last executing test programs: 11m56.263120399s ago: executing program 1 (id=3472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r2}, 0x38) 11m56.154894308s ago: executing program 1 (id=3473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4008040) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffd, 0x0, &(0x7f0000006680)=0xfe) r2 = inotify_init() r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='user\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x850003d1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) 11m55.33697475s ago: executing program 1 (id=3477): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x9f) keyctl$chown(0x4, r2, 0x0, 0xee01) accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4145}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090000000000000000010009000000070000000000080009000000000008000a88719a4f00060002000000000006001a0000000000"], 0x3c}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 11m54.363605989s ago: executing program 1 (id=3478): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x140) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x1000, 0x0, 0xce024d}, 0x9c) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 11m54.276053002s ago: executing program 1 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x28, r2, 0x1, 0x270bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x200640c0) 11m53.94253305s ago: executing program 1 (id=3481): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000070b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11m53.84758248s ago: executing program 32 (id=3481): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000070b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m42.814028444s ago: executing program 3 (id=5153): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000060000000000000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x60, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xed}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendto$packet(r3, &(0x7f0000000040)="2717a90af1a30d71286f470000", 0xd, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5m38.698584382s ago: executing program 3 (id=5163): r0 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x72b, 0x3010, 0xfffffffc, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) r1 = epoll_create(0xaf2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x39, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb5, &(0x7f0000000140)=""/181, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1f, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x4, 0xc0}) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 5m38.020680455s ago: executing program 3 (id=5167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@dev, @dev}, &(0x7f0000000300)=0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='DV', 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000440)=""/147, 0x93}], 0x1}, 0x2002) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x1, 0x0, 0x9], [0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000], [0x2, 0xfffffff7, 0x0, 0x4, 0x9b]], '\x00', [{}, {0x0, 0xb}, {0x10000, 0x80000008}, {}, {0x0, 0x1}, {0x2ea}, {}, {}, {}, {0x4}, {0x1}], '\x00', 0x4, 0x0, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3d}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240088c0}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@dev, @dev}, &(0x7f0000000300)=0xc) (async) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='DV', 0x2}], 0x1}, 0x4048841) (async) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) (async) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000440)=""/147, 0x93}], 0x1}, 0x2002) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x1, 0x0, 0x9], [0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000], [0x2, 0xfffffff7, 0x0, 0x4, 0x9b]], '\x00', [{}, {0x0, 0xb}, {0x10000, 0x80000008}, {}, {0x0, 0x1}, {0x2ea}, {}, {}, {}, {0x4}, {0x1}], '\x00', 0x4, 0x0, 0x0, 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3d}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240088c0}, 0x800) (async) 5m37.880930727s ago: executing program 3 (id=5169): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, &(0x7f0000000000)=0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000004080102000000000000000003000000050003003a00000006000240891400007cc42e7129233cfc55dce35a8d70800b30036d63ab976848894abfa7bc8200000000000000000000000000001e94f636f72fffd41b2139f93205a8beca71d319865a9fa868d20b11f000c138c059e446b7"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f0000002540)={0xa0, 0x0, r6, {{0x1, 0x0, 0xd25, 0x7, 0x7, 0x10001, {0x1, 0x10, 0xce9, 0x6, 0x9, 0xb220, 0x6, 0x3, 0x4, 0x6000, 0x7, 0x0, 0x0, 0x163, 0x1000}}}}, 0xa0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r9, 0x2}], 0x1, 0xf6) landlock_restrict_self(0xffffffffffffffff, 0xc) dup2(r8, r9) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESHEX=r0], 0x3261e) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x10001) 5m34.721471181s ago: executing program 3 (id=5174): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$chown(0x4, r1, 0x0, 0xee01) accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4145}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090000000000000000010009000000070000000000080009000000000008000a88719a4f00060002000000000006001a0000"], 0x3c}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 5m34.221218314s ago: executing program 3 (id=5176): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000080)="05befa1c94e2f5fd3110670aefcc82e6b5ecd67a560a4288e1a2f82f11896d6517911d0bfa52728f376da8ee4cae45ec17628e025f711a2fc25ca2ad80a18b13035d6995d9d002a26edf9fd076aeebb4aee565dd78318d1dbf363b54ca0270f55b6aae3c72", &(0x7f00000001c0)="a97298893a1ff3169d0aea9707e08ee53a4c3a8f799d3c1f085f78a2c390731a85178c4f5f31d0366586cb517303d8023e24264848915bf1ea3fa2033fab180d7725fcfc4f85"}}, &(0x7f0000bbdffc)) r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r1, &(0x7f0000000140)="8365000000000000", 0x5ac) 5m34.042241217s ago: executing program 33 (id=5176): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000080)="05befa1c94e2f5fd3110670aefcc82e6b5ecd67a560a4288e1a2f82f11896d6517911d0bfa52728f376da8ee4cae45ec17628e025f711a2fc25ca2ad80a18b13035d6995d9d002a26edf9fd076aeebb4aee565dd78318d1dbf363b54ca0270f55b6aae3c72", &(0x7f00000001c0)="a97298893a1ff3169d0aea9707e08ee53a4c3a8f799d3c1f085f78a2c390731a85178c4f5f31d0366586cb517303d8023e24264848915bf1ea3fa2033fab180d7725fcfc4f85"}}, &(0x7f0000bbdffc)) r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r1, &(0x7f0000000140)="8365000000000000", 0x5ac) 2m26.739638206s ago: executing program 0 (id=5690): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x188) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m26.036960467s ago: executing program 0 (id=5692): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x8000, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x4, 0x7fff, 0x7, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2004, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x4, 0x80102) read$snddsp(r1, &(0x7f00000000c0)=""/66, 0x42) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{0xb31}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x12}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m23.958272154s ago: executing program 4 (id=5700): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f", 0x99, 0xfffffffffffffffe) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xa) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000140)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x200, 0x1, 0xc, 0x7, 0x0, 0x100, 0x81, 0x8}, 0x20) 2m23.957825042s ago: executing program 0 (id=5701): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009404, &(0x7f0000000140)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\x0e\x99Z$Y\xbd!A\xaa\xa8\x8dn\x969\\/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x900}}) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 2m22.903600887s ago: executing program 0 (id=5704): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) (async) r4 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0xfffffffffffffed2) (async) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0xfffffffffffffed2) socket(0x11, 0x3, 0x6) read$FUSE(r2, 0x0, 0x0) pread64(r2, &(0x7f0000000bc0)=""/203, 0xcb, 0x7) (async) pread64(r2, &(0x7f0000000bc0)=""/203, 0xcb, 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="50010000100001000000000000000000ff01000000000000007f00000100000000000000000000000000000000000000000000000000000000d995d4a1612a2f3c06f8bcf489ce8715797f5808370b9127529ac6bc8e540a58bef74e3b07bc764fec8a3012014e9f6661440ca26258c94b55a8dfa400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000000000000001000000000000000004000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000002000100a60000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017001800"/264], 0x150}}, 0x400) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x847f0cc962f98286) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000002c0)={&(0x7f0000000400)=[{0x4, 0x829, 0x5, &(0x7f0000000340)="b3cccddf36"}], 0x1}) (async) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000002c0)={&(0x7f0000000400)=[{0x4, 0x829, 0x5, &(0x7f0000000340)="b3cccddf36"}], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m22.903362191s ago: executing program 4 (id=5705): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) close(0x3) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc01c5868, &(0x7f00000004c0)={r0, &(0x7f00000002c0)='\x00', 0x883, &(0x7f0000000300)={@_ha_fsid={[0x3, 0xff]}, {0x87f, 0xffff, 0x7, 0x28c14bf3}}, 0x5, &(0x7f00000003c0), &(0x7f0000000480)=0x1}) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000180)) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2a, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x404140, 0x12345}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m22.876131321s ago: executing program 5 (id=5707): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) pwrite64(r1, 0x0, 0x0, 0x883) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060005", 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000020101020000000000000000030000011400188008000340a9a5865208000140388a2a1704"], 0x2c}}, 0x24000881) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0xb6, &(0x7f0000000340)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x80, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3c, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [@srh={0x0, 0x0, 0x4, 0x0, 0x7f, 0x20, 0xca4}, @srh={0x21, 0x6, 0x4, 0x3, 0x7, 0xba60e748891018f4, 0xd, [@local, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x13}]}, @fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x9, 0x66}], "1e520b4c951ee12e"}}}}}}}, 0x0) r6 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x311000, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0xc800) 2m22.875891893s ago: executing program 5 (id=5708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1e, {0x4207958d, 0x7, 0x4, 0xfffffff8, 0x1, 0x800, 0xeb7c, 0x0, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x3, 0xa}) 2m18.157084692s ago: executing program 0 (id=5709): socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) ioctl$TCSETS(r4, 0x40045431, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) 2m18.156779721s ago: executing program 5 (id=5710): socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}]}]}, 0x28}}, 0x0) write(r0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = syz_io_uring_setup(0x58fa, &(0x7f00000000c0)={0x0, 0x2457, 0x1070a, 0x0, 0x2a, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0xff2e) ioctl$TCSETS(r7, 0x40045431, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x0) 2m18.106032832s ago: executing program 4 (id=5711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xe4, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m18.10448503s ago: executing program 4 (id=5712): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b50e00007f00000000000000", @ANYRES32, @ANYBLOB="000000d72f09f629004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 2m18.103270027s ago: executing program 4 (id=5713): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000002180)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x22eb, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107678bfecb64da14096962db497a0299399ab6101c3b", 0x18}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0), 0x1a}}], 0x2, 0x8040) 2m18.072332554s ago: executing program 4 (id=5715): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="ff55"], 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3ce5d7393d7ae6dd99feda148dfcea39f106643d2216d95c8c3df9fa202dd837cb2b7863e4ba726d3c50a4", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x4004090) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6480}, {}], 0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x1800, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 2m18.071763999s ago: executing program 5 (id=5716): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x204000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xd) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = timerfd_create(0x1, 0x80000) read(r5, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000001c0)={@empty, @local, @multicast1}, 0xc) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4c094}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000000000fdffffff85000000bcbae55eb484bd08e90000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb480cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 2m17.991904213s ago: executing program 0 (id=5717): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 2m17.292726023s ago: executing program 5 (id=5719): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x7, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r2, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0xfffffdfc) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xf2d3}) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1m22.19236603s ago: executing program 34 (id=5717): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 1m21.866341716s ago: executing program 35 (id=5715): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="ff55"], 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3ce5d7393d7ae6dd99feda148dfcea39f106643d2216d95c8c3df9fa202dd837cb2b7863e4ba726d3c50a4", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x4004090) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6480}, {}], 0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x1800, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 1m21.794072649s ago: executing program 36 (id=5719): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x7, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r2, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0xfffffdfc) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xf2d3}) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 10.881172669s ago: executing program 2 (id=5868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}}], 0x40001b6, 0x0) 10.470905036s ago: executing program 7 (id=5870): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="26004c060a0002"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) 10.460698506s ago: executing program 6 (id=5871): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 10.205059469s ago: executing program 7 (id=5873): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x8001, 0x0) splice(r0, &(0x7f0000000000)=0x9e, r1, &(0x7f00000000c0)=0x4, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x6f, "8b3122ff82377cde541a05d1aa5e4c925d6d98d1b8c097c2f0a92ab6fd2d56bba14fac01a207485630db19b7103696f1e0563ca70afcba97c69a47fc06d26e11c7263cae0a56953be2c5a269055bfeee4bbe68a2005b802757f6a69fd57c429d71a691408e1200b89f1ba7d7503047"}, &(0x7f0000000280)=0x77) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000300)={r4, 0x7}, 0x8) move_pages(r3, 0x4, &(0x7f0000000140)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000180)=[0x3, 0x3, 0x4, 0x7], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) 9.984584896s ago: executing program 2 (id=5874): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 9.32850442s ago: executing program 7 (id=5875): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000, {r0}}, 0x20) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x38a381, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r2, 0x5697fb8c14c50798, 0x0) unshare(0x28000600) timerfd_create(0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100010a199610b90661408801010203010902120001000000000904"], 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x92, '\x00', 0x7}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0xc}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x81, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$inet6(0xa, 0xc000f, 0xfffffffc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) fstatat64(0xffffff9c, 0x0, 0x0, 0x100) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000001c0)={0x5, 0x78a}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00e2ffffff0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 7.013310826s ago: executing program 6 (id=5880): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xe949, 0x593241) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2000000000000004, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r6, 0x80084523, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000500)="5204b062c50107de5de9d92f650121bd506a304503a59c66b66a9f650a062bb9b5ca8234a7672beccf1b29552d70ed55f84f262ed292e37b957401da6457532a0c8806cb120e885de1f3616b103cb02093c766cb9a68877b08f918a79826dfbea20b01f0bb5ce56ea20ea75e85f1cd373bc223453e3be5533f14d5b12ce399503d117574227e00"/148, 0x94, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b50e00007f00000000000000", @ANYRES32, @ANYBLOB="000000d72f09f629004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a30000000000400060038000000010a01020080000000000000020000000900010073797a30000000001600030091abc12404cf378042f26c3af91f68d8a9070000020af9ff0000000000000000000004001400001100010000000000000000000000000a0085d8c3ae82fc6a9c708af4d27d84d0b4373cc4869715eadafedec35492594bd10bf0265c90b894c1337b330ae64d068e0a575a2d08db8ce5f5ddee9a0722a355ce3a845f4c570b22b8fc95c78f0757d784c3775dcdc73c795096d0a014f0eae9dadca8683681d9b5b01f02", @ANYRESDEC=r1], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 6.701384054s ago: executing program 2 (id=5881): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="26004c060a0002"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) 6.658655874s ago: executing program 8 (id=5882): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 6.555246073s ago: executing program 8 (id=5883): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xd0) 6.40497109s ago: executing program 8 (id=5884): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x1010ab, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x11a, 0x4, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="a9b8287f99168f3a3417a39c2e4f7abb2388111cd939b39fc1167ff083a55d97c83854e47914a2b12453737f6a73322ea1bcef0a0983201ebb7e168f3cb74f7903b2137b18831f66ba1333a35e034bd01768e62c44c4418543a8b9e868bcf797bac338ccce83c476fe63fc8cd2281a33b8c95455d6021b36bab604d91b226c056b06f61556befe2d7c7495f6eeac89af60afd6553756825af62da32787015584de4ee21772fe85e356bec7051ec722f52280cecac1bf2c73d80e42a83068e250c6fa0627e7927e2ef4a17f2d6cd813dbd17f2b1c1533ec7a25d1036d16ae82f0ab8d0a68b75a90f5d416d7fe70", 0xed}, {&(0x7f0000000680)="7d444c5d9ca2e3be8120d6cd2fdd81310d2aee18beac3abe3c07f317cbe7a0b9923061477eaee3005922e25c69d3e35c24eb65ae337f30c575ad445553397662e06de053bc0904dd3e5b3823adf6a1036466dd2b9ca550df7be74ee6b9a8c5485cc408dc89c1302c59a732adf63b15a08b8d619a24b9151941835111de4432891c1e3fd03ee2aab49a5478b01f8b0620bca6d19d9b26331722517216cad8ebec420e96a44ea9b3437d2304635d8152e5574291d3916bb0042510d4e9f2c770129f92cef94e05e870710f1f7240952cbbbe50dd9b0c66", 0xd6}, {&(0x7f0000000780)="55ff6abcd96d4f9d183beb320793fab6637e40a152c8c330d5bbf95a1730972a983f8b2c343ebc7d5f65533d91101a60a796f1fcbc1d0491ba2c4121e9cde362", 0x40}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="282100f0f8094a248fe9f0ab79005cdb6b028ee99ffc19d3c1291bb28da34fd443482b6da2428d1beeab36707e4f6cf6429cb34ca78ab953e34b962e5764", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x40, 0x200cc811}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="9d83e08aaabadd380ea9d71f03294680437f562afeee620daf6e3504ffe56739319ed8ae678dd7d2eed65ec0d079b933cc62f2c6361f5e9998a328bd8aff1a951015e81705a02a2a50f530ed765b6f2b5af2f9c82582cb9c2f568f713e6bf9c2fe122b658567abdced08b8bed2bab3fd00c906989b7ace865710091a637c7efc8ca6988b2f3f90fcf446cbc72da4f500f76dccc04c483b5adb1f4bc2b8781cc6bc680a67f937286d39edab968c27caeb7ce96e8419ad86d001a5375427a9a45d7c24953a8a26c417fffa3078f46509de3f1acfc5bc44b55645bc51c04f27933bee9d487bc678", 0xe6}], 0x1, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x2c, 0x40080}}], 0x2, 0x0) r8 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) recvmsg(r9, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0000ff0700000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2861448, &(0x7f0000000640)=ANY=[]) 6.393339013s ago: executing program 2 (id=5885): r0 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x72b, 0x3010, 0xfffffffc, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) r1 = epoll_create(0xaf2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x39, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb5, &(0x7f0000000140)=""/181, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x1f, 0x1, 0x0) connect$tipc(r6, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) setns(r2, 0x24020000) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x4, 0xc0}) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 5.465204532s ago: executing program 2 (id=5886): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) pipe2(&(0x7f0000000100), 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 5.418577309s ago: executing program 8 (id=5887): modify_ldt$write2(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) close(0x3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.023005603s ago: executing program 7 (id=5888): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.939006339s ago: executing program 7 (id=5889): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000370400008000000000000000", @ANYRES32=r4, @ANYBLOB="c3040500000000001800128008040100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x20000000) fcntl$setlease(r0, 0x400, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$inet6(r5, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r5, &(0x7f0000001140)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x4084) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e", 0xd}], 0x1}}], 0x2, 0x2090) sendto$inet(r8, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 4.735960054s ago: executing program 6 (id=5890): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x4, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) (async, rerun: 64) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_vs\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) r8 = io_uring_setup(0x2475, &(0x7f0000001980)={0x0, 0xcccc, 0x8, 0x1, 0x17c}) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, 0x0, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r4, @ANYRES16=r9, @ANYRES32], 0xc) (async, rerun: 32) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.275715645s ago: executing program 2 (id=5891): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 4.216101697s ago: executing program 8 (id=5892): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$bsg(0xffffff9c, &(0x7f0000000340)='/dev/bsg/2:0:0:0\x00', 0x501000, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000003c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, &(0x7f0000000140)='1', 0x1, 0x10b, 0x0, 0x0, r5}]) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r5, r0, 0x80000) setrlimit(0x7, &(0x7f0000000400)) socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x0, 0x2, 0x3}, 0x50) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe4) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r10, @ANYBLOB="2c67726f75705f69643d381daabac8e40af22421bbc6e4c0de", @ANYRESDEC=r3, @ANYBLOB=',blksize=0x0000000000000a00,blksize=0x0000000000001200,\x00']) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @mcast2, 0xae9}, 0x1c) r11 = dup(r7) sendto$inet6(r5, &(0x7f00000004c0)="3c8fa3df07bc55635e580e4a0842ab7a37e81403999f6b65c3aafacf3f8618da6846e02e9dfa0e90aa8dc1c87d8176b39c18f9bc23e5f42deba5f38d2ffa8256ee", 0x41, 0x8080, &(0x7f0000000540)={0xa, 0x4e21, 0x4d1b, @loopback, 0x800}, 0x1c) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000440)=0x4) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20080051}, 0x0) 4.123431522s ago: executing program 6 (id=5893): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) (fail_nth: 4) 3.914643234s ago: executing program 6 (id=5894): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xa47b) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000b00)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@remote]}}}]}, 0x4c}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x4200, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_misc(r6, &(0x7f00000006c0)="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", 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xafe1, @mcast2, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000002c0)="bd24e52820a5e5e8d604af87c57029a4f456925537c0192f0216839a1639054b3f72d98326866e5f91ac385e217d088a3fa84efb9b9798febbc708cccee1b8fd60ffd4f07e99b7d95a3e86930e5651d8288e9b90dff50fa15f2abdf2bada60feacfb19fd5fe195a1b4c799224fd07ab52b6ea13966a67696465c428071d310b68fab8e70a7b3a380bb50a3fb237010fa1317b23f7bc6aaca1725c35c77c3fae52c18de3daa0a51eeac2611eb59e438c62cfc2c4cec18691cac449b1320674a9e3fe0ca87144e3a1e456c7ff8c33b6457d4873858a62270b61d04a569a1fcc96193bb1a8547", 0xe5}, {&(0x7f00000003c0)="7daad614980c5f8491f6339dbb3ec5085fce0ec2722f7071954964362e022233ca198d1b3e5d09a12a3459c55a8d64abf7a0e3ac7d537219aa39", 0x3a}, {&(0x7f0000000400)="400fda343f23c4e41d40b5129d4328416d21221cf035c0115664954de334ad697a180889ffda00a8f5412f4bc8c141ec9c4bb5b3cbf363c6b143f830c3231c461af957a87574aa531512a19dc7808ac240a76fb3f1ca3d32e61c837a7b82ffc0fd34094f974e6f1d", 0x68}, {&(0x7f0000000540)="d9670ac946f20d64894234bb37329254a707abde92d8898b03228edf29c4caa05989fe6775db0420a1934b5bf1c65c6fab1e3958afa13d44df4ba2c56660b72c2b924dfb426271771959a94aff11b434f8a79a534cfd449182d11decfb517b80b3575993eeed6d0540ec7d1779d05b2bcb8c0cab60c63556db0f42b3c802e71603948e27be4d", 0x86}], 0x4, &(0x7f0000000640)=[@dontfrag={{0x10, 0x29, 0x3e, 0x1000}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}], 0x20}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="052c659617fd5a6b5095a1fa29b40e971459844e132813effe8b02feff8ddbfe5431f1e1e6d18521b96252b8d4ef55384ec3185add5f49fb6e2b0f8be359615213764aa61030a0391bec50ebba3b715b2bc9761e9659fcefd157641d51d6edcc85ad578962fdcc68a30fd64211880bbae343988ad4a179e8b5c01548ba8ac2769b72865d490a", 0x86}, {&(0x7f00000008c0)="3bb69b2c6c7c88de4c57a0fe253784a122cb1399771746d7ba02f4afe5e32dc8bd55ccbb100bc84cabe6161af6c75cb7452d95b0f537a7989295049d40db192c52d7d7fbb1978828f7d9f9c3c9e3e29a7722631a12a027f7cd1ba376f96ca7fd84ef30d45663178f9ada7d4e1bbd6c8cb32f020f4222ae2e22b83e03c98cdbcbff2c79d292d7917c39ca21d4dd05b93a5f5713299925a4e0798fb251365cde098ca7405c082f0533aef64b6f4a7d7cc29d0fd00b460900717bec819aed3a7e3b92f0f4a9240f73ef579f8b133153bc2951ad61411fd0be3e6077df98af6185efab580c12930539", 0xe7}], 0x2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="10000000290000003400000000000000ae109c73bb126906aa12441f8e88b6cb95d47be386624c38d929e4f613f55bff9e9825a95bc4a74a1ff4e930d2266ad9f034ebaa330a13461d4fb6ccb4de25587bc1a57d3f49aa4a90b3932e1599724c499cf76a47813ad103723efc28048282866b8123b8693219a5576e95b3261c57219c62dad66ab7796fce1e0892e0dbade3459cafce05604ed3aa0ee139de847d49f12184a8688d0d389ff33d2c663851f345b95a488847d033aae0a38ee6b24cfc0b"], 0x284}}, {{&(0x7f0000001000)={0xa, 0x4e20, 0x86, @ipv4={'\x00', '\xff\xff', @local}, 0x6c}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000001040)="09f1575a8e964aff4aec18fb2a786e05fa3e625f72d1330e967613d63ecdfa54e7ca5bdf52f5b2e27b37591791d31f12ac378d1f77c42a65c98e499195f9335885efe233e09647874f5647272d1389ea61f5fcecab0c7c2e4dff019235908d04fb314d95232410e45fda159f82de58a19e77e254dbfecdc6f80b0520368f568436bbe472d9640222cf921e30ac9f0c6daaa9", 0x92}, {&(0x7f0000001100)="b51b64f262a56cf549843874cd68bc6b79235c48eb7f1ca9008f190b9674a4ff7082f1ebc1b318ffb8f25c6db6b4ea837b0d76ca1a8802ba684f6708df9c7a4b8d89da70e994d3dfb02d9b207a69e05874c25aaf33945fccc870f15415c8f48620652d06fff575b38ac7601f12517fa6705b7acfe2012455f31e6bb6ba7ae88047a77e68b504ecf438db04225262a9091de5d364842e9c44dc714c1e33a1712f09dacaa529c262c330333004578e270c0a1f94ebf2645f3d666515dfd3376e7d6e66471eb0948517f77bd6", 0xcb}, {&(0x7f0000001200)="beacca4b53b6100c7bd05f25abfd98647189c73fd05edebc8739a5df3821ab5ba145ac806ccb63f24cd35c7dd2c97646fa7de2acf88b52f1389838d697013888a1b5bce7", 0x44}, {&(0x7f0000001280)="a6bbc950923c9c87a89dd64c78b2594a3a2eed2faf74125c6c7580188609ad243af70114f235b3e042b338d553141c0c23a544a9ccd4d24830bd067fe9f175fd3c7cda69ac4d3b408dc1c10e5a5d5131db872bb797c9dc3443faaabec75c8118163ce10d50ae25c60b42305d1087dc570abc3480515ddddd7a459c552fda6b1023e54cc8103ec8b97c18c94543343ddb46c32b6cb374f6fda812ad23a039711b2983c74ed820e9365deef0ffd027f5bd8a84f265f96f07362ec504c76db13336acbffe85fd7514ba76b690dfd8e2cacae64a48cbb30d765978b7673ca9bb07b7f54d5b59b78c", 0xe6}], 0x4, &(0x7f00000013c0)=[@hoplimit={{0x10, 0x29, 0x34, 0x80}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xa}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x2e, 0x6, 0x2, 0x8, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x6c, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x94, 0x29, 0x37, {0x0, 0xf, '\x00', [@generic={0x0, 0x46, "d04decf5b047734dde7e15b3457186579829f098531b173af722a73a3ccf455117777d93e1fb7222e3db541b6932c65fa1201ba3fdf93be56aa248d14d8588bad1a26051d843"}, @ra={0x5, 0x2, 0xffff}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x16, 0x4, [0x0, 0x0]}}]}}}, @tclass={{0x10, 0x29, 0x43, 0x6}}, @hopopts={{0xf4, 0x29, 0x36, {0x73, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x40, 0xb6, "045f4b7a9f09f6e2df7810d0b029811eaf0dab46d6663822a0f7d98a20c876647fd476b23c66f8672b26b918d24017caa7c141064fe5c919b97e8e8abbe3fed6d7de8504fd3d5f7432efab1c94d6fa1a2694f60c87ace4579116c8f87b4fd1bdd1fef884a1442999493b71025226d35ba79202b68eb648f72461eb7ef2f84896f6f4f4baaae207ff18cd042a629f3792d0fec33382759873d5081be818af063496b7594000c2fad73282589c3da8c341d345b398c3ec"}, @ra={0x5, 0x2, 0x8d5}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}], 0x218}}, {{&(0x7f0000001600)={0xa, 0x4e21, 0x7, @mcast2, 0x4}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000016c0)="375e45bc17a69d007cbe6b42c69f7247f35be2e7e9f124435966ca23653a3bcdb99bedfa6ed2bf50a272ea5f3ed3be3e7de66270d357f713b3165fca6eae8da4c6bb053c86b1e6891d6e68071852d9448f2dc518aaf018adbb9398da2d0ed0e92977cb617b776a0e4de10856af", 0x6d}, {&(0x7f0000001740)="edc7d7aeacf9bbc7e46698e81b23ca05bf1fee02a740be58a35516133d0c36c6884db0d6db4f6b2b74e114ef7f78ab9e8ac2e33cbdbd46ac96527d1877eea1c31b", 0x41}], 0x2, &(0x7f0000001800)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x87, 0xa, 0x1, 0x4, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}]}}}, @rthdr={{0x64, 0x29, 0x39, {0xc, 0xa, 0x0, 0x8, 0x0, [@empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @hopopts={{0x24, 0x29, 0x36, {0x2c, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0xfc}}, {{&(0x7f0000001900)={0xa, 0x4e24, 0x8, @mcast2, 0xcb}, 0x1c, &(0x7f0000003b80)=[{&(0x7f0000001940)="669745541da3ad6fcd3b24364c75bd51d8d89a4724ac28e56a99e035dd4ab1ca8bb4e8cd39d28372191cb9650b11c253c0472ef6e1b7cdc1185c891c08b4defbeb5b71b64ee2aea8454c12524eb6ef9da65c77699944a5e9b4ccca34d80d78e0f89a2fa03305839a455cc363134147d2579b9a2cc2bf9075454c03e98ca286606614e108d45aec789bfa826a037b15340a7ff03b16dee7286ff219a1f06c67ac80cd87eea7a347d5a638db4c43d388b78411958c290cdd826d21067004436d2bfba1f701787e6370a6082d60e55353103697b7b524af3048c2c16757dda8919efa9d6cd89e19dc81192004c12a59669939", 0xf1}, {&(0x7f0000001a40)="4b0ba5834385e2d91076b5c3ad7e1a4f80c592526c6c17fffa86e43424907e4e72bc4a3958314c7626343ac8f047caf301c7195f43b056f8dc7b4b2e89f7f7af6cab1977cefc03a25730541cb98b6a94301d85875c0556f8efc804816dd5baaf8a0d212b8fa7bce6a945caa2b40626e61726e96ca4b90951e5bf96964f61a248f20c4a12c70b746d542cef0265ef75c83b92a9baed10ae7f61f7b1d3426e6b907bc69bd93f72a82f63be43f99ba3680c5fe0e3a6475df4c0e1ae", 0xba}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="0697795909928b00099d9bb2e9443564dc5b9308bd772b863ebe23afccbebf35733dfc525254ab0dd19ff7d3e3e4b40474c34a19ec0af3c006d8743fef8b976658654a0e311d97a212aa25cc11e2b61bb3555288bd0ee5e2a93be0753a67b5c31ffae3de695d2bbd3fbbf80095267b71b8654941ffbd5259218640509a76ac", 0x7f}, {&(0x7f0000002b80)="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", 0x1000}], 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000290000299d0000008000000f561125551ccb0650685c4cb800"], 0x10}}], 0x5, 0x40040054) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="400bdd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.710311126s ago: executing program 7 (id=5895): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) bind$packet(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.002345523s ago: executing program 8 (id=5896): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 0s ago: executing program 6 (id=5897): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271d, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x2013000, &(0x7f0000000280)="024545091de5778d487d6888ced77d4d1dbd77655550ec63136f568720d15cdb5e350d0a346b72", 0x27, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)="18970eaee0695b1de8b6ff8ebf") ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000480)=r7) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00c8ca4b8901080000000000000000ebffffff05001f0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) kernel console output (not intermixed with test programs): config 217 interface 6 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1348.466505][T17033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1348.469526][T17033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1348.472259][T17033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1348.474919][T17033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1348.477737][T11314] usb 5-1: config 217 interface 6 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1348.482063][T11314] usb 5-1: config 217 interface 6 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1348.485691][T11314] usb 5-1: config 217 interface 6 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.490061][T11314] usb 5-1: config 217 interface 6 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.493576][T11314] usb 5-1: config 217 interface 6 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.497220][T11314] usb 5-1: config 217 interface 6 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1348.503704][T11314] usb 5-1: config 217 interface 5 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 1348.507194][T11314] usb 5-1: config 217 interface 5 altsetting 247 has a duplicate endpoint with address 0x6, skipping [ 1348.511529][T11314] usb 5-1: config 217 interface 5 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 1348.515288][T11314] usb 5-1: config 217 interface 5 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 1348.519328][T11314] usb 5-1: too many endpoints for config 217 interface 167 altsetting 142: 210, using maximum allowed: 30 [ 1348.523099][T11314] usb 5-1: config 217 interface 167 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 1348.527208][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1348.532539][T11314] usb 5-1: config 217 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.536718][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1348.540443][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1348.544439][T11314] usb 5-1: config 217 interface 197 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1348.547551][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1348.551782][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1348.555211][T11314] usb 5-1: config 217 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.559488][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1348.562951][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1348.566589][T11314] usb 5-1: config 217 interface 197 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1348.571046][T11314] usb 5-1: config 217 interface 197 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1348.574604][T11314] usb 5-1: config 217 interface 6 has no altsetting 0 [ 1348.576740][T11314] usb 5-1: config 217 interface 5 has no altsetting 0 [ 1348.579306][T11314] usb 5-1: config 217 interface 167 has no altsetting 0 [ 1348.581521][T11314] usb 5-1: config 217 interface 197 has no altsetting 0 [ 1348.585605][T11314] usb 5-1: Dual-Role OTG device on HNP port [ 1348.587720][T11314] usb 5-1: New USB device found, idVendor=177f, idProduct=0400, bcdDevice= 0.00 [ 1348.590919][T11314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.593391][T11314] usb 5-1: Product: 䋶㿚Ḏà¾è£¾çŸœà½ì†ªáŠ„é›™è˜‚ë‹–æ´§â¥¯ï¯¤é„쎢ê瓧乻ㅸᅫ儆á¹ç˜µ [ 1348.596610][T11314] usb 5-1: Manufacturer: 