last executing test programs: 2m13.019516258s ago: executing program 0 (id=1841): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400009c}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) unshare(0x2040400) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b15, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff0000000008000b0002000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) 2m9.917460838s ago: executing program 0 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = dup(r6) inotify_rm_watch(r8, r7) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) r9 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 2m8.949383103s ago: executing program 0 (id=1853): sched_setattr(0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 2m7.999522595s ago: executing program 0 (id=1855): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x330) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x50000, 0x0, 0x77, 0x40, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xf31a34b7ece83892, 0xf, 0xeb, 0x2, 0x0, 0x80, 0xff, 0x7, 0x0, 0x3}, {0x8080000, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x5, 0x1, 0x1, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xb, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xb000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x3, 0x0, 0x7, 0x20, 0x0, 0x1}, {0x5000, 0x6000, 0x10, 0x0, 0xa4, 0x7, 0x8, 0xc, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x204, 0x8000000000000, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m7.143105129s ago: executing program 0 (id=1859): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 2m4.18907073s ago: executing program 0 (id=1866): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 1m48.995637101s ago: executing program 32 (id=1866): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 1m39.739323518s ago: executing program 2 (id=1914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = dup(r5) inotify_rm_watch(r7, r6) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r10, &(0x7f0000000200), 0xfffffd9d) 1m37.637731159s ago: executing program 2 (id=1921): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = dup(r5) inotify_rm_watch(r7, r6) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r10, &(0x7f0000000200), 0xfffffd9d) 1m36.39059343s ago: executing program 2 (id=1924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m35.033069296s ago: executing program 2 (id=1928): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) syz_80211_inject_frame(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050"], 0x36) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1m33.218701792s ago: executing program 2 (id=1933): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400009c}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) unshare(0x2040400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b15, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff0000000008000b0002000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) 1m30.135029837s ago: executing program 2 (id=1941): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b4000000000090001007379"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 1m15.139139721s ago: executing program 33 (id=1941): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b4000000000090001007379"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 42.158906538s ago: executing program 4 (id=2041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = dup(r6) inotify_rm_watch(r8, r7) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) r9 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 41.228809035s ago: executing program 4 (id=2044): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400009c}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) unshare(0x2040400) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b15, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff0000000008000b0002000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) 38.213934751s ago: executing program 4 (id=2053): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, 0x0, 0x20008040) r8 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 36.806114918s ago: executing program 4 (id=2064): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, 0x0, 0x20008040) r8 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 35.774669806s ago: executing program 4 (id=2058): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = dup(r6) inotify_rm_watch(r8, r7) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) r9 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 33.852785272s ago: executing program 4 (id=2071): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b4000000000090001007379"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 17.773908994s ago: executing program 34 (id=2071): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b4000000000090001007379"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 17.771856424s ago: executing program 5 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r10 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 12.706871694s ago: executing program 5 (id=2093): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x330) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x50000, 0x0, 0x77, 0x40, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xf31a34b7ece83892, 0xf, 0xeb, 0x2, 0x0, 0x80, 0xff, 0x7, 0x0, 0x3}, {0x8080000, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x5, 0x1, 0x1, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xb, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xb000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x3, 0x0, 0x7, 0x20, 0x0, 0x1}, {0x5000, 0x6000, 0x10, 0x0, 0xa4, 0x7, 0x8, 0xc, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x204, 0x8000000000000, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 12.539131715s ago: executing program 6 (id=2087): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x2) fcntl$notify(r3, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x1, r2, 0x5}) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000e40)={r5, 0x4, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0x4, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc1418020000008000", [0xfffffffffffffce6, 0xa]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @exit]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x56, &(0x7f0000000c40)=""/86, 0x41100, 0x20, '\x00', 0x0, @fallback=0x35, r0, 0x8, &(0x7f0000000cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x9, 0x18000, 0x3000000}, 0x10, 0x0, r7, 0x1, 0x0, &(0x7f0000000d40)=[{0x1, 0x1, 0x7, 0x4}], 0x10, 0x7fff}, 