac119422ede5ad7e38f5db1b9f74a92746c17f260ecfe94f1f70feefb47621dd225a7e530acb9f962408247127385ab83eebdd77013bc4d6c26665ac01e23d79abe8c10e38c2ae2ac00ff1c9e45c1aab2305330a85e492e92a699182592363ee53716d4e0bc54e008cdeec0617dac1d6a9505c341523c9e7e5a1b1477bd60413aefeabfeb00893879803cf35e96a4b9b661b58f59cf37df34a43062778c5e635a22de7c07cc5b09f5542b977c1128844ea9bbe8c4a4b1978a23b0c9c7748d84b9d2990710482c69523ed085f1965fd4c198567983ff2df7c5c47bb68b1837477db9dc693dfcefb4fd55dd9ef39d25d63eb4a5fa6c66d2632f382631131cd757c002abcdfe582d9216da009e1e3b78aaa33fa5fe59d46ee80e23e62154c7097fdf0adce6aab9d827d26bd844d89be5affefc73236397ba367428a90aac7a997d45ac3546f0ff1dc0b3830eda1f53a41ca0d115d75c20e497d7abb3723dd6edc4410676a3df76a7328c2cd8be8f17cde661117165103e66c1b4058217215f2bd84593367cad7910a430c3b3e35356515eaedfb5228e2ab1484ffaef15cb6e25b154477b0a2d41f09fd410651c61e43820cb9456aa58627bb31e41964c7b13db42c7d9b445b17e996d62e988145ff76aa328e3f61bbc47f5db692034fc5504b81c3c28ca48544f103e95775c0f7aef3ee2f371e2ebf87a010d167706726a0570bd18d3455caf5e8d7d7e2f597f682b123a9359a8dc6d95e2febb13be856cd9b7dff5cd2d4a1f010358266f5c57b63256940e930862d0de7988a27b774d0f81ed7af1b493429e6e9513cde6f5451709c8502606ce716d9056722fbb3bc2e116dcbeddba2344b5a708c817256d6d698879522068f8e790ce0ba9398c0bd405f135a00c08f6b211ca37d912465c949aa6faafb7037ab69069c68cca971e7401772dfc1d2ae098aea90d6d593f178d6b8d18e7e1b7781358666083367d289abea8232d57d2793756ad4284810d01f7ba272145e7cd9cf5a7ee0d07c77dfe0fc1b048959313a3d12c45806f6b9623838309ce7e7de1b824079c1e44e2c5e9d39bd9428915c1edeaa853740661320e82838299bf56c4bc19f160f617a12ee910f3f5bfcc0d3c60c91489ff453d9b99a02bbcae89785c36b1393cf8d92c9215d76bfd79d45deb0c465fb08376ee800a6ada25582c3fa7bf0fb970c1c45be4281851ee618862d1c4ccc98b226d4c30495a0e69b17ffe73b87d19148f16fc0d56b23472f8585d0d5fa39168e5ee0501d0d46ffb91249c8f2c5a59cc00bbf1cb40f91f2414405bfc5a6ba5be2a7a1fd9713dd7b593dedd23024cc99340d5190cb15564494169ee685b4799ffa8eca01f2bb7a27c9e843ed9478975cd7f069a03142356e5ff76e91e4a3a7eb8823ddb8b614156230ee7654836220bdd8dd06a4abbeee1b8bb12c5e8ebd565f82bf25557d25bb7c3fa1e2d6c6c464d24169257f78e89965ec551991b1a6d889ade5901393339185e98e8b003482d111a6558657287feb4e3c8dab242948af0497b9e5078a190c69ae07d4630c6f4b060cda9fdf4f274705ae270ff74f46e6e46fe3fe3b56380436418f4e20bae3252bc89ed70fac5a623c649b73d2bbdc78e1c7ca57648510cf48b1706eb656020721af198597c4ed0665d6682e93fd1cab8eeefce92f7006802d7744a571a6db80bfc205a255bac5244a4746198f077b7e3c25b680a766a2adddd9b71d2e75fec159598d278abe321a8e82c9a8d258b5953bd96914ce6a7aeda4185b68a53d4eaa435455cd4e9ff72c8842f1c1255d0e4db194ad70f81d8176bfa90acca4e0c444bd67b626f8de28103dae151f0a6a3c2e39fa8979f59ff48a0c794ad2f2600b25b95a2a5d6ff4904e950f42bfc53d464729179c0fe88f61af8736236bc7a669c270e9e5e543a4c3d6a1923f63f241b6f5834772eebfc7775f70a1a4935ab9ef5cf546e9f6eccc65775f320262152d4b2bc51f1c7791aaaf152c24fc21363dcf70486f599478c2fbd0a7e5f64e1f7abcfe10591d01863e72905ce79a62a983f8b3b7ab34ba2bb1f6246645fd71c1be727433e696c9a6ea", @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r2], 0x3c}}, 0x24048090) r11 = socket$nl_crypto(0x10, 0x3, 0x15) close_range(r11, 0xffffffffffffffff, 0x0) 10.28845049s ago: executing program 5 (id=825): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340", 0xfcb3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setsig(0x4203, 0x0, 0x100000000000fdc8, &(0x7f0000000400)={0x9a, 0x3, 0xc2e}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r4, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @note={0x7, 0x8, 0x6, 0x9b, 0x1}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}, {0x9, 0x7, 0x1, 0x1, @tick=0xaf, {0x5, 0x6}, {0xb, 0x3}, @queue={0x8, {0x9, 0x4}}}], 0x54) write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0xff, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x2, 0x800}}, {0xd2, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0xc}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @time={0x0, 0xd4}, {}, {}, @quote={{0x2, 0x2}, 0x9}}, {0x9, 0x5, 0x9, 0x93, @time={0x3ff, 0x3}, {0x3, 0xfb}, {0x2}, @quote={{0x3, 0x1b}, 0x38, &(0x7f00000004c0)={0xa7, 0x5, 0x7, 0xfc, @time={0x3, 0xebd}, {0x80, 0x7}, {0x9, 0x4}, @result={0x9, 0xfffffdc0}}}}, {0x4, 0x7, 0xb, 0x7, @tick=0x101, {0x5d, 0xd}, {0x6, 0x2}, @result={0x40, 0x1}}], 0xe0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_cancel(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f0000000080)="d40fd4a085916a6a0fa123ba8802427a670e1b1f163051a918e6431a026bc6aec7aeb09758694a90f24d4765e5de25d73772df655e7d897ee3eef47510d8b93fee7606c4f667821a43f522035d972dffbe2e871d651ee66cbaa0f6a8bfbff5543473ed396753ad821844a3722d48ef143587abeb6fc6beaee4c0cf69921b762359dc63bebdf77cfff924e1", 0x8b, 0x1, 0x0, 0x1, r0}, &(0x7f00000001c0)) 8.872947238s ago: executing program 1 (id=826): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x1000, 0x0, 0x3}, 0x25) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000080)="b0") 7.788081386s ago: executing program 5 (id=829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000080000106b1d010140000102030109029a0003010000000904000000010a24010000000201020c242e267cfaa7798e020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2, "5fb9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x82, 0x2, "1738"}, 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 7.608695648s ago: executing program 3 (id=830): r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xffdffffffffffff9, 0x0) io_uring_enter(r2, 0x14a, 0xf187, 0x12, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xf8, 0x9, 0x4, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8000, 0x40, 0x2, 0xd34}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/41, 0x29, 0x0, &(0x7f0000000500)=""/220, 0xdc}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000001000000000000000500000000000000", @ANYRES32=r7, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05010000010000000000000000000044f390612c2a695923a59dbabde995d4790c107a05714082f820db72a4db"], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000140), &(0x7f0000000180)='GPL\x00', 0xf, 0x2f, &(0x7f00000002c0)=""/47, 0x41000, 0x2c, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x80000001, 0x800}, 0x10, r5, r6, 0x0, &(0x7f00000007c0)=[r8, r7], 0x0, 0x10, 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000006aaf00000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fca0950fdff8aa4500"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r11, @ANYBLOB="b49c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) close(r11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r12, &(0x7f0000000900)}, 0x20) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r13, 0x411df000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r14, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)=' \t', 0x2}], 0x2) 7.293933699s ago: executing program 3 (id=831): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0xf, 0x0, &(0x7f0000000040)) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x101121) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000440)={0x0, 0x40ac, 0x10000, 0x2, 0x42}, 0x0, &(0x7f0000000200)) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 7.071110449s ago: executing program 0 (id=832): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x1}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x503, 0x8d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x9, [{0x5, 0x6, 0xffffffe8}, {0x5, 0x556, 0xfffffff9}, {0x7, 0x400}, {0x1, 0x3, 0x8}, {0xa, 0xa, 0x9}, {0x1, 0x8, 0x9}]}]}, {0x0, [0x61, 0x0, 0x6f, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000380)=""/174, 0x75, 0xae, 0x0, 0x4, 0x10000, @value=r0}, 0x28) 6.780822501s ago: executing program 0 (id=833): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0xb80, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x870, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x514, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x454, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "b71677d9a6749cb9f842ac9230767950a00204ade44eb887affec62b29f2d2f5d9c34140c3ccd8994f3b64ef3c54dbfc8464e799cf6b493be527503e59a628743b7722767bba37f35a2d53016c1180faadc8f618db6d8f3c26fe770ebc7bb75564ce01b24686fb57ce2ca476ef39cd6d50810de49a2ffbd354dcd4ba494f924bd5d36f4cd6fba81e3a1775af554a27c68f056fb1d134ac437a4c1db0bf9c71201037d9fe8fcd69cdc6f5f10d0a0458b265d4974450d9ebbdd750191332756a35fcabec119983c05b3d3f0712bed716a503bb36f746fd7f64ae07ae1b1e333f55b3b791affca3d4a5a736decdc28f39"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "0f82a0fb272b29c4771ec64f7395c7eb71bbafaeacd9945abc0783e13c1c1b096dc0076450433a6b4074737434d7aaa79d3d1058fb1cbf891099f4069b993bbf8b1a97c56c8a19ca0f6c05ad697d5c0ba09f7f0d45f108c0451b0851605f066d954f98c5046344d84553e6763dd741644f9159213caf4df3d376357970eab19359807414b8bc87c90ae8d334341ee02e2f81e5288a1d88a2ef0676eeeb2b1019931d81cd6857f183d593a9e8ee9bd2bd1dd4a254d5a434fe75278fffc81786"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "b4dfa1d6e8c8fb08d36ce203e49125ef099529c89dcf2424f4e8044b68bd85af32e20c32b95d12d21e5afbdce494857686762e0ba306d13f0b6d077d82ada06f78b6d033f878d6867c261b5660c5f32250e5103aa1f2145a985725d05ab754b9274b2a2403840fa1292357eb4d1aa974649fdfeaa38971960f2a129da1ebea52c26e8ae1c3ee5e5c0ea4d2ae45713555f65bdb036f4a99cc0445aa03a121cca84153bc9fd61faa8cb914bc755df2f70f34be7de45a8e4e2f48a19c6c4d55"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x76, 0x1, "ced6e0774ed83fe195a208e7919d0609521d640deaff834933875403d8c6bbd77c6a6b4c20853012fbc274ba8f87bc340635f69f5c902f8f3f1f41cd004e938151568601f7149e71c3f5072c838f1e4b6b5ceff34c5f84770583eb07e6da3c0c5ffd1d007b7042c1af2f65734583a4cb62b4"}, @NFTA_DATA_VALUE={0xf2, 0x1, "9a7cdff8d4fd63df1276e9e9ad339e9fb116faebb20e01f3bc83d62f2f5b2771a89b77d03d0654b6f6d577fcc3db7cbdbf4d4e65f9051fe23d879c11937a77eaa5a9ea25f32e771d9ecc107e590d519c834c1b633d596fe86a343e6f67e5fa4ec146554583bb5f327907fee0749449ef82cbe715fd8a07d8ebab7dc4a3774caedd24429478642141265da6ffbb83392418d44b52a8013d8c5c715f520e5d02517f378ef239530b90ea150cc369f9a355f879f88a59ce2196dbecb4051925cada159ce44063d1da79d4dc55a12b15a4ec049d1238dc350c1066ace4d53040b53ade114be5a771497643ee2e236729"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "3cc93cc4f59729642009b4a8c11a35f3e7f6af7c05492af3476da9be8d752890a123dec8812949d9c844507e13be370781b976a7e705251957e19fed6b0bdb02ab2a6bfe9f9931e34445a7d12f67ce5678ad68188eecc591f57880fca420e7eec5a7ba99db4be07ac206f05050b3adc3d6e4a0b7fff1a5d91a035388d28cdc7d673e2989d134f492e595f65c2aa1abf69a1e4b6360cec4fb9939de54a1c6fa234bd09c9b991b16f403"}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "ff56634eed06b93c0a4423d2e9e63dd360ecdd19b00057c74ab2d111e5036e6305af3a36df5a55e7634ab5e5540352072fb94869b285f5f58968ad4c5f5c84eb8642a0d684d74dad37b644269ce8ec84584410752183768edf8f4a2f5e47902aad3ab61d348d03cfc85782e17015308c30dc0a18d23e726437f93020e05d7aa0996ea0cbdfbae68b5ba631c4c5948761f91ea879c76646f36d844a79fd6aaef48cc0ae2a702e6f151a35cf8be201a9300482dd2cea1aebab3a489401c0dc8bc42782234f500ffa2d1edf60b618b22514894763fd2ab3edcba5c7dc457c252bb52f9e9af64fc15d7683bdce0c7b6396f9a5213781b21c8c1f"}, @NFTA_DATA_VALUE={0xfb, 0x1, "ef6643e4c8546a7ef526b3aa78fec5af7ef0e21ad6f3f2d6d446b3faa32d494a011b0b1f35d239e6c45649fcdf635975329a5f55c7e852fdaae85374009ff52aa883c068214e6d1d8227cba44d85e1e08a148f7e5f820525f8bb818ebf3854163c9f881eb0c614d8fb7998ec0fd9dad2479854882195871d2d54f95cd98e100edea2260ca97447ffbdf63618a748d4c02919a22a01d5762c13caa1f623349eed965fc1e1c9553446e844744a470abc490805cfaa0ebbb6b9c551dc37d7a745a168dce5c2a0574caa1a1023d59ae390575040ce96ed919816dedb04f34f789dd5bd2c510b427c36baa0adbeddf358b1ac98ec9c66f6c233"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x66, 0x1, "03ffa461a81f91ea9d8b653760c66ba0452b69fef4dc48354d488fbe00f0dc04919fae422e9162150e5b6e765bfa3cf4475fe46406a559acb05c430086adc4d94a80e51cc01c8a71eea3d257ead8abd5c8d4be79a6524c74b54086c84349ba898da9"}, @NFTA_DATA_VALUE={0x32, 0x1, "99b9efda7295be0e520953f67a410bf7e9af6f61cd4c7fa1398236b8140d2436b64bf9840ae37cad0d310956f0c3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e4, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0xd0, 0x7, 0x0, 0x1, @target={{0xb}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x57, 0x3, "19840f3c1f6a86cec770a619e794cc2e3692f9139787fe1bd5e02767da43b4933fc2ee9d7bc73c1b724abad14e19aa03db0688bbfb7f28cfdeb10f1bccf1794671e17dc8422abb690c4a709cc025d3a76e4cbc"}, @NFTA_TARGET_INFO={0x54, 0x3, "d120587785e16d0d1000fb29d0e9c0993c7842eaae7ecb737835c6a35a6da0a76f0005113fa247f9aeedc659d877ba4bca02036a011fd9a3620c4f69cf8bfbcd122314d578b9312ea8da602f52bcb2f8"}, @NFTA_TARGET_INFO={0x10, 0x3, "46510eb7a7e9d28538bcfa92"}]}}}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "16044d46983190afc1a1826cda31308e3f65b1a06b6512c53f6b38dd40e8a58e74d140b7a3215b31f59afa5a89291ae2d032d49f55693e983992fe3f6b3a7124e0acf3d3859558d38ef8955a21c7dcd0440b5ed43c4ebd598b981ef7bab9a6d6b3089c3d49c6b6174714cda71d15f12e2f2fe885346c17cb10cd97c48437441e660715302581993a60a6d465bff1a6c0b2363db8096ae4601d97dc5d839dcc2e3799abe89dc704f52b451781b4a077d1c6bf56d024"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14}}, 0xc5c}, 0x1, 0x0, 0x0, 0x81}, 0x24004800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x80}}, 0x990) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}}, 0x24}}, 0x0) 5.992757478s ago: executing program 0 (id=834): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 5.721459219s ago: executing program 1 (id=835): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2011}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80000018}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x774e9c2f48943116, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x2c}}, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000040027bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="00000000007dc2bcd33ffdb2361684a757c763912d3bab83cbda50bfd6733d4cd4aa7500"/45], 0x28}}, 0x40080c0) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r11, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) (async) r12 = dup(r11) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r10, 0x2f, 0x7, 0x17, 0x4, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x40, 0x0, 0xff}}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r13, @ANYBLOB="00012cbd7000fbdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="8000028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400f9ff0904040000009500048e00fcffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000008000100", @ANYRES32=r10, @ANYBLOB="04000280ec230100f7db9fb53870b70ec9421079ee85208fdd9d3739700666830c0ec51ecdc97f06fe023cfcbd1c2ac9b779ade7858cc544facbca1b1d0f77669e6b68a825e32603eb42a278013716f42f2e25275147570766c515666f9540695fd9dcb9d06d896dba1092f3df526be1e85c29eb73f21e30a4e15ed40a88c51622b9cd95ab58e7c9950048cae1c4ce14a760d750500a197d0567d39ad0fb44e5cdf58bda48b87904f916ad3813116940163a2ebeae961c9f2d00a013270599d3956d37a8938017663b5f2616febc284cfaddfe3230dd64fa74e9c2549253da9a563a9eb59cd8c17bf77e7afc7f1fabd17d3c49d9548309", @ANYRES32=r10, @ANYBLOB="6c0102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000f00000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=r10, @ANYBLOB], 0x21c}, 0x1, 0x0, 0x0, 0xc000}, 0xc084) (async) r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r15, 0x3b86, &(0x7f0000000580)={0x18, r16}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0xfffffffffffffe6e, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x1b7fe2, 0x3832b6}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r12, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, r16, 0x0, r17}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x34000014) 5.717562653s ago: executing program 6 (id=760): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x14e}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3404c8d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x14e}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3404c8d4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) (async) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) 5.149040781s ago: executing program 0 (id=836): socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/239, 0xef}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) (async) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xae, 0x3c, 0x50, 0x8, 0x61d, 0xc140, 0x311e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x130, 0x8, [{{0x9, 0x4, 0x15, 0x6, 0x0, 0x7d, 0x18, 0xed, 0x64}}]}}]}}, 0x0) 4.708879002s ago: executing program 1 (id=837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x32, r1, 0x600bc000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x2c4abc83) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002001b000500000000000000000000000400000000000000ffffffffffffffff0b000000000000000800000020090000"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000002ba98bbdf7b1c7c6d1553ae3adf43f313df6db1f795de51bd81e91247aac280a7473e8d367bcdae3341e6b636ab6b47ff970652f0d00d963eb66ce", @ANYRES16=r6, @ANYBLOB="010100000000feffffff2b00000008000300", @ANYRES32=r7, @ANYBLOB="0400460005003400c4000000080026006c09000028005180240000800900010000000000000000000500020002000000040005000500090001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) socket(0xa, 0xe5d64989e61df18d, 0x9) r8 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r9}, 0x38) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x56) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.608430048s