쮭䙸꺿á妥ﳆ⫹ⷣâ¦äƒ’蟇裥烟⺫ꞧ樄隆ìˆç‘½íƒ„㮢䊮迤壟볻ᢕ쓣戺㈹㹎ï±ä°œî¢—á˜à¸‡ä‡»åµ˜à¤˜ì½‘ë¨šâºæ€žä©ˆç‰…ë¤îš“侒䃉懶è¼ê®Œä•†Ñ²ë»¤ôŒ‰©å«¸ç‰ˆî²½å¦±æ°‹à¿­Íšã«¶ç² ÒŽî¨·âºã‰¢ìª³ì´™ì³á›¼à´µì€¢Ô«ê‰›í™¸ÖŠë€´â¹©ï…’ꚥ⌃巔䦸䓶 [ 1348.606254][T11314] usb 5-1: SerialNumber: 촕킉æ°î¤†íŒä’›ï‚ˆâ¿ªâ»®ã ‰åœ„絔햌빙烡ꀹ纥亊蚦゙レ㕑ﮰ䵣æ›ä¤Ž [ 1348.617872][T29851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1348.621206][T29851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1348.848979][T20479] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1348.862240][T29873] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1348.955341][T29849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1348.957420][T29849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1348.960984][T29849] vhci_hcd vhci_hcd.0: Device attached [ 1348.971620][T29875] vhci_hcd: connection closed [ 1348.974925][ T5597] vhci_hcd vhci_hcd.0: stop threads [ 1348.979269][T11314] usb-storage 5-1:217.6: USB Mass Storage device detected [ 1348.994676][ T5597] vhci_hcd vhci_hcd.0: release socket [ 1348.998860][T20479] usb 7-1: Using ep0 maxpacket: 32 [ 1349.001455][ T5597] vhci_hcd vhci_hcd.0: disconnect device [ 1349.007741][T20479] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.012911][T20479] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.015052][T11314] usb-storage 5-1:217.6: Quirks match for vid 177f pid 0400: 4400 [ 1349.018002][T20479] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1349.022174][T20479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.024797][T20479] usb 7-1: Product: syz [ 1349.026133][T20479] usb 7-1: Manufacturer: syz [ 1349.027638][T20479] usb 7-1: SerialNumber: syz [ 1349.032464][T20479] usb 7-1: config 0 descriptor?? [ 1349.172307][T11314] usb-storage 5-1:217.5: USB Mass Storage device detected [ 1349.187278][T11314] usb-storage 5-1:217.5: Quirks match for vid 177f pid 0400: 4400 [ 1349.304824][T11314] usb-storage 5-1:217.167: USB Mass Storage device detected [ 1349.315433][T11314] usb-storage 5-1:217.167: Quirks match for vid 177f pid 0400: 4400 [ 1349.356490][T29867] macvtap0: entered promiscuous mode [ 1349.358478][T29867] bridge0: entered promiscuous mode [ 1349.408815][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1349.438584][T11314] usb-storage 5-1:217.197: USB Mass Storage device detected [ 1349.477761][T11314] usb-storage 5-1:217.197: Quirks match for vid 177f pid 0400: 4400 [ 1349.591263][T11314] usb 5-1: USB disconnect, device number 10 [ 1350.182297][T29901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1350.308770][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1350.405118][T20479] usb 7-1: USB disconnect, device number 74 [ 1350.458705][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1350.480491][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 1350.489508][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1350.499518][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1350.503835][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.508803][ T10] usb 5-1: Product: syz [ 1350.510277][ T10] usb 5-1: Manufacturer: syz [ 1350.518706][ T10] usb 5-1: SerialNumber: syz [ 1350.522405][ T10] usb 5-1: config 0 descriptor?? [ 1350.549306][T29904] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1351.123913][T29908] random: crng reseeded on system resumption [ 1351.210670][T20479] usb 5-1: USB disconnect, device number 11 [ 1351.498597][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1351.616919][T29922] kvm: MONITOR instruction emulated as NOP! [ 1351.620665][T29922] kvm: pic: single mode not supported [ 1351.620682][T29922] kvm: pic: level sensitive irq not supported [ 1351.636589][T29922] kvm: pic: level sensitive irq not supported [ 1351.643465][T29922] kvm: pic: single mode not supported [ 1351.902564][T29928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 1352.528583][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1353.568508][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1354.542237][T29952] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1354.608624][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1355.362819][T29967] lo speed is unknown, defaulting to 1000 [ 1355.436803][T29967] syz.2.5571: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1355.454644][T29967] CPU: 3 UID: 0 PID: 29967 Comm: syz.2.5571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.454667][T29967] Tainted: [L]=SOFTLOCKUP [ 1355.454671][T29967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1355.454679][T29967] Call Trace: [ 1355.454684][T29967] [ 1355.454689][T29967] dump_stack_lvl+0x100/0x190 [ 1355.454710][T29967] warn_alloc.cold+0x94/0xa8 [ 1355.454724][T29967] ? __pfx_warn_alloc+0x10/0x10 [ 1355.454738][T29967] ? find_held_lock+0x2b/0x80 [ 1355.454752][T29967] ? psi_memstall_leave+0x19c/0x360 [ 1355.454772][T29967] ? psi_memstall_leave+0x1eb/0x360 [ 1355.454786][T29967] ? lockdep_hardirqs_on+0x78/0x100 [ 1355.454808][T29967] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1355.454827][T29967] ? __kernfs_create_file+0x2a9/0x350 [ 1355.454844][T29967] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1355.454856][T29967] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 1355.454875][T29967] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 1355.454895][T29967] ? kernfs_put+0x3f/0x60 [ 1355.454916][T29967] ? internal_create_group+0x915/0xfb0 [ 1355.454942][T29967] ? __pfx_internal_create_group+0x10/0x10 [ 1355.454963][T29967] ? __pfx_kobject_add+0x10/0x10 [ 1355.454986][T29967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1355.455010][T29967] ? policy_nodemask+0xed/0x4f0 [ 1355.455035][T29967] alloc_pages_mpol+0x1fb/0x540 [ 1355.455056][T29967] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1355.455084][T29967] ___kmalloc_large_node+0xe5/0x120 [ 1355.455106][T29967] ? __pfx_setup_port+0x10/0x10 [ 1355.455218][T29967] __kmalloc_large_node_noprof+0x1c/0x70 [ 1355.455241][T29967] __kmalloc_noprof+0x5a1/0x820 [ 1355.455257][T29967] ? rxe_get_link_layer+0x64/0xc0 [ 1355.455317][T29967] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 1355.455334][T29967] ? ib_setup_port_attrs+0x2b4/0x600 [ 1355.455358][T29967] ib_setup_port_attrs+0x2b4/0x600 [ 1355.455380][T29967] ? kobject_put+0xb9/0x640 [ 1355.455400][T29967] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1355.455427][T29967] ? __init_waitqueue_head+0xca/0x150 [ 1355.455463][T29967] add_one_compat_dev+0x5b3/0x820 [ 1355.455494][T29967] rdma_dev_init_net+0x30a/0x590 [ 1355.455519][T29967] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1355.455548][T29967] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1355.455577][T29967] ops_init+0x1e2/0x5f0 [ 1355.455602][T29967] setup_net+0x118/0x3a0 [ 1355.455621][T29967] ? __pfx_setup_net+0x10/0x10 [ 1355.455639][T29967] ? mutex_init_lockdep+0xf1/0x120 [ 1355.455668][T29967] copy_net_ns+0x46f/0x7c0 [ 1355.455690][T29967] create_new_namespaces+0x3ea/0xac0 [ 1355.455721][T29967] unshare_nsproxy_namespaces+0xf2/0x220 [ 1355.455748][T29967] ksys_unshare+0x438/0xab0 [ 1355.455770][T29967] ? __pfx_ksys_unshare+0x10/0x10 [ 1355.455826][T29967] __ia32_sys_unshare+0x30/0x40 [ 1355.455844][T29967] __do_fast_syscall_32+0xe7/0x970 [ 1355.455864][T29967] do_fast_syscall_32+0x32/0x70 [ 1355.455880][T29967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1355.455898][T29967] RIP: 0023:0xf7fe7fec [ 1355.455914][T29967] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 1355.455920][T29967] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1355.455932][T29967] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1355.455939][T29967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1355.455946][T29967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1355.455953][T29967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1355.455960][T29967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1355.455975][T29967] [ 1355.456237][T29967] Mem-Info: [ 1355.648435][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1355.760472][T29967] active_anon:590 inactive_anon:3157 isolated_anon:0 [ 1355.760472][T29967] active_file:767 inactive_file:5335 isolated_file:0 [ 1355.760472][T29967] unevictable:1768 dirty:2 writeback:0 [ 1355.760472][T29967] slab_reclaimable:6899 slab_unreclaimable:81622 [ 1355.760472][T29967] mapped:23963 shmem:3845 pagetables:1599 [ 1355.760472][T29967] sec_pagetables:412 bounce:0 [ 1355.760472][T29967] kernel_misc_reclaimable:0 [ 1355.760472][T29967] free:20492 free_pcp:378 free_cma:0 [ 1355.805104][T29967] Node 0 active_anon:8kB inactive_anon:20kB active_file:28kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7168kB pagetables:1060kB sec_pagetables:1288kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1355.833042][T29967] Node 1 active_anon:5792kB inactive_anon:9024kB active_file:3064kB inactive_file:21596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95640kB dirty:8kB writeback:0kB shmem:11916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10076kB pagetables:5336kB sec_pagetables:360kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1355.865890][T29967] Node 0 DMA free:3736kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.892094][T29967] lowmem_reserve[]: 0 280 280 280 280 [ 1355.893936][T29967] Node 0 DMA32 free:31448kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:2048KB free_highatomic:152KB active_anon:8kB inactive_anon:20kB active_file:28kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:1348kB present:1032196kB managed:287156kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.923886][T29967] lowmem_reserve[]: 0 0 0 0 0 [ 1355.925442][T29967] Node 1 DMA32 free:47364kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6508kB inactive_anon:7976kB active_file:4160kB inactive_file:20164kB unevictable:3536kB writepending:8kB zspages:6068kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB [ 1355.957216][T29967] lowmem_reserve[]: 0 0 0 0 0 [ 1355.962173][T29967] Node 0 DMA: 272*4kB (UM) 29*8kB (UM) 11*16kB (UM) 16*32kB (UM) 7*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 3736kB [ 1355.971445][T29967] Node 0 DMA32: 564*4kB (UMH) 272*8kB (UMEH) 89*16kB (UMEH) 143*32kB (UMEH) 93*64kB (UME) 29*128kB (UME) 6*256kB (ME) 7*512kB (M) 4*1024kB (UM) 1*2048kB (E) 0*4096kB = 31360kB [ 1355.998887][T29967] Node 1 DMA32: 34*4kB (UE) 228*8kB (UME) 356*16kB (UME) 96*32kB (UME) 63*64kB (UME) 56*128kB (UME) 32*256kB (UME) 13*512kB (UME) 10*1024kB (UME) 0*2048kB 0*4096kB = 47016kB [ 1356.019100][T29967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.032566][T29967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.049073][T29967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.057331][T29967] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1356.071512][T29967] 10397 total pagecache pages [ 1356.073107][T29967] 1529 pages in swap cache [ 1356.093871][T29967] Free swap = 92608kB [ 1356.095228][T29967] Total swap = 124996kB [ 1356.104211][T29967] 524155 pages RAM [ 1356.105519][T29967] 0 pages HighMem/MovableOnly [ 1356.121630][T29967] 211473 pages reserved [ 1356.123529][T29967] 0 pages cma reserved [ 1356.126556][T29975] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1356.344331][T29973] JFS: charset not found [ 1356.688320][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1356.840753][T29982] bridge_slave_0: left allmulticast mode [ 1356.843750][T29982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.728296][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1358.597594][T29968] netlink: 'syz.2.5571': attribute type 1 has an invalid length. [ 1358.768252][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1358.985001][T29994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1359.163752][T30006] FAULT_INJECTION: forcing a failure. [ 1359.163752][T30006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.183957][T30006] CPU: 1 UID: 0 PID: 30006 Comm: syz.0.5578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.183991][T30006] Tainted: [L]=SOFTLOCKUP [ 1359.183998][T30006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1359.184010][T30006] Call Trace: [ 1359.184018][T30006] [ 1359.184026][T30006] dump_stack_lvl+0x100/0x190 [ 1359.184073][T30006] should_fail_ex.cold+0x5/0xa [ 1359.184096][T30006] _copy_from_user+0x2e/0xd0 [ 1359.184126][T30006] memdup_user+0x6b/0xe0 [ 1359.184186][T30006] strndup_user+0x78/0xe0 [ 1359.184207][T30006] vt_do_kdgkb_ioctl+0xda/0x510 [ 1359.184241][T30006] vt_ioctl+0xcbb/0x3110 [ 1359.184270][T30006] ? __pfx_vt_ioctl+0x10/0x10 [ 1359.184297][T30006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1359.184322][T30006] ? get_pid_task+0x106/0x250 [ 1359.184351][T30006] ? rcu_is_watching+0x12/0xc0 [ 1359.184372][T30006] ? apparmor_capable+0x1d7/0x4d0 [ 1359.184394][T30006] ? bpf_lsm_capable+0x9/0x10 [ 1359.184413][T30006] ? security_capable+0x80/0x260 [ 1359.184444][T30006] vt_compat_ioctl+0x33f/0x4e0 [ 1359.184472][T30006] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 1359.184499][T30006] ? __fget_files+0x215/0x3d0 [ 1359.184531][T30006] ? hook_file_ioctl_common+0x140/0x440 [ 1359.184558][T30006] ? __fget_files+0x21f/0x3d0 [ 1359.184585][T30006] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 1359.184613][T30006] tty_compat_ioctl+0x1b4/0x420 [ 1359.184637][T30006] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1359.184659][T30006] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1359.184689][T30006] __do_fast_syscall_32+0xe7/0x970 [ 1359.184711][T30006] ? lockdep_hardirqs_on+0x78/0x100 [ 1359.184740][T30006] do_fast_syscall_32+0x32/0x70 [ 1359.184758][T30006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.184783][T30006] RIP: 0023:0xf706efec [ 1359.184805][T30006] Code: Unable to access opcode bytes at 0xf706efc2. [ 1359.184815][T30006] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1359.184834][T30006] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000004b49 [ 1359.184846][T30006] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1359.184857][T30006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.184867][T30006] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1359.184879][T30006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.184903][T30006] [ 1359.573644][T30018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1359.808208][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1360.848141][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1361.888051][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1362.927991][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1363.968432][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1365.007904][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1365.854554][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1365.869761][ T1135] ata1: failed to read log page 10h (errno=-5) [ 1365.887898][ T1135] ata1.00: exception Emask 0x1 SAct 0x1000 SErr 0x0 action 0x0 [ 1365.890841][ T1135] ata1.00: irq_stat 0x40000000 [ 1365.892707][ T1135] ata1.00: failed command: READ FPDMA QUEUED [ 1365.895155][ T1135] ata1.00: cmd 60/08:60:46:b9:02/00:00:00:00:00/40 tag 12 ncq dma 4096 in [ 1365.895155][ T1135] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1365.902288][ T1135] ata1.00: status: { DRDY } [ 1365.904101][ T1135] ata1.00: error: { ABRT } [ 1365.922928][ T1135] ata1.00: configured for UDMA/100 [ 1365.927444][ T1135] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1365.942502][ T1135] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 1365.946907][ T1135] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 1365.956011][ T1135] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 02 b9 46 00 00 08 00 [ 1365.964390][ T1135] blk_print_req_error: 11 callbacks suppressed [ 1365.964410][ T1135] I/O error, dev sda, sector 178502 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1365.978262][ T1135] ata1: EH complete [ 1365.998203][T11314] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1366.057837][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1366.189236][T11314] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1366.192908][T11314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.197965][T11314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.207833][T11314] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1366.215174][T11314] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1366.219174][T11314] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1366.223729][T11314] usb 9-1: Manufacturer: syz [ 1366.229720][T11314] usb 9-1: config 0 descriptor?? [ 1366.542610][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.884651][T11314] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 1366.901080][T11314] appleir 0003:05AC:8243.001C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1367.037828][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1367.041990][T30045] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1367.087737][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1367.160746][T30045] geneve2: entered promiscuous mode [ 1367.163793][T30045] geneve2: entered allmulticast mode [ 1367.823448][ T40] usb 9-1: USB disconnect, device number 40 [ 1368.038479][T30089] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1368.127675][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1368.262531][T30098] input: syz1 as /devices/virtual/input/input359 [ 1368.343281][T30099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1368.350739][T30099] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.353282][T30099] IPv6: NLM_F_CREATE should be set when creating new route [ 1369.167631][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1369.497732][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1369.666286][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1369.687869][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.698045][ T10] usb 10-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.704902][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1369.721180][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1369.731157][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.754189][ T10] usb 10-1: config 0 descriptor?? [ 1369.812311][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1370.207746][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1370.519235][T30116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.523367][T30116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.247509][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1371.515731][T30119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5606'. [ 1372.108391][T20479] usb 10-1: USB disconnect, device number 4 [ 