0x94) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000840)={"b9a266826d5e449bd395f275c08467fb12fea947a7c8731361af143afa62a6ecb72534fbaf18d5357cab0a4ad05aa5450f4cff013ba8d01d755231513e41e23438395ee5e0044d720df50103934e5479a2a9dd05900fcedd99a6ed10c522ab971168860a0986ff7970af10c9b1e155af35029189e0aa76a16efde34799ca4ee794f0da54a17af9ae3556a19d427a6d2dc897b52f25e7e1c263b063816cd69f08f85b503f2e6909d550644ab011c8f579e21e50812a1b41247632de06fd1d68c1b5b6dfd6a3968c953240227a3ca8d11e1b0b7af2167b9c25c859daf4c31cebfeb17a1a54cdb3c31b885005db60b11e51d0e3269c9a9ce7d1ca15c188dbef552d18fb1f6b75906a4f311dfd4773788e56e0fcb63256eeb228663acbac8831a61b47a04e3dff20e60a90b667a615639e433226f419d6faf92ec79b695b4b36776cc95af54fc6a1cdad186253e2eef2b434a5f1b9ec9c184014cd3c20ca85e141025faba76c27e7d53793355704fa1da07bb89e064038de041437409b948c5d861d9adc49c06b4772c063d42d17898e1a3a71e67bd0f0a2a31ec0859c1f0b2ab86ad742b9bb66c3b5481cfcb77ce0fc3d6d82ed570c36acf420c389ec7d3179598c688311660f202346e318a3d7e50ddd343741e812c17d158e53c8c4e14badf2693d63b686a1925fa9025a36e2f586e864217d19974365c7b0543f9256ecd2657fb655c0756fb7f05da16acd38f0318ddd201632b699a8e58d585264c1899cff04d5dbecc724fb45343bc812194847b69adeb863b9d1ead784582780bdcf1ff5ec43b7b321cd728eee150b15eaa3e9ad5d523b9c5331a432f8f33f7cfbe345556ed70c73274be1b414aabfb2e04fecdd530009f34e349afb37e6a8705167a00957a1ed9ab6580e1481bf428a6bee31a2956a9ade84683b64e81295266c596bc25274d0cb5cd43e15b114c1892f6e5fa35b14b44849ca35a14fee090c7d9f8b944ed609f86193352564cfd4529e5f87298e8ef90df11085c29143c75f3ca134f571241296898cba2c4be4f565075bb8dbbb00f392db6e8354c25966dca2b9958ee1bf71bc47004d3a17149ff0a41ee14b489d06d7eb90b0db678f7f71ca5559f2439300ecd64d253e18ce7acca0695bbb1a0f4fcd0242c1210d8d16bcd63633466814f90c316d94065fd55d02e16fed71c6cf69544dbeb5435903d694f0d9f917c55871a611e39cf36416f187f074729b366a8e3eca15fd091a4e756b3a11f50724f44f47f26e1ba58bed4e4e85b405e43c7e960670b1513cdc1c299dd6a2669e6bef5feaa52635e97c4a6678155f0da068432ebc67751553e2ee348b0e11af620307bb217031a06c3484460e079b3f074cecdd49303f98495da46b68dffbe5a4c46bd8ba79398346266671dee8cbbb6e6757a0e2862c30d9ecd0811470311423b2"}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 12.538855215s ago: executing program 1 (id=2100): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) ioprio_set$uid(0x3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) r5 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) io_uring_enter(r5, 0x0, 0x200002, 0x1f, &(0x7f0000000000)={[0x0, 0x4]}, 0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0xa068}}, './file0\x00'}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0xd0, 0x0, 0x405, 0x70fd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 12.536818562s ago: executing program 3 (id=2101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = dup(r6) inotify_rm_watch(r8, r7) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) r9 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 12.118104507s ago: executing program 5 (id=2094): r0 = io_uring_setup(0x27a4, &(0x7f0000000340)={0x0, 0x1f8a, 0x40000, 0x6, 0x28c}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49', 0xb) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c000280080003000300000079f1446cd29b00c10ff4adb688fb5f2cf5d33688b1e3ecd3cfc76be822822687eb56c7a871d77614f1ac4aebe3dd441ff9e2a19e37cac7926b199e8e3e8ebf0ff875f974cef548916c5efa42c93d06ffabd85c7e2c02843071e7b8a970f5cdb40c092b9c8e80bd3c97cadab864fc53032ddb90759fc7302f69f2efdec9e96cce5153a82ed044575cf0ae7b8880bb059e0751fa4c326e0c8a7eab4fa69fe14f9b192d0146940b2c6140ec7af52dd2aa6b38083e1180932a47fed8f587a0c19d367a5e7d77698776603384aef783eb5a1d78dd8737d3d200b55444de17a99573dee54e3a84f3d393f001cebf475f6735b8eb"], 0x3c}}, 0x54) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) 10.685927467s ago: executing program 6 (id=2095): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x330) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x50000, 0x0, 0x77, 0x40, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xf31a34b7ece83892, 0xf, 0xeb, 0x2, 0x0, 0x80, 0xff, 0x7, 0x0, 0x3}, {0x8080000, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x5, 0x1, 0x1, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xb, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xb000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x3, 0x0, 0x7, 0x20, 0x0, 0x1}, {0x5000, 0x6000, 0x10, 0x0, 0xa4, 0x7, 0x8, 0xc, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x204, 0x8000000000000, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 8.728799776s ago: executing program 3 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000eee86f0b4613dee20080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000200000000000000001811000086e9d0ce5ff978498dff1e204a9cd11a4c353ea8c22f04fe57a6f8adfb3f81176090fd42", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = dup(r6) inotify_rm_watch(r8, r7) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) r9 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @local}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 7.695468397s ago: executing program 3 (id=2097): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) unshare(0x2040400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b15, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff0000000008000b0002000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) 7.538588058s ago: executing program 1 (id=2098): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0x7) 7.454715648s ago: executing program 5 (id=2099): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x52dd9000) r4 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000000)={0x5, 0x9}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x122a000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r5, 0xc0606610, &(0x7f0000000040)=0x60) 7.448911528s ago: executing program 6 (id=2102): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) unshare(0x2040400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b15, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff0000000008000b0002000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) 4.22041794s ago: executing program 6 (id=2103): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 4.220172195s ago: executing program 1 (id=2104): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x330) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x50000, 0x0, 0x77, 0x40, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xf31a34b7ece83892, 0xf, 0xeb, 0x2, 0x0, 0x80, 0xff, 0x7, 0x0, 0x3}, {0x8080000, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x5, 0x1, 0x1, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xb, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xb000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x3, 0x0, 0x7, 0x20, 0x0, 0x1}, {0x5000, 0x6000, 0x10, 0x0, 0xa4, 0x7, 0x8, 0xc, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x204, 