last executing test programs: 9m13.321572886s ago: executing program 2 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000500)="b9ff0700600d69ccb89e14ca5d001f000c0cefe72bc715aa325dfad7fe4d05bf168c68bbada91aae0e400063e934a0a662079f4b4d2f87e5feca6a", 0x0, 0x101, 0x60000000, 0xff9d, 0xf3, &(0x7f0000000000), &(0x7f0000000580)="8dc92a8ff39080a675b65601fa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f58babd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c39ab72e18d9b8ee00ae09c10dc33fa47f5627e572e86288239ca2d8aeec7a25c4b248bce8000000"}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8209}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x0) 9m13.003298805s ago: executing program 2 (id=1330): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa100000000fdff070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 9m12.732318145s ago: executing program 2 (id=1333): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x100) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 9m11.738052095s ago: executing program 2 (id=1342): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0xa, 0x70, {0x70, 0x7, "c97c40816f8ff680db2e4a172389cd949feb273b35ce760308c6d5c159e92dea7286f0ce9eea983a99a427ffe1c866820a29c77baef3723594f3052b3d718954e190873edcf960bd75782df39dc52c059ddbb9dfca5b13ad9df035523c1e358599aeffea472262cd2076142e84af"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9m9.963398074s ago: executing program 2 (id=1352): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x100) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 9m9.550375669s ago: executing program 2 (id=1353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x1, 0x170bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x200c, 0x0, 0x0, 0xffff}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xb83}) 9m9.014278017s ago: executing program 32 (id=1353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x1, 0x170bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x200c, 0x0, 0x0, 0xffff}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xb83}) 8m17.423568478s ago: executing program 4 (id=1601): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x1, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40810}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x8}]}}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010300000000000000000100000a20000000000ad68fc2122e01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900810073797a30000000000900030073797a320000000028000000060a010300000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000"], 0x9c}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x66, &(0x7f0000000140)={{0x12, 0x1, 0xe570843756827708, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x4, 0x40, 0xf1, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xffffffffffffff12, 0x24, 0xf, 0x1, 0x8, 0x9, 0x0, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xb}, @mdlm_detail={0x4, 0x24, 0x13, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x1, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x10, 0x4, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x5, 0x8f, 0xff, 0x6}, 0x0, 0x0, 0x4, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket(0x1, 0x800, 0x0) mprotect(&(0x7f00001ba000/0x3000)=nil, 0x3000, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) 8m12.17012835s ago: executing program 4 (id=1629): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="040000001801000020696c25001fbcc7be000000002020207b000000040100000400ffffb702000008000000b70300000200002e000000950088333656fbbe4357a3b9ca231db6246c55e80e46c48369313c67b3877909105034afd7ff1a5e6afc02f9eea2fc004f3ff447c2f635cd66dcabc9a0a06016951b0e4910958747e07c66a25c85a74e82ddb68f4934b58e056f6b3beaee32e82722d349e2edb9944f2dca69eb58864c1d112f455279d7ddaf694d18e80bae11a13641439b428d32a8bc0000000000000000e19bea2c345e9193cd96302386729021a3ee33a471024dc7869a38bf1589eefa91a1383bf67cd1718b06"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 8m12.092113835s ago: executing program 4 (id=1630): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003380)={'\x00', 0x1, 0x0, 0x4, 0x7, 0x401}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000180)) timer_create(0x7, 0x0, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x62, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="01040000", 0x4}, {0x0}], 0x2, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fcntl$getown(r2, 0x9) r7 = socket(0x2c, 0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100000032dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad7ea888c100010008001300", @ANYRES32=r6, @ANYBLOB="0800200000000096dcc6433fb8fa4ff7329402382d6144c0fa901aa42a7ca0e636a34a1f4ddf6a3c1ab072f45993636eb368d55ac0380555e1eb9a6b6c2de0484bae5984dbbaee55d5430d8c79429d7cf2c51026939f52a125d64c01894c4ab4c0e2f3382924ccbd2ef01bc7b0539ff6b412a60f7714f691a58b451b2a4ac2ca10034f74d2fe61068193144418f816d48f899954591bb48e655b99a7c0e8bdfb"], 0x30}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r8) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r9, 0x608, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c040) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701fcffffff00000100017c000004004c800c00018006000600801c00000c0002800800148304000380096849726e6f370853129903f0b8ffae375ae351e2a466d60650924d94894b21bf6e01cd2c1ec4d3fcde7021eaf5eb0c263c78a3910b4fa5b1cfb4689d02634d082b1bbcd7eda37dcf37c831421bfb1c443ae8057a4f46"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8m12.037085489s ago: executing program 4 (id=1631): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x20041280, 0x0, 0x31, 0x0, 0x0, 0x0) 8m11.103657386s ago: executing program 4 (id=1637): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000005c0)='L', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r2) keyctl$read(0xb, r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x80005}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x64000600) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)=ANY=[], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 8m10.633649s ago: executing program 4 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x5, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0xffffffff, 0x1}, 0xffffff1b) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=r1, @ANYRES8], 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat$cgroup(r3, &(0x7f0000000dc0)='syz0\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000140)='veth1_to_team\x00') write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/476], 0x310) 8m10.129282322s ago: executing program 33 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x5, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0xffffffff, 0x1}, 0xffffff1b) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=r1, @ANYRES8], 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat$cgroup(r3, &(0x7f0000000dc0)='syz0\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000140)='veth1_to_team\x00') write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/476], 0x310) 8m3.046011119s ago: executing program 0 (id=1673): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (rerun: 64) prlimit64(0x0, 0xc, &(0x7f0000002300)={0x1, 0x9}, 0x0) (async) mq_open(&(0x7f00000025c0)='):\'^]\x00', 0x40, 0xc, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setrlimit(0xf, &(0x7f0000000280)={0x9, 0x2}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000000340)=""/165, 0xa5}], 0x2}, 0x60002000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x14, 0x14, "a2a0d16078fc979fd1e0309615a89de2b7eb0000e68080b8785d96000100000000000000000000d4669e97004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32=r0], 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0xe2, 0x8800) r6 = dup(r5) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)) (async) read(r6, &(0x7f0000006100)=""/102364, 0x18fdc) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x6, 0x4, 0xa4, 0x7fff0012}, {0xd3, 0x5, 0x7, 0x100}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) fallocate(r0, 0x11, 0x0, 0x5345) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "294a9167a485d5cb", "5fb5c80187a987da6d5077594b47a123", "dd0f682e", "da02a346b2d14913"}, 0x28) 8m2.407598114s ago: executing program 0 (id=1674): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x20000000000000, {0x2, 0xf0, 0x6}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x0, {0x1, 0xf0, 0x3}}, 0x18) (fail_nth: 2) 8m2.219794294s ago: executing program 0 (id=1675): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) times(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e63, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r1, 0xb) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e230001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8m1.896223372s ago: executing program 0 (id=1677): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_clone3(&(0x7f0000001700)={0x8000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xe, 0x1, 0x10, "f7b817716daef7e53fa4f9a9dad13c74c3f001fd3600", 0x34325241}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m58.651348669s ago: executing program 0 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf4, 0x3a, '%:', 0x3a, '', 0x3a, './file0'}, 0x29) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 7m56.603971434s ago: executing program 0 (id=1690): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = msgget$private(0x0, 0x722) msgsnd(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="39dbba701742"], 0x8, 0x800) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r9, 0x0, &(0x7f0000000080)='cifs.idmap\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x21c, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4880}, 0xa810) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000c02da86710009050602ff0300000009058202"], 0x0) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 7m41.35656465s ago: executing program 34 (id=1690): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = msgget$private(0x0, 0x722) msgsnd(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="39dbba701742"], 0x8, 0x800) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r9, 0x0, &(0x7f0000000080)='cifs.idmap\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x21c, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4880}, 0xa810) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000c02da86710009050602ff0300000009058202"], 0x0) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 1m2.272463095s ago: executing program 5 (id=3308): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a0000000000ffd70000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000040100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 1m2.036593313s ago: executing program 5 (id=3311): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="18110000005cbd443fa4345cde6e585130e18ee2b0b995a46b1a96d1f319741ab8875b3b754d4525ee3dd3d15e769f42d2405e6baa233c96ba02f03d09e15771027198fab0137d949c12f1d3c258110424508969aa3cf00f929ae5346f581de84ae68e4f8e1c668fed", @ANYRES32, @ANYBLOB="0000000000000000b7080000fe0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 58.115626633s ago: executing program 5 (id=3329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x19, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000500)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r11, 0x1, 0xb, &(0x7f0000000540)=0x5, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[r1, r2, r5, r11, r1, r2, r8]}, 0x7) 57.364498681s ago: executing program 5 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x3, @pix={0x33, 0x8, 0x3031334d, 0x9, 0x3, 0x6, 0x2, 0x0, 0x1, 0x1, 0x2, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xfffffffffffff984}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) fcntl$dupfd(r0, 0x0, r4) unshare(0x2a060c00) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect(0x5, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201100381d7df08da0594008a380102030109022d00010bff504d0904f2e103dea33f0509057bfe080000ac0709050600773d85ff0709050e"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) accept4$unix(r5, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80800) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 53.51935305s ago: executing program 5 (id=3345): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3623a7c92032af1f28d52a3e81e9627c12ce43865cfb8bc361623f86441f5303eded9ffe4ab9f7a3550ca7fe20e550bee58640d3928ddfaf16389a3dc4bbef6687baf52e8ce8ca9704fb8ebfa4ef415efb43b4914ba5993e", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009960000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 47.563554236s ago: executing program 5 (id=3350): r0 = socket(0x1e, 0x80805, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) close(r1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0xa, &(0x7f0000000000)={0x3ff, 0x2}, &(0x7f0000000080)) sendmmsg$alg(r0, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001980)="5cbd3413f6d75a5ffa947693d9268f6404d9ca4048c9c51f1168a293d1be4bf9a8645ae758038e393992fc06d3a79b033dcb6dacb80f0a3685d9293a521fc021e0370d79f1b040ccb72cab2789aba3857ae3ebdc9b21db2d5d09564304477f6eca2304b280f6af77b9a3ebf9db466c81e15767b7ef61285078ecf1bddd9cf713b9c99ba6174cda94682507ffa2e4fe55090ab2d1aa9bc649bf9f244f972127893f74c232432d842cf565470695f967b619c5db46b16b9f2d262ced5cc1286636b51bf7c7d36a58876a0717afb619eeb144a0d8b8f36daa954d5f393f99c94d55", 0xe0}, {&(0x7f0000000580)="70719975032c63d52c09650a5f021791fbd42dbd3782ee1c1569ecec545cbe4f21e4ba3025a2c6f408b1191cf5ae5b878f9baa8627a41e1cd30715fab3cccca792ea5eebbc902a6956e525e1f711948150c3036be8e2a4eafc9e9ab1d6549d33c147881365a8dcac719c6b9da04b4c919f3db5f01f45ff8500000000000000000000000073cecad08a717325c8ad2e78cc874332e6ae6e6a065465dd516617e6933445e5d4895e06d05f9f12547a3525150aae0a634eda0273110d254aba6725bca150a9e6ae727193ba124502d065f0fef64e4893302017ea24b7f6524067ea42f9ee000000", 0xe6}, {&(0x7f0000001b40)="6c6542450dbcdc20de081d6859a5e859e16ad3afc2ec3aaa7ae0323e7350c701962bbc2ac1148970cb7b44beda248a46528c7cbba95f07324ecd50b4727393522d3628163d087cd2728cff2a3c98e5cec93bf5c9019629647cc44b43baf664d7bb45221ddbc99efadf8b8b3f52b96ac5b99d62683ff3dab2651a11ce32357225efe20e8c1a", 0x85}], 0x3, 0x0, 0x0, 0x20080001}], 0x2, 0x20004090) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) (async) r6 = eventfd2(0xe8, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000240)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x1, 0x4000000, 0x0, 0x0, 0x0, 0xeeee8000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) (async) shutdown(r4, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r7, &(0x7f0000002d00)=[{&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x4, 0x8, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001000030400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00%\a\x00\x00\x00\x00'], 0x28}}, 0x0) 47.112503144s ago: executing program 35 (id=3350): r0 = socket(0x1e, 0x80805, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) close(r1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0xa, &(0x7f0000000000)={0x3ff, 0x2}, &(0x7f0000000080)) sendmmsg$alg(r0, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001980)="5cbd3413f6d75a5ffa947693d9268f6404d9ca4048c9c51f1168a293d1be4bf9a8645ae758038e393992fc06d3a79b033dcb6dacb80f0a3685d9293a521fc021e0370d79f1b040ccb72cab2789aba3857ae3ebdc9b21db2d5d09564304477f6eca2304b280f6af77b9a3ebf9db466c81e15767b7ef61285078ecf1bddd9cf713b9c99ba6174cda94682507ffa2e4fe55090ab2d1aa9bc649bf9f244f972127893f74c232432d842cf565470695f967b619c5db46b16b9f2d262ced5cc1286636b51bf7c7d36a58876a0717afb619eeb144a0d8b8f36daa954d5f393f99c94d55", 0xe0}, {&(0x7f0000000580)="70719975032c63d52c09650a5f021791fbd42dbd3782ee1c1569ecec545cbe4f21e4ba3025a2c6f408b1191cf5ae5b878f9baa8627a41e1cd30715fab3cccca792ea5eebbc902a6956e525e1f711948150c3036be8e2a4eafc9e9ab1d6549d33c147881365a8dcac719c6b9da04b4c919f3db5f01f45ff8500000000000000000000000073cecad08a717325c8ad2e78cc874332e6ae6e6a065465dd516617e6933445e5d4895e06d05f9f12547a3525150aae0a634eda0273110d254aba6725bca150a9e6ae727193ba124502d065f0fef64e4893302017ea24b7f6524067ea42f9ee000000", 0xe6}, {&(0x7f0000001b40)="6c6542450dbcdc20de081d6859a5e859e16ad3afc2ec3aaa7ae0323e7350c701962bbc2ac1148970cb7b44beda248a46528c7cbba95f07324ecd50b4727393522d3628163d087cd2728cff2a3c98e5cec93bf5c9019629647cc44b43baf664d7bb45221ddbc99efadf8b8b3f52b96ac5b99d62683ff3dab2651a11ce32357225efe20e8c1a", 0x85}], 0x3, 0x0, 0x0, 0x20080001}], 0x2, 0x20004090) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) (async) r6 = eventfd2(0xe8, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000240)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x1, 0x4000000, 0x0, 0x0, 0x0, 0xeeee8000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) (async) shutdown(r4, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r7, &(0x7f0000002d00)=[{&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/6, 0x6}], 0x4, 0x8, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001000030400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00%\a\x00\x00\x00\x00'], 0x28}}, 0x0) 16.000745627s ago: executing program 7 (id=3415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x50, 0x2c, 0xd27, 0x170bd3b, 0x2, {0x0, 0x0, 0x0, r3, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'hsr0\x00'}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x53f}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008014}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 15.547802317s ago: executing program 7 (id=3416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x248, 0x700001b, 0x148, 0x248, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x248, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x20000100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0x1, [0x2f, 0x0, 0x1e, 0x13, 0x2b, 0x1d, 0x24, 0xa, 0x2c, 0x2c, 0x2d, 0x14, 0xb, 0x27, 0x2a, 0xd], 0x2, 0x7, 0x7}}}, {{@ip={@empty, @broadcast, 0xffffff00, 0x0, 'bond_slave_1\x00', 'wlan1\x00', {}, {}, 0x33, 0x3, 0x40}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 15.18052984s ago: executing program 7 (id=3417): r0 = socket(0x22, 0x2, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="145f5cf9fcc90000468000030001050000000000"], 0x14}}, 0x4801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x42ef7fbe5cb9845f}, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x7, 0xfffffe0001000001, 0x77a7, 0xd}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18) r6 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0xfffd], [0xa, 0x3], 0x1}}) connect$inet6(r5, 0x0, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r9, 0xda90) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 13.004148255s ago: executing program 7 (id=3424): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 12.735495915s ago: executing program 7 (id=3428): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) r5 = fcntl$dupfd(r2, 0x0, r0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x2}}, 0x1c}}, 0x20024090) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0), 0x4) fcntl$lock(r4, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x10000000003, 0x4}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$peek(0x3, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="bb020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000140)="2a8af7b3c3576af570b90002cd9688aaf2f65ac6d53fd84544367cf79bb7f68daac194b325ccba7f3c93a68cb45dfcdf096dd5847225267ee6025875138473e63431a6b38bbba58bd3c7a42c8c1d8a7622bd9fe8174fe4d0503c88af5584e564150a86b8900bd559145cb0a26a0da51969f85d5165c338a8f7fa00fdb3c18597b41d38da9aebcf242573998a9d948cc084b405b3472db8646a341448806a0090ba18149ec04903b0987301692577dd334c97df307c2d0ac18a9570557c750630ac", &(0x7f00000003c0)=""/203, &(0x7f0000000700)="9637bea764093abcd95f507b33b1309673fe66edee7bcf4e8d4b4a732b0c2ae42953390a2cda0a97be67a3c9bbd8e7a411098533898340f96d27f25dd4f1f6454b17761745a14cb766aa96b99af373ce4c1248ad53eb7d7f6d7102ece33f8b7f7da988151b60b8bdd573ddddbcb77f45f79ebe279a4652230979fa2239699e37c8d5feff16e4ac05435fdf789a7d9b14d1a7394a27433ed06a27615e20171ca5189a6a2f91de5422", &(0x7f0000000640)="a646268be6a1efa3c66b38aa4ebda74821fb0283233a772e1fcd76638829ccbbb4f00da6083d90161a819cda8be6ceef6b1f42fd87806c997de65b87ba84c4ccec0a87d6e9eda665c090a77984", 0x0, r4, 0x4}, 0x38) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000008c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 9.434580205s ago: executing program 7 (id=3436): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, '{w\x00'}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0xfffffffa) syz_usb_control_io(r0, 0x0, 0x0) 9.236649901s ago: executing program 8 (id=3438): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x564b, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x204) (fail_nth: 1) 8.283363627s ago: executing program 8 (id=3440): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$team(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x148}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x700, 0x20, 0xbd, 0x5, {{0x19, 0x4, 0x2, 0x11, 0x64, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x34, [@multicast1]}, @rr={0x7, 0x13, 0x71, [@loopback, @multicast1, @broadcast, @empty]}, @generic={0x82, 0x7, "6efce53fb8"}, @timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0x7, [{@multicast2, 0x9}, {@loopback, 0x2}, {@multicast2, 0xffffff93}]}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x8, [0x4, 0x1, 0x0]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 7.702675032s ago: executing program 1 (id=3442): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58010000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c000480280001800e000100636f6e6e6c696d69740000001400028008000140800000010800024000000001b70007"], 0x180}}, 0x0) 7.460657355s ago: executing program 8 (id=3444): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x6a040000) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x2b, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x1d, 0xfeff, 0x1ae, 0x1f8}) unshare(0x56000900) 7.303834264s ago: executing program 1 (id=3445): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_dev$video(&(0x7f00000003c0), 0xa7, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x2, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x8000000000000001, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x10003, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x2, 0x5, 0x42, 0x9, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x3, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x10001002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x10001, 0x8100000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffe]}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1, 0xc00}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='scalable', 0x8) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)="93c4a3c1", 0x4}], 0x1}}], 0x2, 0x2090) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000380)=0x100) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x10, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 6.940010717s ago: executing program 8 (id=3446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fff0000}]}) (async) utimes(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xda90) (async) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000080)={0x80000000, 0x1, 0x5, 0x4, 0x401, 0x3ff}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.017696884s ago: executing program 6 (id=3447): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00040000000002000000120000001800018014000200626f6e645f736c6176655f310000000008000900c9df0000080006000300000008000800080000002fa214e9fda38913599957f3c90035a29fb30c3b5619281648162f16b7644e1252658b433cd8bebe2958b046d8704ca77cf3ad81c94dc5e6a0ba844b4a56d748fcf8ecddf8000188c237a12a6c5706139df75e060ccea1a1"], 0x44}}, 0x44884) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="9201000000dfff106d0495c20000000000010902240001000000000904000009030003000921fe005bf8ac75fca01742f9dea5611339"], 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x6b}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}], 0x1, 0x20040014) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@mpls_newroute={0x34, 0x18, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x14, 0x14, 0x6, 0x0, 0x2, 0xff, 0x5, 0x900}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r9}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0x34}}, 0x20000014) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4040000", @ANYRES16=r10, @ANYBLOB="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"], 0x4a4}, 0x1, 0x0, 0x0, 0x4000001}, 0x200100c0) (async) recvmmsg$unix(r3, &(0x7f0000001d80)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/126, 0x7e}, {&(0x7f0000001bc0)=""/24, 0x18}, {&(0x7f0000001c00)=""/99, 0x63}], 0x4, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}], 0x1, 0x0, &(0x7f0000001dc0)={0x0, 0x3938700}) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8042}, 0x20000001) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 5.51181198s ago: executing program 6 (id=3448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f00000002c0)={&(0x7f0000000200)="1a167f09adc1173486476dd2b87047c889f0eccc6897ead2d1e5978ca143c89b57d3cca1e849be12491e5aae911cb21f3248772ee8c17d0fb48f5cd0d314fa990943c1c80ed2852aeda67f750d", 0x4d}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000000e00)=""/4095, 0xfff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) fallocate(r5, 0x30, 0x3, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0x4d, 0x3, 0x8, 0x0, 0xf82, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfc, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.060559025s ago: executing program 3 (id=3449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd000008000500", @ANYRES32, @ANYBLOB="1400155411962155a3f1346cf6ac6704075c0000"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000060027000000000043461f0dd7ee61320a637f8bcd825d9bbe90ecdadb0e85b3e95fbc54986b92eae6a302bcf856b6adadc239907833de0f6150be41c989bb35f557b651c269aa03bf48b96a8355e8d0220bd77e2c8c617b2568b94578488fb00c0f00e741ca229d"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0xe4ff, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.630644405s ago: executing program 3 (id=3450): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x564b, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x204) (fail_nth: 2) 4.526669045s ago: executing program 1 (id=3451): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000180), 0x1003) unshare(0x24060400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x66bb, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a10, 0x1000008, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x404, 0x1, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x101, 0x2, 0x200, 0x2, 0x400009, 0x8, 0x4, 0x5, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x4, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x20005, 0x40, 0x9, 0x7, 0x5], [0x4, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x8000, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x2, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x3ff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x7, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x48, 0x2, 0x3, 0x4, 0x7, 0x6d80, 0x80, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x3, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa3, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0xcc5, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x3, 0xfffffff8, 0x401, 0x2, 0x200, 0x7, 0x4edf, 0x5, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x2, 0xfffffffc, 0x4, 0x0, 0x7fff, 0x10001, 0x8531}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) syz_open_dev$loop(&(0x7f0000000100), 0x10001, 0x204242) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x60a802) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001a01010b00fcff070001000101080006010001ef7b1ec16296370180c2000001000000002779166023"], 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17}, 0x50) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) getpid() 4.380113321s ago: executing program 8 (id=3452): r0 = syz_usb_connect$hid(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000240)={0x40, 0x5, 0xee, {0xee, 0xf, "771c3e0387827f4628edd68fbc2e7972d90b7d08a92d080db05715370b37c0e6422bcf08d54962f57d49f3d3fd1edebbcee211dad00491d95c337a88d5880302d5a618e41718fc43be7aa3308a54fe4c6a0f890437d842f68a9f085511ba47335e98f4b9951bc32a3e03374f0867041003bda6bae99157dcae7aa176c6d10d44533e587bbade01c319529d9a5c68a26314476aef103f4807e70b49885de7b4d6c0f97198cfe0df7d0cd7303a862fdfbedd312aba26a6c55674fb3dd3b81b942ef26db161b7b5e489df35798ff71451360dc8c7ef2e1b8c43ea519d045dda562f70dd6c79085b518a24d60064"}}, &(0x7f0000000380)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "61b88e67d81923d165b68e93a3850c2be9dc740c2247c72a2428e0d22bd2a3d3348ec4047477aafc658a17cca797602e0446086a40e0796b42fdbc90256bd5a7dd3a7878d7062a12a88cacef0feaa60d0bf57f56a55db80019d74daf04e76ac05538571b9d2cde293c1e4398e2e3754c23798c8ecc65cf9c98e7778f0c1306a000158b20d0b0aaeec927c0ce2e5c23b8900581f4448317abab79206e866bfb3d0b0a9fc6cdad790134fcb226dd41084025f75555dc1b"}}, &(0x7f0000000440)={0x0, 0x22, 0x24, {[@main=@item_4={0x3, 0x0, 0x7, "60fe36a3"}, @local=@item_4={0x3, 0x2, 0x8, "0e067458"}, @local=@item_012={0x1, 0x2, 0x3, "f1"}, @global=@item_4={0x3, 0x1, 0x0, "1bfbc598"}, @local=@item_4={0x3, 0x2, 0x1, "94cf62d1"}, @global, @main=@item_012={0x2, 0x0, 0xb, "2ec8"}, @main=@item_4={0x3, 0x0, 0x9, "9ebd7081"}, @main=@item_4={0x3, 0x0, 0xa, "e91b9623"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xfb, 0x1, {0x22, 0x857}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x20, 0xf, 0x43, "7055977c01232478eecbe84fb8e1678c7e0b03fc81534d19c2403e98aedd4a4343c123128a5e87ff58c0d99be455cbffcbdb711254bc81c92c23ba97d91627b2cff2af"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0x61, "24deacea2a06ca6ad585861edf4b25334ea9718841a155f021b8c3116cf4a56487062529ab18ca292f2e97d2a674502162ed2373c2a4a74cf7091af0d3db984e3e0bedae779f959041d58bebb4eefa48061c7981e451f01cab77cd51d483da1cac"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x5}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r1, &(0x7f0000000080)=""/54, 0x36, 0x86) r2 = syz_open_dev$hiddev(&(0x7f0000000340), 0x0, 0x801c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080028000000000008000e002ab50000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 3.928349491s ago: executing program 6 (id=3453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x274, &(0x7f00000002c0)={[{0x8f, 0x4e00, "98fd5fb8d38d4a6c47cc49cd9f4758a043f91d4140abe6c558d1f3b636ca19eefe16bf137c78e46f542708b0893fe49ed84613700c91b9139f1d3c7a5839e4e1f01c4e2be7cdf0896f78f1cdcbaca302c3c364e555162e3851b6cb21de3bcfc33ce94ec2e3e1c551d156a2a827d8cc9ad30af12d13d71ee266fa2c4dd0f4b902c35c991372fd2ec7cef834b938cf42"}, {0x7b, 0x4e00, "6c14ab49266c7bc8b74b4d3060b0136839bca551a1600b05f81a1e968a74caca799f0c54fb7dbeb9e2002151e15c20d1cdc5749c5586e2a9a71d7fca88d13ceb79ed2863c2d617665bc6fc4bf1eb6bbb187cfdf13ead06a1cbe10ef601297813a854f6c2638c8f8b6023fd8df17f55cf012a1a8c9603d03b5497f0"}, {0xad, 0x4e00, "7d687814ee89400977c60d007cb3816a55378383df1aba35c66d500b4a7a63ad5f3b0519b676ee39bb8b0fee50dae56d3e3a4e3012dacae5b226ae082f202cad54ca0dcd40364638be02ecf86775773e605eb4f16a88bbf793a0fa8b4a899ef2fd8be85a351e6c5b8e271fdb81219cec255b8a8ecab0a80cd47f23ca0a56761b212642fd71e7dbfc36093e180b483024bc9fe3e21734ae8cd07ad2b6727e6bd0c45d1f5e9dafd533d401a06351"}, {0xa8, 0x4e00, "5922cdfb27de4d4c61870d7e0fedad496729ac63ef9344a44d43d09b2aac721dcdf4b0906ca8db30471d80588296d652fc54b0ea568ab64cc754fcfcc75521962c5301fe1e4430b00ed3df634ef0c9c1004a38ed1e6313b5c8fb9c53241779454dd3f983e9b98024677323515f667006d30d4660ab63568d7d196cc66c6baa6c3cc5908f1a2a656280b0989380ee93abbd9fd49599143ec6326bface0d8ff9dbf83cecc76d8614c3"}]}) landlock_create_ruleset(&(0x7f0000000180)={0x8020, 0x2, 0x1}, 0x18, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000600)="ec66b8e5000f00d866ba210066b849008ec06ec4c32d6db600900000b3c4c17816f33e0fc7590066b828008ed0b9800000c00f3235000800000f30", 0x3b}], 0x1, 0x17, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.564388776s ago: executing program 3 (id=3454): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$team(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x148}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x700, 0x20, 0xbd, 0x5, {{0x19, 0x4, 0x2, 0x11, 0x64, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x34, [@multicast1]}, @rr={0x7, 0x13, 0x71, [@loopback, @multicast1, @broadcast, @empty]}, @generic={0x82, 0x7, "6efce53fb8"}, @timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0x7, [{@multicast2, 0x9}, {@loopback, 0x2}, {@multicast2, 0xffffff93}]}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x8, [0x4, 0x1, 0x0]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.395736031s ago: executing program 1 (id=3455): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004140)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf257500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2e28}, 0x1, 0x0, 0x0, 0x84}, 0x4010) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004140)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf257500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2e28}, 0x1, 0x0, 0x0, 0x84}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340006860000100037042dbd7000000000000000", @ANYRES32=0x0, @ANYBLOB="8304050000000000140012800b000100626174616476000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x400c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340006860000100037042dbd7000000000000000", @ANYRES32=0x0, @ANYBLOB="8304050000000000140012800b000100626174616476000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x400c0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='user.incfs.id\x00', 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48081) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.999789834s ago: executing program 6 (id=3456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="145f5cf9fcc90000468000030001050000000000"], 0x14}}, 0x4801) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x42ef7fbe5cb9845f}, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x7, 0xfffffe0001000001, 0x77a7, 0xd}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18) r5 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0xfffd], [0xa, 0x3], 0x1}}) connect$inet6(r4, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 2.827200966s ago: executing program 3 (id=3457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) 2.432771375s ago: executing program 3 (id=3458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000700)="cf73f049f4de52640b7f49e52687ce9fea9f9454e09463e15c032cf575b08dbf054930f71196ede518ae06baf2f3e98e6d4b8ef71a4abbcdca4e9892539202fbda014f8d79bd0912d701718331c55b4c18e2e429d375aa1f8d16970471d80c8d5e89942b6f31ae1e5e659a852682c1ac2bead98ec564211509e486575200221b765ba93cbfccded081630c0c015a339bcb3a99c5a176be5e0e5f7fed3ea696e068c5a7d6c26a820e1e4a083d2f1e1396e1c5a1b4cbcb9b6007e7ac507c997ce2c42f0b8d27fbc5c39ac4fef92fe15b71a79eb0bdd4d6b4485c88cd6b9a6f8c22175ff004", 0xe4}], 0x6}}, {{&(0x7f0000000a40)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000800)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512f7b8d8c46b8474e84da9c8ef65e05939a4f2b30f34b47c73f00000000000098c2d2c02790b99adbd88c32ba96825c0bda3c62fdd5437d4569f1d1b3cc25d0914020c5487e84e351dd547f90bb33c5ed660a56064b2f8a8dec7497f7c60aaa7f573e31ac233478a6afa1c8276a5914296c8ef463b2a461f57a72ae04760eb331a9c4369c32b5f895f1e7586821a31b9308767dcdcd32402cad0f047c2e402e3259b47dea377882793c28542cfda2f75a69af83349f4b562887294d46b59d3f6665a4df170d912a372c2b334228001b08804dbd52160d71", 0x141}], 0x3, &(0x7f0000000cc0)}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)="f3f4c60f4daeeeb0b0c17aa464613ccd437a9679a91658a6c2d3c2d8bfbbb58df562b15ccd91aa4ae6e61176e018703040c59f525d33ed0a0803cd1d421e1217801287a2bf02d0058f38ce816ff91645c0ea2e7da1080fb9b3030e2fb3727a29931e3cb753ff5a2bff2da02f4b819fe041adff06bbf6e98240161a851f732a53fdcdc87864221e7bdbc719cefb6d38624e5c7f039c0157fc103ba190ed2c", 0x9e}], 0x1}}], 0x3, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000280)={{@host, 0x800}, 0x1, 0x1, 0x1, 0x4, 0x5, 0x9, 0x2, 0x8ed1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x3af}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="0b1c60768c5ee0b28c70854f82d62a73ab9c89174bb8c698bcad396c63878ea35a1cbd74a1b22df649736f79f2743872a6db0af53fbece33b8a595a8b9c1a1f3f7676fa04d7d22114c25e764803c", 0x4e) r3 = accept4(r1, 0x0, 0x0, 0x800) getsockname$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000540)=0x1c) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.322088138s ago: executing program 1 (id=3459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={r4, 0x7}, 0x8) sendfile(r2, r1, 0x0, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, 0xfffffffffffffffe) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x1100}], 0x1, 0x20002081) socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98200000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.143188055s ago: executing program 3 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd00000066baa000ecb9502e0200000001000400b9a60800009a040000002d0026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x68}], 0x1, 