1372.287539][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1373.327806][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1374.367346][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1375.417287][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1376.457267][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1377.497186][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1378.527128][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1379.577046][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1380.607068][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1381.206592][T29091] Bluetooth: hci3: Frame reassembly failed (-84) [ 1381.215769][T29091] Bluetooth: hci3: Frame reassembly failed (-84) [ 1381.646978][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1382.686901][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1382.970474][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1383.026846][T30226] vlan0: entered allmulticast mode [ 1383.029212][T30226] dummy0: entered allmulticast mode [ 1383.035316][T30226] bridge0: port 1(vlan0) entered blocking state [ 1383.039070][T30226] bridge0: port 1(vlan0) entered disabled state [ 1383.074955][T30226] vlan0: entered promiscuous mode [ 1383.077561][T30226] dummy0: entered promiscuous mode [ 1383.246907][ T5760] Bluetooth: hci3: command 0x1003 tx timeout [ 1383.357043][ T5762] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1383.726865][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1384.223529][T30242] FAULT_INJECTION: forcing a failure. [ 1384.223529][T30242] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.228088][T30242] CPU: 2 UID: 0 PID: 30242 Comm: syz.2.5629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.228120][T30242] Tainted: [L]=SOFTLOCKUP [ 1384.228124][T30242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1384.228132][T30242] Call Trace: [ 1384.228137][T30242] [ 1384.228142][T30242] dump_stack_lvl+0x100/0x190 [ 1384.228166][T30242] should_fail_ex.cold+0x5/0xa [ 1384.228182][T30242] should_failslab+0xc2/0x120 [ 1384.228199][T30242] __kmalloc_noprof+0xfc/0x820 [ 1384.228212][T30242] ? rcu_is_watching+0x12/0xc0 [ 1384.228228][T30242] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1384.228249][T30242] tomoyo_realpath_from_path+0xb6/0x690 [ 1384.228268][T30242] tomoyo_path_number_perm+0x23c/0x580 [ 1384.228281][T30242] ? tomoyo_path_number_perm+0x22e/0x580 [ 1384.228294][T30242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1384.228307][T30242] ? find_held_lock+0x2b/0x80 [ 1384.228321][T30242] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 1384.228355][T30242] ? find_held_lock+0x2b/0x80 [ 1384.228368][T30242] ? __fget_files+0x215/0x3d0 [ 1384.228385][T30242] ? hook_file_ioctl_common+0x140/0x440 [ 1384.228397][T30242] ? __fget_files+0x215/0x3d0 [ 1384.228416][T30242] ? __fget_files+0x21f/0x3d0 [ 1384.228435][T30242] security_file_ioctl_compat+0xd3/0x230 [ 1384.228451][T30242] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1384.228468][T30242] __do_fast_syscall_32+0xe7/0x970 [ 1384.228483][T30242] ? lockdep_hardirqs_on+0x78/0x100 [ 1384.228502][T30242] do_fast_syscall_32+0x32/0x70 [ 1384.228513][T30242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1384.228529][T30242] RIP: 0023:0xf7fe7fec [ 1384.228543][T30242] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 1384.228549][T30242] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1384.228560][T30242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000401054d6 [ 1384.228567][T30242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1384.228574][T30242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.228580][T30242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.228587][T30242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.228601][T30242] [ 1384.228619][T30242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1384.766774][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1385.243883][T30251] JFS: charset not found [ 1385.806697][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1386.334297][T30263] tipc: Started in network mode [ 1386.336485][T30263] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1386.346347][T30263] tipc: Enabled bearer , priority 10 [ 1386.504555][T30269] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5639'. [ 1386.508356][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5639'. [ 1386.856737][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1387.336688][ T1353] tipc: Node number set to 4269801488 [ 1387.780059][T30287] qnx6: unable to set blocksize [ 1387.886609][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1388.595138][T30298] netlink: 'syz.0.5646': attribute type 1 has an invalid length. [ 1388.604182][T30298] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1388.659875][T30291] JFS: charset not found [ 1388.716043][T30267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5638'. [ 1388.926547][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1389.454691][T30306] netlink: 'syz.0.5649': attribute type 9 has an invalid length. [ 1389.505784][T30307] netlink: 'syz.0.5649': attribute type 9 has an invalid length. [ 1389.776743][ T5976] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1389.938228][ T5976] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1389.942021][ T5976] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 1389.946129][ T5976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1389.951586][ T5976] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1389.955576][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1389.959488][ T5976] usb 5-1: Product: syz [ 1389.961781][ T5976] usb 5-1: Manufacturer: syz [ 1389.964012][ T5976] usb 5-1: SerialNumber: syz [ 1389.966674][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1389.969896][ T5976] usb 5-1: config 0 descriptor?? [ 1389.973161][T30306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1389.981096][ T5976] usb 5-1: selecting invalid altsetting 0 [ 1391.006442][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1391.015371][T30322] ubi16: attaching mtd0 [ 1391.027485][T30322] FAULT_INJECTION: forcing a failure. [ 1391.027485][T30322] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.046756][T30322] CPU: 0 UID: 0 PID: 30322 Comm: syz.2.5652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.046785][T30322] Tainted: [L]=SOFTLOCKUP [ 1391.046791][T30322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1391.046801][T30322] Call Trace: [ 1391.046807][T30322] [ 1391.046814][T30322] dump_stack_lvl+0x100/0x190 [ 1391.046839][T30322] should_fail_ex.cold+0x5/0xa [ 1391.046859][T30322] should_failslab+0xc2/0x120 [ 1391.046879][T30322] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1391.046905][T30322] ? alloc_vmap_area+0x182f/0x2bb0 [ 1391.046928][T30322] alloc_vmap_area+0x182f/0x2bb0 [ 1391.046952][T30322] ? kasan_save_track+0x14/0x30 [ 1391.046970][T30322] ? __kasan_kmalloc+0xaa/0xb0 [ 1391.046986][T30322] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1391.047003][T30322] ? __pfx_schedule_idle+0x10/0x10 [ 1391.047033][T30322] ? __get_vm_area_node+0x101/0x330 [ 1391.047055][T30322] __get_vm_area_node+0x1ca/0x330 [ 1391.047078][T30322] __vmalloc_node_range_noprof+0x228/0x1630 [ 1391.047099][T30322] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1391.047128][T30322] ? _printk+0xcf/0x110 [ 1391.047144][T30322] ? mark_held_locks+0x40/0x70 [ 1391.047172][T30322] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1391.047191][T30322] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1391.047213][T30322] ? __debug_object_init+0x2de/0x3d0 [ 1391.047238][T30322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1391.047258][T30322] ? ubi_msg+0x114/0x159 [ 1391.047306][T30322] ? __pfx_ubi_msg+0x10/0x10 [ 1391.047323][T30322] ? lockdep_init_map_type+0x5c/0x250 [ 1391.047347][T30322] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1391.047366][T30322] __vmalloc_node_noprof+0xad/0xf0 [ 1391.047386][T30322] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1391.047409][T30322] ubi_attach_mtd_dev+0x1353/0x32a0 [ 1391.047437][T30322] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1391.047456][T30322] ? __pfx_get_mtd_device+0x10/0x10 [ 1391.047482][T30322] ctrl_cdev_ioctl+0x36a/0x400 [ 1391.047503][T30322] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1391.047526][T30322] ? __fget_files+0x21f/0x3d0 [ 1391.047551][T30322] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1391.047570][T30322] compat_ptr_ioctl+0x6e/0xa0 [ 1391.047594][T30322] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1391.047613][T30322] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1391.047635][T30322] __do_fast_syscall_32+0xe7/0x970 [ 1391.047650][T30322] ? lockdep_hardirqs_on+0x78/0x100 [ 1391.047674][T30322] do_fast_syscall_32+0x32/0x70 [ 1391.047689][T30322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1391.047709][T30322] RIP: 0023:0xf7fe7fec [ 1391.047726][T30322] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 1391.047733][T30322] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1391.047749][T30322] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000040186f40 [ 1391.047759][T30322] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.047768][T30322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1391.047776][T30322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1391.047785][T30322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1391.047804][T30322] [ 1391.206572][T30322] ubi16: scanning is finished [ 1391.208127][T30322] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1391.565811][T30322] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1391.920439][T27695] usb 5-1: USB disconnect, device number 12 [ 1392.046400][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1393.086336][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1394.126381][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1395.166224][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1396.211132][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1397.249657][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1398.020623][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5658'. [ 1398.206541][T30340] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1398.288621][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1399.326100][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1399.379030][T30192] udevd[30192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1400.365887][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1401.418031][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1402.301588][T30368] FAULT_INJECTION: forcing a failure. [ 1402.301588][T30368] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.306947][T30368] CPU: 3 UID: 0 PID: 30368 Comm: syz.5.5665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.306967][T30368] Tainted: [L]=SOFTLOCKUP [ 1402.306971][T30368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1402.306978][T30368] Call Trace: [ 1402.306983][T30368] [ 1402.306988][T30368] dump_stack_lvl+0x100/0x190 [ 1402.307008][T30368] should_fail_ex.cold+0x5/0xa [ 1402.307020][T30368] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1402.307040][T30368] should_failslab+0xc2/0x120 [ 1402.307056][T30368] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1402.307070][T30368] ? skb_clone+0x190/0x400 [ 1402.307102][T30368] skb_clone+0x190/0x400 [ 1402.307116][T30368] netlink_deliver_tap+0xaed/0xcc0 [ 1402.307138][T30368] netlink_unicast+0x62b/0x850 [ 1402.307157][T30368] ? __pfx_netlink_unicast+0x10/0x10 [ 1402.307178][T30368] netlink_sendmsg+0x8b0/0xda0 [ 1402.307197][T30368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1402.307227][T30368] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1402.307250][T30368] ____sys_sendmsg+0xa4d/0xbe0 [ 1402.307266][T30368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1402.307283][T30368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1402.307305][T30368] ___sys_sendmsg+0x190/0x1e0 [ 1402.307323][T30368] ? __pfx____sys_sendmsg+0x10/0x10 [ 1402.307346][T30368] ? find_held_lock+0x2b/0x80 [ 1402.307368][T30368] __sys_sendmsg+0x160/0x210 [ 1402.307381][T30368] ? __pfx___sys_sendmsg+0x10/0x10 [ 1402.307399][T30368] ? __pfx_ksys_write+0x10/0x10 [ 1402.307421][T30368] __do_fast_syscall_32+0xe7/0x970 [ 1402.307433][T30368] ? lockdep_hardirqs_on+0x78/0x100 [ 1402.307452][T30368] do_fast_syscall_32+0x32/0x70 [ 1402.307462][T30368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1402.307478][T30368] RIP: 0023:0xf7f72fec [ 1402.307491][T30368] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 1402.307496][T30368] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1402.307508][T30368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1402.307515][T30368] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1402.307521][T30368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.307528][T30368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.307534][T30368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.307548][T30368] [ 1402.445966][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1403.496020][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1404.525705][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1404.745748][ T5976] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1404.904484][T30400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1404.908871][T30400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1404.927401][ T5976] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1404.931603][ T5976] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1404.940446][ T5976] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1404.943675][T30400] rdma_rxe: rxe_newlink: failed to add lo [ 1404.945161][ T5976] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.953078][ T5976] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1404.957949][ T5976] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1404.963467][ T5976] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1404.966387][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1404.969353][ T5976] usb 9-1: Product: syz [ 1404.971123][ T5976] usb 9-1: Manufacturer: syz [ 1404.979811][T30392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1404.986502][ T5976] cdc_wdm 9-1:1.0: skipping garbage [ 1404.995007][ T5976] cdc_wdm 9-1:1.0: skipping garbage [ 1405.319346][ T5976] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1405.335814][ T5976] cdc_wdm 9-1:1.0: Unknown control protocol [ 1405.566303][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1406.615551][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1406.771601][T30387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5671'. [ 1407.096897][ T62] usb 9-1: USB disconnect, device number 41 [ 1407.133037][T30406] JFS: charset not found [ 1407.645500][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1408.685489][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1409.422469][T30413] JFS: charset not found [ 1409.611297][T30423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1409.645948][T30423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1409.682194][T30423] lo speed is unknown, defaulting to 1000 [ 1409.725406][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1409.812942][T30423] lo speed is unknown, defaulting to 1000 [ 1409.915690][T30427] netlink: 'syz.5.5684': attribute type 7 has an invalid length. [ 1409.923611][T30427] netlink: 'syz.5.5684': attribute type 8 has an invalid length. [ 1410.627432][T30434] ubi16: attaching mtd0 [ 1410.752754][T30434] ubi16: scanning is finished [ 1410.765312][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1410.773424][T30434] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1411.109700][T30434] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1411.779445][T30454] FAULT_INJECTION: forcing a failure. [ 1411.779445][T30454] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.795654][T30454] CPU: 1 UID: 0 PID: 30454 Comm: syz.4.5691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.795687][T30454] Tainted: [L]=SOFTLOCKUP [ 1411.795694][T30454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1411.795705][T30454] Call Trace: [ 1411.795713][T30454] [ 1411.795721][T30454] dump_stack_lvl+0x100/0x190 [ 1411.795750][T30454] should_fail_ex.cold+0x5/0xa [ 1411.795772][T30454] should_failslab+0xc2/0x120 [ 1411.795796][T30454] __kmalloc_noprof+0xfc/0x820 [ 1411.795822][T30454] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1411.795850][T30454] ? relay_open_buf.part.0+0xfe/0xb70 [ 1411.795880][T30454] relay_open_buf.part.0+0xfe/0xb70 [ 1411.795923][T30454] relay_open+0x7b9/0xa00 [ 1411.795948][T30454] blk_trace_setup_prepare+0x35c/0x6c0 [ 1411.796005][T30454] compat_blk_trace_setup+0x1eb/0x3a0 [ 1411.796030][T30454] ? __pfx_compat_blk_trace_setup+0x10/0x10 [ 1411.796055][T30454] ? __pfx_vsnprintf+0x10/0x10 [ 1411.796099][T30454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1411.796129][T30454] blk_trace_ioctl+0x2e1/0x320 [ 1411.796151][T30454] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1411.796178][T30454] ? find_held_lock+0x2b/0x80 [ 1411.796203][T30454] compat_blkdev_ioctl+0x431/0x7b0 [ 1411.796234][T30454] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1411.796265][T30454] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1411.796292][T30454] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1411.796321][T30454] __do_fast_syscall_32+0xe7/0x970 [ 1411.796338][T30454] ? lockdep_hardirqs_on+0x78/0x100 [ 1411.796367][T30454] do_fast_syscall_32+0x32/0x70 [ 1411.796384][T30454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1411.796408][T30454] RIP: 0023:0xf7fe5fec [ 1411.796428][T30454] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 1411.796437][T30454] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1411.796455][T30454] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0401273 [ 1411.796466][T30454] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1411.796477][T30454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1411.796487][T30454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.796497][T30454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1411.796520][T30454] [ 1411.815686][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1412.275857][ T1353] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1412.450662][ T1353] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1412.457171][ T1353] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1412.465224][ T1353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.470406][ T1353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1412.485546][ T1353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1412.494309][ T1353] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.500290][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.515199][ T1353] usb 5-1: Product: syz [ 1412.517056][ T1353] usb 5-1: Manufacturer: syz [ 1412.532302][ T1353] cdc_wdm 5-1:1.0: skipping garbage [ 1412.538200][ T1353] cdc_wdm 5-1:1.0: skipping garbage [ 1412.569689][ T1353] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1412.580194][ T1353] cdc_wdm 5-1:1.0: Unknown control protocol [ 1412.855214][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1413.805809][T20479] usb 5-1: USB disconnect, device number 13 [ 1413.885142][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1414.483453][T30476] geneve4: entered promiscuous mode [ 1414.486241][T30476] geneve4: entered allmulticast mode [ 1414.491736][T28141] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 1414.495748][T28141] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 1414.501350][T28141] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 1414.506476][T28141] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 1414.823734][T30486] CIFS: VFS: UNC: missing share name [ 1414.826466][T30486] CIFS: VFS: Malformed UNC in devname [ 1414.841588][T30486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5701'. [ 1414.925115][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1415.515055][T27695] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1415.695029][T27695] usb 5-1: Using ep0 maxpacket: 8 [ 1415.702333][T27695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.708929][T27695] usb 5-1: config 0 has no interfaces? [ 1415.710739][T27695] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1415.718808][T27695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.732039][T27695] usb 5-1: config 0 descriptor?? [ 1415.965065][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1416.348524][T27695] usb 5-1: USB disconnect, device number 14 [ 1416.775529][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1416.778475][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1417.005067][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1418.044905][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1419.084842][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1420.134765][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1421.115606][T30539] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1421.164774][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1422.204726][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1423.244746][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1424.284932][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1425.324484][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1426.364475][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1427.404482][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1427.976290][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.454293][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1429.484303][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1430.524199][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1431.564193][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1432.604156][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1433.644009][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1434.683946][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1435.723893][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1436.763839][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1437.803777][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1438.843783][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1439.883728][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1440.923710][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1441.963616][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1443.013522][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1444.043425][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1445.083400][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1446.123463][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1447.163238][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1448.203282][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1449.243203][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1450.283074][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1451.323061][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1452.373027][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1453.403024][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1454.442919][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1455.492864][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1456.522790][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1457.562709][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1458.602714][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1459.642610][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1460.682580][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1461.732429][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1462.762403][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1463.812408][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1464.842295][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1465.882330][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1466.932154][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1467.962078][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1469.002080][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1470.042124][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1471.081958][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1472.122028][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1473.171936][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1474.201767][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1475.241742][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1476.291633][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1476.428158][T30554] netlink: 'syz.2.5720': attribute type 1 has an invalid length. [ 1476.431874][T30554] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1476.754818][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1476.764254][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1476.769014][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1476.773604][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1476.784193][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1476.987160][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1476.999382][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1477.024635][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1477.045511][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1477.064879][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1477.255916][T28141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.312011][ T5760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1477.322069][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1477.330535][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1477.333894][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1477.340987][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1477.348882][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1477.504719][T28141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.520483][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1477.524873][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1477.679947][T28141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.833033][T28141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.890403][T30560] lo speed is unknown, defaulting to 1000 [ 1478.141999][T30560] lo speed is unknown, defaulting to 1000 [ 1478.166374][T30574] lo speed is unknown, defaulting to 1000 [ 1478.197613][T28141] vlan0: left promiscuous mode [ 1478.199154][T28141] dummy0: left promiscuous mode [ 1478.215174][T28141] bridge0: port 1(vlan0) entered disabled state [ 1478.220152][T28141] bridge_slave_1: left allmulticast mode [ 1478.222478][T28141] bridge_slave_1: left promiscuous mode [ 1478.224312][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.371521][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1478.375562][T28141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.380102][T28141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.386563][T28141] bond0 (unregistering): Released all slaves [ 1478.407102][T30574] lo speed is unknown, defaulting to 1000 [ 1478.409515][T30564] lo speed is unknown, defaulting to 1000 [ 1478.553773][T28141] tipc: Disabling bearer [ 1478.556209][T28141] tipc: Left network mode [ 1478.675298][T30564] lo speed is unknown, defaulting to 1000 [ 1478.841936][ T5762] Bluetooth: hci3: command tx timeout [ 1479.241832][ T5762] Bluetooth: hci1: command tx timeout [ 1479.299289][T28141] hsr_slave_0: left promiscuous mode [ 1479.312144][T28141] hsr_slave_1: left promiscuous mode [ 1479.314387][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.317348][T28141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.321062][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.323731][T28141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.339572][T28141] veth1_macvtap: left promiscuous mode [ 1479.341812][T28141] veth0_macvtap: left promiscuous mode [ 1479.343641][T28141] veth1_vlan: left promiscuous mode [ 1479.345383][T28141] veth0_vlan: left promiscuous mode [ 1479.371917][ T5976] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1479.405015][ T5762] Bluetooth: hci0: command tx timeout [ 1479.411483][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1479.532076][ T5976] usb 7-1: Using ep0 maxpacket: 8 [ 1479.537800][ T5976] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1479.544473][ T5976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1479.549125][ T5976] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1479.553252][ T5976] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1479.557035][ T5976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1479.560161][ T5976] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1479.564357][ T5976] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1479.567186][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.635549][T28141] team0 (unregistering): Port device team_slave_1 removed [ 1479.644001][T28141] team0 (unregistering): Port device team_slave_0 removed [ 1479.731740][ T5456] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1479.835808][T30560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.840924][T30560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.845716][T30560] bridge_slave_0: entered allmulticast mode [ 1479.867053][T30560] bridge_slave_0: entered promiscuous mode [ 1479.870882][T30560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.874205][T30560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.876756][T30560] bridge_slave_1: entered allmulticast mode [ 1479.879795][T30560] bridge_slave_1: entered promiscuous mode [ 1479.915423][ T5976] usb 7-1: GET_CAPABILITIES returned 0 [ 1479.917214][ T5976] usbtmc 7-1:16.0: can't read capabilities [ 1480.087895][T30560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.097310][T30560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.100530][T30574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.103667][T30574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.106615][T30574] bridge_slave_0: entered allmulticast mode [ 1480.109441][T30574] bridge_slave_0: entered promiscuous mode [ 1480.158207][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.161232][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.163975][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.166688][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.169402][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.170682][T30574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.172144][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.172451][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.177018][T30574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.179790][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.182038][T30574] bridge_slave_1: entered allmulticast mode [ 1480.184632][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.187153][T30574] bridge_slave_1: entered promiscuous mode [ 1480.189079][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.193518][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.196210][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.198880][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.201565][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.204686][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.207437][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1480.221912][T30560] team0: Port device team_slave_0 added [ 1480.231229][ T61] usb 7-1: USB disconnect, device number 75 [ 1480.241846][T30560] team0: Port device team_slave_1 added [ 1480.243737][T30564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.251213][T30564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.262787][T30564] bridge_slave_0: entered allmulticast mode [ 1480.270573][T30564] bridge_slave_0: entered promiscuous mode [ 1480.276229][T30564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.278900][T30564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.281382][T30564] bridge_slave_1: entered allmulticast mode [ 1480.283969][T30564] bridge_slave_1: entered promiscuous mode [ 1480.318733][T30560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.321219][T30560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.329812][T30560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.341167][T30560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.343964][T30560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.352498][T30560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.357833][T30574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.379396][T30574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.391168][T30564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.396659][T30564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.406420][T30574] team0: Port device team_slave_0 added [ 1480.433524][T30574] team0: Port device team_slave_1 added [ 1480.441496][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1480.447925][T30564] team0: Port device team_slave_0 added [ 1480.461751][T30560] hsr_slave_0: entered promiscuous mode [ 1480.464187][T30560] hsr_slave_1: entered promiscuous mode [ 1480.466436][T30560] debugfs: 'hsr0' already exists in 'hsr' [ 1480.468651][T30560] Cannot create hsr debugfs directory [ 1480.474515][T30564] team0: Port device team_slave_1 added [ 1480.497091][T30574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.499394][T30574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.507377][T30574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.511945][T30574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.513863][T30574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.522501][T30574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.587154][T30564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.589511][T30564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.599982][T30564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.606445][T30564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.608745][T30564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.618388][T30564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.759079][T28141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.764827][T28141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.906660][T30574] hsr_slave_0: entered promiscuous mode [ 1480.909253][T30574] hsr_slave_1: entered promiscuous mode [ 1480.911613][T30574] debugfs: 'hsr0' already exists in 'hsr' [ 1480.913399][T30574] Cannot create hsr debugfs directory [ 1480.922577][ T5762] Bluetooth: hci3: command tx timeout [ 1480.957497][T28141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.960848][T28141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.079641][T30564] hsr_slave_0: entered promiscuous mode [ 1481.083475][T30564] hsr_slave_1: entered promiscuous mode [ 1481.086554][T30564] debugfs: 'hsr0' already exists in 'hsr' [ 1481.089101][T30564] Cannot create hsr debugfs directory [ 1481.211015][T28141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.214380][T28141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.321525][ T5762] Bluetooth: hci1: command tx timeout [ 1481.474641][T28141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.477910][T28141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.481323][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1481.483675][ T5762] Bluetooth: hci0: command tx timeout [ 1481.601729][ T5456] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1481.684723][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1481.687551][T30638] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1481.690976][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1481.694869][T30638] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1481.698929][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1482.370837][T30560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1482.457633][T30560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1482.462334][T30560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1482.506601][T30560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.510537][T30560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1482.517792][T30560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.521661][T30560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1482.531447][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1482.659160][T30560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1482.690448][T28141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.918085][T28141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.003529][ T5762] Bluetooth: hci3: command tx timeout [ 1483.053068][T28141] bond0: (slave netdevsim1): Releasing backup interface [ 1483.073615][T28141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.119974][T30560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.155186][T30560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.285992][T28141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.304742][T30574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1483.345195][T30574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1483.349191][T30574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1483.380648][T30574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1483.393566][T12228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.396456][T12228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.401280][ T5762] Bluetooth: hci1: command tx timeout [ 