last executing test programs: 27m21.729271368s ago: executing program 32 (id=90): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c900"], 0x18) brk(0x5d555ede6000) syz_clone(0xd8024a00, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) 27m17.551944338s ago: executing program 33 (id=101): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x1a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) rmdir(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 23m31.676489738s ago: executing program 6 (id=416): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20040840) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r4, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m28.719966839s ago: executing program 5 (id=423): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) creat(0x0, 0x182) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2800000001000001}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@mcast1}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8) times(&(0x7f0000000040)) 23m28.044796027s ago: executing program 6 (id=424): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_open_dev$loop(0x0, 0x9, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x4, 0x4) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24040004) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) readahead(0xffffffffffffffff, 0x9, 0x3ff) 23m27.639087486s ago: executing program 5 (id=425): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0xfffe, 0x7, @local}, {0xa, 0xfffc, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x2100, @loopback, 0x4}, {0xa, 0x4e20, 0x0, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x1, 0x9, 0xe10, 0xe, 0x3, 0x5d]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x8, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) open(&(0x7f0000001080)='./file0\x00', 0x108843, 0x98) r1 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = open(0x0, 0x149040, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) signalfd(r3, &(0x7f0000000080)={[0x8001]}, 0x8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000f2b000/0x3000)=nil, 0x3000}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[], 0x0) fcntl$setlease(r2, 0x400, 0x0) socket$rxrpc(0x21, 0x2, 0x2) fcntl$setlease(r2, 0x400, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r5, 0x41015500, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0xffffffff, 0x101000) 23m26.614097502s ago: executing program 6 (id=426): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) creat(0x0, 0x182) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) 23m25.160844756s ago: executing program 6 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000180)}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x50) setrlimit(0xf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x21) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, 0x0, &(0x7f00000004c0)='./file0/file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x22a02, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x40) 23m23.162888821s ago: executing program 5 (id=430): syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000004140)=ANY=[], 0x18) syz_clone(0xd8024a00, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 23m21.717539087s ago: executing program 5 (id=431): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, &(0x7f0000000440)) getsockopt(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000240)=""/67, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x6, 0x0) 23m19.994057067s ago: executing program 5 (id=435): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) creat(0x0, 0x182) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2800000001000001}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@mcast1}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8) times(&(0x7f0000000040)) 23m18.777743069s ago: executing program 5 (id=436): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_open_dev$loop(0x0, 0x9, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x4, 0x4) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24040004) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) readahead(0xffffffffffffffff, 0x9, 0x3ff) 23m18.093982017s ago: executing program 6 (id=437): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 23m16.66570285s ago: executing program 6 (id=442): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080047fa00300066000204f471cd854eb26d783fffffff4404119144046c634e244e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100005907805dc"], 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r0, 0x5ee36000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r3) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 23m2.54175053s ago: executing program 34 (id=436): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_open_dev$loop(0x0, 0x9, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x4, 0x4) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24040004) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) readahead(0xffffffffffffffff, 0x9, 0x3ff) 23m0.429301602s ago: executing program 35 (id=442): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080047fa00300066000204f471cd854eb26d783fffffff4404119144046c634e244e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100005907805dc"], 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r0, 0x5ee36000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r3) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 20m4.805402524s ago: executing program 4 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wg2\x00', &(0x7f0000000140)=@ethtool_ts_info}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7ff}, [@ldst={0x0, 0x1, 0x2, 0x6, 0xa, 0xfffffffffffffff0, 0xffffffffffffffef}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x803}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x1, 0x8000, 0x3, 0x6}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffbf00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r9, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20m0.503788321s ago: executing program 4 (id=675): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x40004) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2cb4a201c164be10", @ANYRES16=r1, @ANYBLOB="0100000000000000000027000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x0, 0x1, 0x2, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast1}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x4004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf25040000003c000180080003000200000014000200726f73653000000000000000000000001400020073797a5f74756e00000000000000000008000300020000004c00018008000100", @ANYRES32=0x0], 0x9c}, 0x1, 0x0, 0x0, 0xc800}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) unshare(0x20000400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000340)=0x1a, 0x67) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 19m59.225418768s ago: executing program 4 (id=677): r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)={0xfffffffc, 0x7, 0x2, 0x0, 0x0, 0xfff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, 0x0, 0x20000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'veth1_vlan\x00', @remote}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfd", 0x28, 0xfffffffffffffffe) syz_emit_ethernet(0x42, &(0x7f0000000500)={@link_local, @random="9ed2ef34836e", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @random="64d9c67879f8", @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000100), 0x8) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000280)=""/166, 0x2a920ba9be5d7cc9, 0xcbc8db710c37fe83, 0x4, 0x3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) userfaultfd(0x80801) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x80605414, 0xffffffffffffffff) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000001880)=0x8000, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x44) close(r7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @rand_addr, @multicast1}, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x62, &(0x7f0000003580)=ANY=[@ANYBLOB="aabbaaaaaaaaaaaaaaaaaabb86dd600000a6002c0640fe8000000000000000000000bbfe8000000000000000000000000000aa4e224e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b01810009078000001021e102ff904000000000000000b000000050600000010"], 0x0) 19m57.331054664s ago: executing program 4 (id=680): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000004140)={0x2020}, 0x2020) pread64(r3, 0x0, 0x0, 0xab7f) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r5, &(0x7f0000000840), 0x36, 0x12022, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20000) ioctl$BLKFRASET(r6, 0x1264, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) fdatasync(r4) 19m55.352742306s ago: executing program 4 (id=683): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) creat(0x0, 0x182) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2800000001000001}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x8) 19m52.311628527s ago: executing program 4 (id=686): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 19m36.92721675s ago: executing program 36 (id=686): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 17m0.877459097s ago: executing program 7 (id=878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000180)}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x21) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, 0x0, &(0x7f00000004c0)='./file0/file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x22a02, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x40) 16m58.734233367s ago: executing program 7 (id=881): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="aafdda9d", 0x4}, {0x0}], 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r1, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@wrmsr={0x65, 0x20, {0x83f, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @uexit={0x0, 0x18, 0x22}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0xccbe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8cac}}], 0xf0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) rename(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) 16m55.821629956s ago: executing program 7 (id=884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000019080)=ANY=[@ANYRESHEX=r1, @ANYBLOB="3a07811203a3ef53ab8e356de9e5f3ac750c9d5fd737202eff4d7af486ea7a23880d0a3182892795c9fca6564619cbffa42fa1367cf4bfcaa18dc125097367f0572316faf2da8af73bf38f7f6d4d609c78c561", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES64=r1, @ANYRES8=r0], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x1) 16m49.061183293s ago: executing program 7 (id=892): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3506, 0x2, 0x2, 0xfe, 0x34}, [@tfcpad={0x8, 0x16, 0x80000001}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x890) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0981) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @initdev}, &(0x7f00000001c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000600)={0xffffffff, 0x7a120, 0x9, {0x3, 0x103}, 0x0, 0x9}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 16m44.691844191s ago: executing program 7 (id=894): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20040840) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r4, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m43.963892963s ago: executing program 7 (id=895): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) unshare(0x2c020500) fcntl$setstatus(r4, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r4, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(r2, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r2, &(0x7f0000000680)='nullb1\x00', 0x200) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x2080020, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 16m28.106150323s ago: executing program 37 (id=895): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) unshare(0x2c020500) fcntl$setstatus(r4, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r4, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(r2, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r2, &(0x7f0000000680)='nullb1\x00', 0x200) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x2080020, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 7m15.153513657s ago: executing program 3 (id=2738): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x1, r1, 0x33, r0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000000c0)=ANY=[]) 7m15.051832121s ago: executing program 3 (id=2740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = fcntl$dupfd(r0, 0x0, r0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 7m14.909194045s ago: executing program 3 (id=2742): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x401, 0x2000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x400000f, 0x4, 0x3, 0x7effffff, 0x7}, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r2, 0x0, 0x0, 0x80800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x2) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="26610e93012f630d", 0x8}], 0x1}}], 0x1, 0x4040040) mount(0x0, 0x0, 0x0, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet6(0xa, 0x6, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 7m12.839388544s ago: executing program 3 (id=2747): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m12.111618196s ago: executing program 3 (id=2750): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) 7m8.623510245s ago: executing program 3 (id=2762): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080047fa00300066000204f471cd854eb26d783fffffff4404119144046c634e244e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r1, 0x5ee36000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r4) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 7m8.207093035s ago: executing program 38 (id=2762): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080047fa00300066000204f471cd854eb26d783fffffff4404119144046c634e244e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r1, 0x5ee36000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r4) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 4m58.593029304s ago: executing program 8 (id=3188): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 4m57.317082025s ago: executing program 8 (id=3189): creat(&(0x7f0000000100)='./file0\x00', 0x7a) inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 4m55.324515441s ago: executing program 8 (id=3193): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m50.133589547s ago: executing program 8 (id=3204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m49.423022889s ago: executing program 8 (id=3206): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x401, 0x2000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x400000f, 0x4, 0x3, 0x7effffff, 0x7}, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r2, 0x0, 0x0, 0x80800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x2) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) mount(0x0, 0x0, 0x0, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet6(0xa, 0x6, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 4m39.837439288s ago: executing program 8 (id=3227): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0x11e, 0x0, r2}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0) r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m38.982363996s ago: executing program 39 (id=3227): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0x11e, 0x0, r2}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0) r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 17.322724013s ago: executing program 1 (id=3596): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14.932553047s ago: executing program 0 (id=3599): ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x9, 0x8}) r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x2000) sendmmsg$inet_sctp(r0, &(0x7f0000003d00)=[{&(0x7f0000000680)=@in={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@init={0x18, 0x84, 0x0, {0xda, 0x6, 0x9, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xb, 0x4, 0x4, 0x2, 0xe5, 0x0, 0x339}}], 0x48, 0x4000001}], 0x1, 0x44800) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0x7, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0xffffffff, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986, 0x0, 0x0, 0x9], [0x0, 0x4007f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x8001, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0xc7fff, 0x0, 0x5, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="fd04e03cce1467e0035dbdfd18dbea0d029ccb0f179749ad", 0x18}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x83a}, &(0x7f00000003c0)=0x8) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x73}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7f}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x26}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.471395418s ago: executing program 1 (id=3601): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x6, 0x200000) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$RTC_AIE_OFF(r1, 0x7002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_devices(r4, 0x0, 0x6) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) 13.291577801s ago: executing program 2 (id=3602): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x41000022) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2001, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0xc) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) 13.034140698s ago: executing program 0 (id=3603): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) clock_gettime(0xd10dae85e4692df3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r3, &(0x7f0000000100), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)="a5d9a81f9ca021c2009e55d413369622e959df9c913906d87cc3546e63007a5917d5a08941082a70c0c7a20644bded4069fdc39a97c8e8e5ab2bdbb3604dc8184fa5763a4a0560ae7a1d74c97c51879727c413aca55fc7987aa8022706b7a3958138d5cabdc8cfac025fd71cef1bc2bfbffabfd59ba079d4272d1793a4fd9ad7d6893a748b9670e4431c2c63fcb2229e18849cacafd6225ff4f53094fc6560f92e5e8053", 0xa4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000403412785600010000", 0x46) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) 12.637441253s ago: executing program 2 (id=3604): mmap(&(0x7f00003ff000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x2998f000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019440)=""/102400, 