0x8000000000000, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.219902681s ago: executing program 5 (id=2105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x20000, 0x0, 0x20002f7}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f, 0x8000}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg(r4, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd648", 0x4d}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000800)=[{0xc0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x2c, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf4, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0x98, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x50, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x3c, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0xc, 0x108, 0x8fa}], 0x310}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[@ANYBLOB="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"], 0x5bec}}, 0x48010) 4.219621167s ago: executing program 3 (id=2106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8, r0}, 0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "ff1a0636d779eea4", "5e7067dcb7e2ffa7aa84b0566d971cfd", "2d1197d8", "fa8042b72c9ae9ff"}, 0x28) modify_ldt$write(0x1, &(0x7f0000000500)={0x38, 0x0, 0x600}, 0x10) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0xff93, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/196, 0xc4, 0x0, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) getsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000400), &(0x7f0000000540)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) 2.700987808s ago: executing program 3 (id=2107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x20000, 0x0, 0x20002f7}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f, 0x8000}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x40814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg(r4, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd648", 0x4d}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000800)=[{0xc0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x2c, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf4, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0x98, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x50, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x3c, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0xc, 0x108, 0x8fa}], 0x310}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[@ANYBLOB="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"], 0x5bec}}, 0x48010) 2.345193506s ago: executing program 1 (id=2108): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x800e34, 0x173e, 0xfffffffffffffffc, 0x400010003, 0x1, 0x1000, 0x1000000000008, 0x7d, 0x0, 0x8000000000, 0xc, 0x2, 0x1, 0x2000000000001, 0x4], 0xeeee0000, 0x304685}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000001980)={0x4, 0x0, [{0x5, 0x1000, &(0x7f0000000980)=""/4096}, {0x8186000, 0x9a, &(0x7f00000000c0)=""/154}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r10, 0xaf02, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x1, 0x3, 0x1, 0x3}}, 0x26) r11 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000180)=0x57bb, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 1.915993118s ago: executing program 6 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) 1.825575276s ago: executing program 1 (id=2110): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x330) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x50000, 0x0, 0x77, 0x40, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0xf31a34b7ece83892, 0xf, 0xeb, 0x2, 0x0, 0x80, 0xff, 0x7, 0x0, 0x3}, {0x8080000, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x5, 0x1, 0x1, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xb, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xb000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x3, 0x0, 0x7, 0x20, 0x0, 0x1}, {0x5000, 0x6000, 0x10, 0x0, 0xa4, 0x7, 0x8, 0xc, 0x24, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x204, 0x8000000000000, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.410277112s ago: executing program 3 (id=2111): r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe000000007203"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r1, &(0x7f00000001c0)="4abb09e698", 0x5, 0x40004, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r7, r5, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x4764, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 698.303873ms ago: executing program 5 (id=2112): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c8551b880c0ac56cb2a58b7da498a70452043bbe00"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r8, 0x708, 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 0s ago: executing program 1 (id=2113): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) syz_usb_disconnect(r4) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0x12b}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) kernel console output (not intermixed with test programs): nt [ 736.693534][ T2510] pvrusb2: Invalid write control endpoint [ 736.697265][ T2510] pvrusb2: Invalid write control endpoint [ 736.699158][ T2510] pvrusb2: Invalid write control endpoint [ 736.702119][ T2510] pvrusb2: Invalid write control endpoint [ 736.704035][ T2510] pvrusb2: Invalid write control endpoint [ 736.705967][ T2510] pvrusb2: Invalid write control endpoint [ 736.707968][ T2510] pvrusb2: Invalid write control endpoint [ 736.710026][ T2510] pvrusb2: Invalid write control endpoint [ 736.713999][ T2510] pvrusb2: Attached sub-driver cs53l32a [ 736.735856][ T2510] pvrusb2: Invalid write control endpoint [ 736.737799][ T2510] pvrusb2: Invalid write control endpoint [ 736.746251][ T2510] pvrusb2: Invalid write control endpoint [ 736.748097][ T2510] pvrusb2: Invalid write control endpoint [ 736.750347][ T2510] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 736.756167][ T2510] pvrusb2: Device being rendered inoperable [ 736.758003][ T2510] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 736.762486][ T2510] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 736.811774][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 736.817491][ T5883] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.823519][ T5883] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 736.827050][ T5883] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.831100][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.835870][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.839963][ T5883] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.846213][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.061933][ T5883] usb 6-1: usb_control_msg returned -32 [ 737.066598][ T5883] usbtmc 6-1:16.0: can't read capabilities [ 