1483.402570][T30574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1483.468587][T30574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1483.472760][T30574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1483.480110][T30574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1483.493540][T12228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.495895][T12228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.561358][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1483.564432][ T5762] Bluetooth: hci0: command tx timeout [ 1483.957515][T30564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1483.987686][T30564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1484.018494][T30564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1484.043879][T30564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1484.054978][T30564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1484.225201][T30564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1484.298928][T30564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1484.331610][T30564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1484.366501][T28141] bridge_slave_1: left allmulticast mode [ 1484.372824][T28141] bridge_slave_1: left promiscuous mode [ 1484.379437][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.414497][T28141] bridge_slave_0: left allmulticast mode [ 1484.420472][T28141] bridge_slave_0: left promiscuous mode [ 1484.422486][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.489642][T28141] bridge_slave_1: left allmulticast mode [ 1484.498712][T28141] bridge_slave_1: left promiscuous mode [ 1484.511408][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.563918][T28141] bridge_slave_0: left allmulticast mode [ 1484.568071][T28141] bridge_slave_0: left promiscuous mode [ 1484.601159][ C2] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1484.626351][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.081166][ T5762] Bluetooth: hci3: command tx timeout [ 1485.406494][T28141] dvmrp0: left allmulticast mode [ 1485.482293][ T5762] Bluetooth: hci1: command tx timeout [ 1485.651148][ T5762] Bluetooth: hci0: command tx timeout [ 1485.659358][T28141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.684083][T28141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.692961][T28141] bond0 (unregistering): Released all slaves [ 1485.831842][T28141] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1486.154025][T28141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.184374][T28141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.212300][T28141] bond0 (unregistering): Released all slaves [ 1486.224416][T28141] bond1 (unregistering): Released all slaves [ 1486.242919][T28141] bond2 (unregistering): Released all slaves [ 1486.250401][T28141] bond3 (unregistering): Released all slaves [ 1486.260913][T28141] bond4 (unregistering): Released all slaves [ 1486.270384][T28141] bond5 (unregistering): Released all slaves [ 1486.278222][T28141] bond6 (unregistering): Released all slaves [ 1486.285979][T28141] bond7 (unregistering): Released all slaves [ 1486.299881][T28141] bond8 (unregistering): Released all slaves [ 1486.310329][T28141] bond9 (unregistering): Released all slaves [ 1486.320411][T28141] bond10 (unregistering): (slave dummy0): Releasing active interface [ 1486.326024][T28141] bond10 (unregistering): Released all slaves [ 1486.361522][ T5456] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1486.392515][T30574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.457233][T30574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.503511][T29092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.506614][T29092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.584667][T12228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.587743][T12228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.731252][T28141] tipc: Disabling bearer [ 1486.764438][T28141] tipc: Left network mode [ 1486.770548][T30564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.843712][T30564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.966000][T12228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.968587][T12228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.142420][T29091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.144807][T29091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.377594][T30680] ceph: No mds server is up or the cluster is laggy [ 1487.380589][ T61] libceph: connect (1)[c::]:6789 error -101 [ 1487.383682][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 1487.385369][T30675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.390179][T30675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.396188][T30675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.403820][T30675] wireguard: wg0: Could not create IPv4 socket [ 1487.406492][T30675] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1487.595573][ T5456] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1487.679612][T30560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.843290][T30574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.992152][ T5456] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1488.047843][T30564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.073148][T30560] veth0_vlan: entered promiscuous mode [ 1488.085852][T30560] veth1_vlan: entered promiscuous mode [ 1488.123994][T30560] veth0_macvtap: entered promiscuous mode [ 1488.134499][T30560] veth1_macvtap: entered promiscuous mode [ 1488.162673][T30574] veth0_vlan: entered promiscuous mode [ 1488.167776][T30560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.175500][T30560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.180448][T30574] veth1_vlan: entered promiscuous mode [ 1488.197127][T17883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.200329][T17883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.235073][T17883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.238303][T17883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.401458][T30574] veth0_macvtap: entered promiscuous mode [ 1488.470378][T30574] veth1_macvtap: entered promiscuous mode [ 1488.514197][T28141] hsr_slave_0: left promiscuous mode [ 1488.519678][T28141] hsr_slave_1: left promiscuous mode [ 1488.523851][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.527076][T28141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.531081][T28141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.534337][T28141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.542576][T28141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.547224][T28141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.558752][T28141] veth1_macvtap: left promiscuous mode [ 1488.561398][T28141] veth0_macvtap: left promiscuous mode [ 1488.567442][T28141] veth1_vlan: left promiscuous mode [ 1488.569735][T28141] veth0_vlan: left promiscuous mode [ 1489.170623][T28141] team0 (unregistering): Port device team_slave_1 removed [ 1489.197205][T28141] team0 (unregistering): Port device team_slave_0 removed [ 1489.419121][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.581898][T30743] serio: Serial port ptm0 [ 1489.698427][T28141] team0 (unregistering): Port device team_slave_1 removed [ 1489.714291][T28141] team0 (unregistering): Port device team_slave_0 removed [ 1489.835505][T30564] veth0_vlan: entered promiscuous mode [ 1489.861925][ T5456] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1489.878441][T29089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.884182][T30564] veth1_vlan: entered promiscuous mode [ 1489.893883][T29089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.934370][T30574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.940726][T30574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.946183][T17883] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.949875][T17883] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.953084][T17883] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.956372][T17883] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.039158][T29079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.042595][T29079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.290134][T30564] veth0_macvtap: entered promiscuous mode [ 1490.308267][T30564] veth1_macvtap: entered promiscuous mode [ 1490.389705][T30564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.415566][T30564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.463017][T17883] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.466623][T17883] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.470088][T17883] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.494157][T12228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.497461][T12228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.510195][T17883] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.549370][ T5456] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1490.613800][T29089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.617003][T29089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.056163][T28141] IPVS: stop unused estimator thread 0... [ 1491.072324][T28141] IPVS: stop unused estimator thread 0... [ 1491.272719][T29089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.285822][T29089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.393434][T12228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.404989][T12228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.294830][ T5456] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1493.091256][T30788] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1493.093880][T30788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1493.106828][T30788] vhci_hcd vhci_hcd.0: Device attached [ 1493.392860][ T5848] usb 54-1: SetAddress Request (2) to port 0 [ 1493.394798][ T5848] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1494.526949][T30807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5738'. [ 1495.444589][ T5456] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1495.621439][T30810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1495.623410][T30810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1495.643901][T30810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1495.649188][T30810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1495.659126][T30810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1495.717985][T30810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1495.734519][T30789] vhci_hcd: connection reset by peer [ 1495.740407][T30810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1495.743503][ T5597] vhci_hcd vhci_hcd.8: stop threads [ 1495.747219][ T5597] vhci_hcd vhci_hcd.8: release socket [ 1495.756174][T30810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1495.777803][ T5597] vhci_hcd vhci_hcd.8: disconnect device [ 1495.786624][T30810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1495.795511][T30803] sg_read: process 1666 (syz.2.5738) changed security contexts after opening file descriptor, this is not allowed. [ 1495.958775][T30820] syz_tun: entered allmulticast mode [ 1495.991864][T30819] syz_tun: left allmulticast mode [ 1496.085150][T30829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1496.091258][T30829] block device autoloading is deprecated and will be removed. [ 1496.118734][ T5456] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1496.443454][T30806] serio: Serial port ptm0 [ 1496.932693][T30832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.935984][T30832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.173842][T30832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.192090][T30832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.342414][T30828] atomic_op ffff888013d5f198 conn xmit_atomic 0000000000000000 [ 1497.641408][ T5762] Bluetooth: hci3: command 0x0c1a tx timeout [ 1497.718045][ T5826] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.730883][ T5762] Bluetooth: hci1: command 0x0c1a tx timeout [ 1497.732709][ T5826] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.754391][ T5826] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.759021][ T5826] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.812922][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 1498.361369][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5740'. [ 1498.377058][T30822] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5740'. [ 1498.447889][ T5848] usb 54-1: device descriptor read/8, error -110 [ 1498.654476][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 1498.654489][ T42] audit: type=1326 audit(1783260146.907:29821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.675938][ T42] audit: type=1326 audit(1783260146.917:29822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.690157][ T5760] Bluetooth: hci1: unexpected event for opcode 0x0779 [ 1498.701563][ T42] audit: type=1326 audit(1783260146.927:29823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.713559][ T42] audit: type=1326 audit(1783260146.927:29824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.724558][ T42] audit: type=1326 audit(1783260146.927:29825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.734064][T30849] tipc: Enabling of bearer rejected, failed to enable media [ 1498.737438][ T42] audit: type=1326 audit(1783260146.937:29826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.746318][ T42] audit: type=1326 audit(1783260146.937:29827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.754335][ T42] audit: type=1326 audit(1783260146.937:29828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.761708][ T42] audit: type=1326 audit(1783260146.937:29829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71971eb code=0x7ffc0000 [ 1498.768917][ T42] audit: type=1326 audit(1783260146.937:29830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30846 comm="syz.7.5743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1498.830901][ T5456] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1498.851261][ T5848] usb usb54-port1: attempt power cycle [ 1499.377311][T30862] bridge_slave_0: left allmulticast mode [ 1499.395325][T30862] bridge_slave_0: left promiscuous mode [ 1499.397729][T30862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.436143][T30862] bridge_slave_1: left allmulticast mode [ 1499.442391][T30862] bridge_slave_1: left promiscuous mode [ 1499.453797][T30862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.485941][T30862] bond0: (slave bond_slave_0): Releasing backup interface [ 1499.531806][ T5848] usb usb54-port1: unable to enumerate USB device [ 1499.535403][T30862] bond0: (slave bond_slave_1): Releasing backup interface [ 1499.577968][T30862] team0: Port device team_slave_0 removed [ 1499.608487][T30862] team0: Port device team_slave_1 removed [ 1499.629414][T30862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.637755][T30862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.661975][T30862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.667864][T30862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.672602][T30862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1499.679164][ T5456] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1499.720648][ T5760] Bluetooth: hci3: command 0x0c1a tx timeout [ 1499.735284][T30869] FAULT_INJECTION: forcing a failure. [ 1499.735284][T30869] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.750343][T30869] CPU: 0 UID: 0 PID: 30869 Comm: syz.6.5747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.750375][T30869] Tainted: [L]=SOFTLOCKUP [ 1499.750382][T30869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1499.750392][T30869] Call Trace: [ 1499.750406][T30869] [ 1499.750414][T30869] dump_stack_lvl+0x100/0x190 [ 1499.750447][T30869] should_fail_ex.cold+0x5/0xa [ 1499.750468][T30869] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1499.750506][T30869] should_failslab+0xc2/0x120 [ 1499.750534][T30869] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1499.750562][T30869] ? skb_clone+0x190/0x400 [ 1499.750590][T30869] skb_clone+0x190/0x400 [ 1499.750609][T30869] netlink_deliver_tap+0xaed/0xcc0 [ 1499.750642][T30869] netlink_unicast+0x6a5/0x850 [ 1499.750672][T30869] ? __pfx_netlink_unicast+0x10/0x10 [ 1499.750695][T30869] ? genl_rcv_msg+0x4be/0x800 [ 1499.750719][T30869] netlink_ack+0x655/0xb80 [ 1499.750750][T30869] netlink_rcv_skb+0x333/0x420 [ 1499.750773][T30869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1499.750791][T30869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1499.750826][T30869] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1499.750854][T30869] genl_rcv+0x28/0x40 [ 1499.750879][T30869] netlink_unicast+0x585/0x850 [ 1499.750907][T30869] ? __pfx_netlink_unicast+0x10/0x10 [ 1499.750938][T30869] netlink_sendmsg+0x8b0/0xda0 [ 1499.750968][T30869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.750997][T30869] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1499.751031][T30869] ____sys_sendmsg+0xa4d/0xbe0 [ 1499.751055][T30869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.751084][T30869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.751121][T30869] ___sys_sendmsg+0x190/0x1e0 [ 1499.751149][T30869] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.751186][T30869] ? find_held_lock+0x2b/0x80 [ 1499.751227][T30869] __sys_sendmsg+0x160/0x210 [ 1499.751249][T30869] ? __pfx___sys_sendmsg+0x10/0x10 [ 1499.751276][T30869] ? __pfx_ksys_write+0x10/0x10 [ 1499.751308][T30869] __do_fast_syscall_32+0xe7/0x970 [ 1499.751332][T30869] ? lockdep_hardirqs_on+0x78/0x100 [ 1499.751363][T30869] do_fast_syscall_32+0x32/0x70 [ 1499.751380][T30869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.751411][T30869] RIP: 0023:0xf709efec [ 1499.751433][T30869] Code: Unable to access opcode bytes at 0xf709efc2. [ 1499.751441][T30869] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1499.751460][T30869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c40 [ 1499.751472][T30869] RDX: 0000000010000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.751483][T30869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.751494][T30869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.751505][T30869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.751529][T30869] [ 1499.891908][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 1499.924342][T30874] netlink: 'syz.7.5749': attribute type 1 has an invalid length. [ 1500.378274][T30884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.699707][T30885] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5751'. [ 1501.803282][ T5760] Bluetooth: hci3: command 0x0c1a tx timeout [ 1501.960932][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 