0x74b5f30e30c2a684, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000001c0)={"2336f7a26a0c6abfcc1858113274ae359e3160dd226118bd7703a824f5e8648b362d412881f0365190e0630d178985489632ae14bba74279672c22f86d1b1fc942e847cbae87a1559e5e4d3b8496eb8dfddbd1b01364fdce3a07c24954d1c9952ee434d2d70bb8736879f40d80d3b71ff8993c4f1ef729a9292068c2c2e1b10c7281963d46a9bf5c171d2880a6ce9dc45c73566ac48680ee55a303a3ffecfab4700db6f9d90fe2fa5c712aaf90c1596aaba95bb0e156554ba696081d01fe4fd7f850300f5c424658bcbecc2604d4e0c020c382723c88196c12b312542c7560477c1a604e05e767250812973ae80b7ee366cb8ea8a0ac84803e501af2c6c8ef3e63ab95fb3bd68cc53bd58915e255bc01b92c4a9f3245cec10c677e641f30ecfb695bce4d668ca07bb11a93d5d74023b59128b6aa0991db8cf754e177e9e3a684accd74794affd8b5d6bd79ab2c4d730d0457d7bca06f6e163b56be38526e992a5673934e58bfcddb6f0c1340f5ab6677dd33e579e7d3f028204f1bdfb62f7423907dfaf4ed97c34918d44d01a4a7046f072a0836e05ffa833c98c58405c4f2b9d2cb3b4b0e8be51e033d46faa05f04911cbc54342845cb3cf82e201ecfc1875e261186b8c864db73e517c3e75dfed8377b228cb2d3eb88cfc7c6b7ffea36e631aa4c820242fa1c4c3b25d1a9347a0e743b7f392a495b25cc8b2917630dedddedb1c0245183900946042786fdad9d382edbd36490ba0872f1db824e583dc9478205b95f3146dce82b3d14d2892e0f8b3d439f2bdcc9465fdab098950e46e9ec5b16ca8832e3651f3b01b2fd71de4ab2d819c56d1ca22a6fba0a1f743b16f4d79744fcfa41c90b2f3a2e9367f1ac01a4385cb651b5b0707d45de173009295a369ca51e5c676a1d258108835c32683b770a563f91b69b2f102a753bcdbb1cc47146574ff6b6bd81b599e28ad44a1bf152ef95a47b4faf0b592025c6869bcb69f53276508e2b40e1b833b6ec3ba1f187e180f76260a5b0f10d04934ed985c80f0a4ab81260d25b9348a0ecf0465ecd88fb42a400b64788c3e971ef3fc8d1952f2f7f81f178123a2c55813eb5d9a725665788960c7105a8d8dbb0dc0c4487fbfd75317f0be3c1d300602fafa7a9532c1d896846882b9cb95f48fadf4f68feff8f560757a3ed31c4306c67ec47d27e19c5cc5226a57328df68e65d8b1ca5c339cd891584aec1a9f22ff0aa8f93345690d2f691c38e9b2c8797cd3ca1acf8862199fc0d942a04b84250eb2e5f72ec08494c0fc7c55bc965f845aa1cd5eafa46160fc023d7cab8dbb574e4e6e8efe7f90890d2769e2e0b97262b97f1efa1c227b9b51ba86328f3d40f7ce7c82c39077c4632e1d2665bca76ff3109d882d1ccf2d066aa71fdf2564d3c733b26d9e1507e2ccd7e1275c148403256178438b2754c23c042cd"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x7c, 0x0, 0x30b, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x200000c1) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x194, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xbc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfff]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd00}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1, 0x1, 0x9, 0x80000001, 0x3, 0x8, 0x401, 0x6, 0x3000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xb, 0xd, 0xfff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x190}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x6, 0x1ffc0, 0x2000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19a}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x10, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x576}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xba1c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)=0x9) 1.275673001s ago: executing program 1 (id=3461): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_dev$video(&(0x7f00000003c0), 0xa7, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x2, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x8000000000000001, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x10003, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x2, 0x5, 0x42, 0x9, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x3, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x10001002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x10001, 0x8100000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffe]}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1, 0xc00}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='scalable', 0x8) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)="93c4a3c1", 0x4}], 0x1}}], 0x2, 0x2090) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000380)=0x100) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x10, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 962.705016ms ago: executing program 8 (id=3462): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendto$inet6(r3, &(0x7f00000003c0)='\x00', 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) socket$alg(0x26, 0x5, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = epoll_create1(0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYRES64=r6, @ANYRES8=r2, @ANYRES64=r5], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000080), 0x0, r4}, 0x68) 675.338043ms ago: executing program 6 (id=3463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x19, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 0s ago: executing program 6 (id=3464): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x564b, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x204) (fail_nth: 3) kernel console output (not intermixed with test programs): 6][ T29] usb 2-1: config 0 descriptor?? [ 943.500012][ T29] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 943.646521][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 943.666993][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 943.718910][ T5896] usb 6-1: USB disconnect, device number 87 [ 943.851741][T17856] loop5: detected capacity change from 0 to 7 [ 943.879427][T17856] Dev loop5: unable to read RDB block 7 [ 943.903986][T17856] loop5: unable to read partition table [ 943.916159][T17856] loop5: partition table beyond EOD, truncated [ 943.946787][T17856] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 943.965684][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 944.123600][ T29] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 944.159314][ T29] sq905c 2-1:0.0: Reading version command failed [ 944.186470][ T29] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 944.242289][ T29] usb 2-1: USB disconnect, device number 66 [ 944.414835][T17868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.580987][T17873] FAULT_INJECTION: forcing a failure. [ 944.580987][T17873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 944.611022][T17873] CPU: 1 UID: 0 PID: 17873 Comm: syz.7.3147 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.611057][T17873] Tainted: [L]=SOFTLOCKUP [ 944.611065][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 944.611076][T17873] Call Trace: [ 944.611085][T17873] [ 944.611095][T17873] dump_stack_lvl+0xe8/0x150 [ 944.611134][T17873] should_fail_ex+0x412/0x560 [ 944.611172][T17873] prepare_alloc_pages+0x22a/0x650 [ 944.611208][T17873] __alloc_frozen_pages_noprof+0x12f/0x380 [ 944.611241][T17873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 944.611273][T17873] ? __pfx_policy_nodemask+0x10/0x10 [ 944.611298][T17873] ? try_to_migrate+0x317/0x3f0 [ 944.611328][T17873] ? __pfx_try_to_migrate+0x10/0x10 [ 944.611358][T17873] alloc_pages_mpol+0x235/0x490 [ 944.611389][T17873] folio_alloc_mpol_noprof+0x39/0x160 [ 944.611420][T17873] migrate_pages_batch+0xa55/0x4ca0 [ 944.611469][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 944.611507][T17873] ? __pfx_migrate_pages_batch+0x10/0x10 [ 944.611573][T17873] ? __pfx_walk_pgd_range+0x10/0x10 [ 944.611611][T17873] migrate_pages+0x1c74/0x2a10 [ 944.611656][T17873] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 944.611696][T17873] ? __flush_work+0x100/0xc50 [ 944.611724][T17873] ? __pfx_migrate_pages+0x10/0x10 [ 944.611750][T17873] ? __flush_work+0x100/0xc50 [ 944.611783][T17873] ? mas_next_slot+0xc3b/0xd10 [ 944.611834][T17873] __se_sys_mbind+0xe89/0x10f0 [ 944.611868][T17873] ? __pfx___se_sys_mbind+0x10/0x10 [ 944.611907][T17873] ? fput+0xa0/0xd0 [ 944.611927][T17873] ? ksys_write+0x242/0x270 [ 944.611954][T17873] ? __pfx_ksys_write+0x10/0x10 [ 944.611989][T17873] ? __x64_sys_mbind+0x21/0xf0 [ 944.612013][T17873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.612035][T17873] do_syscall_64+0x15f/0xf80 [ 944.612061][T17873] ? trace_irq_disable+0x3b/0x140 [ 944.612085][T17873] ? clear_bhb_loop+0x40/0x90 [ 944.612101][T17873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.612119][T17873] RIP: 0033:0x7ff0dd39cdd9 [ 944.612138][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.612156][T17873] RSP: 002b:00007ff0db5b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 944.612179][T17873] RAX: ffffffffffffffda RBX: 00007ff0dd616180 RCX: 00007ff0dd39cdd9 [ 944.612193][T17873] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 944.612206][T17873] RBP: 00007ff0db5b4090 R08: 0000000000000000 R09: 0000000000000002 [ 944.612219][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.612228][T17873] R13: 00007ff0dd616218 R14: 00007ff0dd616180 R15: 00007ff0dd73fa48 [ 944.612247][T17873] [ 944.943625][ T809] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 945.188045][ T809] usb 4-1: USB disconnect, device number 32 [ 945.361154][T17879] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 945.693410][T17888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3151'. [ 945.996492][ T29] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 946.166372][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 946.186646][ T29] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 946.201715][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.264800][ T29] usb 6-1: config 0 has no interface number 0 [ 946.305272][ T29] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.371537][ T29] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 946.390106][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.399218][ T29] usb 6-1: Product: syz [ 946.403896][ T29] usb 6-1: Manufacturer: syz [ 946.416666][ T29] usb 6-1: SerialNumber: syz [ 946.442157][ T29] usb 6-1: config 0 descriptor?? [ 946.457976][ T29] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 946.465962][ T29] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 946.565985][ T809] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 946.661235][ T29] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 946.738786][ T809] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 946.754824][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.821857][ T809] usb 2-1: config 0 descriptor?? [ 946.841193][ T809] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 946.932460][T17896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.995590][T17896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.111580][T17893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 947.259948][ T809] gspca_cpia1: usb_control_msg 03, error -71 [ 947.313155][ T809] gspca_cpia1: usb_control_msg 01, error -71 [ 947.349568][ T809] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 947.393080][ T809] usb 2-1: USB disconnect, device number 67 [ 947.907577][T17893] netlink: 'syz.5.3152': attribute type 9 has an invalid length. [ 948.126770][T17047] usb 8-1: new full-speed USB device number 108 using dummy_hcd [ 948.202845][ T29] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 948.296776][ T29] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 948.330287][T17903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 948.355710][ T29] usb 6-1: USB disconnect, device number 88 [ 948.358694][T17047] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 948.410674][T17047] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 948.416889][ T29] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 948.475022][T17047] usb 8-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 948.541858][T17047] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 948.592831][T17047] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 948.612985][T17047] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 948.658297][T17047] usb 8-1: Manufacturer: syz [ 948.681345][T17047] usb 8-1: config 0 descriptor?? [ 948.710556][T17909] loop5: detected capacity change from 0 to 7 [ 948.750173][T17909] Dev loop5: unable to read RDB block 7 [ 948.759557][T17909] loop5: unable to read partition table [ 948.769781][T17909] loop5: partition table beyond EOD, truncated [ 948.793525][T17909] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 948.817923][T17911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.655421][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 950.441897][T17943] loop5: detected capacity change from 0 to 7 [ 950.465357][T17943] Dev loop5: unable to read RDB block 7 [ 950.478628][T17943] loop5: unable to read partition table [ 950.489584][T17943] loop5: partition table beyond EOD, truncated [ 950.503501][T17943] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 950.557481][ T29] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 950.668064][T17047] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 950.726661][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 950.754034][ T29] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.763084][T17951] tipc: Started in network mode [ 950.774021][T17951] tipc: Node identity fffffffffffffff50000000000000001, cluster identity 4711 [ 950.786509][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 950.786943][T17951] tipc: Enabling of bearer rejected, failed to enable media [ 950.794240][ T29] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 950.808273][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 950.814356][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.822617][T17951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.844814][ T29] usb 7-1: config 0 descriptor?? [ 950.881665][T17047] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 950.905064][T17047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.948664][T17047] usb 6-1: config 0 descriptor?? [ 950.980685][T17047] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 951.031322][ T5896] usb 8-1: USB disconnect, device number 108 [ 951.289390][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3173'. [ 951.442027][T17047] gspca_cpia1: usb_control_msg 03, error -71 [ 951.464461][T17047] gspca_cpia1: usb_control_msg 01, error -71 [ 951.496578][T17047] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 951.539778][T17047] usb 6-1: USB disconnect, device number 89 [ 951.579121][T17962] vivid-000: disconnect [ 952.368966][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.389682][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.609327][ T5896] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 952.810769][ T5896] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 952.875321][ T5896] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 952.937133][ T5896] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 952.970844][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 953.012577][ T5896] usb 2-1: Product: syz [ 953.026812][ T5896] usb 2-1: SerialNumber: syz [ 953.101784][ T5896] usb 2-1: config 0 descriptor?? [ 953.112375][T17987] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 953.203688][T17987] PKCS7: Only support pkcs7_signedData type [ 953.352639][ T24] IPVS: starting estimator thread 0... [ 953.430310][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 953.451567][ T24] usb 2-1: USB disconnect, device number 68 [ 953.469026][T17992] IPVS: using max 27 ests per chain, 64800 per kthread [ 953.475075][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 953.545181][ T29] usb 7-1: USB disconnect, device number 84 [ 954.437012][T18013] loop2: detected capacity change from 0 to 7 [ 954.489121][T18013] Dev loop2: unable to read RDB block 7 [ 954.526569][T18013] loop2: AHDI p1 p3 [ 954.545206][T18013] loop2: partition table partially beyond EOD, truncated [ 954.584932][T18013] loop2: p1 start 2349049979 is beyond EOD, truncated [ 954.835974][T17048] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 954.997963][ T5911] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 955.009132][T17048] usb 7-1: Using ep0 maxpacket: 16 [ 955.039382][T17048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 955.064318][T17048] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 955.079764][T17048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.088943][T17048] usb 7-1: Product: syz [ 955.096365][T17048] usb 7-1: Manufacturer: syz [ 955.102961][T17048] usb 7-1: SerialNumber: syz [ 955.136622][ T24] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 955.138879][T17048] usb 7-1: config 0 descriptor?? [ 955.158655][T17048] hub 7-1:0.0: bad descriptor, ignoring hub [ 955.182767][T17048] hub 7-1:0.0: probe with driver hub failed with error -5 [ 955.194990][T17048] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 955.204669][ T5911] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 955.216959][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.260860][ T5911] usb 4-1: config 0 descriptor?? [ 955.329632][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 955.343792][ T5911] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 955.378326][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 955.429888][ T24] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 955.453417][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.468196][ T24] usb 6-1: Product: ቋ猠ւ뇀磢⛌ï¨å‘±å…Ÿé·›æ‰ãš³ìœ¯ä£Œä•­á· ï¨†ì·¹ï‡å‡“á…¦ãµåµŽïœ›ë‡¸ë¬˜ì«¨ç¥ªî“—呤넾鎯é·ì¡«ë‡¶ï»„⩪涷诡亥碅惺鼗çºïž¡èª•ê¾¤ï™•á§¼íŒ¥ì“Šæ††è¯¹Ï‚å½ï “鋄劃é´ã½”ã´ë‡›á¢»å¨Ÿå¥œæ„¼äŠ¶ [ 955.517347][ T24] usb 6-1: Manufacturer: à “ [ 955.524124][ T24] usb 6-1: SerialNumber: 幛⵽랜솘欛袦óˆ­âŸ²î•´ç‘ኢ䕬똘ꛔ韀】îŒç‚®î‡¶ëœ¯îœ·â´¿ê€¯ì·ŸÉ˜ [ 955.541431][ T29] usb 7-1: USB disconnect, device number 85 [ 955.712779][ T5911] gspca_cpia1: usb_control_msg 03, error -71 [ 955.725687][ T5911] gspca_cpia1: usb_control_msg 01, error -71 [ 955.756510][ T5911] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 955.778964][ T5911] usb 4-1: USB disconnect, device number 33 [ 955.796409][T17048] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 955.832548][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 955.958275][T18034] kvm: pic: non byte write [ 955.967808][T17048] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 955.981526][T17048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.003442][T17048] usb 2-1: config 0 descriptor?? [ 956.022316][T17048] cp210x 2-1:0.0: cp210x converter detected [ 956.044937][ T24] usb 6-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 956.059655][ T24] usb 6-1: found format II with max.bitrate = 249, frame size=9 [ 956.069888][ T24] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 956.087115][ T24] usb 6-1: unit 3 not found! [ 956.171450][ T24] usb 6-1: USB disconnect, device number 90 [ 956.285589][T15837] udevd[15837]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.676483][T17048] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 956.689668][T17048] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 956.708573][T17048] usb 2-1: cp210x converter now attached to ttyUSB0 [ 956.804473][T17048] usb 2-1: USB disconnect, device number 69 [ 956.853409][T17048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 956.880882][T17048] cp210x 2-1:0.0: device disconnected [ 957.355198][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 957.384693][T18054] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 957.398164][T18071] netlink: 