737.342356][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.391888][ T5839] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 737.441071][T15086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1789'. [ 737.541868][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 737.544176][ T5839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.549460][ T5839] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 737.553748][ T5839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.557718][ T5839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.562896][ T5839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.566984][ T5839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.571148][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.780189][ T5839] usb 7-1: usb_control_msg returned -32 [ 737.783016][ T5839] usbtmc 7-1:16.0: can't read capabilities [ 738.061776][ T24] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 738.135607][T15082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 738.211827][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 738.214019][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 738.222611][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 738.227648][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 738.231553][T15094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.234048][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 738.241740][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 738.251730][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.258215][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.277643][T15094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 738.342691][T15093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.382468][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.474315][ T24] usb 8-1: usb_control_msg returned -32 [ 738.478971][ T24] usbtmc 8-1:16.0: can't read capabilities [ 738.830712][T15091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1793'. [ 739.182232][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.347419][ T5839] usb 6-1: USB disconnect, device number 27 [ 739.422029][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.778659][T15110] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1798'. [ 739.784703][T15110] gretap0: entered promiscuous mode [ 739.803393][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.808561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.815888][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.830677][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.839106][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.846133][T15110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.891158][T15110] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1798'. [ 739.895735][T15110] 0ªî{X¹¦: renamed from gretap0 [ 739.900369][T15110] 0ªî{X¹¦: left promiscuous mode [ 739.902778][T15110] 0ªî{X¹¦: entered allmulticast mode [ 740.088171][ T5839] usb 7-1: USB disconnect, device number 31 [ 740.770190][ T5883] usb 8-1: USB disconnect, device number 32 [ 740.939319][T15129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.095751][T15130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 741.524409][T15128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.662685][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 742.691814][ T34] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 742.851775][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 742.856030][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.862975][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 742.867977][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.875950][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.882744][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.888245][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.897667][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.021992][ T5883] net_ratelimit: 12 callbacks suppressed [ 743.022011][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.118493][ T34] usb 6-1: usb_control_msg returned -32 [ 743.122776][ T34] usbtmc 6-1:16.0: can't read capabilities [ 743.251784][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 743.401799][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 743.406389][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 743.413886][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 743.421395][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.430609][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.439536][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.447216][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.471740][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.473681][T15150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1807'. [ 743.683957][ T24] usb 8-1: usb_control_msg returned -32 [ 743.686359][ T24] usbtmc 8-1:16.0: can't read capabilities [ 743.696095][ T42] audit: type=1804 audit(1786346548.526:1293): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1810" name="/newroot/460/file0/bus" dev="9p" ino=77886043 res=1 errno=0 [ 744.042889][T15157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1808'. [ 744.062382][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.102271][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.166107][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.261521][T15178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 745.262431][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.369107][ T5839] usb 6-1: USB disconnect, device number 28 [ 745.436289][T15183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.473982][T15183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 745.535417][T15182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.005218][ T5839] usb 8-1: USB disconnect, device number 33 [ 746.142072][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.277388][T15198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.283587][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 746.783644][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.786899][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.790107][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.793847][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.793899][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.800875][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.804891][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.807671][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.826195][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.182330][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.602785][T15216] lo speed is unknown, defaulting to 1000 [ 747.691776][ T5839] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 747.862072][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 747.867381][ T5839] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 747.878513][ T5839] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 747.883884][ T5839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.894851][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.904146][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 747.915479][ T5839] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.927017][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.160084][ T5839] usb 6-1: usb_control_msg returned -32 [ 748.165481][ T5839] usbtmc 6-1:16.0: can't read capabilities [ 748.233867][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.302275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.525122][T15225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1820'. [ 748.922297][ T5883] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 749.051759][ T60] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 749.081746][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 749.083922][ T5883] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 749.088813][ T5883] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 749.091424][ T5883] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.097124][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.103468][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.109424][ T5883] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.118861][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.221945][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 749.225390][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 749.233093][ T60] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 749.238635][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.248637][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.251762][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.258133][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.262647][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.271214][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.330998][ T5883] usb 8-1: usb_control_msg returned -32 [ 749.335715][ T5883] usbtmc 8-1:16.0: can't read capabilities [ 749.483164][ T60] usb 7-1: usb_control_msg returned -32 [ 749.487838][ T60] usbtmc 7-1:16.0: can't read capabilities [ 749.688188][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1822'. [ 749.694753][T15242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.748731][T15242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 749.838565][T15238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1824'. [ 750.302340][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.360444][T15247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.417411][T15247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 750.438252][ T5839] usb 6-1: USB disconnect, device number 29 [ 750.487804][T15246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.623632][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.342188][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.345490][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.624874][ T1034] usb 8-1: USB disconnect, device number 34 [ 751.766141][ T60] usb 7-1: USB disconnect, device number 32 [ 751.903233][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 751.906425][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 751.909588][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 751.912832][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 751.915999][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 752.246998][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 752.382278][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.153423][T15282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.232368][T15282] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 753.422750][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.478635][T15290] lo speed is unknown, defaulting to 1000 [ 753.691872][ T1034] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 753.851748][ T1034] usb 6-1: Using ep0 maxpacket: 8 [ 753.853916][ T1034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 753.857784][ T1034] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 753.860379][ T1034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.863453][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 753.866454][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.869629][ T1034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.873736][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.893909][T15295] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 753.896400][T15295] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1837'. [ 754.382637][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.464853][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.515127][ T1034] usb 6-1: usb_control_msg returned -32 [ 754.517069][ T1034] usbtmc 6-1:16.0: can't read capabilities [ 754.833483][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1835'. [ 754.909687][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.914638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.975188][T15301] ehci-pci 0000:00:1d.7: remove, state 1 [ 754.977558][T15301] usb usb2: USB disconnect, device number 1 [ 754.979440][T15301] usb 2-1: USB disconnect, device number 2 [ 755.029860][T15301] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 755.512014][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.717089][T15296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.720832][T15296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 755.734046][T15296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 755.788351][T15309] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 755.808550][T15309] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 755.817183][T15309] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 755.832136][T15309] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 755.836062][T15309] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 755.847158][T15309] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 755.850673][T15309] usb usb2: Product: EHCI Host Controller [ 755.853713][T15309] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 755.856803][T15309] usb usb2: SerialNumber: 0000:00:1d.7 [ 755.879838][T15309] hub 2-0:1.0: USB hub found [ 755.882764][T15309] hub 2-0:1.0: 6 ports detected [ 755.962478][T15309] hub 1-0:1.0: USB hub found [ 755.970630][T15309] hub 1-0:1.0: 2 ports detected [ 756.066744][T15309] hub 3-0:1.0: USB hub found [ 756.100549][T15309] hub 3-0:1.0: 2 ports detected [ 