ago: executing program 3 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x22, 0x8, {0x8, 0xd, "be811a495422"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.348881417s ago: executing program 6 (id=839): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[], 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x0, 0x3008, 0x8, 0xd, 0x2, 0x2, 0x6}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000a3adb28c679414f89d8e6a309ed7968170db685031a4d2f9f88c345c94b54fded233bce4cfc76ad9887c3df5b8d43aa4ff101e1d727f465806333b3921875ac764c3562b90c070d54c6c5540b5188141441d27859ebf253ac9f08d863499bfac3ed46c1e43395153dbab1a71c1fb586f9e01f4f9c50261bfe93c6252deb295d250805588048f379e1be5358d6f62139ee41cf7874f9d71191dd6f22d8f4f123e0a6103ceb5be63f7001c547c9086e6782b81be41838893338c"], 0x0}, 0x0) 3.736930967s ago: executing program 1 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = fsopen(0x0, 0x1) r2 = fcntl$dupfd(r1, 0x406, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x34, 0xd, 0x58a}, {0xe, 0x9, 0xf8, 0x300}]}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, &(0x7f0000000000)={0x9, 0x3}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x315c, &(0x7f0000000200)={0x0, 0xcfca, 0x40, 0x80003, 0x1000001, 0x0, 0x0}, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r11 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r11, 0x541c, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x3, 0x6, 0x4, 0x4000, 0x10001, {r12, r13/1000+10000}, {0x3, 0xc, 0xe0, 0x9, 0xe, 0x4, "dc75e16d"}, 0x2, 0x4, {&(0x7f0000000240)=[{0x8000, 0x0, {}, 0xbde}, {0x0, 0xffff, {r2}, 0xa3d}]}, 0x9f2}) 3.118281286s ago: executing program 0 (id=841): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r0 = io_uring_setup(0x17f7, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x203, 0x3cb}) openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000005c0), 0x42080) r4 = accept4$x25(r2, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x40000) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'team0\x00'}) 2.602720412s ago: executing program 5 (id=842): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x2) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) pivot_root(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x100000001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, r10}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r10}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r11 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r11, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e800000000000000d5"}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xbc, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x58, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "9e5ad9738d4f0772a1fff33003923fcaef532d1043c1fa2a53b0dc37cbf12ef3015d61f8c5f4590950c668b70e8ac71bf0a5c61738a3d00edf10c95b8f6698e0fbfceb508bb4b34c31938e55"}]}]]}, 0xbc}}, 0x0) r12 = socket(0x18, 0x800, 0x2) getsockname$packet(r12, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000700)=""/255, 0xff}, {&(0x7f00000008c0)=""/214, 0xd6}, {&(0x7f00000009c0)=""/80, 0x50}, {&(0x7f0000000e80)=""/163, 0xa3}, {&(0x7f0000000f40)=""/180, 0xb4}, {&(0x7f0000001000)=""/137, 0x89}, {&(0x7f00000010c0)=""/218, 0xda}, {&(0x7f00000011c0)=""/85, 0x55}, {&(0x7f0000001240)=""/213, 0xd5}], 0x9}, 0xd10}], 0x1, 0x20, 0x0) r13 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0xc0405627, &(0x7f0000000180)={0x3, 0x980900, 0x1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 1.992527902s ago: executing program 1 (id=843): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') (async) r0 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) (async) r1 = open(&(0x7f0000000080)='.\x00', 0x1ac02, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) (async) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x3f3ff1029d661cdc, 0x0, {0x7, 0x2b, 0x1ff, 0x3000280a, 0x800, 0x8, 0x5, 0x1, 0x0, 0x0, 0x10, 0x49}}, 0x50) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x20000000007, 0xf) read(r2, &(0x7f0000019440)=""/102377, 0x18fe9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x8000, 0x1000, 0x4, 0x86c}}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0x200ffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) (async) prctl$PR_SET_NAME(0xf, 0x0) 1.984063709s ago: executing program 3 (id=844): r0 = socket(0x2b, 0x4, 0x1ff) ioctl$SIOCGETSGCNT(r0, 0x541b, &(0x7f0000000000)={@private=0xa010100, @private=0xa010102}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1b) quotactl_fd$Q_QUOTAOFF(r3, 0x0, 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040), 0xc) (async, rerun: 64) sendmsg$rds(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cswp={0x58, 0x114, 0x7, {{0x44f5, 0x5}, &(0x7f0000000480)=0x5, 0x0, 0x89f, 0x4, 0x1000, 0x65, 0x5c, 0x3ff}}], 0x58, 0x20040880}, 0x4080) (async, rerun: 64) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) (async) syz_usb_disconnect(r4) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f00000100000400000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000000c0)) (async, rerun: 32) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000580)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 1.340430238s ago: executing program 5 (id=845): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0xe000, 0x1fff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0x101, 0x1) getdents64(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) r6 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) 1.23891504s ago: executing program 0 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4c840}, 0x20048000) r2 = inotify_init() r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) close_range(r3, r4, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r5, 0x1) r6 = inotify_add_watch(r2, 0x0, 0x1400037e) read$FUSE(r2, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f00030100600009040000000101", @ANYRES8=r7, @ANYRES8=r6, @ANYRES16=r8], 0x0) syz_usb_control_io(r9, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030400010004030b00"], 0x0, 0x0, 0x0}, 0x0) 501.806µs ago: executing program 6 (id=847): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340", 0xfcb3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setsig(0x4203, 0x0, 0x2, &(0x7f0000000400)={0x9a, 0x2, 0xc2d}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r4, 0x8, r5) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x10000, 0x62a00) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x47, 0x0, 0xfe, @time={0x4, 0x81}, {0x40, 0xff}, {0x0, 0x9}, @note={0x7, 0x8, 0x6, 0x9b, 0xfffff3da}}, {0x0, 0x0, 0x0, 0x0, @time={0x3681, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}, {0x9, 0x7, 0x1, 0x1, @tick=0xaf, {0x5, 0x6}, {0xb, 0x3}, @queue={0x8, {0xffffffff, 0x4}}}], 0x54) write$sndseq(r0, &(0x7f0000000600)=[{0x0, 0x24, 0x0, 0x0, @tick, {0x0, 0x3}, {0x4}, @raw32}, {0x0, 0x0, 0x1, 0xff, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x2, 0x800}}, {0xd2, 0x0, 0x0, 0x7, @tick, {0x0, 0xff}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0xc}, @control={0x97, 0x428e}}, {0x0, 0x1, 0x3, 0x0, @time={0x0, 0xf}, {}, {0x80}, @raw32={[0x52, 0x9, 0x4]}}, {0x9, 0x5, 0x9, 0x93, @time={0x3ff, 0x3}, {0x9, 0xfb}, {0x2}, @connect={{0x8, 0x2}, {0x3, 0x6}}}, {0x4, 0x7, 0xb, 0x7, @tick=0x101, {0x5d, 0xd}, {0x5, 0x2}, @result={0x40, 0x1}}], 0xe0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000240)='cpuset\x00', 0x2208004, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_cancel(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f0000000080)="d40fd4a085916a6a0fa123ba8802427a670e1b1f163051a918e6431a026bc6aec7aeb09758694a90f24d4765e5de25d73772df655e7d897ee3eef47510d8b93fee7606c4f667821a43f522035d972dffbe2e871d651ee66cbaa0f6a8bfbff5543473ed396753ad821844a3722d48ef143587abeb6fc6beaee4c0cf69921b762359dc63bebdf77cfff924e1", 0x8b, 0x1, 0x0, 0x1, r0}, &(0x7f00000001c0)) 0s ago: executing program 5 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4665}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19}}}}}}, 0x0) kernel console output (not intermixed with test programs): nexpected cc 0x1001 length: 249 > 9 [ 240.525439][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.539026][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.833667][ T7852] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.460'. [ 241.403523][ T7848] lo speed is unknown, defaulting to 1000 [ 241.582147][ T5962] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 241.774864][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 241.835221][ T5962] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 241.845815][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 241.870152][ T5962] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 241.880868][ T5962] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 241.890366][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.934505][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 242.039444][ T5962] usb 1-1: config 0 descriptor?? [ 242.343263][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 242.367231][ T5962] hdpvr 1-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½ËDŠ^jvi0ì [ 242.367231][ T5962] †Ã“‘êpY [ 242.381177][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.442261][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.457849][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.542953][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.574137][ T5851] Bluetooth: hci5: command tx timeout [ 242.617381][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.246645][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.423050][ T5962] hdpvr 1-1:0.0: device init failed [ 243.428504][ T5962] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 243.486118][ T5842] usb 4-1: GET_CAPABILITIES returned 0 [ 243.505777][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 243.517946][ T5962] usb 1-1: USB disconnect, device number 26 [ 243.776028][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.785227][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.796034][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.806969][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.808161][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 243.841377][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.851206][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.864537][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.874563][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.884218][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.894015][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.903932][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.913795][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.923487][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.933326][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.942981][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.952895][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.012679][ T7883] netlink: 'syz.3.464': attribute type 7 has an invalid length. [ 244.101571][ T7883] netlink: 'syz.3.464': attribute type 3 has an invalid length. [ 244.109492][ T7883] netlink: 224 bytes leftover after parsing attributes in process `syz.3.464'. [ 244.636334][ T5962] usb 4-1: USB disconnect, device number 18 [ 244.651896][ T5851] Bluetooth: hci5: command tx timeout [ 245.700399][ T30] audit: type=1800 audit(1755437803.479:30): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.469" name="bus" dev="overlay" ino=470 res=0 errno=0 [ 246.732620][ T5851] Bluetooth: hci5: command tx timeout [ 247.048674][ T30] audit: type=1107 audit(1755437805.479:31): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='0îÖ¦¤‡-ÈôìCc† ›ÜÁZÁ1gÒQÄè£b§â;äl-Î/²Õ²¬wNO›Ÿ£{A[ï³Òžh°Ïü6GÅr?SUu!3åŒÑ©Í“eâiúSœÿÆcªT8vÖ÷ü}ÙIA¨þ¾ìnÒׂ”ˆøŽ:/Ž,–ÐîpþêÇ6ƒc Þ—8* âfeüþŽTºï0.§Ró%u5žœQÖ˜O¢?«Ø ‰L[G¦nh‡`‹ÏèÚãŸG¨8&R55:IDïS§ñî_‰Z;[qïO_¬ ‡l/~ÄîÈŒ9¿Á˜ßRß>wÑã1# 5ùía}fÕ' [ 247.171645][ T5962] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 247.333768][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.344116][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.356290][ T7848] bridge_slave_0: entered allmulticast mode [ 247.365182][ T7848] bridge_slave_0: entered promiscuous mode [ 247.404759][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.423715][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.431027][ T7848] bridge_slave_1: entered allmulticast mode [ 247.441731][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 247.465568][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.504217][ T5962] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.536159][ T5962] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.567386][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.570661][ T7848] bridge_slave_1: entered promiscuous mode [ 247.611344][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.649507][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.754952][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 247.987122][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.007487][ T5948] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 248.041590][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.044419][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.080760][ T5962] usb 1-1: GET_CAPABILITIES returned 0 [ 248.100688][ T5948] usb 4-1: config 0 descriptor?? [ 248.113914][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.126276][ T5962] usbtmc 1-1:16.0: can't read capabilities [ 248.640032][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.649837][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.659632][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.669360][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.681518][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.690674][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.703786][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.711085][ T7918] netlink: 'syz.0.472': attribute type 7 has an invalid length. [ 248.713092][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.713492][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.739283][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.749090][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.758231][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.768164][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.777289][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.790137][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 248.799766][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 249.051733][ T5851] Bluetooth: hci5: command tx timeout [ 249.319307][ T7918] netlink: 'syz.0.472': attribute type 3 has an invalid length. [ 249.331835][ T5948] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 249.343561][ T7918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.472'. [ 249.387171][ T7848] team0: Port device team_slave_0 added [ 249.492072][ T5948] lenovo 0003:17EF:6047.0006: Failed to switch F7/9/11 mode: -71 [ 249.530112][ T5948] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71 [ 249.553759][ T5948] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71 [ 249.578178][ T7848] team0: Port device team_slave_1 added [ 249.594719][ T5948] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 249.634323][ T5948] usb 4-1: USB disconnect, device number 19 [ 249.732455][ T7920] fido_id[7920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 249.801870][ T5949] usb 1-1: USB disconnect, device number 27 [ 249.882848][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.041625][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.085228][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.117842][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.131345][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.202771][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.091129][ T7848] hsr_slave_0: entered promiscuous mode [ 251.114226][ T7848] hsr_slave_1: entered promiscuous mode [ 251.131754][ T5962] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 251.170931][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.189954][ T7848] Cannot create hsr debugfs directory [ 251.323069][ T5962] usb 4-1: Using ep0 maxpacket: 8 [ 251.344861][ T5962] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.365392][ T5962] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.401801][ T5962] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.435144][ T5962] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.450176][ T7939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.467022][ T5962] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.476873][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.489253][ T7948] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 251.949531][ T5962] usb 4-1: GET_CAPABILITIES returned 0 [ 251.955231][ T5962] usbtmc 4-1:16.0: can't read capabilities [ 