0x19000) setgroups(0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x5) socket$alg(0x26, 0x5, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}}) 11.49364124s ago: executing program 2 (id=3605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd9f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x64) syz_emit_vhci(0x0, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0xe4}}, './file0\x00'}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x810c9365, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x125, &(0x7f00000001c0)=ANY=[]) r8 = syz_usb_connect$uac2(0x4, 0xf3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000101e0400304000010203010902e1000301373005080b000001012004090400000001012000092401f8000310000e07240c80040602090401000001022000090401010101022000062402010109102401030c01011000000607000000060a24020140020406d87f0c24020104f9090445cd2efa09050109000408040108250102000000000904020000010220000904020101010220000a24020207000b00044d0d240201000407064ab51b1499102402020100000001cbc1fc76b0132b0a240202f705040008fe0624020102020e24fe01080204080fde2bd56e400905820940000303060825010103050800"], &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0x7, 0x5}, 0x23, &(0x7f0000000240)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "4601465c9035d79ad03d37dc39429a83"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x9, 0x6, 0x5}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$uac2(r8, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x31, 0x2, {0x2, 0x11}}, &(0x7f0000000400)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "68b4eebc4eba12cd9145aaf91815c0c9de72881f5d295caba936759d013dbac11949d262e1f0f61fac"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x0, 0x13, 0xf8, "447c88293f2d102f6d689a06326efb00eb9e8a9df79d8dc5d4450cebb363bdd9f6abe6684128949182c4354fb33a6fe7b92f0ff1dd72e285001761dd248a82618d4490745956c4d21063e2593fe65de33cb36375dc7233b2aa23d3d6216e2bc3c21aa23803615056f845e2ed2b811be494cda6a986954b6d5c0f25ea7d6fec9f153e7f090375537fe315db25461447014048452bde0488c6830d486a94f7e7bf72bcdcc31cf33019505efe56c85a70c81d2d11ccf87b212aeb4eab96d103364560a5a240107aacfe03ba6b9cce7a948263b8f9c50916d5bb1241d53eb95206cfdcc6c6640012387999bb3b5870360ea10ccdbc62519cb549"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000640)={0x20, 0x81, 0x1, "df"}, &(0x7f0000000680)={0x20, 0x82, 0x1, 'v'}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "7f"}, &(0x7f0000000700)={0x20, 0x84, 0x1, 'g'}, &(0x7f0000000740)={0x20, 0x85, 0x3, "e0829c"}}) 11.401920025s ago: executing program 0 (id=3606): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @remote}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.321964667s ago: executing program 9 (id=3607): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="08020000000000001701000002000000ef010000b0fd3d9719a3e92b92b35213186c66f1fb74c35c00a62e48fba30b82ccab22be34cf08c97468a450167c7609afa64fb959dbf412c69294439966b42cfbd255eeee3e0bf7b6bd0cedc527c66ef61f39297da5e944d035d44973e14bedee9b0be4a98fe46b3e1750209745e5c41efb8c7472ace729af3faed8348b5030597b24c18c8a1ddf009e6f88154d5ed18ed64bee1d9c3b95b6cbcbc5014e2a0b179d78a1ba618f9fea2e58264d241cfa38116b25f5fc509982332a1e8e0cb379e556d92c46a7edb75bcba747e812063f386f57de0de4e76da69605c4e924a2a62934e28823a8fb76076fd606190d9d0e85c762f4237088d06308d222a6b0c83b4cb5a9a509370f1711"], 0x208, 0x20048040}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00fbf50208de47b8ff9d6748d0cfe067ceecce19a1e77cea838f4d9195d502fe050ff6605669d6842b3a7aef92e027d0453e1988ccacd5ba002aca94aa808af5cb373490bb10c8fa90171c08da573a9cca85a0b80705fef230286f98f73ed4e7077b50abb79fb4100455e18848eac17d76e553985400302bac2c326fb79951b48423c8909c0a7d172b398ca2aa26e3b1d68cb540a447c833e8f96d7de6f80db6cbedd4106deb1c76f8f7e2e88745582f9775328d376d394bc4965264f6e3019684b847e28a0f5203219d6d0012b648271939e53d9a12b41134c5117b8d2b06a2553e79c954bd08d07453998ca1825566732ad06c6a2bf331a6ec79c62e0ee9992583e485f2a677aaf8fdc87884c717bd4c2e5ffc721228ef75e65c39f63db9b78cf767ea57aea0226be630dc3e0c8ef614240a599ab6cc911562b027b7f20603603ec99a8097dfd43ca1ad44a7e89e1683f7162b738fbbb7b8b14739e974d6b689b18a76748d9d812d77aa09bae974fcd6dde55074a39036a4df8596cab7187310aab101fe818276a9fa831e3adcdd91c90e710e8a6ab5369a8bf021d7c26340463b98f132d3d7a913c85125a2bf0e606667214aad84b3edac14e2a21ac7c6f8d2155904b32a92aa379228c8cbd52e9b97f577158e383950e76811ae48c088a31a36c67a1147d84a1ce0dff9ad71e97786e399544a08595b00af374f673883e39c5466e4417e85134854835deb9cafcfef92e68107bf98bd97d5e15193b5cbf0e806688559e58df6f5fa663cbb0f5b94976f3d6355fe2023b1458c5fb1cb72fe8c7a5a476eb251879b20add33df597ae1e488f5e3b6c3f89b28459ace10f316fe6635ee41741a95c35bd99c4236d0424481f878c757a9d94e184e1808ee623efec69bd0d20b9e2aabf71b7805f07bbd10a1f2b3bf6cab9b706650a4b18cbf4fa9aa365abab55ef56efa29a83304c79613646ef91ef1407ead2d93d796cd93a4e2754ca680636a615efe8ae51e3c7246a0686001513cdc7f4f9678aaeaab9384d5a3ad49ca5dff707003e411c5bc764c4ef908cb0d9e231b9f620012ed430dc34ac4214c3c781f3c9180ffb15268cb741a41f97019c454b3a1967559c486f51d089e4ee60000398ceb36c6c7871c14cb2ba5b05d6f308dcdde42acd4403970ef7c1bb0675f367c2b1b1d2103892215dcf95774ad22de20732e5285de7c47362e4f87414e6dce2278fbd3202cd8104b21637877bfcde73f9cd"], 0x3f5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f00000000c0)=""/59, 0x3b, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x5, 0x0, 0x8, 0x3, 0x7, "b565082a2779e70ff1ff785ce40d0399fab7f9", 0xb10a, 0xf}) ioctl(r3, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") ioctl$LOOP_SET_FD(r3, 0x4c00, r3) sendto$unix(r3, &(0x7f0000002040)="6cbd21805b264c11043a2f728e20834663d0d416c3d6907e189ddb7936bd7ecaaa4edc745b107d9020aa56bc1cfdce36fcc4a975efb70e8eb4e7bde5ed6cd830066977a34a2ac935f2137a31274e7abc7adb3979218d949db40db792244620c401413b7cd1317424572a98b89c3d66244e47ac73e21a26625f6a5da880ca2f3073fa385649f0371fe69cb7818bbed3d158bada5d7ae7a0582ed521c2f54d8115eef462c35ee9af23d597d9ab7e89c018cd887a0939c3a5d25164d799de78866b6ecfd706ffe2d57fef76a47304dabeccd63d89934e01bf191fbe9bbc26a9d74c3e56964704b596aef7277361663f08abd3961f7bb24c9e8d17890f5f2146d9eb6cbc31081a37e706fdbf01bc88e945febe1ba540f12a843a5ba340d9c6134070bfffd17b2af733cef247f7df84c6ffa04eada430da6da99172d0382d8117a1294e2724e7a9bad0d6bab7ce73bb01378e1d56d6a4b7ced20334f27b53d02478049bbba279ba49ad63e81e6bc44de4f1818274031334d5c83b9bacaa4f3a904b3003f5868bb58d7b7846bf3118d6d33087f0a2ab45326b42161cfef7137ca818cd54dbfaac8cc6eed3e6ffd8f0a38ec16b43b0edbd252863f6d97145e9b6cb9009975f0ba068991494a1d64797bcc6757e8cc57beeb0fb59ab71a30d1f88a402dd5853f99c6090992d877fcb12025b5b5d612ea3155c54109223c6213efbd15520803c92f35e82b10cd895457865490a4788b41daa14728252cb3496b7d76a739d68a6cd107924d8c5449dd4afcef31d04ace2afb48421bc2cecfbeaafa93c29fbe4b51674424eb609545e589a9b1fa05f551bce08e66422bcca44238c6b017aa34c3fd631cb04e0d63e63640973536bdbd46fd1654f4bc8c500c498a182cbaf9ccf5ee85f23b166e9e5f268c64d08c747f5ad6a7642c31c305f04a51e85ae0436f06846f670fba03529962f1e61f66492a98d541c392063a3e19d92fc36c453c2ac7f2dbeef9a4dba20712ae2261defdf5143d2edba8efb74ffff7ec761ecf6e978c41cc4dfe71b3f47292498de5c765b9732b0738401e9c703a942c05f83714952c4f201ff0c78e629fc719fc7bbe923a9fa45ccb703540270af2e24f0ecb578175fba1c8ce9f171c970a79b91953649dbf1391c12393df883df5afb58a53f5c5a422ab46a1ad0b453605c51efb1e8fc910431c8c1e1dcce9364bd79e0740a0c1b8723e840cd6a207ccb01ac76b0ff38bff17fc85b4f3e3b7a7e3d2b1db4c32bdba5ebfc5d8319ba0df8a31d68816cfe49738ec2cccd43d8b91e1feadeee32156f1a9513301399d6e72d776020bc3d218dc70cfec543fed527a5e90043dafa004e4b070f65e7844cc14c62e0e12845d537b0936194b7d5e967cac16472724df3d4d8cf887a350742343117549b9273e68c240a4e2f22fe373e3f3ca141f72acb3792df3c3a73d5cfc7dc99e64f21efb5fa3f82172a630251586fe5286b58c58183b49aae65cb98f6d8b747ebea666a413d924e6a18e6956314d78f304094728e9dd48e99acab67c4774ff15c56b403a18afd5886087badf37a759f572245d2683924f7904a72edb463d8dc22c2eabc92c13932385bc22036541382d916e94d67de8d01f9ec341583d84f2e0b1e3bb9700d8a596f1e19af06b5f7a74d59917d51b360e8d11183d7973611b8ba097e4e88313d227b7853cf631b0bbae2629a60896164f8d803a5193d398caf5d53afb5cf6f20b1565b2eac85105aede4ac90c415341f0fb713faa0bbdbd0910e6d3aba42a03e4e114b97666646d94f9c039fc9644fd31b7b49d05828cd6e5d9e97a589d3598cae185d9d16b66d59d8d0aaa2e39b3527fe71b2781d23c283510c455a3717c556a2553c614097f5567fa9d8e14fe30559572d523325dd8c39706e8cb7f00ac04d48129b95736a6db91051e0c8fe55657dff57938162d6efec1567120c697b637ff0ae939f745e6492fdcd0e7863d3f17c56bf224d33eaa6fcaf146f4c33285818a91433292c9962324a87b15e9713b3373ec48aeecd0367124896ff428e0f55e529a9b3ee516afbf48b992f138b6a1055266349e2734c2f1db7309361d3207ae02c542742e194bc76b8cc1217da90745b1d0ed975e8ba7db4775666198e0d89c2e2dc8556d359d9faba6ffda04f295c35527f24e56d4e94be39705940c1572b5bd1e0be47a680cdb76ea17892a6d81e609b1400e1ead802cf3ab9f8ef781b4bc9889228886185ed83e8c47f924e0cef94de1d8b44a374c80dab1a3c4cc7dc0810a88650516b631cc8dbb165b682279c9f8a828570653b4707a05f72cf7ef895e89529ba96d2bb46d51480bfd88dec30fe2d557a2b954c16ac7de73379b9a1663fe66ea5b7b048c1362cefa9e1dad0fde7b156bf9aeea4e8548fa03cb4ff22110bbe473f37e1487806696adbd1aac8334c75731ba0a2b443d8174e84eba64ca3428d81256a19c75fb2f6cd19e0c9b2ae7cda19893dc5bae3ea82d607cb87e71bcecb3b28887c9eb12401d1e7e36a426e7194f4605cee0a6b91b5c4ee4b2881667fb1cad2f44989594ea19b0bbac922bb2433d586d885df0c7d15c1502e6115f9d0b6f742ad67fa32f0b4e649bd05ac3b5b809c8dc9433c567f9255fe39d5ee4a3da62ab4f1abea4d18aaaeb905b016af248bf157a87a39d17a677257ef8adcb34bb8e8209b26d2951fd74a02566bb320935947a2d8b9943e98e259daf7ef5243d25469b6bac38ba3955556c8825dbffbbd6d39a2cb943c8231a5b9a69aec9b1e45f94dec33055c5ef8a670693a0a659f116352c8a10ed0348d6d7c76444d0e4723fb09138fff074640a526c6e7bf98c9f901afce5954bfc40ec6651a4c0922ca57900d43b5d628ed2d7133359fdf3b1f5a925529f68ce3b1fabb001376f3bf27971a47e2b1c6eafef72ae4d879b538d68ce2faad454178a6107e34fddfda4403e8785b17686c4155c54927d82abfd57116df906c2b67e4afa9461affd8cb8e6f1e3805f361231c3711ee8ff64e6332249dbdca10223f3fa9878903ee7a5cdb7281044939fd2848f03f1cdf05fdc8a93c4f5fb9ca0a7329a1cfd9d03a7a71b77ca92682cf035ea618265c61ec2903dee721f0dfae5a2e8c984eaf91a2905e66cfa344bd8a0e2fb1055de20a7029c1893ba8c77ebd516e4c64fe58183fe7339f4e343b1ee89b5c54a6480d2d5404317d0d74797635a8dc15b4c428d89f7f8925d7af68a7677ea216f6f0fe7047f51c06097cad50a7325abf7c7cceade835c1f046dea1d18d0a3e05ea1a6596d2be3e260c9d0b35e885660ac21545afd07ec6597b630e0865c60da02b9dde9814c69188c0dd020198dc224f2bd89b51f26012daa43c510718e8ca1908b07a2efe6a1a39ff03129862e16b8eaeecd5dddb1ecfcab2d6678fbf59ab998e4a2394bdb89d18ffa6568b21bedd35c505016c0d6613c179f346a2663105a51956b5238d3f27ad12fd45b34b133fb426aa7c5b9bc1184d1c8d4ca4d059457ca542fd699752a70e8a5a949b650547002b6cd039fafa0575d4f491e71ae323036b3b485b6faa9b5433a87bddf7a12f9aec88a2e8244457745061de3030f8337faa0a1af05bfd3e84e245e90b72fcbb24479baaa40a33903b4b02c99983ad8eb8b723ec38e8f29b6002aa306a739bdb72925897dcdb1fcc854a08a61ec5e78dad4a673c0b968f168f527d13dc62b986d1aff102f8e41ee85be050ea45b76e040f7d9d0bd1f0d19b323436927bfda5cb7b13c4b18da5f12a42d01a4af54a29cb6a85d9d1ad579057a65795d014d500d252a90d7e207398fca00178026df48eff33fa0e2cda97cd3c84d75983b3cdcd15b44f6070b5fb58ce96cb4b0338156e3076c5143a72a9fef43cebd9585cc61099ee032e45ece4f42e1a8f8fa3ce998d4d3840474bd636c2a341c534ad5bf28e0dc5d2440c83d6e16118fd592b4be0554848c149e98e1228223e9640408c8b5f85ccce5a9cbd81ba630e2826027419a1adc0822aa61aceccbdcce4138186ebf2f9f2b6103c2c201c92e9953dc91805cff081bba085ece00d9ddaf9c37edbc6a2fc41717240db8b20b4ee3fbb257b5b04cf7cc2ad624aed0124f2d88ea19277112d818c4c4bf306b2c2e210d6081f863caab696785b834be31837dfdb50327bb0338e80cb88a12c1ee9d309659d36dae3a1fdef88a593e70520bd7e037a9a4916de2b0b95601f3baaa8e0c129609c9b97e61e64c98e6f1f1691ce9adee3651a80fdde639bf2159179c8a613526917b572a9273826c303a4810d2ec0e51bc58c76c2123d42b4593c4a841d350cd6148cf734271b886799c2fd8e7415430d765f200a6ef33ea4854f2a763fcbe3e511e5d0db2a0eccc4330f28c8ee68bcc2677961a2d92c5364a114d34292c175fb9c6a0ef5652eff6babd7bb70c591101bc0ba356add0a5d89aa303782ed3cd7f3afd4fa22a74c8c639bd9caa4973329c69777162917186c526c7d7e3c6ff4a128243f06c9e5a4798434e6a112c48d40407bbb61ae3d0e2d5436a31869623f85fa1619085d7ef6bcd61f3143ad3c501d4200ef60b450eff2818ab1d061010e694931094e265bc9166651f0d6dcdc1753a55e416712fae2165634604a5862e8e5d32d8fe6ea83b7354949a6e91f1f3be3673f1888c55335b746379ca1220fa7c2520f538ca9bc216a1d4c2679ce5c76b8bfa3e2a1ab83878c3e63f2919459c0187b22e58f97d0832eb04d8343666119233fac217ebede5954b8a8283e43577d0c8a5cf5c699e32178299b64b71507c66fd0ed2a77d3c8aa3a82418c38d36d1ebc5cfc16027d2c26f4eb9bd25375192e7c637e0e5ac6f001e849e4563dd8ccbd369de03924d7ab41be8620383b4b20837628131739f880f6e0a6a450798aa7025659454babe36add941a354440f36325be61c0b8164acff03798623fe532edf776989d04bfdd77fd513c6e8bd5c2398faffcc04337cfb3a7140a6d03b2b9ecb320722b9aeb1da8723d9aa2177881373e39174edec3756b4e40d775678fbc2985d91a4122b985b5dbdb4a2e3dbc5ea012215d9c2632b7b552828a58f6ce5a8f85d6545b3bc8bf104c16fb5e79845f2e37a47e96a3e36dfb6b754341c74cea79b3823bf51ecba6f7051d585c2a356c033d98d217d3b8d9d726d6d165e5e8d54a149d835ce45f9eef5112d4453f1bade9b02c33bb1c2071716aca793bc5499240fc138e494fea85d5bcc61c590d1e2b4089809d1641dcfd03fea5609bf47bcd0d957e1292210c9e277f618c7d5fc13e1cb81e17137bb688eec7673e4b6cc62e2f3b196d36bbdabd965c54d2712ce37c6516be0d0fb42dd7f5e34fbdbaedc745b7dab7d43bc60d1d742d2c49f10e1677462df39b2e8d49282cd6c7733ebb81dbc1bd384f31573b416b27255f08b915cc0d46c7d90aa2d70a74a75c65fcfe9ebe6d0a5c5367ea4c8d80cbb9d37a2fd3ab72e32b3595c34dc2a127a34a5ca8d1e748130bd20e7d8d662530b4bfe92be66c265d1ac2537de41edbae4b55f4fe4d4413c690a726a37d74fb424322f8dfb3444b03d44166fd90e2267b9075c7d6d3756d022c4e194bb3f1f59f1a18fd7f2caaab633cbfb0c70dc8de29756e44975076a84d14dd93dddac01f7b2740c4520a82947c656b3d0af5d5486202a319b6332e5dd9151a2d16f9e2afe2b303119fe2e05cac9e987c9082cbbf7ea63829ae04b03a9bb39e47348bd919b46a70f6f538e8c82d02caeb75bf8d1354d3d0996a99be7a9d8639e7d971b306c0f0fcb87faee401", 0x1000, 0x0, &(0x7f0000003040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 10.257386391s ago: executing program 1 (id=3608): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$join(0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xdc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3, '\x00', 0x98}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x10}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0xe5}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0x8, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0xa6}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) 8.061420619s ago: executing program 9 (id=3609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x17e3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.033053222s ago: executing program 1 (id=3610): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) epoll_create(0x27d08000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x9, 0xdd0c, 0x5, 0x5, 0x7, 0x6}) gettid() r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) pipe2(&(0x7f0000000240), 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4a20, 0x1, @loopback, 0xfffffff7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003e000000107e000000000000"], 0x18}, 0x24000040) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 7.548180183s ago: executing program 0 (id=3611): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00') r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000100)='=QAA=AAAAAAAAAAAABAAA=AAAAAAAAAAAAAAAA=/\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0xc084}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000000}) pipe2(&(0x7f0000000280), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="020052487f00000100"/128, 0x80) 6.651617841s ago: executing program 9 (id=3612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x8c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x14c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @offload={0xc}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket(0x10, 0x3, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x18000000000002a0, 0x68, 0x0, &(0x7f0000000100)="76ea09edffffff0465f7dacaeb4fa61aca1fbd920c59009ba50356f7d2316b375913c2dfa80346baeb96683bdbe964a017b5ea8a0a806a569b04b96a0058095b542bac7027ab9714a6478a181d4a93a0da2cbbd3007263f0c58556b7f472cc24e1c21a6b7914876e", 0x0, 0x63ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xb, 0x1}, {0xffe8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x4, 0x7, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2040806}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 6.169463237s ago: executing program 0 (id=3613): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="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", 0x550, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f00000006c0)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a1070000004000000800"/96, 0x60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) 4.605739228s ago: executing program 1 (id=3614): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x4, 0xd, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 4.530661549s ago: executing program 9 (id=3615): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) clock_gettime(0xd10dae85e4692df3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r3, &(0x7f0000000100), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)="a5d9a81f9ca021c2009e55d413369622e959df9c913906d87cc3546e63007a5917d5a08941082a70c0c7a20644bded4069fdc39a97c8e8e5ab2bdbb3604dc8184fa5763a4a0560ae7a1d74c97c51879727c413aca55fc7987aa8022706b7a3958138d5cabdc8cfac025fd71cef1bc2bfbffabfd59ba079d4272d1793a4fd9ad7d6893a748b9670e4431c2c63fcb2229e18849cacafd6225ff4f53094fc6560f92e5e8053", 0xa4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000403412785600010000", 0x46) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) 3.962172459s ago: executing program 1 (id=3616): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="aafdda9d", 0x4}, {0x0}], 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r1, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@cpuid={0x64, 0x18, {0x4, 0xccbe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8cac}}], 0x68}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) rename(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) 2.207206977s ago: executing program 2 (id=3617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7500}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xde}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.776087677s ago: executing program 2 (id=3618): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x78, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.759156831s