'syz.1.3198': attribute type 5 has an invalid length. [ 957.420921][T18066] netlink: 'syz.7.3195': attribute type 13 has an invalid length. [ 957.454358][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 957.491988][T18054] qrtr: Invalid version 6 [ 958.056477][ T24] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 958.182698][T18083] sctp: [Deprecated]: syz.5.3201 (pid 18083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.182698][T18083] Use struct sctp_sack_info instead [ 958.254496][ T24] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 958.274786][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.325745][ T24] usb 7-1: config 0 descriptor?? [ 958.350782][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 958.594870][T18071] geneve2: entered promiscuous mode [ 958.615657][T18071] geneve2: entered allmulticast mode [ 958.668309][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 958.678442][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 958.719605][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 958.760073][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 958.791495][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 958.816337][ T24] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 958.827473][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 958.877282][ T24] usb 7-1: USB disconnect, device number 86 [ 959.238111][ T24] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 959.277500][T17047] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 959.376418][ T24] usb 7-1: device descriptor read/64, error -71 [ 959.439165][T17047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.500206][T17047] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 959.526607][T17047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.546296][T17047] usb 2-1: Product: syz [ 959.556596][T17047] usb 2-1: Manufacturer: syz [ 959.570043][T17047] usb 2-1: SerialNumber: syz [ 959.593914][T17047] usb 2-1: config 0 descriptor?? [ 959.616357][T17047] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 959.616436][ T24] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 959.660893][T17047] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 959.680197][T17047] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 959.809468][ T24] usb 7-1: device descriptor read/64, error -71 [ 959.822863][T17047] usb 2-1: USB disconnect, device number 70 [ 959.861188][T17047] garmin_gps 2-1:0.0: device disconnected [ 959.928076][ T24] usb usb7-port1: attempt power cycle [ 960.024597][T18098] kvm: pic: non byte write [ 960.278903][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3205'. [ 960.291315][ T24] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 960.318233][ T24] usb 7-1: device descriptor read/8, error -71 [ 960.383229][T18105] batman_adv: batadv0: Adding interface: dummy0 [ 960.400625][T18105] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.481334][T18105] batman_adv: batadv0: Interface activated: dummy0 [ 960.556790][ T24] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 960.577426][ T24] usb 7-1: device descriptor read/8, error -71 [ 960.586451][T18111] netlink: 'syz.5.3206': attribute type 10 has an invalid length. [ 960.689879][ T24] usb usb7-port1: unable to enumerate USB device [ 960.707280][T18107] batadv0: mtu less than device minimum [ 960.732345][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.747459][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.760334][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.772077][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.784357][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.797556][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.810685][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.823079][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.835800][T18107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 960.989095][T18111] batadv0: left allmulticast mode [ 961.019183][T18111] batadv0: left promiscuous mode [ 961.035265][T18111] bridge0: port 3(batadv0) entered disabled state [ 961.176027][ T5911] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 961.316930][ T5911] usb 4-1: device descriptor read/64, error -71 [ 961.382866][T18116] netlink: 'syz.1.3209': attribute type 10 has an invalid length. [ 961.406108][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3209'. [ 961.578221][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 961.716053][ T5911] usb 4-1: device descriptor read/64, error -71 [ 961.817938][T18137] syzkaller0: entered promiscuous mode [ 961.824474][T18137] syzkaller0: entered allmulticast mode [ 961.868309][ T5911] usb usb4-port1: attempt power cycle [ 962.243383][ T5911] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 962.477530][ T5911] usb 4-1: device not accepting address 36, error -71 [ 962.577781][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 962.602901][T18150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'. [ 962.649124][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 962.805927][T18154] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3219'. [ 962.942815][T18154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.981933][T18163] fuse: Bad value for 'fd' [ 962.995684][T18154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.126477][T17048] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 963.166188][ T5911] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 963.188560][T18167] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 963.211166][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.228275][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.272266][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.292465][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.310624][T17048] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 963.342575][T17048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.394823][T17048] usb 7-1: config 0 descriptor?? [ 963.424059][T17048] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 963.549287][ T5911] usb 4-1: usb_control_msg returned -71 [ 963.568636][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 963.668682][ T5911] usb 4-1: USB disconnect, device number 37 [ 963.827467][T17048] gspca_cpia1: usb_control_msg 03, error -71 [ 963.870173][T17048] gspca_cpia1: usb_control_msg 01, error -71 [ 963.915666][T17048] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 963.969144][T17048] usb 7-1: USB disconnect, device number 91 [ 964.181792][T18185] io-wq is not configured for unbound workers [ 964.199476][T18186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3230'. [ 964.287830][T18190] x_tables: duplicate underflow at hook 4 [ 964.366095][T17048] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 964.416307][ T29] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 964.515890][T17048] usb 7-1: device descriptor read/64, error -71 [ 964.609574][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 964.637772][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 964.656824][ T5911] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 964.682575][ T29] usb 6-1: config 11 has an invalid interface number: 9 but max is 0 [ 964.710419][ T29] usb 6-1: config 11 has no interface number 0 [ 964.731250][ T29] usb 6-1: config 11 interface 9 has no altsetting 0 [ 964.762855][ T29] usb 6-1: New USB device found, idVendor=4d03, idProduct=3a39, bcdDevice=ef.de [ 964.778284][T17048] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 964.821119][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.846527][ T29] usb 6-1: Product: syz [ 964.858730][ T29] usb 6-1: Manufacturer: syz [ 964.867693][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 964.884786][ T29] usb 6-1: SerialNumber: syz [ 964.918898][ T5911] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.950829][T17048] usb 7-1: device descriptor read/64, error -71 [ 964.961448][ T5911] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.994480][ T5911] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 965.012014][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.087227][T17048] usb usb7-port1: attempt power cycle [ 965.141936][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.153823][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 965.182447][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.194707][T18202] syzkaller1: entered promiscuous mode [ 965.205709][T18202] syzkaller1: entered allmulticast mode [ 965.214589][ T29] cdc_eem 6-1:11.9: probe with driver cdc_eem failed with error -22 [ 965.242044][ T29] usb 6-1: USB disconnect, device number 91 [ 965.328070][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 965.347463][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.359446][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.371817][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 965.389753][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 965.400537][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.436909][ T24] usb 4-1: config 0 descriptor?? [ 965.476048][T17048] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 965.492068][ T5911] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 965.521373][T17048] usb 7-1: device descriptor read/8, error -71 [ 965.678794][T18190] i2c i2c-1: unsupported multi-msg i2c transaction [ 965.790594][T17048] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 965.821007][T17048] usb 7-1: device descriptor read/8, error -71 [ 965.847342][ T5911] usb 2-1: USB disconnect, device number 71 [ 965.856137][ T809] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 965.943378][T17048] usb usb7-port1: unable to enumerate USB device [ 965.945438][ T24] hid_parser_main: 28 callbacks suppressed [ 965.945462][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 965.987501][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.005412][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.016151][ T809] usb 8-1: Using ep0 maxpacket: 16 [ 966.029131][ T36] net_ratelimit: 19 callbacks suppressed [ 966.029153][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 966.030976][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.060043][ T29] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 966.065083][ T809] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.076388][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.096976][ T809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.119418][T18200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.135316][ T809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.149084][T18200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.150194][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.181828][ T809] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 966.214212][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.225734][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.237735][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.247529][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 966.256654][ T809] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.263592][ T29] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.291968][ T24] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 966.306914][ T29] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.322074][ T24] corsair 0003:1B1C:1B3E.0028: failed to start in urb: -90 [ 966.347962][ T809] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.352931][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 966.372537][ T809] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.372782][ T24] corsair 0003:1B1C:1B3E.0028: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 966.396880][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 966.407088][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.432135][ T809] usb 8-1: Manufacturer: syz [ 966.440642][T18218] netlink: 484 bytes leftover after parsing attributes in process `syz.6.3238'. [ 966.457913][ T24] usb 4-1: USB disconnect, device number 38 [ 966.466234][ T809] usb 8-1: config 0 descriptor?? [ 966.479289][ T29] usb 6-1: config 0 descriptor?? [ 966.586054][T17437] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 966.757658][T18217] fido_id[18217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 966.876270][ T809] rc_core: IR keymap rc-hauppauge not found [ 966.890022][ T809] Registered IR keymap rc-empty [ 966.912987][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 966.950393][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 966.999767][T18224] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3240'. [ 967.002165][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 967.074432][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input60 [ 967.108498][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 967.114987][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 967.126728][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 967.186396][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.202320][ T29] usb 6-1: USB disconnect, device number 92 [ 967.217104][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.256661][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.286081][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.317677][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.369449][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.422680][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.460757][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.480558][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 967.480581][ T30] audit: type=1326 audit(1777070409.925:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.519002][ T30] audit: type=1326 audit(1777070409.925:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.547596][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.558141][ T30] audit: type=1326 audit(1777070409.935:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.584871][ T809] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 967.613297][ T30] audit: type=1326 audit(1777070409.935:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.650885][ T809] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 967.666746][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 967.704431][ T809] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 967.732227][ T809] usb 8-1: USB disconnect, device number 109 [ 967.741892][ T30] audit: type=1326 audit(1777070410.015:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.780300][ T30] audit: type=1326 audit(1777070410.055:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.809340][ T30] audit: type=1326 audit(1777070410.055:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 967.879466][ T30] audit: type=1326 audit(1777070410.055:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 968.015130][ T30] audit: type=1326 audit(1777070410.095:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd7bf15d60e code=0x7ffc0000 [ 968.065504][ T30] audit: type=1326 audit(1777070410.095:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18235 comm="syz.3.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 968.196763][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 968.250223][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 968.275941][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3245'. [ 968.637982][ T29] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 968.671167][T18255] FAULT_INJECTION: forcing a failure. [ 968.671167][T18255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 968.686374][T18255] CPU: 1 UID: 0 PID: 18255 Comm: syz.7.3244 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.686409][T18255] Tainted: [L]=SOFTLOCKUP [ 968.686417][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 968.686430][T18255] Call Trace: [ 968.686439][T18255] [ 968.686446][T18255] dump_stack_lvl+0xe8/0x150 [ 968.686485][T18255] should_fail_ex+0x412/0x560 [ 968.686518][T18255] prepare_alloc_pages+0x22a/0x650 [ 968.686548][T18255] __alloc_frozen_pages_noprof+0x12f/0x380 [ 968.686578][T18255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 968.686609][T18255] ? __pfx_policy_nodemask+0x10/0x10 [ 968.686634][T18255] ? try_to_migrate+0x317/0x3f0 [ 968.686666][T18255] ? __pfx_try_to_migrate+0x10/0x10 [ 968.686698][T18255] alloc_pages_mpol+0x235/0x490 [ 968.686738][T18255] folio_alloc_mpol_noprof+0x39/0x160 [ 968.686775][T18255] migrate_pages_batch+0xa55/0x4ca0 [ 968.686826][T18255] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 968.686865][T18255] ? __pfx_migrate_pages_batch+0x10/0x10 [ 968.686933][T18255] ? __pfx_walk_pgd_range+0x10/0x10 [ 968.686970][T18255] migrate_pages+0x1c74/0x2a10 [ 968.687018][T18255] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 968.687049][T18255] ? __flush_work+0x100/0xc50 [ 968.687078][T18255] ? __pfx_migrate_pages+0x10/0x10 [ 968.687105][T18255] ? __flush_work+0x100/0xc50 [ 968.687140][T18255] ? mas_next_slot+0xc3b/0xd10 [ 968.687194][T18255] __se_sys_mbind+0xe89/0x10f0 [ 968.687230][T18255] ? __pfx___se_sys_mbind+0x10/0x10 [ 968.687283][T18255] ? fput+0xa0/0xd0 [ 968.687304][T18255] ? ksys_write+0x242/0x270 [ 968.687334][T18255] ? __pfx_ksys_write+0x10/0x10 [ 968.687365][T18255] ? __x64_sys_mbind+0x21/0xf0 [ 968.687390][T18255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.687413][T18255] do_syscall_64+0x15f/0xf80 [ 968.687440][T18255] ? trace_irq_disable+0x3b/0x140 [ 968.687467][T18255] ? clear_bhb_loop+0x40/0x90 [ 968.687490][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.687512][T18255] RIP: 0033:0x7ff0dd39cdd9 [ 968.687532][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.687550][T18255] RSP: 002b:00007ff0db5b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 968.687575][T18255] RAX: ffffffffffffffda RBX: 00007ff0dd616180 RCX: 00007ff0dd39cdd9 [ 968.687591][T18255] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 968.687605][T18255] RBP: 00007ff0db5b4090 R08: 0000000000000000 R09: 0000000000000002 [ 968.687619][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.687631][T18255] R13: 00007ff0dd616218 R14: 00007ff0dd616180 R15: 00007ff0dd73fa48 [ 968.687665][T18255] [ 968.989300][T17437] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 969.100585][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 969.101455][ T809] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 969.108941][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 969.132455][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.143298][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.178350][T18256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.192659][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 969.218660][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 969.260860][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 969.297843][ T809] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 969.309588][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.309793][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.350517][ T809] usb 2-1: config 0 descriptor?? [ 969.366186][ T809] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 969.382704][ T29] usb 4-1: config 0 descriptor?? [ 969.410373][T18250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 969.516380][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 969.778675][ T809] gspca_cpia1: usb_control_msg 03, error -71 [ 969.786992][ T809] gspca_cpia1: usb_control_msg 01, error -71 [ 969.802510][ T809] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 969.839557][ T809] usb 2-1: USB disconnect, device number 72 [ 969.934069][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.959265][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.994030][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.013674][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.036957][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.054538][T18269] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.3246'. [ 970.055731][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.083112][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 970.104101][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3246'. [ 970.147618][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.159827][ T5911] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 970.172378][ T809] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 970.192567][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.326145][ T809] usb 2-1: device descriptor read/64, error -71 [ 970.421345][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.485269][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.596081][ T809] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 970.636257][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 970.736575][ T809] usb 2-1: device descriptor read/64, error -71 [ 970.849178][ T809] usb usb2-port1: attempt power cycle [ 971.176421][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 971.195996][ T809] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 971.228259][ T809] usb 2-1: device descriptor read/8, error -71 [ 971.442383][ T5851] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 971.442932][ T29] usb 4-1: USB disconnect, device number 39 [ 971.487752][ T809] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 971.517436][ T809] usb 2-1: device descriptor read/8, error -71 [ 971.615439][T18288] loop2: detected capacity change from 0 to 7 [ 971.629460][T18288] Dev loop2: unable to read RDB block 7 [ 971.636831][ T809] usb usb2-port1: unable to enumerate USB device [ 971.671268][T18288] loop2: AHDI p1 p2 p3 p4 [ 971.677348][T18288] loop2: partition table partially beyond EOD, truncated [ 971.704339][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 971.725329][T18288] loop2: p1 start 1601398130 is beyond EOD, truncated [ 971.752944][T18288] loop2: p2 start 1702059890 is beyond EOD, truncated [ 971.769456][T18288] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 971.796086][ T5911] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 971.843611][T18295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'. [ 971.946279][ T5911] usb 7-1: device descriptor read/64, error -71 [ 971.999499][T15837] udevd[15837]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 972.021490][T18297] syzkaller0: entered promiscuous mode [ 972.033444][T18297] syzkaller0: entered allmulticast mode [ 972.080066][ T5911] usb usb7-port1: attempt power cycle [ 972.280566][T18286] netlink: 'syz.5.3255': attribute type 5 has an invalid length. [ 972.290638][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 972.456033][ T5911] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 972.475739][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3263'. [ 972.501664][ T5911] usb 7-1: device descriptor read/8, error -71 [ 972.575968][ T809] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 972.760571][ T809] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 972.776188][ T809] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 972.789734][ T5911] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 972.804039][ T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.827599][ T5911] usb 7-1: device descriptor read/8, error -71 [ 972.855127][ T809] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 972.867473][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 972.946704][ T5911] usb usb7-port1: unable to enumerate USB device [ 973.240522][T18318] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3267'. [ 973.414628][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 973.626084][T17048] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 973.687574][ T808] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 973.810093][T17048] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 973.822224][T17048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.833961][T17048] usb 6-1: config 0 descriptor?? [ 973.847073][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 973.848594][T17048] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 973.866543][ T808] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 973.876858][ T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 973.890853][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 973.902515][ T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 973.915593][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 973.926938][ T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.942438][ T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 973.952402][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.957311][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 973.981836][ T809] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 973.992958][ T809] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 974.003040][ T809] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 974.018881][ T809] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 974.226929][ T808] usb 2-1: usb_control_msg returned -32 [ 974.235110][ T808] usbtmc 2-1:16.0: can't read capabilities [ 974.260930][T17048] gspca_cpia1: usb_control_msg 03, error -71 [ 974.284526][T17048] gspca_cpia1: usb_control_msg 01, error -71 [ 974.309205][T17048] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 974.333504][T17048] usb 6-1: USB disconnect, device number 93 [ 974.345722][T18326] netlink: 484 bytes leftover after parsing attributes in process `syz.6.3270'. [ 974.506486][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 974.612966][T18333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3272'. [ 974.676006][T17048] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 974.694245][T18332] QAT: failed to copy from user cfg_data. [ 974.772583][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 974.784226][T18332] usbtmc 2-1:16.0: Unable to send data, error -71 [ 974.793447][T18332] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 974.817524][ T809] usb 2-1: USB disconnect, device number 77 [ 974.826059][T17048] usb 6-1: device descriptor read/64, error -71 [ 975.026391][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 975.075990][T17048] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 975.226221][T17048] usb 6-1: device descriptor read/64, error -71 [ 975.336820][T17048] usb usb6-port1: attempt power cycle [ 975.355725][ T809] usb 8-1: USB disconnect, device number 110 [ 975.550792][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 975.705961][T17048] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 975.774738][T17048] usb 6-1: device descriptor read/8, error -71 [ 975.812997][ T5911] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 975.995916][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 976.005502][ T5911] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 976.040042][T17048] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 976.059148][ T5911] usb 7-1: config 179 has no interface number 0 [ 976.077772][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 976.080535][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 976.133517][T17048] usb 6-1: device descriptor read/8, error -71 [ 976.197090][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 976.268041][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 976.282721][T17048] usb usb6-port1: unable to enumerate USB device [ 976.312647][ T5911] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 976.327038][ T5911] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 976.342114][ T5911] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 976.353217][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.417266][T18342] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 976.657207][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 976.885569][T18365] netlink: 'syz.1.3280': attribute type 29 has an invalid length. [ 976.951877][T18365] netlink: 'syz.1.3280': attribute type 29 has an invalid length. [ 976.998226][T18367] loop5: detected capacity change from 0 to 7 [ 977.005941][T18342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.027538][T18365] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3280'. [ 977.052006][T18367] Dev loop5: unable to read RDB block 7 [ 977.073061][T18342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.087015][T18367] loop5: unable to read partition table [ 977.143800][T18367] loop5: partition table beyond EOD, truncated [ 977.146242][T17049] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input61 [ 977.172026][T18367] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 977.286880][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 977.608828][T17048] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 977.725331][ T29] usb 7-1: USB disconnect, device number 100 [ 977.725358][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 977.742404][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 977.785349][T14922] udevd[14922]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 977.836043][T17048] usb 2-1: Invalid ep0 maxpacket: 64 [ 977.837602][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 978.046400][T17048] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 978.246133][T17048] usb 2-1: Invalid ep0 maxpacket: 64 [ 978.261745][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3286'. [ 978.273566][T17048] usb usb2-port1: attempt power cycle [ 978.417457][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 978.579029][T18395] netlink: 'syz.6.3288': attribute type 2 has an invalid length. [ 978.626906][T18395] netlink: 'syz.6.3288': attribute type 2 has an invalid length. [ 978.651839][T17048] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 978.678786][T17048] usb 2-1: Invalid ep0 maxpacket: 64 [ 978.825992][T17048] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 978.868578][T17048] usb 2-1: Invalid ep0 maxpacket: 64 [ 978.883833][T17048] usb usb2-port1: unable to enumerate USB device [ 978.966287][ T29] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 978.989862][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 979.177899][ T29] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 979.197152][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.228077][ T29] usb 4-1: config 0 descriptor?? [ 979.253254][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 979.409068][T18409] loop5: detected capacity change from 0 to 7 [ 979.418681][T18409] Dev loop5: unable to read RDB block 7 [ 979.424418][T18409] loop5: unable to read partition table [ 979.433267][T18409] loop5: partition table beyond EOD, truncated [ 979.442283][T18409] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 979.556877][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 979.692835][ T29] gspca_cpia1: usb_control_msg 03, error -71 [ 979.721111][ T29] gspca_cpia1: usb_control_msg 01, error -71 [ 979.743060][ T29] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 979.768870][ T29] usb 4-1: USB disconnect, device number 40 [ 980.086541][ T29] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 980.137286][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 980.226469][ T29] usb 4-1: device descriptor read/64, error -71 [ 980.306201][T17049] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 980.431255][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3300'. [ 980.471665][T17049] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 980.476447][ T29] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 980.495302][T17049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.508478][T18431] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 980.525481][T17049] usb 7-1: Product: syz [ 980.533069][T17049] usb 7-1: Manufacturer: syz [ 980.543296][T17049] usb 7-1: SerialNumber: syz [ 980.564089][T17049] usb 7-1: config 0 descriptor?? [ 980.605080][T17049] hub 7-1:0.0: bad descriptor, ignoring hub [ 980.618848][T17049] hub 7-1:0.0: probe with driver hub failed with error -5 [ 980.629990][ T29] usb 4-1: device descriptor read/64, error -71 [ 980.667110][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 980.760206][T18435] loop9: detected capacity change from 0 to 7 [ 980.773345][ T29] usb usb4-port1: attempt power cycle [ 980.784445][T18435] Dev loop9: unable to read RDB block 7 [ 980.791217][T18435] loop9: unable to read partition table [ 980.802689][T17049] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 980.812744][T18435] loop9: partition table beyond EOD, truncated [ 980.829167][T18435] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 980.840384][T17049] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.854083][T17049] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 980.885003][T17049] usb 7-1: media controller created [ 980.946652][T17049] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.102040][T18437] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 981.111900][T18437] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 981.127141][T18437] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 981.137997][T18437] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 981.147212][T18437] kvm: requested 76266 ns i8254 timer period limited to 200000 ns [ 981.166581][ T29] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 981.207605][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 981.226766][ T29] usb 4-1: device descriptor read/8, error -71 [ 981.253817][T18437] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 981.340014][T17049] DVB: Unable to find symbol dib7000p_attach() [ 981.357445][T17049] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 981.466406][ T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 981.508532][ T29] usb 4-1: device descriptor read/8, error -71 [ 981.547070][T17049] rc_core: IR keymap rc-dib0700-rc5 not found [ 981.565217][T17049] Registered IR keymap rc-empty [ 981.565522][T18453] kvm: pic: non byte write [ 981.600538][T17049] dvb-usb: could not initialize remote control. [ 981.618560][T17049] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 981.631167][ T29] usb usb4-port1: unable to enumerate USB device [ 981.678620][T18456] loop5: detected capacity change from 0 to 7 [ 981.682427][T17049] usb 7-1: USB disconnect, device number 101 [ 981.710102][T18456] Dev loop5: unable to read RDB block 7 [ 981.750013][T18456] loop5: unable to read partition table [ 981.756795][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 981.800147][T18456] loop5: partition table beyond EOD, truncated [ 981.820570][T18456] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 981.952030][T17049] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 982.176395][ T808] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 982.266981][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 982.347662][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.385271][ T808] usb 4-1: config 0 has no interfaces? [ 982.403642][ T808] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.414975][T18468] loop2: detected capacity change from 0 to 7 [ 982.422632][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.435056][T18468] Dev loop2: unable to read RDB block 7 [ 982.443530][T18468] loop2: AHDI p1 p3 [ 982.457308][ T808] usb 4-1: config 0 descriptor?? [ 982.464676][T18468] loop2: partition table partially beyond EOD, truncated [ 982.507612][T18468] loop2: p1 start 2349049979 is beyond EOD, truncated [ 982.836798][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 982.861196][T18479] batadv_slave_1: entered promiscuous mode [ 983.013445][T18481] kvm: pic: non byte write [ 983.125251][T18478] batadv_slave_1: left promiscuous mode [ 983.201543][ T808] usb 4-1: USB disconnect, device number 45 [ 983.426358][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 983.556798][ T29] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 983.733797][ T29] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 983.756487][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.802158][ T29] usb 2-1: config 0 descriptor?? [ 983.845483][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 984.006358][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 984.067356][T18497] loop5: detected capacity change from 0 to 7 [ 984.091987][T18497] Dev loop5: unable to read RDB block 7 [ 984.110474][T18497] loop5: unable to read partition table [ 984.130828][T18497] loop5: partition table beyond EOD, truncated [ 984.158066][T18497] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 984.250409][ T29] gspca_cpia1: usb_control_msg 03, error -71 [ 984.296437][ T29] gspca_cpia1: usb_control_msg 01, error -71 [ 984.327724][ T29] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 984.362613][ T29] usb 2-1: USB disconnect, device number 82 [ 984.556878][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 984.736642][ T29] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 984.886710][ T29] usb 2-1: device descriptor read/64, error -71 [ 985.104806][T18512] loop2: detected capacity change from 0 to 7 [ 985.117150][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 985.150289][T18512] Dev loop2: unable to read RDB block 7 [ 985.157273][ T29] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 985.178708][T18512] loop2: AHDI p1 p3 [ 985.196066][T18512] loop2: partition table partially beyond EOD, truncated [ 985.217995][T18512] loop2: p1 start 2349049979 is beyond EOD, truncated [ 985.336524][ T29] usb 2-1: device descriptor read/64, error -71 [ 985.456910][ T29] usb usb2-port1: attempt power cycle [ 985.645010][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3325'. [ 985.682424][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3325'. [ 985.694912][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 