756.140757][T15296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.144759][T15296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 756.148167][T15296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 756.181991][ T60] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 756.193001][T15309] hub 4-0:1.0: USB hub found [ 756.198008][T15309] hub 4-0:1.0: 2 ports detected [ 756.276578][T15296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.287717][T15296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 756.297419][T15296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 756.372426][ T60] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 756.389186][ T60] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 756.392173][ T60] usb 2-1: Product: QEMU USB Tablet [ 756.395864][ T60] usb 2-1: Manufacturer: QEMU [ 756.397685][ T60] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 756.413179][ T1034] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 756.435399][T15240] usb 6-1: USB disconnect, device number 30 [ 756.472563][ T60] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input21 [ 756.489365][T15296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.497834][T15296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 756.502830][T15296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 756.542797][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.557743][ T60] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 756.572873][ T1034] usb 5-1: Using ep0 maxpacket: 8 [ 756.578738][ T1034] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 756.594371][ T1034] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 756.609107][ T1034] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.622753][ T1034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.628041][ T1034] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.637375][ T1034] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.657560][ T1034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.762157][ T5855] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 756.768663][ T5855] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.783242][ T5855] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 756.877056][ T5855] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 756.886274][ T5855] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.891385][ T1034] usb 5-1: usb_control_msg returned -32 [ 756.899420][ T1034] usbtmc 5-1:16.0: can't read capabilities [ 756.912279][ T5855] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 756.915079][ T5855] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 756.931737][ T5855] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.935403][ T5855] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 756.938108][ T5855] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 756.940726][ T5855] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.953889][ T5855] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 757.023821][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 757.027351][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 757.030607][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 757.268604][T15319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1841'. [ 757.352161][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 757.423148][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.531524][T15331] lo speed is unknown, defaulting to 1000 [ 757.581879][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.662351][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 758.400694][T15343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.445114][T15343] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 758.631919][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.742845][T15352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 758.745095][T15352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.753135][T15352] vhci_hcd vhci_hcd.0: Device attached [ 759.031875][ T60] usb 42-1: SetAddress Request (14) to port 0 [ 759.034004][ T60] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 759.150071][T14700] usb 5-1: USB disconnect, device number 27 [ 759.447089][T15353] vhci_hcd: connection reset by peer [ 759.449347][T12222] vhci_hcd vhci_hcd.2: stop threads [ 759.451286][T12222] vhci_hcd vhci_hcd.2: release socket [ 759.454002][T12222] vhci_hcd vhci_hcd.2: disconnect device [ 759.537260][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 759.722440][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.728503][T15368] lo speed is unknown, defaulting to 1000 [ 760.040279][T15371] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1851'. [ 760.056016][T15371] gretap0: entered promiscuous mode [ 760.209649][T15376] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1851'. [ 760.222116][T15376] 0ªî{X¹¦: renamed from gretap0 [ 760.224907][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.275517][T15376] 0ªî{X¹¦: left promiscuous mode [ 760.280418][T15376] 0ªî{X¹¦: entered allmulticast mode [ 760.295170][T15376] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 760.462809][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.597833][T15382] input: syz0 as /devices/virtual/input/input22 [ 760.782867][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.147094][T15388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.222163][T15388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 761.455598][T15387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.486908][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 761.502231][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 761.717956][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.719112][T15401] lo speed is unknown, defaulting to 1000 [ 761.770934][T15398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 761.821976][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.002094][T15406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.044285][T15406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 762.142955][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 762.146952][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 762.150761][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 762.154829][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 762.602193][T15240] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 762.788769][T15240] usb 7-1: Using ep0 maxpacket: 8 [ 762.804473][T15240] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 762.880750][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.900740][T15240] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.971741][T15240] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.041080][T15240] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.116755][T15240] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.186708][T15240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.422430][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 