1502.556652][T30086] udevd[30086]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1502.671325][T30189] udevd[30189]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1504.471785][T30936] netlink: zone id is out of range [ 1507.669999][T11314] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1507.819893][T11314] usb 11-1: Using ep0 maxpacket: 8 [ 1507.827021][T11314] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.854752][T11314] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.858330][T11314] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1507.860793][T11314] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1507.863719][T11314] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.868590][T11314] usb 11-1: config 0 descriptor?? [ 1508.294122][T30959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.317824][T30959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.357789][T11314] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1508.377228][T11314] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1508.384190][T11314] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1508.402620][T11314] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1508.424370][T11314] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1508.443441][T11314] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1508.560625][T11314] usb 11-1: USB disconnect, device number 2 [ 1508.730162][ T10] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1508.830852][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 1508.830873][ T42] audit: type=1800 audit(1783260157.088:29872): pid=31002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5770" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1508.931403][ T10] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1508.936143][ T10] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1508.940087][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1508.945643][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1508.949305][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1508.952761][ T10] usb 7-1: Product: syz [ 1508.954388][ T10] usb 7-1: Manufacturer: syz [ 1508.956353][ T10] usb 7-1: SerialNumber: syz [ 1509.453312][ T10] usb 7-1: config 0 descriptor?? [ 1509.471274][ T10] usb 7-1: selecting invalid altsetting 0 [ 1509.693322][T21937] usb 7-1: USB disconnect, device number 76 [ 1511.659859][T30903] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1511.812772][T30903] usb 7-1: Using ep0 maxpacket: 8 [ 1511.825210][T30903] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.829611][T30903] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.834271][T30903] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1511.839782][T30903] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1511.844444][T30903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.857633][T30903] usb 7-1: config 0 descriptor?? [ 1512.275478][T31015] veth3: entered allmulticast mode [ 1512.367912][T31024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.376892][T31024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.777180][ T62] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1512.931703][ T62] usb 12-1: Using ep0 maxpacket: 8 [ 1512.940134][ T62] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.948075][ T62] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1512.961614][ T62] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1512.970266][ T62] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1512.985190][ T62] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1512.999465][ T62] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.023439][ T62] usbtmc 12-1:16.0: bulk endpoints not found [ 1513.131328][T30903] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 1513.138399][T30903] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 1513.153243][T30903] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 1513.156822][T30903] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 1513.159070][T30903] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 1513.170376][T30903] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1513.350770][ T61] usb 12-1: USB disconnect, device number 2 [ 1513.521856][T22028] usb 7-1: USB disconnect, device number 77 [ 1513.577977][T31039] netlink: 'syz.7.5777': attribute type 2 has an invalid length. [ 1513.581934][T31039] netlink: 723 bytes leftover after parsing attributes in process `syz.7.5777'. [ 1514.197068][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5780'. [ 1514.201643][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5780'. [ 1514.350042][T31064] netlink: 'syz.6.5783': attribute type 1 has an invalid length. [ 1514.669749][T31083] FAULT_INJECTION: forcing a failure. [ 1514.669749][T31083] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.680153][T31083] CPU: 0 UID: 0 PID: 31083 Comm: syz.7.5786 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.680184][T31083] Tainted: [L]=SOFTLOCKUP [ 1514.680191][T31083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1514.680201][T31083] Call Trace: [ 1514.680208][T31083] [ 1514.680216][T31083] dump_stack_lvl+0x100/0x190 [ 1514.680244][T31083] should_fail_ex.cold+0x5/0xa [ 1514.680267][T31083] should_failslab+0xc2/0x120 [ 1514.680297][T31083] __kmalloc_cache_noprof+0x91/0x6c0 [ 1514.680327][T31083] ? assoc_array_insert+0x10b/0x32c0 [ 1514.680355][T31083] assoc_array_insert+0x10b/0x32c0 [ 1514.680389][T31083] ? __pfx_assoc_array_insert+0x10/0x10 [ 1514.680414][T31083] ? down_write+0x146/0x1f0 [ 1514.680433][T31083] ? __pfx_down_write+0x10/0x10 [ 1514.680454][T31083] __key_link_begin+0xf5/0x260 [ 1514.680483][T31083] __key_create_or_update+0x4ee/0xe30 [ 1514.680508][T31083] ? __pfx___key_create_or_update+0x10/0x10 [ 1514.680532][T31083] ? lookup_user_key+0x3f3/0x1300 [ 1514.680563][T31083] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1514.680589][T31083] key_create_or_update+0x42/0x60 [ 1514.680632][T31083] __do_sys_add_key+0x2e8/0x460 [ 1514.680659][T31083] ? __pfx___do_sys_add_key+0x10/0x10 [ 1514.680683][T31083] ? fput+0x79/0x100 [ 1514.680704][T31083] ? __pfx_ksys_write+0x10/0x10 [ 1514.680736][T31083] __do_fast_syscall_32+0xe7/0x970 [ 1514.680753][T31083] ? lockdep_hardirqs_on+0x78/0x100 [ 1514.680782][T31083] do_fast_syscall_32+0x32/0x70 [ 1514.680800][T31083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.680823][T31083] RIP: 0023:0xf705efec [ 1514.680845][T31083] Code: Unable to access opcode bytes at 0xf705efc2. [ 1514.680854][T31083] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 1514.680872][T31083] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 1514.680884][T31083] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 1514.680895][T31083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.680905][T31083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1514.680915][T31083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.680939][T31083] [ 1515.265898][T31105] nbd: must specify a size in bytes for the device [ 1515.640371][T30761] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 1515.789524][T30761] usb 11-1: device descriptor read/64, error -71 [ 1516.030406][T30761] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 1516.169446][T30761] usb 11-1: device descriptor read/64, error -71 [ 1516.280101][T30761] usb usb11-port1: attempt power cycle [ 1516.479474][ T61] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1516.619466][T30761] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 1516.639379][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 1516.639910][T30761] usb 11-1: device descriptor read/8, error -71 [ 1516.643099][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1516.647842][ T61] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1516.651907][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.657782][ T61] usb 7-1: config 0 descriptor?? [ 1516.865730][ T61] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1516.879366][T30761] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 1516.899948][T30761] usb 11-1: device descriptor read/8, error -71 [ 1517.010301][T30761] usb usb11-port1: unable to enumerate USB device [ 1517.095760][T31142] team0: Port device bond0 removed [ 1517.103121][T31142] bond9: (slave dummy0): Releasing active interface [ 1517.104663][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x3 [ 1517.108445][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x3 [ 1517.110984][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.113351][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.115788][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.118117][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.118857][T31142] bridge_slave_0: left allmulticast mode [ 1517.120653][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.120668][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.120681][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.120694][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1517.128210][ T10] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.03 Device [syz1] on syz1 [ 1517.129519][T31142] bridge_slave_0: left promiscuous mode [ 1517.143481][T31142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.363220][T31142] bridge_slave_1: left promiscuous mode [ 1517.365739][T31142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.375438][T31142] bond0: (slave bond_slave_0): Releasing backup interface [ 1517.381063][T31142] bond0: (slave bond_slave_1): Releasing backup interface [ 1517.393183][T31142] team0: Port device team_slave_0 removed [ 1517.399707][T31142] team0: Port device team_slave_1 removed [ 1517.401876][T31142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.404866][T31142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.407967][T31142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1517.432932][ T61] usb 7-1: USB disconnect, device number 78 [ 1517.690713][T31151] overlayfs: missing 'lowerdir' [ 1518.784465][T31163] syz_tun: entered allmulticast mode [ 1518.947786][T31162] syz_tun: left allmulticast mode [ 1521.223724][T31184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1521.828413][T31169] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1521.860426][T31169] lo speed is unknown, defaulting to 1000 [ 1521.933231][T31169] lo speed is unknown, defaulting to 1000 v ýÿÿÿÿÿÿÿ@ üÿþÿÿÿÿÿÿÿ» ¨€0 /dev/fusefd=0x0000000000000005,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)à̆@sÿÿÿ€[ 1523.777036][ T61] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1524.138953][ T61] usb 11-1: Using ep0 maxpacket: 32 [ 1524.142907][ T61] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.157097][ T61] usb 11-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1524.181887][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1524.184271][ T61] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1524.187454][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.197673][ T61] usb 11-1: config 0 descriptor?? [ 1524.207278][ T61] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 1524.867259][T31224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5817'. [ 1525.472443][T31259] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5822'. [ 1525.802385][T31261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5823'. [ 1525.877618][ T42] audit: type=1804 audit(1783260174.129:29873): pid=31263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5821" name="/newroot/532/file0" dev="tmpfs" ino=2853 res=1 errno=0 [ 1525.878385][T31263] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1 [ 1525.896778][T31263] ref_ctr increment failed for inode: 0xb25 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804e35b300 [ 1525.924445][T31263] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1 [ 1525.945674][T31263] ref_ctr decrement failed for inode: 0xb25 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804e35b300 [ 1525.965930][T31263] uprobe: syz.2.5821:31263 failed to unregister, leaking uprobe [ 1526.110283][ T10] usb 11-1: USB disconnect, device number 7 [ 1526.629761][T22028] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1526.798840][T22028] usb 12-1: Using ep0 maxpacket: 8 [ 1526.810013][T22028] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.818043][T22028] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.824413][T22028] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1526.828887][T22028] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1526.833947][T22028] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.842479][T22028] usb 12-1: config 0 descriptor?? [ 1527.019122][T31281] input: syz0 as /devices/virtual/input/input360 [ 1527.363186][T31276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.369407][T31276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.495498][T22028] hid_parser_main: 68 callbacks suppressed [ 1527.495522][T22028] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 1527.508119][T22028] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 1527.513262][T22028] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 1527.523403][T22028] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 1527.526494][T22028] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 1527.532303][T22028] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1527.991926][T14393] usb 12-1: USB disconnect, device number 3 [ 1528.876433][T31290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5832'. [ 1529.625815][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5837'. [ 1529.691803][T31309] syz_tun: entered allmulticast mode [ 1529.923059][T31314] Bluetooth: MGMT ver 1.23 [ 1535.313447][T31328] ªªªªªª: renamed from hsr0 (while UP) [ 1537.255506][T31338] netlink: 'syz.2.5848': attribute type 21 has an invalid length. [ 1537.258081][T31338] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5848'. [ 1538.373943][T14393] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1538.722049][T14393] usb 13-1: Using ep0 maxpacket: 16 [ 1538.740538][T14393] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.756528][T14393] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1538.775078][T14393] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1538.795056][T14393] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.488551][T14393] usb 13-1: config 0 descriptor?? [ 1541.237681][T14393] usbhid 13-1:0.0: can't add hid device: -71 [ 1541.241510][T14393] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1541.257076][T14393] usb 13-1: USB disconnect, device number 2 [ 1543.036986][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5856'. [ 1544.246484][ T42] audit: type=1804 audit(1783260192.500:29874): pid=31401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5861" name="/newroot/29/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 1545.190917][T31401] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1 [ 1545.208797][T31401] ref_ctr increment failed for inode: 0xb2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880270ccc80 [ 1545.429853][T31393] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1 [ 1545.433154][T31393] ref_ctr decrement failed for inode: 0xb2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880270ccc80 [ 1545.437982][T31393] uprobe: syz.8.5861:31393 failed to unregister, leaking uprobe [ 1545.742073][T31413] comedi comedi1: comedi_config --init_data is deprecated [ 1547.544262][ T61] IPVS: starting estimator thread 0... [ 1547.633003][T31424] IPVS: using max 44 ests per chain, 105600 per kthread [ 1547.754303][T31426] input: syz1 as /devices/virtual/input/input361 [ 1547.998308][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5869'. [ 1548.396077][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5870'. [ 1548.400328][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5870'. [ 1548.658785][T31444] netlink: 'syz.8.5872': attribute type 4 has an invalid length. [ 1548.790643][T31449] netlink: 'syz.8.5872': attribute type 4 has an invalid length. [ 1549.471435][T31449] syz.8.5872 (31449) used greatest stack depth: 16496 bytes left [ 1549.747528][ T40] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1549.917658][ T40] usb 12-1: Using ep0 maxpacket: 32 [ 1549.923975][ T40] usb 12-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1549.928270][ T40] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.975243][ T40] usb 12-1: config 0 descriptor?? [ 1550.027127][T31458] serio: Serial port ptm1 [ 1550.186979][T31463] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1550.235781][ T40] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1550.295354][ T40] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1550.322466][ T40] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1550.336285][ T40] usb 12-1: media controller created [ 1550.431945][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1550.560783][T31461] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5876'. [ 1550.721237][T31457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.734265][T31457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.841433][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.116110][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5881'. [ 1552.130340][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5881'. [ 1553.512183][ T40] az6027: usb out operation failed. (-71) [ 1553.529645][ T40] stb0899_attach: Driver disabled by Kconfig [ 1553.536461][ T40] az6027: no front-end attached [ 1553.536461][ T40] [ 1553.544177][ T40] az6027: usb out operation failed. (-71) [ 1553.545928][ T40] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1553.574432][ T40] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input362 [ 1553.591936][ T40] dvb-usb: schedule remote query interval to 400 msecs. [ 1553.597016][ T40] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1553.615764][ T40] usb 12-1: USB disconnect, device number 4 [ 1553.670176][ T40] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1553.780979][T31511] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5889'. [ 1554.227434][T31516] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.258324][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.262600][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.270226][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.274436][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.278173][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.281467][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.285331][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.288682][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1554.650126][T31526] FAULT_INJECTION: forcing a failure. [ 1554.650126][T31526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.654282][T31526] CPU: 2 UID: 0 PID: 31526 Comm: syz.6.