985.742974][T18520] syzkaller0: entered promiscuous mode [ 985.759499][T18520] syzkaller0: entered allmulticast mode [ 985.839951][ T29] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 985.882005][ T29] usb 2-1: device descriptor read/8, error -71 [ 986.126580][ T29] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 986.159918][T18519] netdevsim netdevsim7 netdevsim0: refused to change device tx_queue_len [ 986.173731][ T29] usb 2-1: device descriptor read/8, error -71 [ 986.191506][T18519] qrtr: Invalid version 7 [ 986.279140][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 986.306493][ T29] usb usb2-port1: unable to enumerate USB device [ 986.622100][T18539] netlink: zone id is out of range [ 986.638282][T18538] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3331'. [ 986.673909][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3331'. [ 986.861957][T18261] net_ratelimit: 18 callbacks suppressed [ 986.861974][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 986.918463][T18539] netlink: set zone limit has 4 unknown bytes [ 987.466617][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 988.018426][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 988.606370][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 989.168139][T18581] kvm: pic: non byte write [ 989.216998][ T29] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 989.238364][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 989.398319][ T29] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 989.415614][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.473332][ T29] usb 7-1: config 0 descriptor?? [ 989.502711][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 989.785959][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 989.908850][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 989.918810][ T29] gspca_cpia1: usb_control_msg 03, error -71 [ 989.941085][ T29] gspca_cpia1: usb_control_msg 01, error -71 [ 989.955586][ T29] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 989.994107][ T29] usb 7-1: USB disconnect, device number 102 [ 990.098313][ T24] usb 4-1: config 0 has no interfaces? [ 990.108054][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 990.149020][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.179475][ T24] usb 4-1: Product: syz [ 990.188103][T18591] syzkaller0: entered promiscuous mode [ 990.194520][ T24] usb 4-1: Manufacturer: syz [ 990.203640][ T24] usb 4-1: SerialNumber: syz [ 990.211612][T18591] syzkaller0: entered allmulticast mode [ 990.224260][ T24] usb 4-1: config 0 descriptor?? [ 990.311432][T18592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.326434][ T29] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 990.358326][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 990.386399][T18592] syzkaller1: entered promiscuous mode [ 990.403699][T18592] syzkaller1: entered allmulticast mode [ 990.527207][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 990.535307][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.552428][ T29] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 990.569481][ T29] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 990.580306][ T29] usb 7-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 990.591315][ T29] usb 7-1: Manufacturer: syz [ 990.604960][ T29] usb 7-1: config 0 descriptor?? [ 990.622333][ T24] usb 4-1: USB disconnect, device number 46 [ 990.914540][T18261] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 991.293227][T17049] usb 7-1: USB disconnect, device number 103 [ 991.468493][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 991.774862][T18615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.004733][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 992.532284][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 993.056002][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 993.258262][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.268235][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.575950][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 994.096062][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 994.628121][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 995.163443][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 995.713655][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 996.247567][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 996.773677][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 997.306037][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 997.509012][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.528953][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.561635][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.583782][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.591304][T17049] usb 8-1: new low-speed USB device number 111 using dummy_hcd [ 997.601325][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.749748][T17049] usb 8-1: unable to get BOS descriptor or descriptor too short [ 997.759505][T17049] usb 8-1: config 2 has an invalid interface number: 32 but max is 0 [ 997.768487][T17049] usb 8-1: config 2 has no interface number 0 [ 997.774694][T17049] usb 8-1: config 2 interface 32 has no altsetting 0 [ 997.786641][T17049] usb 8-1: string descriptor 0 read error: -22 [ 997.793797][T17049] usb 8-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=3f.a4 [ 997.803947][T17049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.823805][T17049] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 997.836796][ T24] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 997.854792][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 997.968226][ T808] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 998.008357][ T24] usb 2-1: config index 0 descriptor too short (expected 80, got 68) [ 998.024834][T18625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.040777][ T24] usb 2-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 998.042542][T18625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.051428][ T24] usb 2-1: config 0 has no interfaces? [ 998.064368][T18638] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3352'. [ 998.064799][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 998.085556][ T809] usb 8-1: USB disconnect, device number 111 [ 998.129310][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.169023][ T808] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 998.178871][ T808] usb 4-1: config 8 has no interface number 0 [ 998.186473][ T24] usb 2-1: config 0 descriptor?? [ 998.195098][ T808] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 998.228780][ T808] usb 4-1: config 8 interface 223 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 998.242242][ T808] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 998.363202][ T808] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 998.376013][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 998.382688][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.400625][ T808] usb 4-1: Product: syz [ 998.405397][ T808] usb 4-1: Manufacturer: syz [ 998.433491][ T808] usb 4-1: SerialNumber: syz [ 998.446648][T18634] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 998.900484][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 999.449152][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 999.648030][ T5851] Bluetooth: hci3: command tx timeout [ 999.977308][ T6963] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1000.505480][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1001.102169][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1001.645149][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1001.736128][ T5851] Bluetooth: hci3: command tx timeout [ 1002.189568][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1002.738360][ T6963] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1003.285228][ T6963] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1003.300645][ T24] usb 2-1: string descriptor 0 read error: -32 [ 1003.823189][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1003.823751][ T5851] Bluetooth: hci3: command tx timeout [ 1004.346606][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1004.414378][ T808] usb 4-1: USB disconnect, device number 47 [ 1004.487063][T18642] bond0: (slave syz_tun): Releasing backup interface [ 1004.866652][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1004.977733][ T809] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1005.042439][T18660] kvm: pic: non byte write [ 1005.147640][ T809] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1005.161369][T18261] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.174451][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.194213][ T809] usb 7-1: config 0 descriptor?? [ 1005.248859][ T809] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1005.416241][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1005.461810][ T29] usb 2-1: USB disconnect, device number 87 [ 1005.566575][ T808] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1005.592477][T18261] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.653302][ T809] gspca_cpia1: usb_control_msg 03, error -71 [ 1005.668708][ T809] gspca_cpia1: usb_control_msg 01, error -71 [ 1005.675469][ T809] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1005.730587][ T809] usb 7-1: USB disconnect, device number 104 [ 1005.757227][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1005.775581][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.804503][ T808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1005.836580][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.868033][ T808] usb 4-1: config 0 descriptor?? [ 1005.886225][ T5851] Bluetooth: hci3: command tx timeout [ 1005.948831][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1006.017071][T18261] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.083242][T18636] chnl_net:caif_netlink_parms(): no params data found [ 1006.106056][ T809] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1006.276398][ T809] usb 7-1: Using ep0 maxpacket: 8 [ 1006.300593][ T809] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.333235][ T808] hid_parser_main: 222 callbacks suppressed [ 1006.333254][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.358629][ T809] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.377226][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.397482][ T809] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1006.399458][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.434551][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.451755][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.454762][ T809] usb 7-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1006.469043][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.480703][ T808] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 1006.498395][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1006.544251][ T809] usb 7-1: Manufacturer: syz [ 1006.571561][ T808] isku 0003:1E7D:319C.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1006.593888][ T809] usb 7-1: config 0 descriptor?? [ 1006.626808][T18636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.706382][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.753424][T18636] bridge_slave_0: entered allmulticast mode [ 1006.792748][T18636] bridge_slave_0: entered promiscuous mode [ 1006.815983][T18667] netlink: 'syz.3.3362': attribute type 10 has an invalid length. [ 1006.845404][T18636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.863484][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.897706][T18636] bridge_slave_1: entered allmulticast mode [ 1006.928760][T18636] bridge_slave_1: entered promiscuous mode [ 1006.977777][T18667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.009905][T18667] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1007.046632][T18667] team0: Failed to send options change via netlink (err -105) [ 1007.057003][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1007.082645][T18667] team0: Port device netdevsim0 added [ 1007.122600][T17048] usb 4-1: USB disconnect, device number 48 [ 1007.288961][T18636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.311360][T17049] usb 7-1: USB disconnect, device number 105 [ 1007.615927][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1007.632138][T18636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.059454][T18636] team0: Port device team_slave_0 added [ 1008.088560][T18636] team0: Port device team_slave_1 added [ 1008.113217][T18697] netlink: 'syz.3.3367': attribute type 3 has an invalid length. [ 1008.186358][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1008.343485][T18636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.366593][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.441683][T18636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.569001][T18636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.604050][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.746045][T18636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.780857][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1008.876562][T18261] bridge_slave_1: left allmulticast mode [ 1008.911544][T18261] bridge_slave_1: left promiscuous mode [ 1008.949964][T18261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.022582][T18261] bridge_slave_0: left allmulticast mode [ 1009.048990][T18261] bridge_slave_0: left promiscuous mode [ 1009.072902][T18261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.339218][T18716] fuse: Bad value for 'user_id' [ 1009.358941][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1009.383388][T18716] fuse: Bad value for 'user_id' [ 1009.484096][T18721] fuse: Bad value for 'user_id' [ 1009.519789][T18721] fuse: Bad value for 'user_id' [ 1009.527986][ T809] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1009.718290][ T809] usb 4-1: config 9 interface 0 has no altsetting 0 [ 1009.756415][ T809] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1009.811507][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.912664][ T809] usb 4-1: Product: syz [ 1009.926005][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1009.950891][ T809] usb 4-1: Manufacturer: syz [ 1009.968998][ T809] usb 4-1: SerialNumber: syz [ 1010.518974][ T6969] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1010.636980][ T24] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1010.717452][T17049] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1010.808437][ T24] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1010.824760][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.863934][ T24] usb 7-1: config 0 descriptor?? [ 1010.904983][T17049] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1010.921649][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1010.925352][T17049] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.962127][T17049] usb 8-1: config 220 has no interface number 2 [ 1010.970039][T17049] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1010.984063][T17049] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1010.995083][T17049] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1011.004508][T17049] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1011.025393][T17049] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1011.047584][T17049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.063999][T17049] usb 8-1: Product: syz [ 1011.077276][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1011.078140][T17049] usb 8-1: Manufacturer: syz [ 1011.121044][T17049] usb 8-1: SerialNumber: syz [ 1011.181359][ T809] snd-usb-caiaq 4-1:9.0: can't set alt interface. [ 1011.196873][ T809] usb 4-1: unable to init card! (ret=-5) [ 1011.245245][ T809] snd-usb-caiaq 4-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1011.315528][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 1011.315621][ T809] usb 4-1: USB disconnect, device number 49 [ 1011.323697][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 1011.379936][ T5506] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1011.382206][ T24] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1011.423038][ T24] usb 7-1: USB disconnect, device number 106 [ 1011.426398][T17049] usb 8-1: selecting invalid altsetting 0 [ 1011.459463][T18261] tipc: Left network mode [ 1011.552495][T17049] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1011.598515][T17049] uvcvideo 8-1:220.0: No valid video chain found. [ 1011.641746][T18636] hsr_slave_0: entered promiscuous mode [ 1011.649541][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1011.667079][T18636] hsr_slave_1: entered promiscuous mode [ 1011.699399][T18636] debugfs: 'hsr0' already exists in 'hsr' [ 1011.708610][T18636] Cannot create hsr debugfs directory [ 1011.726891][T17049] usb 8-1: selecting invalid altsetting 0 [ 1011.755997][T17049] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1011.758611][ T24] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1011.830094][T17049] usb 8-1: USB disconnect, device number 112 [ 1011.977518][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1011.998522][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.023912][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1012.097135][ T24] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1012.120438][ T24] usb 7-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1012.173640][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3377'. [ 1012.191593][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1012.191861][ T24] usb 7-1: Manufacturer: syz [ 1012.325554][ T24] usb 7-1: config 0 descriptor?? [ 1012.856071][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1013.069317][ T5896] usb 7-1: USB disconnect, device number 107 [ 1013.115950][ T24] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1013.288912][T18779] binder: 18777:18779 ioctl 402c5342 2000000000c0 returned -22 [ 1013.306415][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1013.314776][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.345698][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.350649][T18773] syzkaller0: entered promiscuous mode [ 1013.374423][T18773] syzkaller0: entered allmulticast mode [ 1013.382097][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1013.397211][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1013.440080][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.501715][ T24] usb 8-1: config 0 descriptor?? [ 1013.531445][ T24] hub 8-1:0.0: USB hub found [ 1013.959942][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1014.022531][ T24] hub 8-1:0.0: 26 ports detected [ 1014.046109][ T24] hub 8-1:0.0: insufficient power available to use all downstream ports [ 