253.056419][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.065580][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.074808][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.085107][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.094304][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.103368][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.112539][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.121683][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.130774][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.139914][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.148971][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.158118][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.167349][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.176404][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.185468][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.194703][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.303422][ T7933] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 253.311208][ T7933] netlink: 'syz.3.480': attribute type 3 has an invalid length. [ 253.319138][ T7933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.480'. [ 253.845407][ T5948] usb 4-1: USB disconnect, device number 20 [ 254.357830][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 254.431731][ T7986] netlink: 'syz.2.489': attribute type 21 has an invalid length. [ 254.439551][ T7986] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 254.490101][ T7986] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.489'. [ 254.566656][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 255.801728][ T8008] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 256.257275][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.279000][ T8011] loop2: detected capacity change from 0 to 7 [ 256.343207][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.374529][ T8011] loop2: [ 256.395189][ T8011] loop2: partition table partially beyond EOD, truncated [ 256.481706][ T30] audit: type=1326 audit(1755437814.909:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453638ebe9 code=0x7fc00000 [ 256.532597][ T7848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.589969][ T7848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.728953][ T7848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.762069][ T5962] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 256.992086][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 257.011788][ T8025] tipc: Enabled bearer , priority 0 [ 257.098319][ T8020] syzkaller0: entered promiscuous mode [ 257.114323][ T8020] syzkaller0: entered allmulticast mode [ 257.142096][ T7848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.153076][ T5962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.166387][ T5962] usb 1-1: config 127 has an invalid interface number: 1 but max is 0 [ 257.205731][ T5962] usb 1-1: config 127 has no interface number 0 [ 257.221662][ T5962] usb 1-1: config 127 interface 1 has no altsetting 0 [ 257.233729][ T5962] usb 1-1: string descriptor 0 read error: -22 [ 257.242765][ T5962] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=c4.a4 [ 257.252227][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.455588][ T5962] usb 1-1: selecting invalid altsetting 2 [ 257.474908][ T5962] i2c-cp2615 1-1:127.1: probe with driver i2c-cp2615 failed with error -22 [ 257.648027][ T5962] usb 1-1: USB disconnect, device number 28 [ 257.936370][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.997657][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.077795][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.086466][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.123407][ T8019] tipc: Resetting bearer [ 258.174193][ T8019] tipc: Disabling bearer [ 258.256708][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.263989][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.282032][ T5912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.514360][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 258.985843][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.361669][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.401716][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.421134][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.452947][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.479680][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.513693][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.561863][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.700400][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 259.707224][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 259.732084][ T5999] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 260.010599][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.051363][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.060699][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.070373][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.079466][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.094570][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.103716][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.114007][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.120214][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.125046][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.142665][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.151886][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.155937][ T5999] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 260.209452][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.220588][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.220591][ T8068] netlink: 'syz.2.500': attribute type 7 has an invalid length. [ 260.220852][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.229796][ T8068] netlink: 'syz.2.500': attribute type 3 has an invalid length. [ 260.237901][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.247656][ T8068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.500'. [ 260.254958][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.264891][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.293479][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 260.413141][ T5999] usb 1-1: config 0 descriptor?? [ 260.645330][ T5999] usbhid 1-1:0.0: can't add hid device: -71 [ 260.684742][ T5999] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 260.799967][ T5999] usb 1-1: USB disconnect, device number 29 [ 260.869259][ T5962] usb 3-1: USB disconnect, device number 16 [ 260.955533][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.227374][ T8078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 262.121381][ T8085] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 262.140542][ T8085] cramfs: wrong magic [ 262.797531][ T8093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.177275][ T7848] veth0_vlan: entered promiscuous mode [ 263.257687][ T7848] veth1_vlan: entered promiscuous mode [ 263.437713][ T7848] veth0_macvtap: entered promiscuous mode [ 263.488866][ T7848] veth1_macvtap: entered promiscuous mode [ 263.585768][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.660482][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.726630][ T7848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.761031][ T7848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.811600][ T7848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.820681][ T7848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.898664][ T8097] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 264.170653][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.214688][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.361385][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.386586][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.524040][ T8119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.546982][ T5842] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.608151][ T8119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.724682][ T5842] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 264.751867][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.792904][ T5842] usb 3-1: config 0 descriptor?? [ 264.947736][ T8125] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 264.956072][ T8125] VFS: Can't find a romfs filesystem on dev nullb0. [ 264.956072][ T8125] [ 265.091625][ T8127] bridge_slave_0: left allmulticast mode [ 265.142522][ T8127] bridge_slave_0: left promiscuous mode [ 265.367225][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.402068][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.868143][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.939324][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 266.476887][ T8127] bridge_slave_1: left allmulticast mode [ 266.611645][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.626402][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.647337][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.651226][ T8127] bridge_slave_1: left promiscuous mode [ 266.666163][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.686790][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.715791][ T30] audit: type=1326 audit(1755437825.149:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.1.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f18ebe9 code=0x0 [ 266.802068][ T8137] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 266.804827][ T24] usb 6-1: Product: syz [ 266.817867][ T8137] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 266.842872][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.900673][ T24] usb 6-1: Manufacturer: syz [ 266.906143][ T24] usb 6-1: SerialNumber: syz [ 266.949864][ T8127] bond0: (slave bond_slave_0): Releasing backup interface [ 267.002747][ T5842] usb 3-1: Cannot set autoneg [ 267.039216][ T5842] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 267.059177][ T8127] bond0: (slave bond_slave_1): Releasing backup interface [ 267.071864][ T5912] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 267.089287][ T8127] team0: Port device team_slave_0 removed [ 267.116068][ T8127] team0: Port device team_slave_1 removed [ 267.126254][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.151650][ T5842] usb 3-1: USB disconnect, device number 17 [ 267.175295][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.217020][ T8127] batman_adv: batadv0: Removing interface: macvlan2 [ 267.254458][ T5912] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.324692][ T5912] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.367169][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.409362][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 267.421850][ T5912] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 267.430953][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.451151][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 267.685055][ T8149] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 267.713064][ T5912] usb 2-1: config 0 descriptor?? [ 268.027367][ T8157] @: renamed from vlan0 [ 268.481658][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 268.641582][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 268.649446][ T24] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 268.659069][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 268.696377][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 268.714835][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 268.725660][ T24] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 268.736376][ T24] usb 1-1: Product: syz [ 268.740842][ T24] usb 1-1: SerialNumber: syz [ 268.755231][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 269.125304][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 269.146892][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 269.174726][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 269.317158][ T30] audit: type=1326 audit(1755437827.749:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8170 comm="syz.3.529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f891dd8ebe9 code=0x0 [ 269.352148][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.382202][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.514256][ T5842] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 269.758656][ T5999] usb 6-1: USB disconnect, device number 2 [ 269.802849][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 269.840281][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.872404][ T5912] usb 2-1: USB disconnect, device number 12 [ 271.562889][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 271.775270][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.820467][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 271.872357][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.921874][ T24] usb 6-1: config 0 descriptor?? [ 272.285190][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.312469][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.609239][ T24] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 272.690766][ T24] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 272.887919][ T24] playstation 0003:054C:0BA0.0007: Failed to retrieve feature with reportID 18: -71 [ 272.964577][ T24] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -71 [ 273.009036][ T24] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 273.070545][ T24] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 273.252002][ T24] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -71 [ 273.283094][ T24] usb 6-1: USB disconnect, device number 3 [ 274.333119][ T8213] fido_id[8213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 276.058008][ T8229] netlink: 52 bytes leftover after parsing attributes in process `syz.5.544'. [ 277.384531][ T5962] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.554335][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.580788][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 277.618401][ T5962] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 277.645942][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.685377][ T5962] usb 2-1: config 0 descriptor?? [ 278.446863][ T5962] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 278.745629][ T8275] smc: net device bond0 applied user defined pnetid SYZ2 [ 278.758445][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.767131][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.781786][ T8275] bridge0: entered allmulticast mode [ 279.341353][ T8243] netlink: 'syz.1.545': attribute type 35 has an invalid length. [ 279.515033][ T5962] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 279.532730][ T5962] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 279.894559][ T5962] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 279.959751][ T5962] usb 2-1: USB disconnect, device number 13 [ 280.266026][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 280.706306][ T5912] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 280.721763][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.734757][ T5912] usb 4-1: config 0 has no interface number 0 [ 280.746882][ T5912] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 280.757818][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.768163][ T5912] usb 4-1: Product: syz [ 280.772979][ T5912] usb 4-1: Manufacturer: syz [ 280.777999][ T5912] usb 4-1: SerialNumber: syz [ 280.789859][ T5912] usb 4-1: config 0 descriptor?? [ 280.843849][ T5912] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 280.865200][ T5912] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 280.961950][ T8304] netlink: 'syz.0.558': attribute type 2 has an invalid length. [ 280.969947][ T8304] netlink: 'syz.0.558': attribute type 2 has an invalid length. [ 280.977841][ T8304] netlink: 'syz.0.558': attribute type 2 has an invalid length. [ 280.985769][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 281.041057][ T5912] usb 4-1: USB disconnect, device number 21 [ 281.433074][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.748480][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 282.902168][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 282.941668][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.953901][ T24] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 283.119709][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.563'. [ 283.155557][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.563'. [ 283.192395][ T24] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 283.205765][ T24] usb 2-1: config 4 interface 0 has no altsetting 0 [ 283.240837][ T24] usb 2-1: string descriptor 0 read error: -22 [ 283.254576][ T24] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 283.671553][ T8323] fuse: Unknown parameter '0x0000000000000006' [ 284.316013][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.518445][ T5912] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.690281][ T24] usb 2-1: can't set config #4, error -71 [ 284.698260][ T24] usb 2-1: USB disconnect, device number 14 [ 284.734174][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.809238][ T5912] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 284.835788][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 284.941578][ T5912] usb 4-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 285.244526][ T5912] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 285.465905][ T5912] usb 4-1: config 3 has no interface number 0 [ 285.531658][ T5912] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 285.580752][ T5912] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 285.604122][ T5912] usb 4-1: config 3 interface 8 has no altsetting 0 [ 286.242026][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 286.251913][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.276850][ T5912] usb 4-1: can't set config #3, error -71 [ 286.302994][ T5912] usb 4-1: USB disconnect, device number 22 [ 286.649800][ T8344] befs: (nbd2): No write support. Marking filesystem read-only [ 286.659808][ T8344] syz.2.568: attempt to access beyond end of device [ 286.659808][ T8344] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 287.571242][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.571'. [ 287.582178][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.571'. [ 287.661620][ T5962] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 287.863626][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.882646][ T5962] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 287.892883][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.924814][ T5962] usb 3-1: config 0 descriptor?? [ 288.360327][ T5962] kye 0003:0458:5017.