ago: executing program 0 (id=3619): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace(0x10, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @mcast1}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x807, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0x70000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000009792000000020000000900010073797a300000000030000000020a01020000000000000800020000000900050000007a30000000000d00030091e7a25cf29afa1cfc00000014000000020a0900"], 0x8c}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.493138714s ago: executing program 2 (id=3620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.492227784s ago: executing program 9 (id=3621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00013ab47992205ca805207de5dcdbdf25048080000000006e47fdef00"], 0x24}, 0x1, 0x0, 0x0, 0xdd5442f06b7521cc}, 0x884) 0s ago: executing program 9 (id=3622): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xf, 0x119000) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) personality(0x619641b6fb4b8591) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000300)={0x666666666666799}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0xffffffff}) r6 = getpid() syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r6], 0x1}, 0x58) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x3, 0x7, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)=r7) kernel console output (not intermixed with test programs): r2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.605989][T15239] batman_adv: batadv0: Interface activated: ipvlan2 [ 1292.513074][T15275] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1292.711689][T15283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.732211][T15283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.488364][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1293.561579][T15296] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1293.565295][ T37] audit: type=1800 audit(1787583557.890:696): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2282" name="addr_traddr" dev="configfs" ino=51904 res=0 errno=0 [ 1293.599369][T15294] vlan2: entered allmulticast mode [ 1293.610668][T15294] bridge0: port 3(vlan2) entered blocking state [ 1293.610800][T15294] bridge0: port 3(vlan2) entered disabled state [ 1293.629389][T15294] vlan2: entered promiscuous mode [ 1294.098416][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1296.433445][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1296.584431][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1296.585531][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 1296.587280][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.587311][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.587336][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1296.587368][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.638957][ T10] usb 9-1: config 0 descriptor?? [ 1296.840301][T15355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'. [ 1297.090716][ T10] hid_parser_main: 86 callbacks suppressed [ 1297.090817][ T10] wacom 0003:056A:08B1.000A: unknown main item tag 0x6 [ 1297.090895][ T10] wacom 0003:056A:08B1.000A: ignoring exceeding usage max [ 1297.094769][ T10] wacom 0003:056A:08B1.000A: Unknown device_type for 'HID 056a:08b1'. Ignoring. [ 1297.368965][ T5965] usb 9-1: USB disconnect, device number 22 [ 1300.266567][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.550457][T15462] syzkaller1: entered promiscuous mode [ 1302.550484][T15462] syzkaller1: entered allmulticast mode [ 1302.938349][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 1303.363125][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b9a9000: rx timeout, send abort [ 1303.733305][ T5965] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1303.865752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b9a9000: abort rx timeout. Force session deactivation [ 1303.887109][T15494] jffs2: notice: (15494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1303.915600][ T5965] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1303.921136][ T5965] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1303.921161][ T5965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1303.962365][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.962390][ T5965] usb 4-1: Product: syz [ 1303.962404][ T5965] usb 4-1: Manufacturer: syz [ 1303.962417][ T5965] usb 4-1: SerialNumber: syz [ 1303.995076][ T5965] usb 4-1: config 0 descriptor?? [ 1304.012084][ T5965] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1304.433216][ T5965] gspca_sunplus: reg_r err -32 [ 1304.433326][ T5965] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1304.779866][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2366'. [ 1304.779891][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2366'. [ 1304.842381][T15514] bond2: Unable to set down delay as MII monitoring is disabled [ 1304.875490][T15514] bond2 (unregistering): Released all slaves [ 1304.953281][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1305.159920][ T10] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1305.161573][ T10] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 1305.161597][ T10] usb 10-1: config 1 has no interface number 0 [ 1305.161715][ T10] usb 10-1: config 1 interface 3 has no altsetting 0 [ 1305.165594][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.165619][ T10] usb 10-1: Product: syz [ 1305.165633][ T10] usb 10-1: Manufacturer: syz [ 1305.165646][ T10] usb 10-1: SerialNumber: syz [ 1305.217625][ T10] usb 10-1: 3:1 : does not exist [ 1305.217649][ T10] usb 10-1: 3:2 : does not exist [ 1305.478385][ T10] usb 10-1: USB disconnect, device number 15 [ 1305.691999][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1307.367514][ T1000] usb 4-1: USB disconnect, device number 20 [ 1307.534763][ T5593] Bluetooth: hci6: unexpected event for opcode 0x204e [ 1310.896718][ T5920] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1311.766025][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1311.781902][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 1311.781944][ T5920] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1311.820426][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.820452][ T5920] usb 3-1: Product: syz [ 1311.820466][ T5920] usb 3-1: Manufacturer: syz [ 1311.820480][ T5920] usb 3-1: SerialNumber: syz [ 1312.204857][ T5920] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1312.237882][ T5920] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1316.493695][ T5920] usb 3-1: USB disconnect, device number 34 [ 1316.898746][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1317.158639][ T10] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1318.096012][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 1318.096049][ T10] usb 10-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1318.097931][ T10] usb 10-1: config index 0 descriptor too short (expected 43, got 25) [ 1318.097958][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.098005][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1318.100688][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1318.100713][ T10] usb 10-1: Product: syz [ 1318.100727][ T10] usb 10-1: Manufacturer: syz [ 1320.583269][ T1000] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1320.760054][ T1000] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1320.760893][ T1000] usb 4-1: not running at top speed; connect to a high speed hub [ 1320.760930][ T1000] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1320.793347][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.793376][ T1000] usb 4-1: Product: syz [ 1320.793389][ T1000] usb 4-1: Manufacturer: syz [ 1320.793403][ T1000] usb 4-1: SerialNumber: syz [ 1320.860813][T15674] overlayfs: missing 'lowerdir' [ 1321.639001][ T10] msi2500 10-1:1.0: Registered as swradio24 [ 1321.639029][ T10] msi2500 10-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1321.705804][ T10] usb 10-1: USB disconnect, device number 16 [ 1321.808379][T15683] input: syz1 as /devices/virtual/input/input34 [ 1322.300700][ T1000] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1322.318307][ T1000] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1322.885412][ T1000] usb 4-1: USB disconnect, device number 21 [ 1323.133057][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 1324.325666][T15720] overlayfs: missing 'lowerdir' [ 1325.239157][T15732] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 1325.300798][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 1325.770996][T15750] jffs2: notice: (15750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1325.855882][T15732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.961246][T15735] bond1: entered promiscuous mode [ 1325.961298][T15735] bond1: entered allmulticast mode [ 1326.282391][T15759] overlayfs: missing 'lowerdir' [ 1326.322076][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2447'. [ 1327.534144][T15782] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1327.570236][T15782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.290705][ T8878] ffs_data_put(): freeing [ 1328.638337][ T5965] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1328.787982][ T5965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1328.789533][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.049742][ T5965] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1329.365264][ T5920] usb 3-1: USB disconnect, device number 35 [ 1330.429589][ T5593] block nbd8: Receive control failed (result -107) [ 1330.786533][T15830] block nbd8: shutting down sockets [ 1331.180546][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.181234][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.652734][ T37] audit: type=1326 audit(1787583595.980:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.654485][ T37] audit: type=1326 audit(1787583595.980:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.657807][ T37] audit: type=1326 audit(1787583595.990:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.658646][ T37] audit: type=1326 audit(1787583595.990:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.658964][ T37] audit: type=1326 audit(1787583595.990:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.659211][ T37] audit: type=1326 audit(1787583595.990:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.660791][ T37] audit: type=1326 audit(1787583595.990:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.660840][ T37] audit: type=1326 audit(1787583595.990:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.660877][ T37] audit: type=1326 audit(1787583595.990:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.660914][ T37] audit: type=1326 audit(1787583595.990:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15872 comm="syz.3.2489" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf96be0d9 code=0x7ffc0000 [ 1331.711483][T15876] overlayfs: missing 'lowerdir' [ 1333.533152][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1333.704549][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1333.706013][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.706037][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1333.706076][ T10] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1333.706112][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.815557][T15938] netlink: 'syz.8.2512': attribute type 3 has an invalid length. [ 1333.869912][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2513'. [ 1333.869976][T15940] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1333.869999][T15940] bond0: option arp_ip_target: invalid value (0) [ 1334.147221][T15948] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 1334.479193][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1334.479215][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1334.481839][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1334.481858][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1334.733023][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.735877][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.063101][T12539] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1336.213942][T12539] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1336.215495][T12539] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.215555][T12539] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1336.215581][T12539] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1336.215605][T12539] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1336.219820][T12539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.219844][T12539] usb 3-1: Product: syz [ 1336.219857][T12539] usb 3-1: Manufacturer: syz [ 1336.219870][T12539] usb 3-1: SerialNumber: syz [ 1336.316312][T12539] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1336.318191][T12539] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1336.320533][T12539] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1336.453618][ T5920] usb 4-1: USB disconnect, device number 22 [ 1336.688530][T15993] overlayfs: missing 'lowerdir' [ 1337.408135][ T1000] usb 3-1: USB disconnect, device number 36 [ 1337.418953][ T1000] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1337.419629][ T1000] cyberjack 3-1:1.0: device disconnected [ 1337.880149][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2540'. [ 1340.452698][T16039] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1340.562581][T16052] jffs2: notice: (16052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1340.796295][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.796789][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.372596][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 1342.231567][T16054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.701326][T16087] overlayfs: missing 'lowerdir' [ 1344.909978][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.910585][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.204700][ T5920] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1345.384053][ T5920] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1345.386480][ T5920] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1345.386512][ T5920] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1345.386539][ T5920] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1345.389541][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.389567][ T5920] usb 9-1: Product: syz [ 1345.389581][ T5920] usb 9-1: Manufacturer: syz [ 1345.389596][ T5920] usb 9-1: SerialNumber: syz [ 1345.460190][T16107] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1345.460883][T16107] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1347.118643][ T5920] rtl8150 9-1:1.0: couldn't reset the device [ 1347.121498][ T5920] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 1347.282743][ T5920] usb 9-1: USB disconnect, device number 23 [ 1347.320545][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1347.320569][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1347.320595][T16133] netlink: 'syz.3.2576': attribute type 6 has an invalid length. [ 1347.320626][T16133] netlink: 'syz.3.2576': attribute type 5 has an invalid length. [ 1347.851115][T16138] 9p: Bad value for 'rfdno' [ 1347.891673][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1347.891698][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1347.891723][T16133] netlink: 'syz.3.2576': attribute type 6 has an invalid length. [ 1347.891736][T16133] netlink: 'syz.3.2576': attribute type 5 has an invalid length. [ 1347.893099][ T1651] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.893143][ T1651] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.893178][ T1651] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.893223][ T1651] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.043087][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1349.195378][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1349.195420][ T10] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1349.197990][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1349.198009][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1349.201849][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.201863][ T10] usb 3-1: Product: syz [ 1349.201871][ T10] usb 3-1: Manufacturer: syz [ 1349.201878][ T10] usb 3-1: SerialNumber: syz [ 1349.268678][ T10] oti6858 3-1:1.0: oti6858 converter detected [ 1349.413313][ T10] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1349.852236][T16165] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1350.526393][ T1000] usb 3-1: USB disconnect, device number 37 [ 1350.622184][ T1000] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1350.649209][ T1000] oti6858 3-1:1.0: device disconnected [ 1352.423120][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1352.577277][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1352.577889][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1352.577925][ T10] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1352.622782][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.622811][ T10] usb 3-1: Product: syz [ 1352.622825][ T10] usb 3-1: Manufacturer: syz [ 1352.622839][ T10] usb 3-1: SerialNumber: syz [ 1353.992422][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1354.012229][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1354.187845][ T10] usb 3-1: USB disconnect, device number 38 [ 1354.304389][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1354.393518][T12539] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1354.543639][T12539] usb 10-1: Using ep0 maxpacket: 16 [ 1354.544557][T12539] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1354.546220][T12539] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.546244][T12539] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.547705][T12539] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1354.547728][T12539] usb 10-1: SerialNumber: syz [ 1354.590138][T12539] usb 10-1: 0:2 : does not exist [ 1355.479120][T12539] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1355.670100][T12539] usb 10-1: USB disconnect, device number 17 [ 1355.982074][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1359.105553][T16306] overlayfs: missing 'lowerdir' [ 1359.633874][ T1000] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1360.821276][ T1000] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1360.847857][ T1000] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.895864][ T1000] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.895893][ T1000] usb 9-1: Product: syz [ 1360.895906][ T1000] usb 9-1: Manufacturer: syz [ 1360.895920][ T1000] usb 9-1: SerialNumber: syz [ 1360.987415][ T1000] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1361.604867][ T1000] gspca_mr97310a: reg write [21] error -71 [ 1361.604926][ T1000] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71 [ 1361.652549][ T1000] usb 9-1: USB disconnect, device number 24 [ 1361.717509][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.373084][ T1000] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1363.523930][ T1000] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1363.525472][ T1000] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1363.525501][ T1000] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1363.525536][ T1000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.147997][T16352] overlayfs: missing 'lowerdir' [ 1364.169067][T16354] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 1364.798704][T16354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1364.964330][T16359] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 1365.224677][ T1000] pegasus 10-1:1.0: probe with driver pegasus failed with error -121 [ 1365.365796][T16357] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1365.635305][T12539] usb 10-1: USB disconnect, device number 18 [ 1365.756649][T16371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1365.791563][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.493858][T16359] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1366.782560][T16376] jffs2: notice: (16376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1366.829144][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.829666][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.986779][T12539] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1368.264283][T12539] usb 9-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1368.265595][T12539] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.265624][T12539] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.265637][T12539] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1368.265651][T12539] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1368.265670][T12539] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.418328][T12539] usb 9-1: config 0 descriptor?? [ 1368.625837][T16400] overlayfs: missing 'lowerdir' [ 1369.346383][T12539] uclogic 0003:28BD:0055.000B: interface is invalid, ignoring [ 1369.488296][ T10] usb 9-1: USB disconnect, device number 25 [ 1372.133036][ T5717] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1372.283843][ T5717] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1372.285617][ T5717] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.285648][ T5717] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.285684][ T5717] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.332699][ T5717] usb 10-1: config 0 descriptor?? [ 1372.887720][ T5717] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1372.887754][ T5717] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1372.887776][ T5717] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1372.887799][ T5717] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1372.887823][ T5717] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1373.028795][ T5717] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 1373.142438][ T5717] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 9: -32 [ 1373.142466][ T5717] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -32 [ 1373.142514][ T5717] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 1373.142529][ T5717] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 1373.212158][ T5717] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -32 [ 1373.265268][ T5717] usb 10-1: USB disconnect, device number 19 [ 1373.323079][T12539] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1373.477104][T12539] usb 4-1: Using ep0 maxpacket: 8 [ 1373.477956][T12539] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1373.480988][T12539] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1373.504382][T12539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.504408][T12539] usb 4-1: Product: syz [ 1373.504422][T12539] usb 4-1: Manufacturer: syz [ 1373.504435][T12539] usb 4-1: SerialNumber: syz [ 1373.559095][T12539] usb 4-1: config 0 descriptor?? [ 1373.581308][T12539] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1373.581368][T12539] usb 4-1: setting power ON [ 1373.615974][T12539] dvb-usb: bulk message failed: -22 (2/0) [ 1373.670103][T12539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.687235][T12539] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1373.687302][T12539] usb 4-1: media controller created [ 1373.742241][T12539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.855070][T12539] usb 4-1: selecting invalid altsetting 6 [ 1373.855095][T12539] usb 4-1: digital interface selection failed (-22) [ 1373.855112][T12539] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1373.904556][T12539] usb 4-1: setting power OFF [ 1373.913390][T16477] dvb-usb: bulk message failed: -22 (3/0) [ 1373.955420][T12539] dvb-usb: bulk message failed: -22 (2/0) [ 1373.971807][T12539] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1373.971830][T12539] (NULL device *): no alternate interface [ 1373.988188][T16477] dvb-usb: bulk message failed: -22 (6/0) [ 1374.146489][T12539] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1374.150626][T12539] usb 4-1: USB disconnect, device number 23 [ 1376.295530][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.296130][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.475437][T16520] netlink: 'syz.8.2701': attribute type 4 has an invalid length. [ 1376.547992][T16521] netlink: 'syz.8.2701': attribute type 4 has an invalid length. [ 1379.839914][T16571] netlink: 'syz.9.2718': attribute type 1 has an invalid length. [ 1379.944499][T16571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.313301][ T5965] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1380.362319][T16575] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1380.484213][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 1380.495327][ T5965] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1380.498583][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.498635][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1380.498660][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1380.498684][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1380.503265][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1380.503290][ T5965] usb 4-1: Product: syz [ 1380.503302][ T5965] usb 4-1: Manufacturer: syz [ 1380.503316][ T5965] usb 4-1: SerialNumber: syz [ 1380.524386][ T5965] usb 4-1: config 0 descriptor?? [ 1380.816006][ T5965] rc_core: IR keymap rc-imon-rsc not found [ 1380.816028][ T5965] Registered IR keymap rc-empty [ 1380.821949][ T5965] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1380.830586][ T5965] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 1380.841634][ T5965] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 1382.184173][ T5965] usb 4-1: USB disconnect, device number 24 [ 1382.444664][T16609] overlayfs: missing 'lowerdir' [ 1382.733196][ T5965] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1384.208028][ T5965] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1384.212757][ T5965] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1384.212785][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.212803][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1384.212842][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.217516][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1384.217542][ T5965] usb 4-1: Product: syz [ 1384.217556][ T5965] usb 4-1: Manufacturer: syz [ 1384.408142][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 1384.408155][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 1384.841655][ T5965] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1384.842121][ T5965] cdc_wdm 4-1:1.0: Unknown control protocol [ 1384.864466][ T5965] usb 4-1: USB disconnect, device number 25 [ 1384.913019][ T5717] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1385.054648][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.055284][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.173290][ T5717] usb 9-1: Using ep0 maxpacket: 8 [ 1385.174291][ T5717] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1385.175861][ T5717] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1385.175889][ T5717] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1385.175913][ T5717] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1385.175942][ T5717] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1385.175969][ T5717] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1385.175994][ T5717] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.176036][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.500759][ T5717] usb 9-1: GET_CAPABILITIES returned 0 [ 1385.500813][ T5717] usbtmc 9-1:16.0: can't read capabilities [ 1385.513126][ T5965] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1385.759331][ T5965] usb 4-1: device descriptor read/all, error -71 [ 1385.778837][ T31] usb 9-1: USB disconnect, device number 26 [ 1388.122388][T16661] overlayfs: missing 'lowerdir' [ 1391.283528][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1391.286188][ T37] audit: type=1326 audit(1787583655.620:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.286245][ T37] audit: type=1326 audit(1787583655.620:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.286283][ T37] audit: type=1326 audit(1787583655.620:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.289484][ T37] audit: type=1326 audit(1787583655.620:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.289665][ T37] audit: type=1326 audit(1787583655.620:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.289711][ T37] audit: type=1326 audit(1787583655.620:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.297346][ T37] audit: type=1326 audit(1787583655.620:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.297390][ T37] audit: type=1326 audit(1787583655.620:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.297428][ T37] audit: type=1326 audit(1787583655.620:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1391.297465][ T37] audit: type=1326 audit(1787583655.620:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.2.2756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff90bbe0d9 code=0x7ffc0000 [ 1392.315807][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.316430][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.617824][T11840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1393.696024][T11840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1393.698352][T11840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1393.777302][T16714] block nbd9: shutting down sockets [ 1393.825309][T11840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1393.826278][T11840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1394.783211][ T5920] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1394.800357][ T1818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.800392][ T1818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.934041][ T5920] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1394.935797][ T5920] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.935851][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1394.935873][ T5920] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1394.935895][ T5920] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1394.935936][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.186515][T11840] Bluetooth: hci0: command tx timeout [ 1396.259139][ T5920] gud 9-1:1.0: DP-1: Failed to add properties (ret=-71) [ 1396.259193][ T5920] gud 9-1:1.0: Failed to get connectors (error=-71) [ 1396.259228][ T5920] gud 9-1:1.0: probe with driver gud failed with error -71 [ 1396.544417][ T5920] usb 9-1: USB disconnect, device number 27 [ 1396.792096][ T1818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1396.792118][ T1818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.229050][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.251156][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.283614][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.284348][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.699464][ T1818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.699487][ T1818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.263639][T11840] Bluetooth: hci0: command tx timeout [ 1400.573067][ T5709] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1400.582802][T11840] Bluetooth: hci0: command tx timeout [ 1400.712191][ T1818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.712212][ T1818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.759223][ T5709] usb 10-1: device descriptor read/64, error -71 [ 1401.350058][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.350301][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.350510][T16716] bridge_slave_0: entered allmulticast mode [ 1401.354568][T16716] bridge_slave_0: entered promiscuous mode [ 1401.357769][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.357973][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.358128][T16716] bridge_slave_1: entered allmulticast mode [ 1401.360706][T16716] bridge_slave_1: entered promiscuous mode [ 1401.583288][ T5865] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1401.594504][T16716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.747525][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 1401.766680][T16716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.778726][ T5865] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1401.799836][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.799910][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1401.799939][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1401.799958][ T5865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1401.799978][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.854459][ T5865] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1401.854493][ T5865] usb 3-1: Manufacturer: syz [ 1401.866857][ T5865] usb 3-1: config 0 descriptor?? [ 1402.006767][T16716] team0: Port device team_slave_0 added [ 1402.052083][T16716] team0: Port device team_slave_1 added [ 1402.297854][ T5865] rc_core: IR keymap rc-hauppauge not found [ 1402.297878][ T5865] Registered IR keymap rc-empty [ 1402.298174][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.317596][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.336738][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1402.348621][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 1402.392788][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.420331][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.449684][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.464000][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.484357][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.505333][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.526177][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.544295][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.565304][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.593426][ T5865] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1402.914890][ T5865] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1402.914917][ T5865] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1402.979877][ T5865] usb 3-1: USB disconnect, device number 39 [ 1403.795665][T16716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.795679][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.795698][T16716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.823028][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1403.993386][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1403.996059][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1403.996125][ T10] usb 9-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=d7.65 [ 1403.997361][ T10] usb 9-1: config 14 has an invalid interface number: 1 but max is 0 [ 1403.997384][ T10] usb 9-1: config 14 has no interface number 0 [ 1403.997429][ T10] usb 9-1: config 14 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1403.997448][ T10] usb 9-1: config 14 interface 1 altsetting 1 endpoint 0x9 has invalid maxpacket 2031, setting to 64 [ 1403.997470][ T10] usb 9-1: config 14 interface 1 has no altsetting 0 [ 1403.999506][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.999528][ T10] usb 9-1: Product: syz [ 1403.999539][ T10] usb 9-1: Manufacturer: syz [ 1403.999551][ T10] usb 9-1: SerialNumber: syz [ 1404.076400][T16716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.076416][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.076441][T16716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.149307][T16826] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1404.150314][T16826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1404.150399][T16826] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1404.285749][T16826] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1404.445981][ T10] ftdi_sio 9-1:14.1: FTDI USB Serial Device converter detected [ 1404.463457][ T10] ftdi_sio ttyUSB0: unknown device type: 0xd765 [ 1404.776177][ T10] usb 9-1: USB disconnect, device number 28 [ 1404.917508][ T5717] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1405.015458][ T10] ftdi_sio 9-1:14.1: device disconnected [ 1405.245607][ T5717] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1405.593756][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1405.710126][T16716] hsr_slave_0: entered promiscuous mode [ 1405.714045][T16716] hsr_slave_1: entered promiscuous mode [ 1405.716486][T16716] debugfs: 'hsr0' already exists in 'hsr' [ 1405.716511][T16716] Cannot create hsr debugfs directory [ 1405.974507][ T1818] batadv1: left allmulticast mode [ 1406.653483][ T5593] Bluetooth: hci6: command 0x0406 tx timeout [ 1406.775377][ T1818] batadv1: left promiscuous mode [ 1407.035484][ T5593] Bluetooth: hci0: command 0x0405 tx timeout [ 1407.093239][ T1818] bridge0: port 3(batadv1) entered disabled state [ 1407.426710][ T1818] bridge_slave_1: left allmulticast mode [ 1407.426745][ T1818] bridge_slave_1: left promiscuous mode [ 1407.428479][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.953622][ T5865] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1408.175034][ T5865] usb 10-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 1408.176287][ T5865] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1408.180519][ T5865] usb 10-1: string descriptor 0 read error: -22 [ 1408.180668][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.256959][ T1818] bridge_slave_0: left allmulticast mode [ 1408.256999][ T1818] bridge_slave_0: left promiscuous mode [ 1408.257327][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.747967][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748004][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748036][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748062][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748086][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748109][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748134][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748160][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.748186][ T5865] razer 0003:1532:010D.000E: unknown main item tag 0x0 [ 1408.750202][ T5865] razer 0003:1532:010D.000E: unexpected long global item [ 1408.750924][ T5865] razer 0003:1532:010D.000E: probe with driver razer failed with error -22 [ 1408.901262][ T5865] usb 10-1: USB disconnect, device number 22 [ 1409.029188][T16886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.036339][T16886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.143392][ T5593] Bluetooth: hci0: command 0x0405 tx timeout [ 1410.599337][T16900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1410.744670][ T1818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.725807][ T5593] Bluetooth: hci0: command 0x0405 tx timeout [ 1411.750538][ T1818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.825155][ T1818] bond0 (unregistering): Released all slaves [ 1411.847696][ T1818] bond1 (unregistering): Released all slaves [ 1411.926838][ T1818] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1412.015370][ T1818] bond2 (unregistering): Released all slaves [ 1412.311492][T16915] netlink: 'syz.8.2821': attribute type 1 has an invalid length. [ 1412.578699][ T1818] : left promiscuous mode [ 1413.499801][T16915] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1413.677742][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2828'. [ 1413.677774][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2828'. [ 1413.786050][ T5593] Bluetooth: hci0: command 0x0405 tx timeout [ 1414.189776][ T1818] tipc: Left network mode [ 1415.095525][T16948] syz.0.2831 (16948): /proc/16945/oom_adj is deprecated, please use /proc/16945/oom_score_adj instead. [ 1416.523065][ T5717] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1416.675873][ T5717] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1416.677413][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1416.677441][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1416.677482][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.888125][ T5717] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 1416.900198][ T5717] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 1417.292271][T16973] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1417.299381][T16973] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1417.401740][T16973] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1417.682477][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 1417.682496][ T37] audit: type=1800 audit(1787583682.010:759): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2845" name="max_speed" dev="configfs" ino=59575 res=0 errno=0 [ 1417.831983][T16972] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1417.863775][T12421] usb 3-1: USB disconnect, device number 40 [ 1417.977641][T12421] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1417.978483][T12421] spcp8x5 3-1:1.0: device disconnected [ 1419.739412][T17029] overlayfs: missing 'lowerdir' [ 1420.310226][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1421.143164][ T1000] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1421.333973][ T1000] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1421.349586][ T1000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.349614][ T1000] usb 10-1: Product: syz [ 1421.349628][ T1000] usb 10-1: Manufacturer: syz [ 1421.349642][ T1000] usb 10-1: SerialNumber: syz [ 1422.139717][ T1000] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1422.139756][ T1000] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1422.263486][ T1818] hsr_slave_0: left promiscuous mode [ 1422.314300][ T1818] hsr_slave_1: left promiscuous mode [ 1422.315963][ T1818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.316955][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.374131][ T1818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.374177][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.552755][ T1000] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1422.552824][ T1000] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1422.595525][ T1000] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1422.628242][ T1000] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1422.665925][ T1000] usb 10-1: USB disconnect, device number 23 [ 1422.729098][ T1818] veth1_macvtap: left promiscuous mode [ 1422.729204][ T1818] veth0_macvtap: left promiscuous mode [ 1422.730719][T17065] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2864'. [ 1422.731148][ T1818] veth1_vlan: left promiscuous mode [ 1422.731311][ T1818] veth0_vlan: left promiscuous mode [ 1423.013485][ T5717] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1423.155290][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.165323][ T5717] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1423.166532][ T5717] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1423.166557][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.166582][ T5717] usb 3-1: config 0 has no interface number 0 [ 1423.166638][ T5717] usb 3-1: config 0 interface 3 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1423.166665][ T5717] usb 3-1: config 0 interface 3 has no altsetting 0 [ 1423.166697][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.250079][ T5717] usb 3-1: config 0 descriptor?? [ 1423.703447][ T5717] usb 3-1: string descriptor 0 read error: -71 [ 1423.721310][ T5717] usb 3-1: USB disconnect, device number 41 [ 1424.217020][ T1818] team0 (unregistering): Port device team_slave_1 removed [ 1424.276821][ T1818] team0 (unregistering): Port device team_slave_0 removed [ 1424.789363][T17075] bridge_slave_0: left allmulticast mode [ 1424.789393][T17075] bridge_slave_0: left promiscuous mode [ 1424.789650][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.974586][T17090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.975159][T17090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.020569][T17075] bridge_slave_1: left allmulticast mode [ 1425.020600][T17075] bridge_slave_1: left promiscuous mode [ 1425.020826][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.305768][T17075] bond0: (slave bond_slave_0): Releasing backup interface [ 1425.414705][T17075] bond0: (slave bond_slave_1): Releasing backup interface [ 1425.665545][T17075] team0: Port device team_slave_0 removed [ 1425.782805][T17075] team0: Port device team_slave_1 removed [ 1425.787653][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.787682][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.842801][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1425.842833][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.923562][T17075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1428.445246][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1430.084192][T16716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1430.127385][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1431.064300][T16716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1431.250255][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1431.252818][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1431.260220][T16716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1431.318645][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1431.321438][T16716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1431.419157][T17196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'. [ 1431.426764][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.321461][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 1432.438052][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1432.532371][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1433.756085][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1433.913057][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1433.913891][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1433.915265][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.915319][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1433.915349][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1433.915379][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1433.915403][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.916944][ T10] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1433.916968][ T10] usb 10-1: Manufacturer: syz [ 1433.934157][ T10] usb 10-1: config 0 descriptor?? [ 1434.250905][ T10] rc_core: IR keymap rc-hauppauge not found [ 1434.250927][ T10] Registered IR keymap rc-empty [ 1434.251076][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.273150][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.298208][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1434.301366][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input37 [ 1434.362397][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.373148][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.397971][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.413634][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.433425][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.436097][T17237] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2904'. [ 1434.453301][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.476973][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.493086][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.509761][T17237] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2904'. [ 1434.513180][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.533400][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1434.560602][ T10] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1434.560632][ T10] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1434.722868][ T10] usb 10-1: USB disconnect, device number 24 [ 1434.924554][T17256] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2908'. [ 1434.925014][T17256] unsupported nlmsg_type 40 [ 1435.156974][T16716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.287805][T16716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.342417][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.345960][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.424727][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.424854][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.443337][T12539] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1435.605313][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1435.620565][T12539] usb 3-1: Using ep0 maxpacket: 32 [ 1435.621476][T12539] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1435.623713][T12539] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1435.623738][T12539] usb 3-1: config 0 has no interface number 0 [ 1435.623782][T12539] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1435.623807][T12539] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1435.629991][T12539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.630013][T12539] usb 3-1: Product: syz [ 1435.630026][T12539] usb 3-1: Manufacturer: syz [ 1435.630039][T12539] usb 3-1: SerialNumber: syz [ 1435.711204][T12539] usb 3-1: config 0 descriptor?? [ 1436.371501][T12539] appletouch 3-1:0.85: Geyser mode initialized. [ 1436.401902][T12539] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input38 [ 1436.891210][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 1436.917974][T12539] usb 3-1: USB disconnect, device number 42 [ 1437.289244][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.316333][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.584568][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2915'. [ 1437.584647][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2915'. [ 1437.636882][T12539] appletouch 3-1:0.85: input: appletouch disconnected [ 1437.928809][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2915'. [ 1437.928881][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2915'. [ 1439.722447][T16716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.262701][T17342] Driver unsupported XDP return value 0 on prog (id 161) dev N/A, expect packet loss! [ 1440.349232][T16716] veth0_vlan: entered promiscuous mode [ 1440.623139][T16716] veth1_vlan: entered promiscuous mode [ 1441.056402][T16716] veth0_macvtap: entered promiscuous mode [ 1441.222355][T16716] veth1_macvtap: entered promiscuous mode [ 1441.367074][T16716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.414242][T16716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.490296][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.490781][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.543658][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.300634][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.043847][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.043868][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.536494][T10009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.536513][T10009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.793558][ T10] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1445.035248][ T10] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1445.035920][ T10] usb 9-1: config 0 has no interfaces? [ 1445.059123][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.059154][ T10] usb 9-1: Product: syz [ 1445.059170][ T10] usb 9-1: Manufacturer: syz [ 1445.059184][ T10] usb 9-1: SerialNumber: syz [ 1445.067904][ T10] usb 9-1: config 0 descriptor?? [ 1445.525253][ T10] usb 9-1: USB disconnect, device number 29 [ 1446.442721][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.443782][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.201914][T17479] vivid-001: disconnect [ 1448.485310][T17476] vivid-001: reconnect [ 1453.121824][T17590] netlink: 'syz.8.2970': attribute type 1 has an invalid length. [ 1453.121846][T17590] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2970'. [ 1453.121952][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2970'. [ 1453.399990][T17599] Bluetooth: Invalid esc byte 0x04 [ 1453.457646][T17604] overlayfs: missing 'lowerdir' [ 1456.020661][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1456.368513][T17672] overlayfs: missing 'lowerdir' [ 1456.630613][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1456.909333][T17679] loop2: detected capacity change from 0 to 7 [ 1457.020395][T17679] Dev loop2: unable to read RDB block 7 [ 1457.020433][T17679] loop2: unable to read partition table [ 1457.020580][T17679] loop2: partition table beyond EOD, truncated [ 1457.020609][T17679] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1459.066089][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 1459.172829][T17706] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1459.603585][T17704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2995'. [ 1459.783398][ T31] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1459.829702][T17718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.832433][T17718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.960985][ T31] usb 9-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 1460.032807][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.032834][ T31] usb 9-1: Product: syz [ 1460.032847][ T31] usb 9-1: Manufacturer: syz [ 1460.032860][ T31] usb 9-1: SerialNumber: syz [ 1460.098764][ T31] ums-datafab 9-1:1.0: USB Mass Storage device detected [ 1460.137047][ T31] ums-datafab 9-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1460.137047][ T31] Please send a copy of this message to and [ 1460.139232][ T31] scsi host1: usb-storage 9-1:1.0 [ 1460.503793][T12424] usb 9-1: USB disconnect, device number 30 [ 1463.190771][T17797] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3015'. [ 1464.963023][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1465.125241][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1465.126237][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1465.128292][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.128314][ T31] usb 3-1: config 0 has no interfaces? [ 1465.128343][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.177084][ T31] usb 3-1: config 0 descriptor?? [ 1465.451988][ T31] usb 3-1: USB disconnect, device number 43 [ 1466.883057][ T31] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1467.112565][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1467.114042][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 1467.114080][ T31] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1467.141393][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.141420][ T31] usb 3-1: Product: syz [ 1467.141434][ T31] usb 3-1: Manufacturer: syz [ 1467.141447][ T31] usb 3-1: SerialNumber: syz [ 1467.461911][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1467.515776][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1467.594543][ T31] usb 3-1: USB disconnect, device number 44 [ 1467.799899][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1469.543116][ T5865] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1469.607095][T12424] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1469.615938][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1469.693114][ T5865] usb 10-1: Using ep0 maxpacket: 16 [ 1469.694035][ T5865] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1469.696767][ T5865] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 1469.696791][ T5865] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1469.702845][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.702869][ T5865] usb 10-1: Product: syz [ 1469.703414][ T5865] usb 10-1: Manufacturer: syz [ 1469.703430][ T5865] usb 10-1: SerialNumber: syz [ 1469.764471][T12424] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1469.767939][T12424] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.767995][T12424] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.795844][T12424] usb 9-1: config 0 descriptor?? [ 1469.828938][ T5865] usb 10-1: 0:2 : does not exist [ 1469.845202][ T5965] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1469.854358][T12424] pwc: Askey VC010 type 2 USB webcam detected. [ 1470.029998][ T5965] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1470.031644][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.066733][ T5865] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1470.077584][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.077610][ T5965] usb 2-1: Product: syz [ 1470.077623][ T5965] usb 2-1: Manufacturer: syz [ 1470.077635][ T5965] usb 2-1: SerialNumber: syz [ 1470.140660][ T5965] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1470.232752][T12424] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1470.247728][T12424] pwc: recv_control_msg error -32 req 02 val 2700 [ 1470.249177][T12424] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1470.250007][T12424] pwc: recv_control_msg error -32 req 04 val 1000 [ 1470.457192][T12424] pwc: recv_control_msg error -32 req 04 val 1400 [ 1470.459463][T12424] pwc: recv_control_msg error -32 req 02 val 2000 [ 1470.600535][T17897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.621454][T17897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.665517][T12424] pwc: recv_control_msg error -71 req 04 val 1500 [ 1470.665992][T12424] pwc: recv_control_msg error -71 req 02 val 2500 [ 1470.666497][T12424] pwc: recv_control_msg error -71 req 02 val 2400 [ 1470.669529][T12424] pwc: recv_control_msg error -71 req 02 val 2600 [ 1470.670551][T12424] pwc: recv_control_msg error -71 req 02 val 2900 [ 1470.671663][T12424] pwc: recv_control_msg error -71 req 02 val 2800 [ 1470.678463][T12424] pwc: recv_control_msg error -71 req 04 val 1100 [ 1470.678941][T12424] pwc: recv_control_msg error -71 req 04 val 1200 [ 1470.700644][T12424] pwc: Registered as video103. [ 1470.729343][T12424] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39 [ 1470.847227][T12424] usb 9-1: USB disconnect, device number 31 [ 1470.944637][ T5865] usb 10-1: USB disconnect, device number 25 [ 1471.007971][ T5965] gspca_mr97310a: reg write [19] error -71 [ 1471.008059][ T5965] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 1471.058016][ T5965] usb 2-1: USB disconnect, device number 2 [ 1471.385218][T12306] udevd[12306]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 1471.385391][T12306] udevd[12306]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 1471.770402][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1471.993362][T12425] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1472.063933][ T5865] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1472.148736][T12425] usb 2-1: Using ep0 maxpacket: 8 [ 1472.152801][T12425] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1472.157510][T12425] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1472.157536][T12425] usb 2-1: config 0 has no interface number 0 [ 1472.157578][T12425] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1472.157603][T12425] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1472.157627][T12425] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1472.157652][T12425] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1472.157692][T12425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.179327][T12425] usb 2-1: config 0 descriptor?? [ 1472.192060][T12425] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1472.216054][ T5865] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1472.216831][ T5865] usb 10-1: not running at top speed; connect to a high speed hub [ 1472.216865][ T5865] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1472.234290][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.234317][ T5865] usb 10-1: Product: syz [ 1472.234330][ T5865] usb 10-1: Manufacturer: syz [ 1472.234343][ T5865] usb 10-1: SerialNumber: syz [ 1472.849245][ T5865] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1472.887886][ T5865] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1472.997834][T12425] usb 2-1: USB disconnect, device number 3 [ 1473.054084][T12425] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1473.213545][ T5865] usb 10-1: USB disconnect, device number 26 [ 1473.808117][T17939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1473.808136][T17939] IPv6: NLM_F_CREATE should be set when creating new route [ 1473.812818][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1473.968136][T17930] could not allocate digest TFM handle blake2b-512-generic [ 1474.553980][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1474.788704][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.791415][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.863332][ T5965] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1475.095589][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1475.096416][ T5965] usb 2-1: not running at top speed; connect to a high speed hub [ 1475.096454][ T5965] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1475.123132][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.123161][ T5965] usb 2-1: Product: syz [ 1475.123174][ T5965] usb 2-1: Manufacturer: syz [ 1475.123188][ T5965] usb 2-1: SerialNumber: syz [ 1475.760015][ T5965] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1475.943697][ T5965] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1477.090929][ T5965] usb 2-1: USB disconnect, device number 4 [ 1477.427131][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1481.467758][T17996] overlayfs: missing 'lowerdir' [ 1484.596337][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.056696][T12421] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1486.172735][T12421] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1486.263454][T12421] usb 9-1: not running at top speed; connect to a high speed hub [ 1486.263494][T12421] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1486.369409][T12421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.383849][T12421] usb 9-1: can't set config #1, error -71 [ 1486.422735][T12421] usb 9-1: USB disconnect, device number 32 [ 1487.794039][T18088] overlayfs: missing 'lowerdir' [ 1492.223035][ T5965] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1492.387135][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1492.387748][ T5965] usb 3-1: not running at top speed; connect to a high speed hub [ 1492.387785][ T5965] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1492.415301][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.415328][ T5965] usb 3-1: Product: syz [ 1492.415342][ T5965] usb 3-1: Manufacturer: syz [ 1492.415355][ T5965] usb 3-1: SerialNumber: syz [ 1493.366888][ T5965] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1493.386001][ T5965] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1493.741666][ T5965] usb 3-1: USB disconnect, device number 45 [ 1493.997095][T18161] overlayfs: missing 'lowerdir' [ 1494.040663][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1496.886849][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3113'. [ 1497.093089][T12421] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1497.254998][T12421] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1497.258841][T12421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.301703][T12421] usb 9-1: config 0 descriptor?? [ 1498.067403][T12421] hackrf 9-1:0.0: Board ID: 00 [ 1498.067479][T12421] hackrf 9-1:0.0: Firmware version: [ 1498.671847][T12421] hackrf 9-1:0.0: Registered as swradio24 [ 1498.671878][T12421] videodev: could not get a free minor [ 1498.671889][T12421] hackrf 9-1:0.0: Failed to register as video device (-23) [ 1498.768747][T12421] hackrf 9-1:0.0: probe with driver hackrf failed with error -23 [ 1498.784670][T12421] usb 9-1: USB disconnect, device number 33 [ 1506.889696][T18298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1507.976278][T18316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.977211][T18316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.027173][T18346] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1516.864547][ T37] audit: type=1800 audit(1787583781.200:760): pid=18413 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3171" name="control" dev="configfs" ino=64964 res=0 errno=0 [ 1517.543061][ T5709] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1517.707126][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 1517.709792][ T5709] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1517.711946][ T5709] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1517.715244][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1517.715267][ T5709] usb 3-1: Product: syz [ 1517.715281][ T5709] usb 3-1: Manufacturer: syz [ 1517.715294][ T5709] usb 3-1: SerialNumber: syz [ 1517.747859][ T5709] usb 3-1: config 0 descriptor?? [ 1517.749945][T18438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1517.769209][ T5709] hub 3-1:0.0: bad descriptor, ignoring hub [ 1517.769246][ T5709] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1519.904457][T12425] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1520.054991][T12425] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1520.075494][T12425] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64 [ 1520.156199][T12425] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.156227][T12425] usb 10-1: Product: syz [ 1520.156242][T12425] usb 10-1: Manufacturer: syz [ 1520.156255][T12425] usb 10-1: SerialNumber: syz [ 1520.202425][T12425] usb 10-1: config 0 descriptor?? [ 1520.209338][T18465] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1520.484586][T12425] dm9601 10-1:0.0: probe with driver dm9601 failed with error -71 [ 1520.512391][T12425] usb 10-1: USB disconnect, device number 27 [ 1521.217440][T18484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.247081][T18484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.594894][T12425] usb 3-1: USB disconnect, device number 46 [ 1524.026701][ T37] audit: type=1326 audit(1787583788.360:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.026754][ T37] audit: type=1326 audit(1787583788.360:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.116657][ T37] audit: type=1326 audit(1787583788.450:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.116706][ T37] audit: type=1326 audit(1787583788.450:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162212][ T37] audit: type=1326 audit(1787583788.470:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162267][ T37] audit: type=1326 audit(1787583788.470:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162306][ T37] audit: type=1326 audit(1787583788.470:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162346][ T37] audit: type=1326 audit(1787583788.470:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162384][ T37] audit: type=1326 audit(1787583788.470:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1524.162421][ T37] audit: type=1326 audit(1787583788.470:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18514 comm="syz.8.3189" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad0fe0d9 code=0x7ffc0000 [ 1529.868728][T18557] overlayfs: missing 'lowerdir' [ 1530.154035][ T5709] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1531.050332][T18568] overlayfs: failed to clone upperpath [ 1531.073454][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 1531.075017][ T5709] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1531.075773][ T5709] usb 2-1: config 0 has no interfaces? [ 1531.075805][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.082229][ T5709] usb 2-1: config 0 descriptor?? [ 1531.146745][T18567] overlayfs: missing 'lowerdir' [ 1531.700858][ T5709] usb 2-1: USB disconnect, device number 5 [ 1532.182109][T18589] FAULT_INJECTION: forcing a failure. [ 1532.182109][T18589] name failslab, interval 1, probability 0, space 0, times 1 [ 1532.182170][T18589] CPU: 1 UID: 0 PID: 18589 Comm: syz.9.3207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1532.182200][T18589] Tainted: [L]=SOFTLOCKUP [ 1532.182207][T18589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1532.182223][T18589] Call Trace: [ 1532.182232][T18589] [ 1532.182261][T18589] dump_stack_lvl+0xe8/0x150 [ 1532.182457][T18589] should_fail_ex+0x46b/0x600 [ 1532.182514][T18589] should_failslab+0xa8/0x100 [ 1532.182568][T18589] __kmalloc_noprof+0xfe/0x780 [ 1532.182598][T18589] ? io_cache_alloc_new+0x40/0x100 [ 1532.182645][T18589] ? io_cache_alloc_new+0x40/0x100 [ 1532.182679][T18589] io_cache_alloc_new+0x40/0x100 [ 1532.182707][T18589] io_uring_cmd_prep+0x39a/0x600 [ 1532.182748][T18589] io_submit_sqes+0xbde/0x2310 [ 1532.182809][T18589] __se_sys_io_uring_enter+0x364/0x1bb0 [ 1532.182861][T18589] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1532.182899][T18589] ? irqentry_exit+0x218/0x910 [ 1532.183001][T18589] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1532.183039][T18589] ? rcu_is_watching+0x16/0xb0 [ 1532.183095][T18589] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1532.183127][T18589] do_syscall_64+0x166/0x520 [ 1532.183174][T18589] ? trace_irq_disable+0x3b/0x140 [ 1532.183213][T18589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.183247][T18589] ? clear_bhb_loop+0x70/0xc0 [ 1532.183272][T18589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.183295][T18589] RIP: 0033:0x7f401ac9e0d9 [ 1532.183353][T18589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.183371][T18589] RSP: 002b:00007f4018ef5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1532.183424][T18589] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f401ac9e0d9 [ 1532.183439][T18589] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 1532.183449][T18589] RBP: 0000000000000277 R08: 0000000000000000 R09: 0000000000000008 [ 1532.183461][T18589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 1532.183473][T18589] R13: 0000200000000808 R14: 0000000000000e26 R15: 0000000000000000 [ 1532.183503][T18589] [ 1532.472354][T18600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1533.414187][ T3331] IPVS: starting estimator thread 0... [ 1533.517879][T18607] IPVS: using max 7 ests per chain, 16800 per kthread [ 1534.213909][T18619] overlayfs: missing 'lowerdir' [ 1535.129919][T18623] overlayfs: missing 'lowerdir' [ 1537.676690][T12421] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1537.860202][T12421] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1538.243063][T12421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.243090][T12421] usb 2-1: Product: syz [ 1538.243104][T12421] usb 2-1: Manufacturer: syz [ 1538.243118][T12421] usb 2-1: SerialNumber: syz [ 1538.702294][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1538.702358][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1539.943878][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1539.947818][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1540.425421][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1540.425483][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1540.536866][T12421] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1540.567310][T12421] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1540.591120][T12421] usb 2-1: USB disconnect, device number 6 [ 1540.640600][T12305] udevd[12305]: setting mode of /dev/bus/usb/002/006 to 020664 failed: No such file or directory [ 1540.640788][T12305] udevd[12305]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 1543.882556][T11840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1543.940526][T11840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1543.943414][T11840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1543.951328][T11840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1543.963288][T11840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1544.307405][T18693] sd 0:0:1:0: PR command failed: 1026 [ 1544.307493][T18693] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1544.307545][T18693] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1546.037209][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.131840][T10007] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.300931][T11840] Bluetooth: hci4: command tx timeout [ 1548.343028][T11840] Bluetooth: hci4: command tx timeout [ 1548.452103][T18731] Invalid argument reading file caps for ./file0 [ 1548.697935][T18733] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1548.697962][T18733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1548.699785][T18733] vhci_hcd vhci_hcd.0: Device attached [ 1548.983129][ T10] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1550.176997][T12425] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1550.282398][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1550.312157][ T10] usb 2-1: config 0 has no interfaces? [ 1550.312194][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.358795][T10007] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.418633][ T10] usb 2-1: config 0 descriptor?? [ 1550.423023][T11840] Bluetooth: hci4: command tx timeout [ 1551.712825][ T5709] usb 2-1: USB disconnect, device number 7 [ 1551.759310][T18735] vhci_hcd: connection closed [ 1551.836738][T18758] binder: 18757:18758 ioctl c0306201 200000000080 returned -14 [ 1551.867248][ T6564] vhci_hcd vhci_hcd.1: stop threads [ 1551.867274][ T6564] vhci_hcd vhci_hcd.1: release socket [ 1551.888629][T12425] usb 35-1: device descriptor read/64, error -661959270 [ 1551.908504][ T6564] vhci_hcd vhci_hcd.1: disconnect device [ 1551.939094][T18758] binder: 18757:18758 ioctl c0306201 2000000003c0 returned -14 [ 