1014.575177][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1014.889092][ T24] usb 8-1: USB disconnect, device number 113 [ 1015.106311][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1015.676530][T18260] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1016.199675][ T6963] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1016.246012][ T24] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1016.416183][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1016.439414][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.466893][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.478026][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1016.487890][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.528839][ T24] usb 7-1: config 0 descriptor?? [ 1016.554274][ T24] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 1016.569844][ T24] usbhid 7-1:0.0: can't add hid device: -22 [ 1016.581620][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 1016.778488][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1017.309851][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1017.875392][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1018.414739][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1018.958974][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1018.990759][ T809] usb 7-1: USB disconnect, device number 108 [ 1019.384876][T18821] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1019.483994][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1020.015983][ T47] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1020.537584][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1021.069084][ T6965] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1021.308663][ T5506] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1021.327138][T18802] netdevsim netdevsim7 netdevsim0: refused to change device tx_queue_len [ 1021.460953][T18823] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1021.501073][T18823] bond0 (unregistering): Released all slaves [ 1021.592222][ T6967] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1021.657760][T18834] program syz.6.3392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.756692][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1021.795249][T18261] hsr_slave_0: left promiscuous mode [ 1021.819346][T18261] hsr_slave_1: left promiscuous mode [ 1021.833594][T18261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.848732][T18261] batadv0: mtu less than device minimum [ 1021.859512][T18261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.861446][T18261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.887063][T18261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.891793][T18261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.912130][T18261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.913109][T18261] batman_adv: batadv0: Interface deactivated: dummy0 [ 1021.913134][T18261] batman_adv: batadv0: Removing interface: dummy0 [ 1021.934483][ T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1021.934521][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.939283][ T24] usb 2-1: config 0 descriptor?? [ 1021.947136][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1021.955110][T18261] veth1_macvtap: left promiscuous mode [ 1021.955152][T18261] veth0_macvtap: left promiscuous mode [ 1021.955274][T18261] veth1_vlan: left promiscuous mode [ 1021.955342][T18261] veth0_vlan: left promiscuous mode [ 1022.359238][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 1022.372960][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 1022.388110][ T24] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1022.406992][ T24] usb 2-1: USB disconnect, device number 88 [ 1022.501825][T18261] team0 (unregistering): Port device team_slave_1 removed [ 1022.520577][T18261] team0 (unregistering): Port device team_slave_0 removed [ 1022.692044][T18636] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1022.702311][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.721431][T18636] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1022.750839][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.767275][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1022.824157][T18636] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1022.913578][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.963148][T18636] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1023.003058][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1023.018845][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.037500][T18636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.066444][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 1023.102446][ T24] usb 2-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1023.180913][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1023.221294][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1023.272820][ T24] usb 2-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1023.311036][ T24] usb 2-1: Manufacturer: syz [ 1023.388953][ T24] usb 2-1: config 0 descriptor?? [ 1023.440924][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1023.504242][T18261] IPVS: stop unused estimator thread 0... [ 1023.580163][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.730744][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1023.730765][ T30] audit: type=1326 audit(1777070466.185:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 1023.766986][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.845095][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.852546][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.896215][ T30] audit: type=1326 audit(1777070466.185:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 1023.955974][ T30] audit: type=1326 audit(1777070466.185:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 1024.019053][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.026482][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.097849][ T30] audit: type=1326 audit(1777070466.185:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 1024.145046][ T809] usb 2-1: USB disconnect, device number 89 [ 1024.254820][ T30] audit: type=1326 audit(1777070466.225:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.3.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf19cdd9 code=0x7ffc0000 [ 1024.333496][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.576341][T18636] veth0_vlan: entered promiscuous mode [ 1024.669915][T18636] veth1_vlan: entered promiscuous mode [ 1024.881604][T18636] veth0_macvtap: entered promiscuous mode [ 1024.938991][T18636] veth1_macvtap: entered promiscuous mode [ 1025.154176][T18636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.221191][T18636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.278223][ T5506] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1025.356550][ T47] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.374344][ T47] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.401830][ T47] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.439130][ T47] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.787998][ T6967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.831392][ T6967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.024062][ T6967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.049852][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1026.086683][ T6967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.442452][T18909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1026.483100][T18909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1026.559286][T18909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.577600][T18909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1026.786163][T18932] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1026.816809][T18933] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1026.826419][T18909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1026.878446][T18909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1026.891166][T18909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1026.935389][T18909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1027.395152][ T5506] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1027.505979][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1027.696011][ T29] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1027.713138][ T24] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1027.734295][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.784890][ T24] usb 4-1: config 0 descriptor?? [ 1027.821791][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1027.886365][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1027.901926][ T29] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1027.926390][ T29] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1027.951544][ T29] usb 7-1: config 0 has no interface number 0 [ 1027.970913][ T29] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.994175][ T29] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1028.006722][ T29] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1028.068650][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1028.118286][ T29] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1028.149374][ T29] usb 7-1: Product: syz [ 1028.197203][ T29] usb 7-1: config 0 descriptor?? [ 1028.227748][T18948] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1028.251248][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 1028.279149][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 1028.298830][ T24] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1028.353141][ T24] usb 4-1: USB disconnect, device number 51 [ 1028.366050][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 1028.582845][T18967] syzkaller0: entered promiscuous mode [ 1028.603423][T18967] syzkaller0: entered allmulticast mode [ 1028.609708][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 1028.735891][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1028.899825][ T29] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input64 [ 1028.925933][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1028.926450][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.943289][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.017886][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 1029.082049][ T24] usb 4-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1029.122618][ T808] usb 7-1: USB disconnect, device number 109 [ 1029.128913][ C1] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1029.172388][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1029.223056][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1029.271552][ T24] usb 4-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1029.291969][ T24] usb 4-1: Manufacturer: syz [ 1029.312310][ T24] usb 4-1: config 0 descriptor?? [ 1029.339234][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1029.573255][T18975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.969727][ T5934] usb 4-1: USB disconnect, device number 52 [ 1030.225013][T18989] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3421'. [ 1030.277948][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3421'. [ 1030.446062][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.482649][T18996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.490274][T18996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.596197][ T808] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1030.686575][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.775068][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.795971][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 1030.804429][ T808] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1030.819987][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.830028][ T808] usb 7-1: config 0 has no interface number 0 [ 1030.841696][ T808] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1030.870817][ T808] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1030.902618][ T808] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1030.930824][ T808] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.969708][ T808] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1030.999120][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.016786][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 1031.024372][ T808] usb 7-1: Product: syz [ 1031.033964][ T808] usb 7-1: Manufacturer: syz [ 1031.045719][ T808] usb 7-1: SerialNumber: syz [ 1031.064251][ T808] usb 7-1: config 0 descriptor?? [ 1031.091326][ T808] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input65 [ 1031.328961][T18995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.346414][T18995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.420634][ T29] usb 7-1: USB disconnect, device number 110 [ 1031.550609][T18261] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.565113][T18261] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.580636][T18261] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.605898][T18261] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.711770][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3426'. [ 1031.745924][ T5934] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1031.891391][T19015] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3428'. [ 1031.906120][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 1031.917952][ T5934] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1031.930823][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1031.938284][ T5934] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1031.948621][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.972892][ T5934] usb 4-1: config 0 descriptor?? [ 1032.199413][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1032.209513][T19006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1032.215246][T19017] kvm: pic: non byte write [ 1032.508205][T19022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.725921][ T5896] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1032.775972][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 1032.783074][ T809] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 1032.830664][ T5934] corsair-cpro 0003:1B1C:0C10.002A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1032.888621][ T5896] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1032.933282][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.954704][ T809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1032.993213][ T809] usb 7-1: not running at top speed; connect to a high speed hub [ 1032.995099][ T5896] usb 9-1: config 0 descriptor?? [ 1033.052385][ T5934] corsair-cpro 0003:1B1C:0C10.002A: probe with driver corsair-cpro failed with error -5 [ 1033.064708][ T809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.082260][ T5896] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1033.098988][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 1033.105644][ T809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.124970][ T809] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1033.142727][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.153035][ T809] usb 7-1: Product: syz [ 1033.158015][ T809] usb 7-1: Manufacturer: syz [ 1033.163638][ T809] usb 7-1: SerialNumber: syz [ 1033.243553][ T24] usb 4-1: USB disconnect, device number 53 [ 1033.401208][ T809] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 1033.427829][ T809] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1033.436934][ T809] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1033.454464][ T809] usb 7-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1033.478800][ T809] usb 7-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1033.490122][ T5896] gspca_cpia1: usb_control_msg 03, error -71 [ 1033.521235][ T5896] gspca_cpia1: usb_control_msg 01, error -71 [ 1033.530193][ T809] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 1033.547681][ T5896] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1033.576109][ T809] usb 7-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1033.589121][ T5896] usb 9-1: USB disconnect, device number 2 [ 1033.606118][ T809] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 1033.646452][ T809] usb 7-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1033.664848][ T809] usb 7-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1033.731429][ T809] usb 7-1: USB disconnect, device number 111 [ 1033.907613][ T5896] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1034.096847][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 1034.120078][ T5896] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.152536][ T5896] usb 9-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 1034.157844][T19037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.189087][ T5934] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1034.214912][ T5896] usb 9-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1034.264937][ T5896] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1034.299870][ T5896] usb 9-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1034.324594][ T5896] usb 9-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1034.358545][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1034.373330][ T5896] usb 9-1: Manufacturer: syz [ 1034.385083][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 1034.415070][ T5934] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1034.429310][ T5896] usb 9-1: config 0 descriptor?? [ 1034.453579][ T5896] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1034.473974][ T5934] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1034.529823][ T5934] usb 4-1: string descriptor 0 read error: -22 [ 1034.552544][ T5934] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1034.587560][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.069979][ T5896] usb 4-1: USB disconnect, device number 54 [ 1035.219199][ T29] usb 9-1: USB disconnect, device number 3 [ 1035.270000][T19051] FAULT_INJECTION: forcing a failure. [ 1035.270000][T19051] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.286581][ T5934] usb 8-1: new full-speed USB device number 114 using dummy_hcd [ 1035.316811][T19051] CPU: 0 UID: 0 PID: 19051 Comm: syz.8.3438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.316848][T19051] Tainted: [L]=SOFTLOCKUP [ 1035.316857][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.316869][T19051] Call Trace: [ 1035.316878][T19051] [ 1035.316887][T19051] dump_stack_lvl+0xe8/0x150 [ 1035.316928][T19051] should_fail_ex+0x412/0x560 [ 1035.316965][T19051] should_failslab+0xa8/0x100 [ 1035.316995][T19051] __kmalloc_cache_noprof+0x88/0x660 [ 1035.317020][T19051] ? __lock_acquire+0x6b5/0x2cf0 [ 1035.317050][T19051] ? io_uring_alloc_task_context+0xa5/0x590 [ 1035.317077][T19051] io_uring_alloc_task_context+0xa5/0x590 [ 1035.317106][T19051] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1035.317129][T19051] ? get_pid_task+0x20/0x1f0 [ 1035.317151][T19051] ? get_pid_task+0x20/0x1f0 [ 1035.317182][T19051] __io_uring_add_tctx_node+0x459/0x5f0 [ 1035.317212][T19051] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1035.317229][T19051] ? __fget_files+0x2a/0x420 [ 1035.317252][T19051] ? __fget_files+0x2a/0x420 [ 1035.317274][T19051] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1035.317297][T19051] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 1035.317329][T19051] ? __fget_files+0x3a0/0x420 [ 1035.317353][T19051] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1035.317375][T19051] ? fput+0xa0/0xd0 [ 1035.317415][T19051] ? ksys_write+0x242/0x270 [ 1035.317443][T19051] ? __pfx_ksys_write+0x10/0x10 [ 1035.317471][T19051] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1035.317492][T19051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.317513][T19051] do_syscall_64+0x15f/0xf80 [ 1035.317539][T19051] ? trace_irq_disable+0x3b/0x140 [ 1035.317564][T19051] ? clear_bhb_loop+0x40/0x90 [ 1035.317589][T19051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.317609][T19051] RIP: 0033:0x7f0f0a79cdd9 [ 1035.317630][T19051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.317647][T19051] RSP: 002b:00007f0f0b624028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1035.317669][T19051] RAX: ffffffffffffffda RBX: 00007f0f0aa16090 RCX: 00007f0f0a79cdd9 [ 1035.317684][T19051] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 1035.317697][T19051] RBP: 00007f0f0b624090 R08: 0000000000000000 R09: 0000000000000204 [ 1035.317710][T19051] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1035.317723][T19051] R13: 00007f0f0aa16128 R14: 00007f0f0aa16090 R15: 00007f0f0ab3fa48 [ 1035.317755][T19051] [ 1035.900801][ T5934] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.909427][ T5934] usb 8-1: config 0 has no interface number 0 [ 1035.941834][ T5934] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.960583][ T5934] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.972071][ T5934] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1035.988478][ T5934] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1035.995362][ T5934] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1036.005064][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.060315][ T5934] usb 8-1: config 0 descriptor?? [ 1036.332548][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3440'. [ 1036.531413][ T5934] hid (null): global environment stack underflow [ 1036.813654][T19068] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1037.066100][ T29] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1037.236053][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 1037.280423][ T29] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1037.329773][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.379889][ T29] usb 7-1: config 0 descriptor?? [ 1037.467564][ T29] as10x_usb: device has been detected [ 1037.501915][ T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1037.686879][ T29] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1037.732458][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.767236][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.322066][ T29] as10x_usb: error during firmware upload part1 [ 1038.345322][ T29] Registered device nBox DVB-T Dongle [ 1038.360491][ T29] usb 7-1: USB disconnect, device number 112 [ 1038.834314][ T29] Unregistered device nBox DVB-T Dongle [ 1038.855100][ T29] as10x_usb: device has been disconnected [ 1039.961817][T19120] FAULT_INJECTION: forcing a failure. [ 1039.961817][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.029296][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.3.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.029330][T19120] Tainted: [L]=SOFTLOCKUP [ 1040.029338][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.029350][T19120] Call Trace: [ 1040.029359][T19120] [ 1040.029367][T19120] dump_stack_lvl+0xe8/0x150 [ 1040.029412][T19120] should_fail_ex+0x412/0x560 [ 1040.029449][T19120] should_failslab+0xa8/0x100 [ 1040.029478][T19120] __kmalloc_cache_noprof+0x88/0x660 [ 1040.029504][T19120] ? io_wq_create+0x6b/0x7b0 [ 1040.029532][T19120] io_wq_create+0x6b/0x7b0 [ 1040.029561][T19120] io_uring_alloc_task_context+0x267/0x590 [ 1040.029591][T19120] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1040.029623][T19120] __io_uring_add_tctx_node+0x459/0x5f0 [ 1040.029653][T19120] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1040.029673][T19120] ? __fget_files+0x2a/0x420 [ 1040.029697][T19120] ? __fget_files+0x2a/0x420 [ 1040.029722][T19120] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1040.029758][T19120] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 1040.029791][T19120] ? __fget_files+0x3a0/0x420 [ 1040.029817][T19120] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1040.029840][T19120] ? fput+0xa0/0xd0 [ 1040.029867][T19120] ? rcu_is_watching+0x15/0xb0 [ 1040.029897][T19120] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1040.029920][T19120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.029943][T19120] do_syscall_64+0x15f/0xf80 [ 1040.029970][T19120] ? trace_irq_disable+0x3b/0x140 [ 1040.029998][T19120] ? clear_bhb_loop+0x40/0x90 [ 1040.030024][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.030044][T19120] RIP: 0033:0x7fd7bf19cdd9 [ 1040.030064][T19120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.030081][T19120] RSP: 002b:00007fd7c0073028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1040.030103][T19120] RAX: ffffffffffffffda RBX: 00007fd7bf416090 RCX: 00007fd7bf19cdd9 [ 1040.030118][T19120] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 1040.030131][T19120] RBP: 00007fd7c0073090 R08: 0000000000000000 R09: 0000000000000204 [ 1040.030144][T19120] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1040.030156][T19120] R13: 00007fd7bf416128 R14: 00007fd7bf416090 R15: 00007fd7bf53fa48 [ 1040.030187][T19120] [ 1040.315505][T19124] input: syz1 as /devices/virtual/input/input66 [ 1040.556032][T17049] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1040.709773][T17049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.742268][T17049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.779984][T17049] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1040.808219][T17049] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.861410][T17049] usb 9-1: config 0 descriptor?? [ 1040.914329][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 1041.318531][T17049] kye 0003:0458:5016.002C: control desc unexpectedly large [ 1041.388642][T17049] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.002C/input/input67 [ 1041.545443][T17049] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.002C/input/input68 [ 1041.658318][ T5934] uclogic 0003:145F:0212.002B: failed retrieving string descriptor #100: -110 [ 1041.693574][T19162] netlink: 484 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1041.721790][ T5934] uclogic 0003:145F:0212.002B: failed retrieving pen parameters: -110 [ 1041.736888][ T5934] uclogic 0003:145F:0212.002B: pen probing failed: -110 [ 1041.745252][ T5934] uclogic 0003:145F:0212.002B: failed probing parameters: -110 [ 1041.790571][T17049] kye 0003:0458:5016.002C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1041.820005][ T5934] uclogic 0003:145F:0212.002B: probe with driver uclogic failed with error -110 [ 1041.918084][T19161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.516040][ T29] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1042.586202][ T24] usb 9-1: reset full-speed USB device number 4 using dummy_hcd [ 1042.699073][ T29] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1042.715935][ T29] usb 4-1: config 0 has no interface number 0 [ 1042.737654][ T29] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1042.768871][ T24] usb 9-1: device descriptor read/64, error -71 [ 1042.779008][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1042.815375][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1042.856278][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1042.883434][ T29] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1042.911519][ T29] usb 4-1: Product: syz [ 1042.924832][ T29] usb 4-1: SerialNumber: syz [ 1042.956865][ T29] usb 4-1: config 0 descriptor?? [ 1042.972224][ T29] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1042.996237][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input69 [ 1043.690683][ T5896] usb 9-1: USB disconnect, device number 4 [ 1043.983369][T19207] syzkaller0: entered promiscuous mode [ 1043.983397][T19207] syzkaller0: entered allmulticast mode [ 1044.255883][ T5896] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1044.385883][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1044.426851][T19211] FAULT_INJECTION: forcing a failure. [ 1044.426851][T19211] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.426881][T19211] CPU: 1 UID: 0 PID: 19211 Comm: syz.6.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.426898][T19211] Tainted: [L]=SOFTLOCKUP [ 1044.426903][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.426911][T19211] Call Trace: [ 1044.426916][T19211] [ 1044.426922][T19211] dump_stack_lvl+0xe8/0x150 [ 1044.426950][T19211] should_fail_ex+0x412/0x560 [ 1044.426973][T19211] should_failslab+0xa8/0x100 [ 1044.426992][T19211] __kmalloc_cache_noprof+0x88/0x660 [ 1044.427008][T19211] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 1044.427024][T19211] __io_uring_add_tctx_node+0x199/0x5f0 [ 1044.427040][T19211] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1044.427052][T19211] ? __fget_files+0x2a/0x420 [ 1044.427066][T19211] ? __fget_files+0x2a/0x420 [ 1044.427081][T19211] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1044.427095][T19211] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 1044.427115][T19211] ? __fget_files+0x3a0/0x420 [ 1044.427129][T19211] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1044.427143][T19211] ? fput+0xa0/0xd0 [ 1044.427155][T19211] ? ksys_write+0x242/0x270 [ 1044.427172][T19211] ? __pfx_ksys_write+0x10/0x10 [ 1044.427190][T19211] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1044.427204][T19211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.427218][T19211] do_syscall_64+0x15f/0xf80 [ 1044.427235][T19211] ? trace_irq_disable+0x3b/0x140 [ 1044.427251][T19211] ? clear_bhb_loop+0x40/0x90 [ 1044.427266][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.427278][T19211] RIP: 0033:0x7fa9ca99cdd9 [ 1044.427291][T19211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.427303][T19211] RSP: 002b:00007fa9c8b70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1044.427317][T19211] RAX: ffffffffffffffda RBX: 00007fa9cac16090 RCX: 00007fa9ca99cdd9 [ 1044.427326][T19211] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 1044.427334][T19211] RBP: 00007fa9c8b70090 R08: 0000000000000000 R09: 0000000000000204 [ 1044.427343][T19211] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1044.427350][T19211] R13: 00007fa9cac16128 R14: 00007fa9cac16090 R15: 00007fa9cad3fa48 [ 1044.427369][T19211] [ 1044.428670][T19211] ------------[ cut here ]------------ [ 1044.428679][T19211] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 1044.428686][T19211] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0xa36/0xa70, CPU#1: syz.6.3464/19211 [ 1044.428713][T19211] Modules linked in: [ 1044.428739][T19211] CPU: 1 UID: 0 PID: 19211 Comm: syz.6.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.428757][T19211] Tainted: [L]=SOFTLOCKUP [ 1044.428783][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.428792][T19211] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 1044.428809][T19211] Code: fd 65 48 8b 05 5b cd 94 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 c2 0f 07 cc e8 0b ce 19 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 fd cd 19 fd 4c 89 f7 be 03 00 00 00 e8 [ 1044.428822][T19211] RSP: 0018:ffffc90004a27b90 EFLAGS: 00010293 [ 1044.428834][T19211] RAX: ffffffff84ac02e5 RBX: 0000000000000000 RCX: ffff888036409ec0 [ 1044.428844][T19211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.428853][T19211] RBP: ffffc90004a27ce8 R08: ffff88807e546007 R09: 1ffff1100fca8c00 [ 1044.428863][T19211] R10: dffffc0000000000 R11: ffffed100fca8c01 R12: 00000000fffffff4 [ 1044.428873][T19211] R13: ffff88807e546000 R14: ffff88803640a828 R15: 1ffff11006c81505 [ 1044.428884][T19211] FS: 00007fa9c8b706c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 1044.428895][T19211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.428922][T19211] CR2: 00007fa9c8b6fff8 CR3: 000000003347e000 CR4: 00000000003526f0 [ 1044.428937][T19211] Call Trace: [ 1044.428944][T19211] [ 1044.428951][T19211] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1044.428968][T19211] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 1044.428985][T19211] __io_uring_add_tctx_node+0x402/0x5f0 [ 1044.429028][T19211] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1044.429042][T19211] ? __fget_files+0x2a/0x420 [ 1044.429076][T19211] ? __fget_files+0x2a/0x420 [ 1044.429091][T19211] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1044.429107][T19211] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 1044.429126][T19211] ? __fget_files+0x3a0/0x420 [ 1044.429141][T19211] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1044.429156][T19211] ? fput+0xa0/0xd0 [ 1044.429169][T19211] ? ksys_write+0x242/0x270 [ 1044.429186][T19211] ? __pfx_ksys_write+0x10/0x10 [ 1044.429223][T19211] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1044.429238][T19211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.429253][T19211] do_syscall_64+0x15f/0xf80 [ 1044.429271][T19211] ? trace_irq_disable+0x3b/0x140 [ 1044.429288][T19211] ? clear_bhb_loop+0x40/0x90 [ 1044.429303][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.429316][T19211] RIP: 0033:0x7fa9ca99cdd9 [ 1044.429330][T19211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.429360][T19211] RSP: 002b:00007fa9c8b70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1044.429375][T19211] RAX: ffffffffffffffda RBX: 00007fa9cac16090 RCX: 00007fa9ca99cdd9 [ 1044.429385][T19211] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 1044.429394][T19211] RBP: 00007fa9c8b70090 R08: 0000000000000000 R09: 0000000000000204 [ 1044.429403][T19211] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1044.429412][T19211] R13: 00007fa9cac16128 R14: 00007fa9cac16090 R15: 00007fa9cad3fa48 [ 1044.429429][T19211] [ 1044.429438][T19211] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1044.429449][T19211] CPU: 1 UID: 0 PID: 19211 Comm: syz.6.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.429466][T19211] Tainted: [L]=SOFTLOCKUP [ 1044.429471][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.429483][T19211] Call Trace: [ 1044.429491][T19211] [ 1044.429496][T19211] vpanic+0x56c/0xa60 [ 1044.429509][T19211] ? __pfx__printk+0x10/0x10 [ 1044.429524][T19211] ? __pfx_vpanic+0x10/0x10 [ 1044.429534][T19211] ? is_bpf_text_address+0x292/0x2b0 [ 1044.429553][T19211] ? is_bpf_text_address+0x26/0x2b0 [ 1044.429575][T19211] panic+0xc5/0xd0 [ 1044.429586][T19211] ? __pfx_panic+0x10/0x10 [ 1044.429606][T19211] __warn+0x315/0x4c0 [ 1044.429617][T19211] ? io_wq_put_and_exit+0xa36/0xa70 [ 1044.429633][T19211] ? io_wq_put_and_exit+0xa36/0xa70 [ 1044.429649][T19211] __report_bug+0x29a/0x540 [ 1044.429666][T19211] ? __free_frozen_pages+0x713/0xd30 [ 1044.429681][T19211] ? lock_acquire+0x106/0x350 [ 1044.429702][T19211] ? io_wq_put_and_exit+0xa36/0xa70 [ 1044.429717][T19211] ? __pfx___report_bug+0x10/0x10 [ 1044.429738][T19211] ? do_raw_spin_lock+0x12b/0x2f0 [ 1044.429760][T19211] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1044.429778][T19211] ? io_wq_put_and_exit+0xa36/0xa70 [ 1044.429793][T19211] report_bug+0x16a/0x220 [ 1044.429810][T19211] ? io_wq_put_and_exit+0xa36/0xa70 [ 1044.429823][T19211] ? io_wq_put_and_exit+0xa38/0xa70 [ 1044.429838][T19211] handle_bug+0x9c/0x200 [ 1044.429851][T19211] exc_invalid_op+0x1a/0x50 [ 1044.429863][T19211] asm_exc_invalid_op+0x1a/0x20 [ 1044.429876][T19211] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 1044.429891][T19211] Code: fd 65 48 8b 05 5b cd 94 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 c2 0f 07 cc e8 0b ce 19 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 fd cd 19 fd 4c 89 f7 be 03 00 00 00 e8 [ 1044.429902][T19211] RSP: 0018:ffffc90004a27b90 EFLAGS: 00010293 [ 1044.429913][T19211] RAX: ffffffff84ac02e5 RBX: 0000000000000000 RCX: ffff888036409ec0 [ 1044.429923][T19211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.429931][T19211] RBP: ffffc90004a27ce8 R08: ffff88807e546007 R09: 1ffff1100fca8c00 [ 1044.429940][T19211] R10: dffffc0000000000 R11: ffffed100fca8c01 R12: 00000000fffffff4 [ 1044.429950][T19211] R13: ffff88807e546000 R14: ffff88803640a828 R15: 1ffff11006c81505 [ 1044.429964][T19211] ? io_wq_put_and_exit+0xa35/0xa70 [ 1044.429983][T19211] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1044.429999][T19211] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 1044.430014][T19211] __io_uring_add_tctx_node+0x402/0x5f0 [ 1044.430031][T19211] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1044.430043][T19211] ? __fget_files+0x2a/0x420 [ 1044.430057][T19211] ? __fget_files+0x2a/0x420 [ 1044.430071][T19211] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1044.430086][T19211] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 1044.430105][T19211] ? __fget_files+0x3a0/0x420 [ 1044.430120][T19211] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1044.430134][T19211] ? fput+0xa0/0xd0 [ 1044.430146][T19211] ? ksys_write+0x242/0x270 [ 1044.430163][T19211] ? __pfx_ksys_write+0x10/0x10 [ 1044.430181][T19211] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1044.430195][T19211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.430209][T19211] do_syscall_64+0x15f/0xf80 [ 1044.430225][T19211] ? trace_irq_disable+0x3b/0x140 [ 1044.430241][T19211] ? clear_bhb_loop+0x40/0x90 [ 1044.430256][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.430269][T19211] RIP: 0033:0x7fa9ca99cdd9 [ 1044.430280][T19211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.430291][T19211] RSP: 002b:00007fa9c8b70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1044.430304][T19211] RAX: ffffffffffffffda RBX: 00007fa9cac16090 RCX: 00007fa9ca99cdd9 [ 1044.430313][T19211] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 1044.430322][T19211] RBP: 00007fa9c8b70090 R08: 0000000000000000 R09: 0000000000000204 [ 1044.430330][T19211] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1044.430338][T19211] R13: 00007fa9cac16128 R14: 00007fa9cac16090 R15: 00007fa9cad3fa48 [ 1044.430356][T19211] [ 1044.431007][T19211] Kernel Offset: disabled