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 288.373041][ T5962] kye 0003:0458:5017.0009: unknown main item tag 0x0 [ 288.379902][ T5962] kye 0003:0458:5017.0009: unknown main item tag 0x0 [ 288.387742][ T5962] kye 0003:0458:5017.0009: unknown main item tag 0x0 [ 288.394820][ T5962] kye 0003:0458:5017.0009: unknown main item tag 0x0 [ 288.402074][ T5962] kye 0003:0458:5017.0009: unknown main item tag 0x0 [ 288.429681][ T5962] kye 0003:0458:5017.0009: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 288.509376][ T5962] kye 0003:0458:5017.0009: tablet-enabling feature report not found [ 288.531064][ T5962] kye 0003:0458:5017.0009: tablet enabling failed [ 288.599335][ T5962] usb 3-1: USB disconnect, device number 18 [ 288.656067][ T8359] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 288.754587][ T8364] fido_id[8364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 288.912159][ T5842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.071585][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 289.083137][ T5842] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 289.105221][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.132218][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 289.153680][ T5842] usb 6-1: config 0 descriptor?? [ 289.401610][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 289.473585][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.770175][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.795834][ T5912] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 289.904657][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.917391][ T5912] usb 4-1: config 0 descriptor?? [ 292.525590][ T5912] usb 4-1: can't set config #0, error -71 [ 292.566268][ T5912] usb 4-1: USB disconnect, device number 23 [ 292.791653][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.914531][ T8406] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 292.951618][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 292.973750][ T8406] VFS: Can't find a romfs filesystem on dev nullb0. [ 292.973750][ T8406] [ 293.023194][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.586'. [ 293.058762][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.586'. [ 293.120009][ T5899] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.148165][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.673276][ T5842] usbhid 6-1:0.0: can't add hid device: -71 [ 293.679381][ T5842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 293.692865][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.732034][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 293.741111][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.758461][ T5842] usb 6-1: USB disconnect, device number 4 [ 293.770270][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.887940][ T5899] usb 2-1: Product: syz [ 293.918110][ T5899] usb 2-1: Manufacturer: syz [ 293.942412][ T5899] usb 2-1: SerialNumber: syz [ 293.960794][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 294.076792][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.092708][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.151852][ T24] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 294.181260][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.191067][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.208504][ T5912] usb 3-1: Product: syz [ 294.215168][ T5912] usb 3-1: Manufacturer: syz [ 294.219874][ T5912] usb 3-1: SerialNumber: syz [ 294.324306][ T24] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 294.496927][ T5899] usb 2-1: 0:2 : does not exist [ 294.506465][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 294.532617][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 294.794577][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 294.954231][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 294.978040][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.184070][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 295.208400][ T24] usb 4-1: string descriptor 0 read error: -22 [ 295.217722][ T24] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 295.230129][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.246388][ T24] usb 4-1: config 0 descriptor?? [ 295.265081][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 295.274848][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 295.337377][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 295.475832][ T24] usb 4-1: USB disconnect, device number 24 [ 296.361632][ T5912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 296.622997][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 296.638425][ T5912] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.653351][ T8395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.583'. [ 296.721213][ T5912] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.842511][ T5899] usb 2-1: USB disconnect, device number 15 [ 296.853015][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.871611][ T5912] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.880036][ T5912] usb 4-1: Product: syz [ 296.884294][ T5912] usb 4-1: Manufacturer: syz [ 297.064613][ T24] usb 3-1: USB disconnect, device number 19 [ 297.088985][ T5912] hub 4-1:4.0: USB hub found [ 297.139625][ T8456] netlink: 132 bytes leftover after parsing attributes in process `syz.5.598'. [ 297.156659][ T8456] netlink: 132 bytes leftover after parsing attributes in process `syz.5.598'. [ 297.198671][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.284164][ T5912] hub 4-1:4.0: 2 ports detected [ 299.445173][ T5912] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 299.457105][ T5912] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 300.284847][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 300.441570][ T5912] usb 3-1: device descriptor read/64, error -71 [ 300.692453][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 300.824151][ T5948] usb 4-1: USB disconnect, device number 25 [ 300.921586][ T5912] usb 3-1: device descriptor read/64, error -71 [ 301.112848][ T8498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.606'. [ 301.492894][ T5912] usb usb3-port1: attempt power cycle [ 301.871804][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 302.055317][ T8514] netlink: 'syz.5.609': attribute type 3 has an invalid length. [ 302.759259][ T5912] usb 3-1: device descriptor read/8, error -71 [ 302.852364][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 303.023659][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 303.081879][ T5948] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 303.605148][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 304.447946][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.461751][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 304.472121][ T24] usb 4-1: Product: syz [ 304.476887][ T24] usb 4-1: Manufacturer: syz [ 304.482700][ T24] usb 4-1: SerialNumber: syz [ 304.492556][ T24] usb 4-1: config 0 descriptor?? [ 304.502805][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.527782][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 304.541065][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 304.571981][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 304.585567][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.694991][ T5948] usb 2-1: string descriptor 0 read error: -71 [ 304.758328][ T5948] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 304.768329][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.784982][ T5948] usb 2-1: config 0 descriptor?? [ 304.801105][ T5948] usb 2-1: can't set config #0, error -71 [ 304.850353][ T24] gspca_sq930x: reg_r 001f failed -71 [ 304.883565][ T5948] usb 2-1: USB disconnect, device number 16 [ 304.893593][ T24] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 304.942663][ T8533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.613'. [ 305.010137][ T24] usb 4-1: USB disconnect, device number 26 [ 305.045750][ T8535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.613'. [ 306.400921][ T8546] lo speed is unknown, defaulting to 1000 [ 306.520859][ T8549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.621'. [ 306.777570][ T5948] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 307.002197][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.018229][ T5948] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 307.028941][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.042248][ T5948] usb 2-1: config 0 descriptor?? [ 308.370330][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.624'. [ 308.535181][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.572329][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.648900][ T5948] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 309.191883][ T8581] netlink: 'syz.2.626': attribute type 8 has an invalid length. [ 309.951036][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.628'. [ 310.027996][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.628'. [ 311.316425][ T8599] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 311.323864][ T8599] VFS: Can't find a romfs filesystem on dev nullb0. [ 311.323864][ T8599] [ 311.372926][ T24] usb 2-1: USB disconnect, device number 17 [ 312.051016][ T8610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.058840][ T8610] IPv6: NLM_F_CREATE should be set when creating new route [ 312.066423][ T8610] IPv6: NLM_F_CREATE should be set when creating new route [ 312.073888][ T8610] IPv6: NLM_F_CREATE should be set when creating new route [ 312.131612][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 312.266612][ T5949] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 312.568852][ T5948] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 312.590997][ T8610] netlink: 80 bytes leftover after parsing attributes in process `syz.0.634'. [ 312.984913][ T8608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 313.070464][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 313.154703][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 313.258868][ T8608] erspan0: entered promiscuous mode [ 313.341831][ T5949] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.384418][ T5949] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.492821][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.525520][ T5949] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 313.563513][ T5949] usb 4-1: Product: syz [ 313.567784][ T5949] usb 4-1: Manufacturer: syz [ 313.684079][ T5949] hub 4-1:4.0: USB hub found [ 313.890212][ T5949] hub 4-1:4.0: 2 ports detected [ 314.612295][ T5948] usb 6-1: device descriptor read/all, error -71 [ 315.197739][ T24] hub 4-1:4.0: activate --> -90 [ 315.806498][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.828093][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.843049][ T8646] xt_hashlimit: size too large, truncated to 1048576 [ 315.891178][ T8604] binder: 8603:8604 ioctl c0306201 200000000640 returned -22 [ 315.891185][ T8623] binder: 8603:8623 ioctl c0306201 200000000640 returned -22 [ 315.946958][ T8646] warn_alloc: 1 callbacks suppressed [ 315.946980][ T8646] syz.2.642: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.006493][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.2.642 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 316.006523][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.006535][ T8646] Call Trace: [ 316.006543][ T8646] [ 316.006552][ T8646] dump_stack_lvl+0x189/0x250 [ 316.006582][ T8646] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 316.006615][ T8646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.006639][ T8646] ? __pfx__printk+0x10/0x10 [ 316.006666][ T8646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.006692][ T8646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.006727][ T8646] warn_alloc+0x214/0x310 [ 316.006760][ T8646] ? __pfx_warn_alloc+0x10/0x10 [ 316.006796][ T8646] ? __get_vm_area_node+0x28f/0x300 [ 316.006820][ T8646] ? htable_create+0xfc/0x7a0 [ 316.006847][ T8646] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 316.006930][ T8646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.006975][ T8646] ? rcu_is_watching+0x15/0xb0 [ 316.006999][ T8646] ? htable_create+0xfc/0x7a0 [ 316.007017][ T8646] ? htable_create+0xfc/0x7a0 [ 316.007034][ T8646] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 316.007057][ T8646] ? htable_create+0xfc/0x7a0 [ 316.007074][ T8646] ? hashlimit_pernet+0x23/0x240 [ 316.007104][ T8646] htable_create+0xfc/0x7a0 [ 316.007134][ T8646] hashlimit_mt_check_common+0x719/0xa10 [ 316.007174][ T8646] xt_check_match+0x3ce/0xab0 [ 316.007205][ T8646] ? __pfx___mutex_lock+0x10/0x10 [ 316.007234][ T8646] ? __pfx_xt_check_match+0x10/0x10 [ 316.007268][ T8646] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 316.007302][ T8646] ? xt_find_match+0x1f7/0x250 [ 316.007342][ T8646] translate_table+0x1553/0x2040 [ 316.007402][ T8646] ? __pfx_translate_table+0x10/0x10 [ 316.007433][ T8646] ? __might_fault+0xb0/0x130 [ 316.007479][ T8646] ? _copy_from_user+0x94/0xb0 [ 316.007513][ T8646] do_ip6t_set_ctl+0x970/0xce0 [ 316.007552][ T8646] ? rcu_is_watching+0x15/0xb0 [ 316.007573][ T8646] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 316.007629][ T8646] ? __pfx___mutex_lock+0x10/0x10 [ 316.007652][ T8646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.007688][ T8646] ? __lock_acquire+0xab9/0xd20 [ 316.007717][ T8646] nf_setsockopt+0x26c/0x290 [ 316.007756][ T8646] rawv6_setsockopt+0x23b/0x5b0 [ 316.007782][ T8646] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 316.007806][ T8646] ? sock_common_setsockopt+0x36/0xc0 [ 316.007831][ T8646] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 316.007858][ T8646] do_sock_setsockopt+0x179/0x1b0 [ 316.007893][ T8646] __x64_sys_setsockopt+0x13f/0x1b0 [ 316.007931][ T8646] do_syscall_64+0xfa/0x3b0 [ 316.007961][ T8646] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.007983][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.008004][ T8646] ? clear_bhb_loop+0x60/0xb0 [ 316.008030][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.008049][ T8646] RIP: 0033:0x7f453638ebe9 [ 316.008069][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.008087][ T8646] RSP: 002b:00007f45345cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.008109][ T8646] RAX: ffffffffffffffda RBX: 00007f45365b6090 RCX: 00007f453638ebe9 [ 316.008124][ T8646] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 316.008137][ T8646] RBP: 00007f4536411e19 R08: 00000000000005c0 R09: 0000000000000000 [ 316.008150][ T8646] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 316.008162][ T8646] R13: 00007f45365b6128 R14: 00007f45365b6090 R15: 00007ffda99b54a8 [ 316.008197][ T8646] [ 316.008274][ T8646] Mem-Info: [ 316.091877][ T5912] usb 4-1: USB disconnect, device number 27 [ 316.102685][ T8646] active_anon:2119 inactive_anon:13733 isolated_anon:0 [ 316.102685][ T8646] active_file:15483 inactive_file:35663 isolated_file:0 [ 316.102685][ T8646] unevictable:768 dirty:11 writeback:0 [ 316.102685][ T8646] slab_reclaimable:10482 slab_unreclaimable:103572 [ 316.102685][ T8646] mapped:43181 shmem:9987 pagetables:1237 [ 316.102685][ T8646] sec_pagetables:0 bounce:0 [ 316.102685][ T8646] kernel_misc_reclaimable:0 [ 316.102685][ T8646] free:1283471 free_pcp:12349 free_cma:0 [ 316.428811][ T8646] Node 0 active_anon:8476kB inactive_anon:54932kB active_file:61732kB inactive_file:142652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172724kB dirty:44kB writeback:0kB shmem:38412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12684kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.472469][ T8646] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.513290][ T8646] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.547504][ T8646] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 316.554126][ T8646] Node 0 DMA32 free:1211672kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8472kB inactive_anon:54988kB active_file:59980kB inactive_file:142584kB unevictable:1536kB writepending:44kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:32644kB local_pcp:15104kB free_cma:0kB [ 316.590605][ T8646] lowmem_reserve[]: 0 0 1 1 1 [ 316.596636][ T8646] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 