1552.063464][T12425] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1552.337404][T10007] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.465810][T11840] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 1552.518086][T11840] Bluetooth: hci4: command tx timeout [ 1552.834628][ T5709] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1553.024549][ T5709] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1553.026240][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.026285][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1553.026306][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1553.026322][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.026355][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.131440][ T5709] usb 2-1: config 0 descriptor?? [ 1554.307641][ T1000] usb 2-1: USB disconnect, device number 8 [ 1554.436924][T10007] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.703846][ T1000] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1556.892435][ T1000] usb 2-1: Using ep0 maxpacket: 8 [ 1557.378986][ T1000] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1557.394907][ T1000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1557.394945][ T1000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1557.394969][ T1000] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1557.394993][ T1000] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1557.395036][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.525890][ T1000] usb 2-1: config 0 descriptor?? [ 1557.940018][T18688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.940148][T18688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.940316][T18688] bridge_slave_0: entered allmulticast mode [ 1557.978773][T18688] bridge_slave_0: entered promiscuous mode [ 1558.049373][T18688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.049566][T18688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.049741][T18688] bridge_slave_1: entered allmulticast mode [ 1558.055981][T18688] bridge_slave_1: entered promiscuous mode [ 1559.375349][ T5709] usb 2-1: USB disconnect, device number 9 [ 1560.519398][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1560.549938][T18688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.679385][T11840] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1560.730339][T18688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.915707][T18688] team0: Port device team_slave_0 added [ 1560.991160][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.002861][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.238911][T18688] team0: Port device team_slave_1 added [ 1562.161787][T18688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.161807][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.161833][T18688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.166821][T18688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.166838][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.166863][T18688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.323079][T12421] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1562.473135][T12421] usb 10-1: Using ep0 maxpacket: 16 [ 1562.473992][T12421] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1562.475522][T12421] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.475545][T12421] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1562.478145][T12421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.478179][T12421] usb 10-1: Product: syz [ 1562.478193][T12421] usb 10-1: Manufacturer: syz [ 1562.478208][T12421] usb 10-1: SerialNumber: syz [ 1562.754575][T12421] usb 10-1: 0:2 : does not exist [ 1562.767675][T12421] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1563.549395][T12421] usb 10-1: USB disconnect, device number 28 [ 1564.031118][T12305] udevd[12305]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1566.318811][T10007] bond0 (unregistering): Released all slaves [ 1567.228856][T18879] Bluetooth: MGMT ver 1.23 [ 1567.587502][T18688] hsr_slave_0: entered promiscuous mode [ 1567.588300][T18688] hsr_slave_1: entered promiscuous mode [ 1567.588773][T18688] debugfs: 'hsr0' already exists in 'hsr' [ 1567.588788][T18688] Cannot create hsr debugfs directory [ 1572.422710][T18898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.556031][T18898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.009198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060a05400: rx timeout, send abort [ 1576.751121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af31000: rx timeout, send abort [ 1576.751159][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060a05400: abort rx timeout. Force session deactivation [ 1576.929660][T18936] geneve1: entered promiscuous mode [ 1576.929804][T18936] macsec2: entered allmulticast mode [ 1576.929813][T18936] geneve1: entered allmulticast mode [ 1577.423892][T18936] geneve1: left allmulticast mode [ 1577.564932][T18936] geneve1: left promiscuous mode [ 1578.024161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803af31000: abort rx timeout. Force session deactivation [ 1578.482261][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1587.431546][T18977] team0: Port device vxlan0 added [ 1587.834546][T18262] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.410872][T18262] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.445865][T18262] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.785736][T18262] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.291099][T19013] FAULT_INJECTION: forcing a failure. [ 1591.291099][T19013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1591.291146][T19013] CPU: 1 UID: 0 PID: 19013 Comm: syz.0.3309 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1591.291175][T19013] Tainted: [L]=SOFTLOCKUP [ 1591.291183][T19013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1591.291195][T19013] Call Trace: [ 1591.291204][T19013] [ 1591.291215][T19013] dump_stack_lvl+0xe8/0x150 [ 1591.291255][T19013] should_fail_ex+0x46b/0x600 [ 1591.291288][T19013] _copy_from_user+0x2d/0xb0 [ 1591.291316][T19013] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 1591.291349][T19013] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1591.291394][T19013] ? rcu_is_watching+0x16/0xb0 [ 1591.291431][T19013] do_syscall_64+0x166/0x520 [ 1591.291454][T19013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.291474][T19013] ? clear_bhb_loop+0x70/0xc0 [ 1591.291498][T19013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.291518][T19013] RIP: 0033:0x7f1199c3e0d9 [ 1591.291539][T19013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.291558][T19013] RSP: 002b:00007f1197e95ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1591.291582][T19013] RAX: ffffffffffffffda RBX: 00002000000008a8 RCX: 00007f1199c3e0d9 [ 1591.291596][T19013] RDX: 0000200000000928 RSI: 00002000000008a8 RDI: 0000000000000e26 [ 1591.291610][T19013] RBP: 00002000000008a0 R08: 0000000000000008 R09: 0000000000000000 [ 1591.291622][T19013] R10: 0000200000000930 R11: 0000000000000206 R12: 0000200000000928 [ 1591.291635][T19013] R13: 0000200000000930 R14: 00007f1197e95fd8 R15: 0000000000000001 [ 1591.291666][T19013] [ 1591.393103][ T5865] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1591.544475][ T5865] usb 10-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1591.551407][ T5865] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1591.551449][ T5865] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1591.551474][ T5865] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1591.551498][ T5865] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1591.551529][ T5865] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1591.551573][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.572199][T19010] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1591.572379][T19010] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1591.572559][T19010] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1591.579939][ T5865] mos7720 10-1:1.0: Moschip 2 port adapter converter detected [ 1592.071628][ T5865] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1592.899340][ T5865] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1593.284630][T19032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.689662][ T5865] usb 10-1: USB disconnect, device number 29 [ 1593.715357][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1593.732164][ T5865] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1597.263277][ T5865] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1597.432041][T19060] netlink: Unknown conntrack attr (0) [ 1597.432176][T19060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.761107][ T5865] mos7720 10-1:1.0: device disconnected [ 1599.730356][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1599.730375][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1601.300831][T19075] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1602.805763][T10007] hsr_slave_0: left promiscuous mode [ 1602.846007][T10007] hsr_slave_1: left promiscuous mode [ 1602.931436][T10007] veth1_macvtap: left promiscuous mode [ 1602.931554][T10007] veth0_macvtap: left promiscuous mode [ 1602.948580][T10007] veth1_vlan: left promiscuous mode [ 1602.948813][T10007] veth0_vlan: left promiscuous mode [ 1604.555817][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1604.615087][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1604.618581][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1604.640851][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1604.671433][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1606.823078][T11840] Bluetooth: hci5: command tx timeout [ 1607.467360][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.135142][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.904073][T11840] Bluetooth: hci5: command tx timeout [ 1609.723099][T17885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1609.883900][T17885] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1609.886529][T17885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1609.886580][T17885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.301087][T17885] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 1610.877704][T17885] wwan wwan0: port wwan0qmi0 attached [ 1610.984056][T11840] Bluetooth: hci5: command tx timeout [ 1613.111957][T19142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.148133][T11840] Bluetooth: hci5: command tx timeout [ 1615.808390][T17885] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, d6:31:88:68:3f:9c [ 1615.828065][T17885] usb 2-1: USB disconnect, device number 10 [ 1615.895680][T17885] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 1617.045388][T17885] wwan wwan0: port wwan0qmi0 disconnected [ 1618.849933][T10007] IPVS: stop unused estimator thread 0... [ 1618.964191][T17885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1618.996905][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1621.774786][T18655] bridge_slave_1: left allmulticast mode [ 1621.774822][T18655] bridge_slave_1: left promiscuous mode [ 1621.775231][T18655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.945091][T18655] bridge_slave_0: left allmulticast mode [ 1621.945125][T18655] bridge_slave_0: left promiscuous mode [ 1621.945394][T18655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.055974][T19213] binder_alloc: 19212: binder_alloc_buf, no vma [ 1622.810832][T19225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.811472][T19225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.830752][T18655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.936060][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1624.936085][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1624.936098][T19235] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 1625.024913][T18655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.028154][T19245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1625.135293][T18655] bond0 (unregistering): Released all slaves [ 1626.524375][ T5244] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1626.585893][T19240] ªªªªªª: renamed from vlan0 (while UP) [ 1626.796550][T19264] netlink: Unknown conntrack attr (0) [ 1626.796756][T19264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.319802][T18655] hsr_slave_0: left promiscuous mode [ 1633.335992][T18655] hsr_slave_1: left promiscuous mode [ 1633.337136][T18655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.918090][T18655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.941320][T19313] input: syz1 as /devices/virtual/input/input40 [ 1634.613021][ T1000] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1635.203306][T19340] nfs4: Unknown parameter 'fsmagic' [ 1635.759164][ T1000] usb 2-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 1635.760832][ T1000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.760863][ T1000] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1635.760904][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.820987][ T1000] usb 2-1: config 0 descriptor?? [ 1636.811339][T18655] team0 (unregistering): Port device team_slave_1 removed [ 1636.888207][T18655] team0 (unregistering): Port device team_slave_0 removed [ 1638.849116][ T1000] usbhid 2-1:0.0: can't add hid device: -71 [ 1638.849239][ T1000] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1638.950417][ T1000] usb 2-1: USB disconnect, device number 12 [ 1639.235986][T19380] ubi0: attaching mtd0 [ 1639.268587][T19380] ubi0: scanning is finished [ 1639.268977][T19380] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1642.473031][T19380] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1643.708618][T17885] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1643.867856][T17885] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1643.869351][T17885] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1643.869375][T17885] usb 2-1: config 0 has no interface number 0 [ 1643.901095][T17885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.901118][T17885] usb 2-1: Product: syz [ 1643.901130][T17885] usb 2-1: Manufacturer: syz [ 1643.901140][T17885] usb 2-1: SerialNumber: syz [ 1644.033547][T19094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.033684][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.033981][T19094] bridge_slave_0: entered allmulticast mode [ 1644.035487][T17885] usb 2-1: config 0 descriptor?? [ 1644.039820][T19094] bridge_slave_0: entered promiscuous mode [ 1644.094325][T19094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.094653][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.094929][T19094] bridge_slave_1: entered allmulticast mode [ 1644.098931][T19094] bridge_slave_1: entered promiscuous mode [ 1645.552494][T19094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.567297][T19094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.319991][T19094] team0: Port device team_slave_0 added [ 1648.322362][T19094] team0: Port device team_slave_1 added [ 1648.458284][T19094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.458299][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.458324][T19094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.460570][T19094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.460582][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.460606][T19094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.637040][T17885] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1648.639682][T17885] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1648.639777][T17885] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1648.639863][T17885] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1648.680726][T17885] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1648.694016][T17885] usb 2-1: USB disconnect, device number 13 [ 1648.711219][T17885] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1648.712106][T17885] keyspan 2-1:0.133: device disconnected [ 1649.033824][T19094] hsr_slave_0: entered promiscuous mode [ 1649.040265][T19094] hsr_slave_1: entered promiscuous mode [ 1649.041174][T19094] debugfs: 'hsr0' already exists in 'hsr' [ 1649.041198][T19094] Cannot create hsr debugfs directory [ 1649.374037][T19468] ipvlan2: entered allmulticast mode [ 1649.374064][T19468] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1649.430521][T19468] batman_adv: batadv0: Adding interface: ipvlan2 [ 1649.430537][T19468] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.430570][T19468] batman_adv: batadv0: Interface activated: ipvlan2 [ 1651.151667][T19489] overlayfs: missing 'lowerdir' [ 1657.150285][T11840] Bluetooth: hci5: link tx timeout [ 1657.150916][T11840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1660.264838][ T5593] Bluetooth: hci5: command 0x0406 tx timeout [ 1661.910859][T19551] overlayfs: missing 'lowerdir' [ 1664.431440][T11840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1664.434384][T17885] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1665.181013][T11840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1665.200108][T11840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1665.244037][T11840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1665.245938][T11840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1665.408197][T17885] usb 2-1: Using ep0 maxpacket: 8 [ 1665.444687][T17885] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1665.512119][T17885] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 1665.512149][T17885] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 1665.512169][T17885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.512189][T17885] usb 2-1: config 0 has no interface number 0 [ 1665.512234][T17885] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1665.512263][T17885] usb 2-1: config 0 interface 200 has no altsetting 0 [ 1665.631211][T17885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.631241][T17885] usb 2-1: Product: syz [ 1665.631255][T17885] usb 2-1: Manufacturer: syz [ 1665.631269][T17885] usb 2-1: SerialNumber: syz [ 1665.809583][T17885] usb 2-1: config 0 descriptor?? [ 1667.518238][T17885] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 1667.537844][T17885] usb 2-1: USB disconnect, device number 14 [ 1667.783666][ T5593] Bluetooth: hci4: command tx timeout [ 1668.917062][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.090470][T19621] overlayfs: missing 