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.654301][T31526] Tainted: [L]=SOFTLOCKUP [ 1554.654306][T31526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1554.654313][T31526] Call Trace: [ 1554.654318][T31526] [ 1554.654323][T31526] dump_stack_lvl+0x100/0x190 [ 1554.654343][T31526] should_fail_ex.cold+0x5/0xa [ 1554.654357][T31526] _copy_from_user+0x2e/0xd0 [ 1554.654375][T31526] cmsghdr_from_user_compat_to_kern+0x4eb/0x7d0 [ 1554.654396][T31526] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1554.654411][T31526] ? __import_iovec+0x1d2/0x640 [ 1554.654430][T31526] ____sys_sendmsg+0x607/0xbe0 [ 1554.654449][T31526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.654471][T31526] ___sys_sendmsg+0x190/0x1e0 [ 1554.654488][T31526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.654511][T31526] ? find_held_lock+0x2b/0x80 [ 1554.654533][T31526] __sys_sendmsg+0x160/0x210 [ 1554.654546][T31526] ? __pfx___sys_sendmsg+0x10/0x10 [ 1554.654562][T31526] ? __pfx_ksys_write+0x10/0x10 [ 1554.654585][T31526] __do_fast_syscall_32+0xe7/0x970 [ 1554.654600][T31526] ? lockdep_hardirqs_on+0x78/0x100 [ 1554.654624][T31526] do_fast_syscall_32+0x32/0x70 [ 1554.654635][T31526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.654655][T31526] RIP: 0023:0xf709efec [ 1554.654669][T31526] Code: Unable to access opcode bytes at 0xf709efc2. [ 1554.654674][T31526] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1554.654686][T31526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1554.654693][T31526] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1554.654703][T31526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1554.654709][T31526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.654716][T31526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1554.654730][T31526] [ 1554.983287][T31532] fuseblk: fd is not a fuse device [ 1555.057270][T30761] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1555.227971][T30761] usb 11-1: Using ep0 maxpacket: 16 [ 1555.232867][T30761] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1555.239204][T30761] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1555.242034][T30761] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.244491][T30761] usb 11-1: Product: syz [ 1555.245797][T30761] usb 11-1: Manufacturer: syz [ 1555.249699][T30761] usb 11-1: SerialNumber: syz [ 1555.253203][T30761] usb 11-1: config 0 descriptor?? [ 1555.264725][T30761] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1555.270488][T30761] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 1556.447032][T30761] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 1557.619420][T30761] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1557.637180][T30761] em28xx 11-1:0.0: board has no eeprom [ 1557.717046][T30761] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1557.720812][T30761] em28xx 11-1:0.0: dvb set to bulk mode. [ 1557.725581][T20479] em28xx 11-1:0.0: Binding DVB extension [ 1557.928408][T20479] kworker/3:0: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1557.935627][T20479] CPU: 3 UID: 0 PID: 20479 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.935652][T20479] Tainted: [L]=SOFTLOCKUP [ 1557.935656][T20479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1557.935665][T20479] Workqueue: events request_module_async [ 1557.935782][T20479] Call Trace: [ 1557.935790][T20479] [ 1557.935797][T20479] dump_stack_lvl+0x100/0x190 [ 1557.935824][T20479] warn_alloc.cold+0x94/0xa8 [ 1557.935848][T20479] ? __pfx_warn_alloc+0x10/0x10 [ 1557.935868][T20479] ? find_held_lock+0x2b/0x80 [ 1557.935891][T20479] ? psi_memstall_leave+0x19c/0x360 [ 1557.935917][T20479] ? psi_memstall_leave+0x1eb/0x360 [ 1557.935931][T20479] ? lockdep_hardirqs_on+0x78/0x100 [ 1557.935952][T20479] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1557.935971][T20479] ? stack_trace_save+0x8e/0xc0 [ 1557.935988][T20479] ? __pfx_stack_trace_save+0x10/0x10 [ 1557.936002][T20479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1557.936013][T20479] ? stack_depot_save_flags+0x27/0x9d0 [ 1557.936031][T20479] ? stack_depot_save_flags+0x27/0x9d0 [ 1557.936047][T20479] ? kasan_save_stack+0x3f/0x50 [ 1557.936060][T20479] ? kasan_save_stack+0x30/0x50 [ 1557.936072][T20479] ? kasan_save_track+0x14/0x30 [ 1557.936083][T20479] ? __kasan_kmalloc+0xaa/0xb0 [ 1557.936095][T20479] ? usb_alloc_urb+0x66/0xa0 [ 1557.936143][T20479] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 1557.936160][T20479] ? em28xx_dvb_init.cold+0x1f2/0x7391 [ 1557.936195][T20479] ? request_module_async+0x61/0x80 [ 1557.936211][T20479] ? process_one_work+0xa23/0x1940 [ 1557.936228][T20479] ? worker_thread+0x5ef/0xe50 [ 1557.936248][T20479] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1557.936267][T20479] ? policy_nodemask+0xed/0x4f0 [ 1557.936284][T20479] alloc_pages_mpol+0x1fb/0x540 [ 1557.936300][T20479] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1557.936318][T20479] ___kmalloc_large_node+0xe5/0x120 [ 1557.936336][T20479] __kmalloc_large_node_noprof+0x1c/0x70 [ 1557.936352][T20479] __kmalloc_noprof+0x5a1/0x820 [ 1557.936363][T20479] ? usb_alloc_urb+0x66/0xa0 [ 1557.936380][T20479] ? em28xx_alloc_urbs+0x655/0xf60 [ 1557.936398][T20479] em28xx_alloc_urbs+0x655/0xf60 [ 1557.936420][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1557.936434][T20479] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1557.936448][T20479] ? lock_acquire+0x1b9/0x370 [ 1557.936465][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1557.936481][T20479] ? rcu_is_watching+0x12/0xc0 [ 1557.936494][T20479] ? trace_contention_end+0x126/0x160 [ 1557.936512][T20479] ? __mutex_lock+0x26d/0x1bd0 [ 1557.936529][T20479] ? em28xx_init_extension+0x2f/0x200 [ 1557.936545][T20479] ? register_lock_class+0x40/0x560 [ 1557.936562][T20479] ? do_raw_spin_lock+0x128/0x260 [ 1557.936573][T20479] ? em28xx_audio_init+0x132/0x1a0 [ 1557.936586][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1557.936604][T20479] ? __lock_acquire+0x49f/0x1a40 [ 1557.936620][T20479] ? em28xx_v4l2_init+0x89/0xb0 [ 1557.936632][T20479] ? do_raw_spin_unlock+0x145/0x1e0 [ 1557.936644][T20479] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1557.936666][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1557.936680][T20479] em28xx_init_extension+0x13a/0x200 [ 1557.936698][T20479] request_module_async+0x61/0x80 [ 1557.936715][T20479] process_one_work+0xa23/0x1940 [ 1557.936736][T20479] ? __pfx_process_one_work+0x10/0x10 [ 1557.936756][T20479] ? __pfx_request_module_async+0x10/0x10 [ 1557.936775][T20479] worker_thread+0x5ef/0xe50 [ 1557.936794][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1557.936809][T20479] ? kthread+0x13a/0x450 [ 1557.936823][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1557.936836][T20479] kthread+0x370/0x450 [ 1557.936850][T20479] ? __pfx_kthread+0x10/0x10 [ 1557.936864][T20479] ret_from_fork+0x72b/0xd50 [ 1557.936880][T20479] ? __pfx_ret_from_fork+0x10/0x10 [ 1557.936894][T20479] ? __switch_to+0x800/0x10f0 [ 1557.936913][T20479] ? __pfx_kthread+0x10/0x10 [ 1557.936927][T20479] ret_from_fork_asm+0x1a/0x30 [ 1557.936950][T20479] [ 1557.936955][T20479] Mem-Info: [ 1558.120844][T20479] active_anon:13 inactive_anon:1585 isolated_anon:0 [ 1558.120844][T20479] active_file:1662 inactive_file:2956 isolated_file:0 [ 1558.120844][T20479] unevictable:1768 dirty:5 writeback:0 [ 1558.120844][T20479] slab_reclaimable:7033 slab_unreclaimable:84256 [ 1558.120844][T20479] mapped:22575 shmem:1803 pagetables:1756 [ 1558.120844][T20479] sec_pagetables:426 bounce:0 [ 1558.120844][T20479] kernel_misc_reclaimable:0 [ 1558.120844][T20479] free:19351 free_pcp:113 free_cma:0 [ 1558.187042][T20479] Node 0 active_anon:0kB inactive_anon:160kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7040kB pagetables:968kB sec_pagetables:1344kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1558.282726][T20479] Node 1 active_anon:732kB inactive_anon:5876kB active_file:2612kB inactive_file:15652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90776kB dirty:24kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10328kB pagetables:6056kB sec_pagetables:360kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1558.358743][T20479] Node 0 DMA free:2528kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.415197][T20479] lowmem_reserve[]: 0 280 280 280 280 [ 1558.415773][ T40] usb 11-1: USB disconnect, device number 8 [ 1558.421749][ T40] em28xx 11-1:0.0: Disconnecting em28xx [ 1558.443807][T20479] Node 0 DMA32 free:20888kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:2048KB free_highatomic:988KB active_anon:0kB inactive_anon:212kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:904kB present:1032196kB managed:287156kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.497630][T20479] lowmem_reserve[]: 0 0 0 0 0 [ 1558.499689][T20479] Node 1 DMA32 free:55408kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:2048KB free_highatomic:484KB active_anon:732kB inactive_anon:6108kB active_file:3312kB inactive_file:19824kB unevictable:3536kB writepending:24kB zspages:6600kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:10288kB local_pcp:316kB free_cma:0kB [ 1558.550866][T20479] lowmem_reserve[]: 0 0 0 0 0 [ 1558.567848][T20479] Node 0 DMA: 274*4kB (U) 25*8kB (U) 4*16kB (U) 4*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2576kB [ 1558.600205][T20479] Node 0 DMA32: 653*4kB (UMH) 280*8kB (UMEH) 86*16kB (UMEH) 123*32kB (UMEH) 61*64kB (UMEH) 27*128kB (UMEH) 5*256kB (ME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20852kB [ 1558.626225][T20479] Node 1 DMA32: 102*4kB (UMEH) 61*8kB (UEH) 44*16kB (UMEH) 590*32kB (UMEH) 154*64kB (UMEH) 51*128kB (UMEH) 22*256kB (UME) 8*512kB (UM) 3*1024kB (ME) 2*2048kB (UM) 0*4096kB = 53760kB [ 1558.667416][T20479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.671550][T20479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1558.675567][T20479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.697227][T20479] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1558.703635][T20479] 12302 total pagecache pages [ 1558.705793][T20479] 2017 pages in swap cache [ 1558.717075][T20479] Free swap = 89876kB [ 1558.718848][T20479] Total swap = 124996kB [ 1558.721147][T20479] 524155 pages RAM [ 1558.722725][T20479] 0 pages HighMem/MovableOnly [ 1558.729997][T20479] 211473 pages reserved [ 1558.731779][T20479] 0 pages cma reserved [ 1558.735822][T20479] ------------[ cut here ]------------ [ 1558.738785][T20479] !PageLargeKmalloc(page) [ 1558.738799][T20479] WARNING: mm/slub.c:6630 at free_large_kmalloc+0xbf/0x100, CPU#3: kworker/3:0/20479 [ 1558.746073][T20479] Modules linked in: [ 1558.749518][T20479] CPU: 3 UID: 0 PID: 20479 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1558.754369][T20479] Tainted: [L]=SOFTLOCKUP [ 1558.756163][T20479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1558.760430][T20479] Workqueue: events request_module_async [ 1558.762707][T20479] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1558.765065][T20479] Code: 28 90 0f 0b 90 80 3d 04 de 9d 0e 00 0f 84 07 09 b8 fe 48 8b 74 24 28 48 89 ef e8 bc 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 17 0b 19 8e 5b 5d 41 5c 41 [ 1558.773112][T20479] RSP: 0018:ffffc9000e79f818 EFLAGS: 00010293 [ 1558.775737][T20479] RAX: 00000000000000f0 RBX: ffffea00018ddc00 RCX: 000000000000002e [ 1558.779142][T20479] RDX: 0000000000000000 RSI: ffff888063770000 RDI: ffffea00018ddc00 [ 1558.782416][T20479] RBP: ffff888063770000 R08: 0000000000000005 R09: 0000000000000000 [ 1558.785527][T20479] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805f4ade98 [ 1558.788595][T20479] R13: ffff888051403c00 R14: dffffc0000000000 R15: ffffed100be95bd5 [ 1558.791922][T20479] FS: 0000000000000000(0000) GS:ffff888096ef5000(0000) knlGS:0000000000000000 [ 1558.795709][T20479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1558.798552][T20479] CR2: 00005605d33125e0 CR3: 000000005c689000 CR4: 0000000000352ef0 [ 1558.801675][T20479] DR0: 0000000000000006 DR1: 0000000000000009 DR2: 0000000000000101 [ 1558.804965][T20479] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1558.808343][T20479] Call Trace: [ 1558.809726][T20479] [ 1558.811050][T20479] usb_free_urb.part.0+0xf8/0x110 [ 1558.813173][T20479] usb_free_urb+0x1f/0x30 [ 1558.815002][T20479] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1558.817370][T20479] em28xx_alloc_urbs+0xb43/0xf60 [ 1558.819465][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1558.821684][T20479] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1558.824292][T20479] ? lock_acquire+0x1b9/0x370 [ 1558.826208][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1558.828527][T20479] ? rcu_is_watching+0x12/0xc0 [ 1558.830536][T20479] ? trace_contention_end+0x126/0x160 [ 1558.832789][T20479] ? __mutex_lock+0x26d/0x1bd0 [ 1558.834681][T20479] ? em28xx_init_extension+0x2f/0x200 [ 1558.837444][T20479] ? register_lock_class+0x40/0x560 [ 1558.839597][T20479] ? do_raw_spin_lock+0x128/0x260 [ 1558.842121][T20479] ? em28xx_audio_init+0x132/0x1a0 [ 1558.846847][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1558.849928][T20479] ? __lock_acquire+0x49f/0x1a40 [ 1558.851878][T20479] ? em28xx_v4l2_init+0x89/0xb0 [ 1558.853681][T20479] ? do_raw_spin_unlock+0x145/0x1e0 [ 1558.855680][T20479] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1558.858130][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1558.860405][T20479] em28xx_init_extension+0x13a/0x200 [ 1558.862585][T20479] request_module_async+0x61/0x80 [ 1558.864707][T20479] process_one_work+0xa23/0x1940 [ 1558.866619][T20479] ? __pfx_process_one_work+0x10/0x10 [ 1558.868847][T20479] ? __pfx_request_module_async+0x10/0x10 [ 1558.870888][T20479] worker_thread+0x5ef/0xe50 [ 1558.872604][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1558.874712][T20479] ? kthread+0x13a/0x450 [ 1558.876439][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1558.878780][T20479] kthread+0x370/0x450 [ 1558.880597][T20479] ? __pfx_kthread+0x10/0x10 [ 1558.882594][T20479] ret_from_fork+0x72b/0xd50 [ 1558.884558][T20479] ? __pfx_ret_from_fork+0x10/0x10 [ 1558.886551][T20479] ? __switch_to+0x800/0x10f0 [ 1558.888688][T20479] ? __pfx_kthread+0x10/0x10 [ 1558.890458][T20479] ret_from_fork_asm+0x1a/0x30 [ 1558.892291][T20479] [ 1558.893561][T20479] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1558.896557][T20479] CPU: 3 UID: 0 PID: 20479 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1558.901057][T20479] Tainted: [L]=SOFTLOCKUP [ 1558.902757][T20479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1558.906006][T20479] Workqueue: events request_module_async [ 1558.908070][T20479] Call Trace: [ 1558.909175][T20479] [ 1558.910132][T20479] dump_stack_lvl+0x100/0x190 [ 1558.911606][T20479] vpanic+0x552/0x970 [ 1558.912976][T20479] ? __pfx_vpanic+0x10/0x10 [ 1558.914439][T20479] panic+0xd1/0xe0 [ 1558.915714][T20479] ? __pfx_panic+0x10/0x10 [ 1558.917180][T20479] ? check_panic_on_warn+0x1f/0x90 [ 1558.918851][T20479] check_panic_on_warn.cold+0x19/0x34 [ 1558.920601][T20479] ? free_large_kmalloc+0xbf/0x100 [ 1558.922318][T20479] __warn.cold+0x191/0x318 [ 1558.923948][T20479] __report_bug+0x30f/0x440 [ 1558.925438][T20479] ? free_large_kmalloc+0xbf/0x100 [ 1558.927142][T20479] ? __pfx___report_bug+0x10/0x10 [ 1558.928725][T20479] ? lock_acquire+0x1b9/0x370 [ 1558.930248][T20479] ? find_held_lock+0x2b/0x80 [ 1558.931792][T20479] ? __free_one_page+0x109/0x10d0 [ 1558.933406][T20479] ? __free_one_page+0x109/0x10d0 [ 1558.935031][T20479] ? free_large_kmalloc+0xbf/0x100 [ 1558.936641][T20479] report_bug+0xb2/0x220 [ 1558.937997][T20479] ? free_large_kmalloc+0xbf/0x100 [ 1558.939845][T20479] handle_bug+0x16a/0x2a0 [ 1558.941170][T20479] exc_invalid_op+0x17/0x50 [ 1558.942574][T20479] asm_exc_invalid_op+0x1a/0x20 [ 1558.944235][T20479] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1558.946015][T20479] Code: 28 90 0f 0b 90 80 3d 04 de 9d 0e 00 0f 84 07 09 b8 fe 48 8b 74 24 28 48 89 ef e8 bc 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 17 0b 19 8e 5b 5d 41 5c 41 [ 1558.952411][T20479] RSP: 0018:ffffc9000e79f818 EFLAGS: 00010293 [ 1558.954324][T20479] RAX: 00000000000000f0 RBX: ffffea00018ddc00 RCX: 000000000000002e [ 1558.956806][T20479] RDX: 0000000000000000 RSI: ffff888063770000 RDI: ffffea00018ddc00 [ 1558.959166][T20479] RBP: ffff888063770000 R08: 0000000000000005 R09: 0000000000000000 [ 1558.961576][T20479] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805f4ade98 [ 1558.964023][T20479] R13: ffff888051403c00 R14: dffffc0000000000 R15: ffffed100be95bd5 [ 1558.966466][T20479] usb_free_urb.part.0+0xf8/0x110 [ 1558.968019][T20479] usb_free_urb+0x1f/0x30 [ 1558.969429][T20479] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1558.971112][T20479] em28xx_alloc_urbs+0xb43/0xf60 [ 1558.972641][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1558.974345][T20479] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1558.976229][T20479] ? lock_acquire+0x1b9/0x370 [ 1558.977688][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1558.979382][T20479] ? rcu_is_watching+0x12/0xc0 [ 1558.980854][T20479] ? trace_contention_end+0x126/0x160 [ 1558.982477][T20479] ? __mutex_lock+0x26d/0x1bd0 [ 1558.983942][T20479] ? em28xx_init_extension+0x2f/0x200 [ 1558.985705][T20479] ? register_lock_class+0x40/0x560 [ 1558.987311][T20479] ? do_raw_spin_lock+0x128/0x260 [ 1558.988875][T20479] ? em28xx_audio_init+0x132/0x1a0 [ 1558.990504][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1558.992051][T20479] ? __lock_acquire+0x49f/0x1a40 [ 1558.993650][T20479] ? em28xx_v4l2_init+0x89/0xb0 [ 1558.995228][T20479] ? do_raw_spin_unlock+0x145/0x1e0 [ 1558.996988][T20479] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1558.998699][T20479] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1559.000775][T20479] em28xx_init_extension+0x13a/0x200 [ 1559.002459][T20479] request_module_async+0x61/0x80 [ 1559.004117][T20479] process_one_work+0xa23/0x1940 [ 1559.005688][T20479] ? __pfx_process_one_work+0x10/0x10 [ 1559.007441][T20479] ? __pfx_request_module_async+0x10/0x10 [ 1559.009238][T20479] worker_thread+0x5ef/0xe50 [ 1559.010681][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1559.012337][T20479] ? kthread+0x13a/0x450 [ 1559.013733][T20479] ? __pfx_worker_thread+0x10/0x10 [ 1559.015410][T20479] kthread+0x370/0x450 [ 1559.016790][T20479] ? __pfx_kthread+0x10/0x10 [ 1559.018333][T20479] ret_from_fork+0x72b/0xd50 [ 1559.019937][T20479] ? __pfx_ret_from_fork+0x10/0x10 [ 1559.021587][T20479] ? __switch_to+0x800/0x10f0 [ 1559.023135][T20479] ? __pfx_kthread+0x10/0x10 [ 1559.024619][T20479] ret_from_fork_asm+0x1a/0x30 [ 1559.026190][T20479] [ 1559.027985][T20479] Kernel Offset: disabled [ 1559.029395][T20479] Rebooting in 86400 seconds..