316.725823][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 316.731733][ T8646] Node 1 Normal free:3906848kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16032kB local_pcp:5248kB free_cma:0kB [ 316.778088][ T8646] lowmem_reserve[]: 0 0 0 0 0 [ 316.845232][ T8646] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 316.888350][ T8646] Node 0 DMA32: 9*4kB (UME) 7*8kB (UE) 10*16kB (E) 231*32kB (UME) 155*64kB (UME) 19*128kB (UME) 28*256kB (UME) 21*512kB (ME) 18*1024kB (M) 8*2048kB (M) 278*4096kB (UM) = 1211420kB [ 316.915706][ T8646] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 316.928927][ T8646] Node 1 Normal: 192*4kB (UME) 58*8kB (UME) 43*16kB (UME) 149*32kB (UME) 52*64kB (UME) 12*128kB (UME) 8*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3906848kB [ 316.949691][ T8660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.646'. [ 317.018195][ T8646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.085650][ T8646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.099283][ T8646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.140932][ T8646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.332624][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342923][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.591889][ T8646] 61128 total pagecache pages [ 317.646679][ T8646] 0 pages in swap cache [ 317.660208][ T8646] Free swap = 124996kB [ 317.831835][ T8646] Total swap = 124996kB [ 317.836195][ T8646] 2097051 pages RAM [ 317.840033][ T8646] 0 pages HighMem/MovableOnly [ 317.850618][ T30] audit: type=1326 audit(1755440436.285:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 317.906170][ T30] audit: type=1326 audit(1755440436.285:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 317.948676][ T30] audit: type=1326 audit(1755440436.285:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 317.970469][ T8646] 424695 pages reserved [ 317.970488][ T8646] 0 pages cma reserved [ 317.980839][ T30] audit: type=1326 audit(1755440436.285:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 318.004636][ T30] audit: type=1326 audit(1755440436.285:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 318.026896][ T30] audit: type=1326 audit(1755440436.285:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891dd8ebe9 code=0x7ffc0000 [ 318.234009][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.649'. [ 319.313814][ T8696] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 319.362363][ T8696] VFS: Can't find a romfs filesystem on dev nullb0. [ 319.362363][ T8696] [ 319.698038][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.657'. [ 319.721638][ T8706] erspan0: entered promiscuous mode [ 319.734648][ T5842] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 319.856418][ T8708] block device autoloading is deprecated and will be removed. [ 319.868040][ T8708] syz.2.658: attempt to access beyond end of device [ 319.868040][ T8708] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.912426][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 319.920121][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.970652][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.032129][ T5842] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.052945][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.117056][ T5842] usb 6-1: Product: syz [ 320.127947][ T5842] usb 6-1: Manufacturer: syz [ 320.156240][ T5842] usb 6-1: SerialNumber: syz [ 321.519704][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 321.597461][ T30] audit: type=1326 audit(1755440440.005:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8718 comm="syz.2.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453638ebe9 code=0x0 [ 321.863017][ T8731] program syz.1.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.035353][ T5842] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 322.101669][ T5912] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 322.118479][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'. [ 322.197835][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.215424][ T5842] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 322.224097][ T5842] usb 4-1: config 0 has no interface number 0 [ 322.235234][ T5912] usb 1-1: device descriptor read/64, error -71 [ 322.259684][ T5842] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 322.289435][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.320571][ T5842] usb 4-1: Product: syz [ 322.343914][ T5842] usb 4-1: Manufacturer: syz [ 322.370331][ T5842] usb 4-1: SerialNumber: syz [ 322.397517][ T5842] usb 4-1: config 0 descriptor?? [ 322.511773][ T5912] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 322.541878][ T5899] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 322.625351][ T5842] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 322.657951][ T5842] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 322.661607][ T5912] usb 1-1: device descriptor read/64, error -71 [ 322.676938][ T5842] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 322.693584][ T5842] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 322.712739][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 322.726766][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 322.739047][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.750600][ T5899] usb 2-1: Product: syz [ 322.756480][ T5899] usb 2-1: Manufacturer: syz [ 322.765272][ T5842] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 322.776719][ T5899] usb 2-1: SerialNumber: syz [ 322.793953][ T5899] usb 2-1: config 0 descriptor?? [ 322.796435][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 322.809129][ T5912] usb usb1-port1: attempt power cycle [ 322.826467][ T5899] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 322.842594][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.847682][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 322.859827][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.872118][ T5899] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 322.896747][ T5899] usb 2-1: media controller created [ 322.959272][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.057943][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.076550][ T5948] usb 4-1: USB disconnect, device number 28 [ 323.112637][ T5948] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 323.124097][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 323.144821][ T5899] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 323.154950][ T5912] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 323.191650][ T5912] usb 1-1: device descriptor read/8, error -71 [ 323.208967][ T5948] keyspan 4-1:0.133: device disconnected [ 323.240296][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 323.279553][ T5899] dvb-usb: schedule remote query interval to 50 msecs. [ 323.305680][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 323.326407][ T5899] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 323.348669][ T8757] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 323.363473][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 323.370470][ T10] dvb-usb: error while querying for an remote control event. [ 323.388340][ T5899] usb 2-1: USB disconnect, device number 18 [ 323.442606][ T5912] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 323.472462][ T5912] usb 1-1: device descriptor read/8, error -71 [ 323.584809][ T5912] usb usb1-port1: unable to enumerate USB device [ 323.714926][ T5899] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 324.005840][ T10] usb 6-1: USB disconnect, device number 7 [ 325.586558][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 325.617618][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 326.196452][ T8788] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.680'. [ 327.292580][ T8794] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 328.837150][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.686'. [ 329.032898][ T5912] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 329.452468][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 329.468208][ T5912] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 329.482513][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.528969][ T5912] usb 1-1: Product: syz [ 329.538206][ T5912] usb 1-1: Manufacturer: syz [ 329.547401][ T5912] usb 1-1: SerialNumber: syz [ 329.561538][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 329.578162][ T5912] usb 1-1: config 0 descriptor?? [ 329.597349][ T5912] gspca_main: sq905-2.14.0 probing 2770:9120 [ 329.752135][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 329.760311][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.780996][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.792968][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.811963][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.882006][ T5912] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 329.896714][ T5912] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 329.904545][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.925132][ T5912] usb 1-1: USB disconnect, device number 35 [ 329.952931][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.533678][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 330.658462][ T10] usbtmc 3-1:16.0: can't read capabilities [ 330.811552][ T8822] netlink: 'syz.2.687': attribute type 7 has an invalid length. [ 330.819653][ T8822] netlink: 'syz.2.687': attribute type 3 has an invalid length. [ 330.827640][ T8822] netlink: 224 bytes leftover after parsing attributes in process `syz.2.687'. [ 331.302091][ T5948] usb 3-1: USB disconnect, device number 24 [ 331.312807][ T8829] fuse: Bad value for 'group_id' [ 331.317992][ T8829] fuse: Bad value for 'group_id' [ 331.646859][ T8836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.694'. [ 331.683796][ T8833] lo speed is unknown, defaulting to 1000 [ 331.804111][ T8843] vivid-001: ================= START STATUS ================= [ 331.832317][ T8843] vivid-001: Radio HW Seek Mode: Bounded [ 331.847448][ T8843] vivid-001: Radio Programmable HW Seek: false [ 331.854615][ T8845] program syz.0.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.861567][ T8843] vivid-001: RDS Rx I/O Mode: Block I/O [ 331.871895][ T5948] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 331.919715][ T8843] vivid-001: Generate RBDS Instead of RDS: false [ 331.948914][ T8843] vivid-001: RDS Reception: true [ 331.974986][ T8843] vivid-001: RDS Program Type: 0 inactive [ 331.981001][ T8843] vivid-001: RDS PS Name: inactive [ 332.042602][ T8843] vivid-001: RDS Radio Text: inactive [ 332.055567][ T8843] vivid-001: RDS Traffic Announcement: false inactive [ 332.078765][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 332.102768][ T8843] vivid-001: RDS Traffic Program: false inactive [ 332.109468][ T8843] vivid-001: RDS Music: false inactive [ 332.135241][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.152150][ T8843] vivid-001: ================== END STATUS ================== [ 332.179201][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.196863][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.210714][ T5948] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.226156][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.239697][ T8856] Cannot find add_set index 0 as target [ 332.246952][ T5949] kernel write not supported for file /sg0 (pid: 5949 comm: kworker/1:5) [ 332.256387][ T5962] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 332.294329][ T5948] usb 2-1: config 0 descriptor?? [ 332.354590][ T8833] netlink: zone id is out of range [ 332.424045][ T8839] netlink: del zone limit has 4 unknown bytes [ 332.438017][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.455297][ T8833] netlink: set zone limit has 4 unknown bytes [ 332.456165][ T5962] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.486973][ T5962] usb 4-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00 [ 332.492713][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.700'. [ 332.510902][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=230, SerialNumber=160 [ 332.531053][ T5962] usb 4-1: Product: syz [ 332.536833][ T5962] usb 4-1: SerialNumber: syz [ 332.563999][ T5962] cdc_ncm 4-1:1.0: skipping garbage [ 332.571181][ T5962] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 332.581338][ T5962] cdc_ncm 4-1:1.0: bind() failure [ 332.625815][ T5962] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 332.632957][ T5962] cdc_ncm 4-1:1.1: bind() failure [ 332.753535][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 332.755215][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.782267][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.814978][ T5962] usb 4-1: USB disconnect, device number 29 [ 332.853793][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x2 [ 332.879985][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 332.910678][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 332.936419][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 332.949078][ T10] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 332.963315][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 332.971598][ T10] usb 6-1: config 0 has no interface number 0 [ 332.992769][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 333.000074][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 333.029627][ T10] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=87.58 [ 333.047982][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 333.059096][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.074266][ T10] usb 6-1: Product: syz [ 333.083034][ T10] usb 6-1: Manufacturer: syz [ 333.087721][ T10] usb 6-1: SerialNumber: syz [ 333.091498][ T5948] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 333.102330][ T10] usb 6-1: config 0 descriptor?? [ 333.115036][ T10] sierra 6-1:0.70: Sierra USB modem converter detected [ 333.162956][ T5948] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input12 [ 333.215578][ T5948] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 333.266251][ T5948] usb 2-1: USB disconnect, device number 19 [ 333.326844][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.409117][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.470766][ T8881] cgroup: Invalid name [ 333.490792][ T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 333.562964][ T10] usb 6-1: USB disconnect, device number 8 [ 333.585410][ T8877] fido_id[8877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 333.592813][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 333.693275][ T5962] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 333.921811][ T5962] usb 3-1: device descriptor read/64, error -71 [ 334.205737][ T10] sierra 6-1:0.70: device disconnected [ 334.301643][ T5962] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 334.357079][ T8889] fuse: Bad value for 'user_id' [ 334.420457][ T8889] fuse: Bad value for 'user_id' [ 334.471907][ T5962] usb 3-1: device descriptor read/64, error -71 [ 334.605052][ T5962] usb usb3-port1: attempt power cycle [ 334.722066][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 334.911501][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 335.004257][ T5962] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 335.032699][ T5962] usb 3-1: device descriptor read/8, error -71 [ 335.285259][ T5962] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 335.298309][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.309733][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.319932][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.322396][ T5962] usb 3-1: device descriptor read/8, error -71 [ 335.329959][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.330023][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.330050][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.431586][ T5899] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 335.512543][ T5962] usb usb3-port1: unable to enumerate USB device [ 335.536176][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 335.549600][ T10] usbtmc 4-1:16.0: can't read capabilities [ 335.582715][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 335.630897][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.644503][ T5899] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 335.653864][ T5899] usb 1-1: can't read configurations, error -61 [ 335.954211][ T8904] orangefs_mount: mount request failed with -4 [ 336.032091][ T5899] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 336.201756][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.212903][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.229151][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.239731][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.250708][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.261813][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.271804][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.272648][ T8917] netlink: 'syz.3.708': attribute type 7 has an invalid length. [ 336.281010][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.299217][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.310345][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.321979][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.331122][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.345353][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.356645][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.367872][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.379492][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 