'lowerdir' [ 1669.941548][ T5593] Bluetooth: hci4: command tx timeout [ 1671.943435][ T5593] Bluetooth: hci4: command tx timeout [ 1675.105442][ T5593] Bluetooth: hci4: command tx timeout [ 1678.255367][T19700] overlayfs: missing 'lowerdir' [ 1683.703042][ T5965] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1684.983024][ T5965] usb 10-1: Using ep0 maxpacket: 16 [ 1684.984080][ T5965] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1684.985661][ T5965] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.990285][ T5965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.990309][ T5965] usb 10-1: Product: syz [ 1684.990323][ T5965] usb 10-1: Manufacturer: syz [ 1684.990337][ T5965] usb 10-1: SerialNumber: syz [ 1685.055021][ T5965] usb 10-1: config 0 descriptor?? [ 1688.082931][T12421] usb 10-1: USB disconnect, device number 30 [ 1688.526404][T19779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1690.324701][T19578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.326987][T19578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.327178][T19578] bridge_slave_0: entered allmulticast mode [ 1690.714869][T19578] bridge_slave_0: entered promiscuous mode [ 1691.701063][T19578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.701187][T19578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.701387][T19578] bridge_slave_1: entered allmulticast mode [ 1691.709042][T19578] bridge_slave_1: entered promiscuous mode [ 1693.742548][T19578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.075074][T19578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.117242][T19578] team0: Port device team_slave_0 added [ 1694.120746][T19578] team0: Port device team_slave_1 added [ 1694.309698][T19578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.309715][T19578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.309741][T19578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.311967][T19578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.311980][T19578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.312005][T19578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.600606][T19578] hsr_slave_0: entered promiscuous mode [ 1694.609723][T19578] hsr_slave_1: entered promiscuous mode [ 1694.610571][T19578] debugfs: 'hsr0' already exists in 'hsr' [ 1694.610594][T19578] Cannot create hsr debugfs directory [ 1695.162613][T19826] input: syz1 as /devices/virtual/input/input41 [ 1702.560127][T19874] binder: 19870:19874 ioctl c0306201 0 returned -14 [ 1706.212189][ T63] bridge_slave_1: left allmulticast mode [ 1706.212224][ T63] bridge_slave_1: left promiscuous mode [ 1706.212465][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.401352][ T63] bridge_slave_0: left allmulticast mode [ 1707.401385][ T63] bridge_slave_0: left promiscuous mode [ 1707.401626][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.723212][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.911344][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.215643][ T63] bond0 (unregistering): Released all slaves [ 1720.313955][ T63] hsr_slave_0: left promiscuous mode [ 1720.384294][ T63] hsr_slave_1: left promiscuous mode [ 1720.385701][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.677182][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.069652][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1724.153344][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1724.304683][T18691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1724.310345][T18691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1724.351307][T18691] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1724.360729][T18691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1724.364147][T18691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1725.304515][ T5593] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1725.305300][ T5593] Bluetooth: hci0: command 0x0405 tx timeout [ 1725.661915][T20010] openvswitch: netlink: Flow key attr not present in new flow. [ 1726.078060][T20016] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1726.663185][T11840] Bluetooth: hci5: command tx timeout [ 1727.428323][T20028] jffs2: notice: (20028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1727.816591][T20028] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1729.717348][T11840] Bluetooth: hci5: command tx timeout [ 1729.913771][T20044] overlayfs: missing 'lowerdir' [ 1731.293611][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.075994][T11840] Bluetooth: hci5: command tx timeout [ 1733.839919][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 1734.151976][T11840] Bluetooth: hci5: command tx timeout [ 1736.047542][T20105] overlayfs: missing 'lowerdir' [ 1742.294778][T19991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.294950][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.295140][T19991] bridge_slave_0: entered allmulticast mode [ 1742.298550][T19991] bridge_slave_0: entered promiscuous mode [ 1742.307695][T19991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.310406][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.312233][T19991] bridge_slave_1: entered allmulticast mode [ 1742.316533][T19991] bridge_slave_1: entered promiscuous mode [ 1742.399598][T19991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.410050][T19991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.473416][T19991] team0: Port device team_slave_0 added [ 1742.477321][T19991] team0: Port device team_slave_1 added [ 1742.517984][T19991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.518000][T19991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.518026][T19991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.520356][T19991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.520369][T19991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.520395][T19991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.612224][T19991] hsr_slave_0: entered promiscuous mode [ 1742.614052][T19991] hsr_slave_1: entered promiscuous mode [ 1742.617760][T19991] debugfs: 'hsr0' already exists in 'hsr' [ 1742.617785][T19991] Cannot create hsr debugfs directory [ 1744.313993][T20149] binder: 20144:20149 ioctl c0306201 200000000040 returned -22 [ 1747.271340][T20152] ucma_write: process 1420 (syz.9.3529) changed security contexts after opening file descriptor, this is not allowed. [ 1753.410698][ T5788] bridge_slave_1: left allmulticast mode [ 1753.410735][ T5788] bridge_slave_1: left promiscuous mode [ 1753.411014][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.025431][T20192] syz.9.3536 (20192): drop_caches: 2 [ 1756.287258][ T5788] bridge_slave_0: left allmulticast mode [ 1756.287293][ T5788] bridge_slave_0: left promiscuous mode [ 1756.287553][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.989894][ T5788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.064066][ T5788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.315736][ T5788] bond0 (unregistering): Released all slaves [ 1765.725720][T20239] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1767.464341][ T5788] hsr_slave_0: left promiscuous mode [ 1767.983156][ T5788] hsr_slave_1: left promiscuous mode [ 1767.984383][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.025603][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.118902][T20297] overlayfs: failed to clone upperpath [ 1774.550410][T20305] Mass Storage Function, version: 2009/09/11 [ 1774.550580][T20305] LUN: removable file: (no medium) [ 1774.906439][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1774.906498][ T37] audit: type=1800 audit(1787584039.090:772): pid=20306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3563" name="cdrom" dev="configfs" ino=72788 res=0 errno=0 [ 1774.906545][ T37] audit: type=1800 audit(1787584039.210:773): pid=20305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3563" name="file" dev="configfs" ino=72789 res=0 errno=0 [ 1777.541497][ T5788] team0 (unregistering): Port device team_slave_1 removed [ 1777.879101][ T5788] team0 (unregistering): Port device team_slave_0 removed [ 1789.021494][T20376] ALSA: mixer_oss: invalid OSS volume '' [ 1789.489815][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1789.550590][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1789.614665][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1789.648928][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1789.658885][ T5593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1791.789640][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.847130][T20394] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 1792.023111][T11840] Bluetooth: hci4: command tx timeout [ 1794.816201][ T5593] Bluetooth: hci4: command tx timeout [ 1796.950080][ T5593] Bluetooth: hci4: command 0x040f tx timeout [ 1799.062988][ T5593] Bluetooth: hci4: command 0x040f tx timeout [ 1799.797942][T20450] syz.0.3587 (20450): drop_caches: 2 [ 1801.151419][ T5593] Bluetooth: hci4: command 0x040f tx timeout [ 1806.212453][T20372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.230914][T20372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.231130][T20372] bridge_slave_0: entered allmulticast mode [ 1806.253491][T20372] bridge_slave_0: entered promiscuous mode [ 1806.311393][T20372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.311545][T20372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.311742][T20372] bridge_slave_1: entered allmulticast mode [ 1806.337413][T20372] bridge_slave_1: entered promiscuous mode [ 1806.426787][T20372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.430905][T20372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.585021][T20372] team0: Port device team_slave_0 added [ 1806.588751][T20372] team0: Port device team_slave_1 added [ 1806.829551][T20519] input: syz0 as /devices/virtual/input/input43 [ 1806.920890][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'. [ 1807.007087][T20372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.007103][T20372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.007128][T20372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.009552][T20372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.009566][T20372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.009591][T20372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.882392][T20372] hsr_slave_0: entered promiscuous mode [ 1807.900709][T20372] hsr_slave_1: entered promiscuous mode [ 1807.913454][T20372] debugfs: 'hsr0' already exists in 'hsr' [ 1807.913480][T20372] Cannot create hsr debugfs directory [ 1811.401263][T20569] device-mapper: ioctl: name not supplied when creating device [ 1813.678871][T20581] Invalid ELF header magic: != ELF [ 1814.534199][ T37] audit: type=1326 audit(1787584078.870:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20579 comm="syz.0.3611" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1199c3e0d9 code=0x0 [ 1816.827869][T20600] futex_wake_op: syz.1.3614 tries to shift op by 144; fix this program [ 1821.503094][T20617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1821.503121][T20617] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1821.562319][ T5788] bridge_slave_1: left allmulticast mode [ 1821.562355][ T5788] bridge_slave_1: left promiscuous mode [ 1821.562639][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.632988][ C1] ------------[ cut here ]------------ [ 1821.633003][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 1821.633158][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xdc4/0x1120, CPU#1: ktimers/1/29 [ 1821.633220][ C1] Modules linked in: [ 1821.633247][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1821.633278][ C1] Tainted: [L]=SOFTLOCKUP [ 1821.633284][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1821.633296][ C1] RIP: 0010:__queue_work+0xde1/0x1120 [ 1821.633325][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 0c 9b 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f9 d6 a3 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1821.633345][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 1821.633366][ C1] RAX: 1ffff1100dac0953 RBX: ffff88802b5f7968 RCX: ffff88801d2c3e80 [ 1821.633384][ C1] RDX: ffff88802b5f7968 RSI: ffffffff8a438190 RDI: ffffffff8fb45150 [ 1821.633400][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1821.633414][ C1] R10: dffffc0000000000 R11: ffffffff818dbd70 R12: dffffc0000000000 [ 1821.633438][ C1] R13: 0000000000000008 R14: ffffffff8fb45150 R15: ffff88806d604a80 [ 1821.633454][ C1] FS: 0000000000000000(0000) GS:ffff888125cea000(0000) knlGS:0000000000000000 [ 1821.633473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1821.633490][ C1] CR2: 000055ae3d743950 CR3: 0000000011a2e000 CR4: 00000000003526f0 [ 1821.633509][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1821.633523][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1821.633539][ C1] Call Trace: [ 1821.633548][ C1] [ 1821.633558][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1821.633597][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1821.633658][ C1] call_timer_fn+0x18d/0x5f0 [ 1821.633688][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.633717][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1821.633746][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1821.633783][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.633811][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1821.633846][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.633876][ C1] __run_timer_base+0x73c/0x9b0 [ 1821.633918][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1821.633951][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 1821.633989][ C1] run_timer_softirq+0xb7/0x170 [ 1821.634017][ C1] handle_softirqs+0x1da/0x6d0 [ 1821.634055][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1821.634095][ C1] run_ktimerd+0x6a/0x100 [ 1821.634127][ C1] smpboot_thread_fn+0x565/0xa70 [ 1821.634157][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1821.634190][ C1] kthread+0x38b/0x470 [ 1821.634222][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1821.634249][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.634284][ C1] ret_from_fork+0x514/0xb70 [ 1821.634323][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.634355][ C1] ? __switch_to+0xc89/0x1420 [ 1821.634388][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.634420][ C1] ret_from_fork_asm+0x1a/0x30 [ 1821.634466][ C1] [ 1821.634482][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1821.634501][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1821.634530][ C1] Tainted: [L]=SOFTLOCKUP [ 1821.634538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1821.634550][ C1] Call Trace: [ 1821.634559][ C1] [ 1821.634568][ C1] vpanic+0x56d/0xa60 [ 1821.634608][ C1] ? __pfx__printk+0x10/0x10 [ 1821.634635][ C1] ? __pfx_vpanic+0x10/0x10 [ 1821.634668][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1821.634702][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1821.634743][ C1] panic+0xc5/0xd0 [ 1821.634777][ C1] ? __pfx_panic+0x10/0x10 [ 1821.634823][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1821.634852][ C1] __warn+0x315/0x4c0 [ 1821.634870][ C1] ? __queue_work+0xdc4/0x1120 [ 1821.634902][ C1] ? __queue_work+0xdc4/0x1120 [ 1821.634927][ C1] __report_bug+0x276/0x570 [ 1821.635015][ C1] ? __queue_work+0xdc4/0x1120 [ 1821.635048][ C1] ? __pfx___report_bug+0x10/0x10 [ 1821.635074][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1821.635116][ C1] ? enqueue_task+0x341/0x410 [ 1821.635167][ C1] ? look_up_lock_class+0x57/0x110 [ 1821.635193][ C1] ? register_lock_class+0x31/0x2e0 [ 1821.635226][ C1] report_bug_entry+0x19b/0x290 [ 1821.635253][ C1] ? __queue_work+0xde1/0x1120 [ 1821.635280][ C1] ? __queue_work+0xde6/0x1120 [ 1821.635308][ C1] handle_bug+0xce/0x200 [ 1821.635339][ C1] exc_invalid_op+0x1a/0x50 [ 1821.635366][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1821.635391][ C1] RIP: 0010:__queue_work+0xde1/0x1120 [ 1821.635422][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 0c 9b 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f9 d6 a3 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1821.635449][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 1821.635470][ C1] RAX: 1ffff1100dac0953 RBX: ffff88802b5f7968 RCX: ffff88801d2c3e80 [ 1821.635488][ C1] RDX: ffff88802b5f7968 RSI: ffffffff8a438190 RDI: ffffffff8fb45150 [ 1821.635507][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1821.635522][ C1] R10: dffffc0000000000 R11: ffffffff818dbd70 R12: dffffc0000000000 [ 1821.635539][ C1] R13: 0000000000000008 R14: ffffffff8fb45150 R15: ffff88806d604a80 [ 1821.635562][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.635597][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1821.635635][ C1] ? __queue_work+0xd9a/0x1120 [ 1821.635663][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1821.635698][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1821.635743][ C1] call_timer_fn+0x18d/0x5f0 [ 1821.635772][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.635802][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1821.635832][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1821.635872][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.635904][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1821.635941][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1821.635974][ C1] __run_timer_base+0x73c/0x9b0 [ 1821.636020][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1821.636055][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 1821.636091][ C1] run_timer_softirq+0xb7/0x170 [ 1821.636117][ C1] handle_softirqs+0x1da/0x6d0 [ 1821.636151][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1821.636177][ C1] run_ktimerd+0x6a/0x100 [ 1821.636204][ C1] smpboot_thread_fn+0x565/0xa70 [ 1821.636236][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1821.636274][ C1] kthread+0x38b/0x470 [ 1821.636310][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1821.636340][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.636377][ C1] ret_from_fork+0x514/0xb70 [ 1821.636415][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.636457][ C1] ? __switch_to+0xc89/0x1420 [ 1821.636492][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.636533][ C1] ret_from_fork_asm+0x1a/0x30 [ 1821.636574][ C1] [ 1821.636870][ C1] Kernel Offset: disabled