336.410197][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 336.471675][ T8917] netlink: 'syz.3.708': attribute type 3 has an invalid length. [ 336.479498][ T8917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.708'. [ 336.759236][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.782258][ T5899] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 336.790069][ T5899] usb 1-1: can't read configurations, error -61 [ 336.821043][ T5899] usb usb1-port1: attempt power cycle [ 336.925670][ T10] usb 4-1: USB disconnect, device number 30 [ 336.997756][ T8920] syzkaller1: entered promiscuous mode [ 337.004296][ T8920] syzkaller1: entered allmulticast mode [ 337.111636][ T5912] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 337.211601][ T5899] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 337.288676][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 337.304783][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.411746][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 338.066599][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.094608][ T5912] usb 3-1: config 4 interface 0 has no altsetting 0 [ 338.110158][ T5899] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 338.136240][ T5899] usb 1-1: can't read configurations, error -71 [ 338.156022][ T5912] usb 3-1: string descriptor 0 read error: -22 [ 338.192733][ T5912] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 338.414100][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.435750][ T5912] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 338.449366][ T8936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.766990][ T5912] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 338.800198][ T5912] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 338.823869][ T5912] usb 3-1: media controller created [ 338.950608][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.971806][ T5899] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 338.990713][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.721'. [ 339.007419][ T5899] usb 1-1: device descriptor read/8, error -71 [ 339.048002][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.721'. [ 339.142387][ T5899] usb usb1-port1: unable to enumerate USB device [ 339.225581][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.724'. [ 339.271325][ T5912] usb 3-1: USB disconnect, device number 29 [ 340.242412][ T5899] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 340.310355][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 340.319794][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 340.329639][ T8959] netlink: 'syz.3.726': attribute type 4 has an invalid length. [ 340.741709][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short [ 340.762804][ T5899] usb 6-1: config 4 has an invalid interface number: 210 but max is 0 [ 340.771233][ T5899] usb 6-1: config 4 has no interface number 0 [ 341.029695][ T5899] usb 6-1: config 4 interface 210 has no altsetting 0 [ 341.040796][ T5899] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=6e.27 [ 341.050461][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.059325][ T5899] usb 6-1: Product: syz [ 341.063858][ T5899] usb 6-1: Manufacturer: syz [ 341.069021][ T5899] usb 6-1: SerialNumber: syz [ 341.152309][ T5912] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 341.734023][ T5899] usb 6-1: USB disconnect, device number 9 [ 341.749244][ T5912] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 341.774674][ T5912] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 341.799197][ T5912] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 341.814008][ T5912] usb 3-1: config 0 has no interface number 0 [ 341.820251][ T5912] usb 3-1: config 0 has no interface number 1 [ 341.829675][ T5912] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 341.845279][ T5912] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.895957][ T5912] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 341.935053][ T5912] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 341.946126][ T5912] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 341.965688][ T5912] usb 3-1: config 0 interface 66 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 216 [ 341.980566][ T5912] usb 3-1: config 0 interface 66 has no altsetting 0 [ 342.004337][ T5912] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 342.016027][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 342.056431][ T8981] netlink: 'syz.1.733': attribute type 10 has an invalid length. [ 342.201204][ T8983] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 342.209143][ T8983] VFS: Can't find a romfs filesystem on dev nullb0. [ 342.209143][ T8983] [ 342.241613][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 342.250897][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.272829][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.288577][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.292252][ T5912] usb 3-1: Product: syz [ 342.313777][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.328123][ T5912] usb 3-1: Manufacturer: syz [ 342.328139][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.334212][ T5912] usb 3-1: SerialNumber: syz [ 342.372308][ T5912] usb 3-1: config 0 descriptor?? [ 342.401240][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.411849][ T5948] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 342.425189][ T5912] ljca 3-1:0.84: bulk endpoints not found [ 342.529167][ T1210] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 343.043027][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.081596][ T5948] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 343.166017][ T1210] usb 1-1: Using ep0 maxpacket: 16 [ 343.738182][ T5912] ljca 3-1:0.66: bulk endpoints not found [ 343.749493][ T5948] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 343.773692][ T5912] usb 3-1: USB disconnect, device number 30 [ 343.790879][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.811849][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.878053][ T5948] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 343.891986][ T1210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.902467][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.912208][ T1210] usb 1-1: Product: syz [ 343.916462][ T1210] usb 1-1: Manufacturer: syz [ 343.921103][ T1210] usb 1-1: SerialNumber: syz [ 343.975131][ T5948] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 344.037782][ T5948] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.061636][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 344.077619][ T24] usbtmc 4-1:16.0: can't read capabilities [ 344.117392][ T5948] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 344.142426][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.156033][ T5948] usb 2-1: Product: syz [ 344.160261][ T5948] usb 2-1: Manufacturer: syz [ 344.171176][ T5948] usb 2-1: SerialNumber: syz [ 344.240953][ T5948] usb 2-1: config 0 descriptor?? [ 344.357871][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.367084][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.378170][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.387962][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.398163][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.409785][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.422267][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.432050][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.441404][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.450737][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.460545][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.462948][ T8994] netlink: 'syz.3.731': attribute type 7 has an invalid length. [ 344.470002][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.486740][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.495929][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.513014][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.526609][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.660252][ T8981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.014284][ T8994] netlink: 'syz.3.731': attribute type 3 has an invalid length. [ 345.024565][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.731'. [ 345.130913][ T10] usb 4-1: USB disconnect, device number 31 [ 345.200881][ T5948] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 345.226168][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 345.253392][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 345.277246][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 345.294482][ T5948] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 345.318568][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 345.329299][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.5.737'. [ 345.340016][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.5.737'. [ 345.351557][ T5949] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 345.368764][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 345.390208][ T5948] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 345.415628][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 345.442087][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 345.466195][ T5948] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 345.488073][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 345.517194][ T5948] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 345.534398][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 345.579762][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.600931][ T5948] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 345.652669][ T5949] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.682960][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.687753][ T9008] xt_TCPMSS: Only works on TCP SYN packets [ 345.691101][ T5949] usb 3-1: Product: syz [ 345.691124][ T5949] usb 3-1: Manufacturer: syz [ 345.691142][ T5949] usb 3-1: SerialNumber: syz [ 346.169492][ T5948] usb 2-1: USB disconnect, device number 20 [ 346.268240][ T5948] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 346.279033][ T5949] usb 3-1: config 0 descriptor?? [ 346.307143][ T8997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 346.329765][ T5949] gs_usb 3-1:0.0: Required endpoints not found [ 346.339828][ T5948] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 346.388013][ T5948] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 346.415545][ T5948] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 346.448351][ T5948] keyspan 2-1:0.0: device disconnected [ 347.896652][ T10] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 347.919957][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 347.944824][ T5912] usb 1-1: USB disconnect, device number 40 [ 348.612124][ T9041] 9pnet_fd: Insufficient options for proto=fd [ 349.182352][ T9051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.750'. [ 349.733243][ T9051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.750'. [ 350.661729][ T1210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 351.257507][ T9073] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 351.321701][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 351.346769][ T1210] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.368359][ T5949] usb 3-1: USB disconnect, device number 31 [ 351.378861][ T1210] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.449585][ T1210] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.474393][ T1210] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.539473][ T1210] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.582068][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.672208][ T9082] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 351.681857][ T9082] VFS: Can't find a romfs filesystem on dev nullb0. [ 351.681857][ T9082] [ 351.877956][ T1210] usb 6-1: GET_CAPABILITIES returned 0 [ 351.881584][ T5948] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 351.894991][ T1210] usbtmc 6-1:16.0: can't read capabilities [ 352.001543][ T5949] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 352.035821][ T5963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.177134][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 352.192208][ T5948] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 352.250088][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.260820][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.271100][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.280718][ T5948] usb 4-1: config 0 has no interface number 0 [ 352.289589][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.298904][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.299223][ T5948] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 352.314402][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.328332][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.337451][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.347249][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.357014][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.366435][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.376064][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.385734][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.396690][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.409169][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.419038][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 352.530920][ T9084] netlink: 'syz.5.751': attribute type 7 has an invalid length. [ 352.539053][ T9084] netlink: 'syz.5.751': attribute type 3 has an invalid length. [ 352.548610][ T9084] netlink: 224 bytes leftover after parsing attributes in process `syz.5.751'. [ 352.557924][ T5948] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.617884][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.712687][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.003473][ T5949] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.021771][ T5948] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 353.034188][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.043110][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.073834][ T5963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.089714][ T5948] usb 4-1: Product: syz [ 353.133997][ T30] audit: type=1326 audit(1755440471.565:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9086 comm="syz.0.761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd83dd8ebe9 code=0x0 [ 353.161825][ T5949] usb 2-1: Product: syz [ 353.166330][ T5948] usb 4-1: Manufacturer: syz [ 353.176337][ T5949] usb 2-1: Manufacturer: syz [ 353.185514][ T5948] usb 4-1: SerialNumber: syz [ 353.195633][ T5949] usb 2-1: SerialNumber: syz [ 353.230749][ T1210] usb 6-1: USB disconnect, device number 10 [ 353.238935][ T5948] usb 4-1: config 0 descriptor?? [ 353.329403][ T9081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 353.350636][ T5948] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 353.382650][ T5948] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 353.488604][ T5963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.880490][ T5963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.046105][ T9094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'. [ 354.079369][ T9094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'. [ 354.121832][ T5912] usb 4-1: USB disconnect, device number 33 [ 354.206594][ T9094] gretap0: entered promiscuous mode [ 354.212621][ T5912] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 354.224870][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.225852][ T9094] batadv_slave_1: entered promiscuous mode [ 354.246112][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.260550][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.272150][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.280584][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.324436][ T5912] cyberjack 4-1:0.69: device disconnected [ 354.454296][ T5949] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 354.644041][ T9097] lo speed is unknown, defaulting to 1000 [ 354.754517][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 354.769825][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 354.818173][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.852485][ T5949] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.866182][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.887605][ T5949] usb 1-1: Product: syz [ 354.895395][ T5949] usb 1-1: Manufacturer: syz [ 354.919853][ T5949] usb 1-1: SerialNumber: syz [ 354.969237][ T5949] usb 1-1: config 0 descriptor?? [ 355.018020][ T5949] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.069385][ T5949] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 355.073686][ T5963] bridge_slave_1: left allmulticast mode [ 355.088322][ T5963] bridge_slave_1: left promiscuous mode [ 355.101545][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.131610][ T5963] bridge_slave_0: left allmulticast mode [ 355.137377][ T5963] bridge_slave_0: left promiscuous mode [ 355.144139][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.189517][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 355.733275][ T24] usb 4-1: device descriptor read/64, error -71 [ 355.942490][ T5949] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 355.960032][ T5949] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 355.971727][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 356.131660][ T24] usb 4-1: device descriptor read/64, error -71 [ 356.264726][ T24] usb usb4-port1: attempt power cycle [ 356.279265][ T10] usb 2-1: USB disconnect, device number 21 [ 356.437877][ T5851] Bluetooth: hci1: command tx timeout [ 356.741284][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 356.791785][ T5949] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 356.898592][ T5949] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 356.927717][ T24] usb 4-1: device descriptor read/8, error -71 [ 357.200119][ T5949] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 357.207132][ T5949] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 357.262050][ T5949] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 357.352197][ T5949] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 357.362313][ T5949] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 357.373402][ T5949] usb 1-1: USB disconnect, device number 41 [ 357.498883][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 357.576550][ T24] usb 4-1: device descriptor read/8, error -71 [ 357.692195][ T24] usb usb4-port1: unable to enumerate USB device [ 357.966705][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 358.501649][ T5851] Bluetooth: hci1: command tx timeout [ 358.811968][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 358.895265][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.062462][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 359.102271][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.174027][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.191599][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.201953][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 359.213167][ T5963] bond0 (unregistering): Released all slaves [ 359.221636][ T5842] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 359.222102][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.263481][ T24] usb 2-1: config 0 descriptor?? [ 359.293196][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 359.409309][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 359.441568][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.479492][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.555609][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.583571][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.649031][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.694795][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.911259][ T5948] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 359.988074][ T5842] usb 4-1: GET_CAPABILITIES returned 0 [ 360.013733][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 360.092349][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 360.126496][ T5948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.162062][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 360.169350][ T5948] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.210588][ T5948] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 360.264433][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 360.306967][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.316398][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.326500][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.336609][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.346361][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.356018][ T5948] usb 1-1: Product: syz [ 360.356142][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.360401][ T5948] usb 1-1: Manufacturer: syz [ 360.373640][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.383462][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.392574][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.403073][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.412978][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.422760][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.433164][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.444198][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.454882][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.465074][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 360.571651][ T5851] Bluetooth: hci1: command tx timeout [ 360.604116][ T5948] usb 1-1: SerialNumber: syz [ 360.762895][ T9156] netlink: 'syz.3.772': attribute type 7 has an invalid length. [ 360.771257][ T9156] netlink: 'syz.3.772': attribute type 3 has an invalid length. [ 360.779385][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.3.772'. [ 361.306338][ T5949] usb 2-1: USB disconnect, device number 22 [ 361.318125][ T5948] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 361.543417][ T5963] hsr_slave_0: left promiscuous mode [ 361.586885][ T5963] hsr_slave_1: left promiscuous mode [ 361.595854][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 361.628220][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.637085][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 361.656174][ T5949] usb 4-1: USB disconnect, device number 38 [ 361.744057][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.763572][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.771282][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.791863][ T5948] usb 1-1: USB disconnect, device number 42 [ 361.832803][ T5948] appletouch 1-1:1.0: input: appletouch disconnected [ 361.887822][ T5963] veth1_macvtap: left promiscuous mode [ 361.895179][ T5963] veth0_macvtap: left promiscuous mode [ 361.904237][ T5963] veth1_vlan: left promiscuous mode [ 361.910079][ T5963] veth0_vlan: left promiscuous mode [ 362.654099][ T5851] Bluetooth: hci1: command tx timeout [ 363.852282][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 363.919585][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 364.595187][ T9160] batadv0: entered promiscuous mode [ 364.632949][ T9160] batadv_slave_1: entered promiscuous mode [ 364.638955][ T9160] batadv_slave_1: left promiscuous mode [ 364.648523][ T9160] batadv0: left promiscuous mode [ 365.202028][ T9192] evm: overlay not supported [ 365.249338][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.277728][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.285375][ T9097] bridge_slave_0: entered allmulticast mode [ 365.295570][ T9097] bridge_slave_0: entered promiscuous mode [ 365.314492][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.321827][ T9193] netlink: 'syz.5.784': attribute type 10 has an invalid length. [ 365.325039][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.340112][ T9097] bridge_slave_1: entered allmulticast mode [ 365.350612][ T9097] bridge_slave_1: entered promiscuous mode [ 365.358803][ T5842] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 365.561750][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 365.574977][ T5842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.584588][ T5842] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 365.593313][ T5842] usb 1-1: can't read configurations, error -71 [ 366.211506][ T24] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 366.233108][ T9197] SET target dimension over the limit! [ 366.372124][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 366.385317][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.469502][ T24] usb 4-1: config 0 descriptor?? [ 366.723458][ T24] usb 4-1: string descriptor 0 read error: -71 [ 367.156935][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 367.188005][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 367.213428][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.267626][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.302774][ T24] usb 4-1: USB disconnect, device number 39 [ 367.528819][ T9097] team0: Port device team_slave_0 added [ 367.550427][ T9097] team0: Port device team_slave_1 added [ 367.997950][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.005085][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.031463][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.045127][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.054480][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.081108][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.087919][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.129687][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 368.166903][ T5842] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 368.185847][ T9216] netlink: 'syz.5.793': attribute type 5 has an invalid length. [ 368.352993][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 368.374384][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.521985][ T9213] lo speed is unknown, defaulting to 1000 [ 368.630651][ T30] audit: type=1800 audit(1755440486.885:43): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.792" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 368.744424][ T9216] : entered promiscuous mode [ 368.789707][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.799888][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.810122][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.823513][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.842127][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.077240][ T5842] usb 2-1: GET_CAPABILITIES returned 0 [ 369.098143][ T5842] usbtmc 2-1:16.0: can't read capabilities [ 369.208291][ T9224] input: syz0 as /devices/virtual/input/input14 [ 369.326095][ T9097] hsr_slave_0: entered promiscuous mode [ 369.348400][ T9097] hsr_slave_1: entered promiscuous mode [ 369.367907][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.414840][ T9097] Cannot create hsr debugfs directory [ 369.567632][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.661480][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.673245][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.684371][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.697896][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.709966][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.719138][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.729294][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.738351][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.747404][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.756541][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.765739][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.935115][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.946524][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.957495][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.968392][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 370.743111][ T9229] netlink: 'syz.1.791': attribute type 7 has an invalid length. [ 370.781622][ T9229] netlink: 'syz.1.791': attribute type 3 has an invalid length. [ 370.792250][ T9229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.791'. [ 370.861850][ T9233] slcan: can't register candev [ 370.867330][ T9233] Falling back ldisc for ttyS3. [ 371.232109][ T9238] overlayfs: conflicting options: nfs_export=on,index=off [ 371.348294][ T9241] binder: 9240:9241 ioctl c06864a1 200000000440 returned -22 [ 371.359070][ T9241] binder: 9240:9241 ioctl f501 0 returned -22 [ 371.369230][ T9241] binder_alloc: 9240: pid 9240 spamming oneway? 1 buffers allocated for a total size of 4096 [ 371.383200][ T9241] binder_alloc: 9240: pid 9240 spamming oneway? 2 buffers allocated for a total size of 5120 [ 371.398849][ T5962] usb 2-1: USB disconnect, device number 23 [ 371.408949][ T9241] netlink: 56 bytes leftover after parsing attributes in process `syz.3.800'. [ 372.573580][ T9097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.698604][ T9097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.760513][ T9097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.860896][ T5851] Bluetooth: hci3: Malformed LE Event: 0x02 [ 372.879046][ T9097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.933612][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.941147][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.076570][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.084757][ T9276] batadv_slave_0: entered promiscuous mode [ 373.120476][ T994] Bluetooth: hci6: Frame reassembly failed (-84) [ 373.135633][ T9281] bridge_slave_1: left allmulticast mode [ 373.162613][ T9281] bridge_slave_1: left promiscuous mode [ 373.189122][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 373.203895][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.265205][ T9281] bridge_slave_0: left allmulticast mode [ 373.271283][ T9281] bridge_slave_0: left promiscuous mode [ 373.283587][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.481616][ T5949] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 373.668843][ T5949] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 374.039913][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.557602][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.580902][ T5949] usb 6-1: Product: syz [ 374.649466][ T5949] usb 6-1: Manufacturer: syz [ 374.778678][ T5949] usb 6-1: SerialNumber: syz [ 374.810062][ T5949] usb 6-1: config 0 descriptor?? [ 374.851203][ T5949] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 374.870133][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.923336][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.931000][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.014001][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.021305][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.137069][ T5851] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 376.172802][ T9320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.314573][ T5949] usb 6-1: USB disconnect, device number 11 [ 376.351445][ T9324] FAULT_INJECTION: forcing a failure. [ 376.351445][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 376.369009][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.0.816 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 376.369037][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.369048][ T9324] Call Trace: [ 376.369057][ T9324] [ 376.369066][ T9324] dump_stack_lvl+0x189/0x250 [ 376.369093][ T9324] ? __pfx____ratelimit+0x10/0x10 [ 376.369116][ T9324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.369139][ T9324] ? __pfx__printk+0x10/0x10 [ 376.369180][ T9324] should_fail_ex+0x414/0x560 [ 376.369216][ T9324] _copy_from_user+0x2d/0xb0 [ 376.369245][ T9324] alg_setkey+0xb8/0x190 [ 376.369271][ T9324] alg_setsockopt+0x3da/0x4a0 [ 376.369291][ T9324] ? __pfx_alg_setsockopt+0x10/0x10 [ 376.369312][ T9324] do_sock_setsockopt+0x179/0x1b0 [ 376.369347][ T9324] __x64_sys_setsockopt+0x13f/0x1b0 [ 376.369381][ T9324] do_syscall_64+0xfa/0x3b0 [ 376.369404][ T9324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.369423][ T9324] ? asm_sysvec_call_function_single+0x1a/0x20 [ 376.369442][ T9324] ? clear_bhb_loop+0x60/0xb0 [ 376.369467][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.369485][ T9324] RIP: 0033:0x7fd83dd8ebe9 [ 376.369505][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.369521][ T9324] RSP: 002b:00007fd83eb48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.369543][ T9324] RAX: ffffffffffffffda RBX: 00007fd83dfb6090 RCX: 00007fd83dd8ebe9 [ 376.369557][ T9324] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000006 [ 376.369569][ T9324] RBP: 00007fd83eb48090 R08: 0000000000000000 R09: 0000000000000000 [ 376.369581][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.369592][ T9324] R13: 00007fd83dfb6128 R14: 00007fd83dfb6090 R15: 00007ffeeaa2b1b8 [ 376.369626][ T9324] [ 378.094092][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 378.736277][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.744936][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.291625][ T5949] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 379.488511][ T5949] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 379.501108][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.534380][ T9339] lo speed is unknown, defaulting to 1000 [ 379.759716][ T5949] usb 1-1: config 0 descriptor?? [ 379.780030][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.036004][ T5949] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 380.262639][ T5949] [drm:udl_init] *ERROR* Selecting channel failed [ 381.097872][ T5949] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 381.407087][ T5949] [drm] Initialized udl on minor 2 [ 381.587859][ T5949] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.606812][ T5949] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 381.625135][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.661745][ T5949] usb 1-1: USB disconnect, device number 45 [ 381.670633][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 382.946367][ T9097] veth0_vlan: entered promiscuous mode [ 383.000878][ T9389] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 383.038872][ T9097] veth1_vlan: entered promiscuous mode [ 383.143409][ T9389] VFS: Can't find a romfs filesystem on dev nullb0. [ 383.143409][ T9389] [ 383.276119][ T9097] veth0_macvtap: entered promiscuous mode [ 383.307033][ T9097] veth1_macvtap: entered promiscuous mode [ 383.377404][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.411042][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.456548][ T9097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.465596][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 383.489326][ T9097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.507994][ T9097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.528541][ T9097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.542454][ T9400] netlink: 116 bytes leftover after parsing attributes in process `syz.3.831'. [ 383.632648][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 383.650889][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.671688][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.687354][ T9402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.833'. [ 383.716757][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.728953][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.739020][ T24] usb 6-1: Product: syz [ 383.744695][ T24] usb 6-1: Manufacturer: syz [ 383.757261][ T24] usb 6-1: SerialNumber: syz [ 383.763746][ T9403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.833'. [ 383.911559][ T5842] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 384.067490][ T8281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.116756][ T8281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.178900][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.197960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.233042][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.267954][ T5842] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.351445][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.454273][ T5842] usb 2-1: config 0 descriptor?? [ 384.647868][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 384.660371][ T5842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 384.677428][ T5842] usb 2-1: USB disconnect, device number 24 [ 385.875622][ T5842] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 386.071729][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 386.162389][ T5842] usb 1-1: config 2 has an invalid interface number: 21 but max is 0 [ 386.230642][ T5842] usb 1-1: config 2 has no interface number 0 [ 386.288332][ T5842] usb 1-1: config 2 interface 21 has no altsetting 0 [ 386.332986][ T9428] netlink: 96 bytes leftover after parsing attributes in process `syz.1.837'. [ 386.365563][ T5842] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=31.1e [ 386.379267][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.417840][ T5842] usb 1-1: Product: syz [ 386.447444][ T5842] usb 1-1: Manufacturer: syz [ 386.460326][ T5842] usb 1-1: SerialNumber: syz [ 386.471931][ T5949] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 386.581853][ T980] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 386.648329][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.683343][ T5949] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 386.741513][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.761543][ T5842] quatech2 1-1:2.21: Quatech 2nd gen USB to Serial Driver converter detected [ 386.795988][ T5842] usb 1-1: qt2_attach - failed to power on unit: -71 [ 386.803045][ T980] usb 7-1: device descriptor read/64, error -71 [ 386.804217][ T5949] usb 4-1: config 0 descriptor?? [ 386.857710][ T5842] quatech2 1-1:2.21: probe with driver quatech2 failed with error -71 [ 386.911599][ T5842] usb 1-1: USB disconnect, device number 46 [ 387.053431][ T980] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 387.214466][ T980] usb 7-1: device descriptor read/64, error -71 [ 387.370129][ T980] usb usb7-port1: attempt power cycle [ 387.735272][ T5949] lenovo 0003:17EF:60A3.000C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 387.778516][ T24] usb 6-1: USB disconnect, device number 12 [ 387.791547][ T5842] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 387.826780][ T5949] usb 4-1: USB disconnect, device number 40 [ 387.833093][ T980] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 387.901192][ T980] usb 7-1: device descriptor read/8, error -71 [ 387.961541][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 387.994808][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.001053][ T9442] fido_id[9442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 388.018260][ T5842] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 388.056862][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.113841][ T5842] usb 1-1: config 0 descriptor?? [ 388.135550][ T5842] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 388.226221][ T980] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 388.272819][ T980] usb 7-1: device descriptor read/8, error -71 [ 388.413646][ T980] usb usb7-port1: unable to enumerate USB device [ 388.473869][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.525079][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.587672][ T5191] bcm5974 1-1:0.0: could not read from device [ 388.623852][ T5842] usb 1-1: USB disconnect, device number 47 [ 388.976685][ T980] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 389.167765][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 389.204301][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.256704][ T980] usb 4-1: config 0 has no interfaces? [ 390.358127][ T980] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.544390][ T980] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.663667][ T980] usb 4-1: Product: syz [ 390.668138][ T980] usb 4-1: Manufacturer: syz [ 390.689334][ T980] usb 4-1: SerialNumber: syz [ 390.726233][ T980] usb 4-1: config 0 descriptor?? [ 390.898051][ T31] INFO: task syz.4.414:7670 blocked for more than 144 seconds. [ 391.051580][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 391.081506][ T31] Not tainted 6.16.0-syzkaller #0 [ 391.108352][ T980] usb 4-1: USB disconnect, device number 41 [ 391.210413][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.255887][ T31] task:syz.4.414 state:D stack:25352 pid:7670 tgid:7664 ppid:5847 task_flags:0x400740 flags:0x00004006 [ 391.270839][ T31] Call Trace: [ 391.274482][ T31] [ 391.277488][ T31] __schedule+0x16aa/0x4c90 [ 391.282985][ T31] ? schedule+0x165/0x360 [ 391.287375][ T31] ? __pfx___schedule+0x10/0x10 [ 391.311833][ T31] ? schedule+0x91/0x360 [ 391.316491][ T31] schedule+0x165/0x360 [ 391.320669][ T31] schedule_timeout+0x9a/0x270 [ 391.334166][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 391.341540][ T5842] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 391.359809][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.390705][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.404477][ T31] __wait_for_common+0x3da/0x710 [ 391.445992][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 391.451324][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 391.486485][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 391.494647][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.505740][ T31] wait_for_completion_state+0x1c/0x40 [ 391.514859][ T31] do_coredump+0x831/0x3440 [ 391.519474][ T31] ? kernel_text_address+0xa5/0xe0 [ 391.521467][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 391.527588][ T31] ? __pfx_do_coredump+0x10/0x10 [ 391.535415][ T31] ? arch_stack_walk+0xfc/0x150 [ 391.540347][ T31] ? stack_trace_save+0x9c/0xe0 [ 391.540367][ T5842] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 391.540395][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.545402][ T31] ? kasan_save_track+0x4f/0x80 [ 391.545438][ T31] ? kasan_save_track+0x3e/0x80 [ 391.545463][ T31] ? kasan_save_free_info+0x46/0x50 [ 391.586194][ T31] ? __kasan_slab_free+0x62/0x70 [ 391.594924][ T31] ? kmem_cache_free+0x18f/0x400 [ 391.600172][ T31] ? get_signal+0xa2b/0x1310 [ 391.610284][ T31] ? arch_do_signal_or_restart+0x9a/0x750 [ 391.610495][ T5842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.634530][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.635871][ T31] ? exit_to_user_mode_loop+0x75/0x110 [ 391.649018][ T31] ? do_syscall_64+0x2bd/0x3b0 [ 391.652434][ T5842] usb 1-1: Product: syz [ 391.658585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.660492][ T5842] usb 1-1: Manufacturer: syz [ 391.665655][ T31] ? proc_coredump_connector+0x172/0x4b0 [ 391.680135][ T5842] usb 1-1: SerialNumber: syz [ 391.681095][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 391.691304][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.703052][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.710656][ T31] get_signal+0x10d9/0x1310 [ 391.716922][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 391.728286][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.735100][ T31] ? __might_fault+0xb0/0x130 [ 391.740089][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 391.746367][ T31] exit_to_user_mode_loop+0x75/0x110 [ 391.752204][ T31] do_syscall_64+0x2bd/0x3b0 [ 391.756836][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.762894][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.769030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.774571][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.780514][ T31] RIP: 0033:0x7fb8fd84f920 [ 391.785457][ T31] RSP: 002b:00007fb8fe776a78 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 391.797573][ T31] RAX: 0000000000000000 RBX: 00007fb8fdbb6090 RCX: 00007fb8fd98ebe9 [ 391.807653][ T31] RDX: 00007fb8fe776a80 RSI: 00007fb8fe776bb0 RDI: 000000000000000b [ 391.819582][ T31] RBP: 00007fb8fda11e19 R08: 0000000000000000 R09: 0000000000000000 [ 391.830419][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.838851][ T31] R13: 00007fb8fdbb6128 R14: 00007fb8fdbb6090 R15: 00007ffc83e804d8 [ 391.847479][ T31] [ 391.850722][ T31] [ 391.850722][ T31] Showing all locks held in the system: [ 391.859609][ T31] 1 lock held by khungtaskd/31: [ 391.865454][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.876852][ T31] 2 locks held by getty/5595: [ 391.883869][ T31] #0: ffff88814c95f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.898385][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 391.911663][ T31] 5 locks held by kworker/0:3/5842: [ 391.916972][ T31] #0: ffff88802128d148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 391.934467][ T31] #1: ffffc9000427fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 391.952631][ T31] #2: ffff8880283f4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 391.965919][ T31] #3: ffff888077601198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 391.977683][ T31] #4: ffff888021696278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 391.995916][ T31] 3 locks held by kworker/u9:9/5852: [ 392.002533][ T31] #0: ffff888074293148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.019534][ T31] #1: ffffc9000435fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.034383][ T31] #2: ffff88807461cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 392.044626][ T31] 4 locks held by udevd/5898: [ 392.049382][ T31] #0: ffff888063463540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 392.058483][ T31] #1: ffff8880213a7488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 392.068251][ T31] #2: ffff88805a08a2d8 (kn->active#22){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 392.078093][ T31] #3: ffff888077601198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 392.087797][ T31] 1 lock held by syz.3.830/9388: [ 392.096219][ T31] [ 392.098679][ T31] ============================================= [ 392.098679][ T31] [ 392.123518][ T31] NMI backtrace for cpu 0 [ 392.123543][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 392.123566][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.123578][ T31] Call Trace: [ 392.123592][ T31] [ 392.123602][ T31] dump_stack_lvl+0x189/0x250 [ 392.123629][ T31] ? __wake_up_klogd+0xd9/0x110 [ 392.123658][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.123681][ T31] ? __pfx__printk+0x10/0x10 [ 392.123722][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.123755][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.123782][ T31] ? _printk+0xcf/0x120 [ 392.123813][ T31] ? __pfx__printk+0x10/0x10 [ 392.123840][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.123873][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.123905][ T31] watchdog+0xfee/0x1030 [ 392.123938][ T31] ? watchdog+0x1de/0x1030 [ 392.123976][ T31] kthread+0x70e/0x8a0 [ 392.124007][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.124033][ T31] ? __pfx_kthread+0x10/0x10 [ 392.124062][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.124081][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.124100][ T31] ? __pfx_kthread+0x10/0x10 [ 392.124128][ T31] ret_from_fork+0x3fc/0x770 [ 392.124152][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.124179][ T31] ? __switch_to_asm+0x39/0x70 [ 392.124202][ T31] ? __switch_to_asm+0x33/0x70 [ 392.124225][ T31] ? __pfx_kthread+0x10/0x10 [ 392.124252][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.124301][ T31] [ 392.124338][ T31] Sending NMI from CPU 0 to CPUs 1: [ 392.285210][ C1] NMI backtrace for cpu 1 [ 392.285227][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 392.285245][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.285255][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 392.285282][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 62 cc 7e 03 66 [ 392.285296][ C1] RSP: 0018:ffffc90000a08e50 EFLAGS: 00000046 [ 392.285314][ C1] RAX: 0000000000020cb3 RBX: ffff8880b8723900 RCX: 0000000000000838 [ 392.285327][ C1] RDX: 0000000000000000 RSI: 0000000000020cb3 RDI: 0000000000000838 [ 392.285337][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aec6ee [ 392.285355][ C1] R10: 0000000000000003 R11: ffffffff81702490 R12: 0000000010000863 [ 392.285366][ C1] R13: dffffc0000000000 R14: 0000000000020cb3 R15: 0000000000000020 [ 392.285378][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 392.285392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.285403][ C1] CR2: 00007fd83eb66fd8 CR3: 0000000079b06000 CR4: 00000000003526f0 [ 392.285420][ C1] Call Trace: [ 392.285426][ C1] [ 392.285432][ C1] lapic_next_event+0x11/0x20 [ 392.285451][ C1] clockevents_program_event+0x1cc/0x360 [ 392.285478][ C1] hrtimer_interrupt+0x620/0xaa0 [ 392.285507][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 392.285526][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 392.285543][ C1] [ 392.285548][ C1] [ 392.285554][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.285571][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 392.285587][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 392.285602][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 392.285615][ C1] RAX: dd437f399c6b2100 RBX: ffffffff81976918 RCX: dd437f399c6b2100 [ 392.285626][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 392.285637][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 392.285648][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 392.285660][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 392.285672][ C1] ? do_idle+0x1e8/0x510 [ 392.285695][ C1] default_idle+0x13/0x20 [ 392.285712][ C1] default_idle_call+0x74/0xb0 [ 392.285731][ C1] do_idle+0x1e8/0x510 [ 392.285752][ C1] ? __pfx_do_idle+0x10/0x10 [ 392.285767][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.285791][ C1] cpu_startup_entry+0x44/0x60 [ 392.285808][ C1] start_secondary+0x101/0x110 [ 392.285829][ C1] common_startup_64+0x13e/0x147 [ 392.285855][ C1] [ 392.587164][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.594173][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 392.604013][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.614196][ T31] Call Trace: [ 392.617522][ T31] [ 392.620671][ T31] dump_stack_lvl+0x99/0x250 [ 392.625306][ T31] ? __asan_memcpy+0x40/0x70 [ 392.629933][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.635168][ T31] ? __pfx__printk+0x10/0x10 [ 392.639826][ T31] panic+0x2db/0x790 [ 392.643848][ T31] ? __pfx_panic+0x10/0x10 [ 392.648309][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 392.653204][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 392.659234][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.664830][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 392.671192][ T31] watchdog+0x102d/0x1030 [ 392.675681][ T31] ? watchdog+0x1de/0x1030 [ 392.680149][ T31] kthread+0x70e/0x8a0 [ 392.684353][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.689079][ T31] ? __pfx_kthread+0x10/0x10 [ 392.693719][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.698976][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.704227][ T31] ? __pfx_kthread+0x10/0x10 [ 392.708913][ T31] ret_from_fork+0x3fc/0x770 [ 392.713552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.718713][ T31] ? __switch_to_asm+0x39/0x70 [ 392.723517][ T31] ? __switch_to_asm+0x33/0x70 [ 392.728330][ T31] ? __pfx_kthread+0x10/0x10 [ 392.732968][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.737793][ T31] [ 392.741215][ T31] Kernel Offset: disabled [ 392.745546][ T31] Rebooting in 86400 seconds..