763.512191][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.678711][T15240] usb 7-1: GET_CAPABILITIES returned 0 [ 763.682764][T15240] usbtmc 7-1:16.0: can't read capabilities [ 763.901950][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.075624][ T60] usb 42-1: device descriptor read/8, error -110 [ 764.493781][ T60] usb usb42-port1: attempt power cycle [ 764.873178][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 764.942035][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.084764][ T60] usb usb42-port1: unable to enumerate USB device [ 765.223171][T14993] usb 7-1: USB disconnect, device number 33 [ 765.376854][T15449] MTDSB: Device #1 doesn't appear to exist [ 765.376854][T15449] [ 765.491519][T15446] ftl_cs: FTL header not found. [ 765.619306][T15446] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 765.831141][T15448] lo speed is unknown, defaulting to 1000 [ 765.982327][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.094436][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 766.266893][T15463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.364317][T15463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 766.513674][T15462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.525194][T15468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.542879][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.566788][T15468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 766.622392][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 766.671812][T15471] lo speed is unknown, defaulting to 1000 [ 767.032090][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.262632][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 767.907144][T15476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.071963][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.741710][ C3] sched: DL replenish lagged too much [ 768.822211][T14993] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 768.895251][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 768.899240][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 769.402447][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.641746][T14993] usb 8-1: Using ep0 maxpacket: 8 [ 769.680322][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.684384][T14993] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.689159][T14993] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 769.691866][T14993] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.695160][T14993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.700979][T14993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.706810][T14993] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.711953][T14993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.822454][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 769.928744][T14993] usb 8-1: usb_control_msg returned -32 [ 769.933667][T14993] usbtmc 8-1:16.0: can't read capabilities [ 770.022902][T14993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.291141][T15498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1875'. [ 770.453374][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 770.462038][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.643800][T15518] lo speed is unknown, defaulting to 1000 [ 771.502145][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.549341][ T1034] usb 8-1: USB disconnect, device number 35 [ 771.915697][T15528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.040748][T15530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 772.357301][T15532] set match dimension is over the limit! [ 772.386673][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.389805][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.393095][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.396485][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.400441][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.404664][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 772.652833][T15527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.113204][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.115788][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.142201][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.220632][T15541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.542088][ T1034] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 774.711883][ T1034] usb 6-1: Using ep0 maxpacket: 8 [ 774.714880][ T1034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.719884][ T1034] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 774.723790][ T1034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.727825][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.732968][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.737016][ T1034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.742261][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.954890][ T1034] usb 6-1: usb_control_msg returned -32 [ 774.956765][ T1034] usbtmc 6-1:16.0: can't read capabilities [ 775.182008][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.340258][T15563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1886'. [ 776.247606][T15561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.271840][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.369068][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 776.462886][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.678595][T15575] lo speed is unknown, defaulting to 1000 [ 777.337020][T15240] usb 6-1: USB disconnect, device number 31 [ 777.460329][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.501648][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 777.504278][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.509830][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.513877][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.518097][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.521793][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.525035][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 778.473586][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.931623][T15587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.051038][T15587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 779.432372][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.466191][T15586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.590176][T15593] warn_alloc: 1 callbacks suppressed [ 779.590189][T15593] syz.2.1894: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 779.599838][T15593] CPU: 1 UID: 0 PID: 15593 Comm: syz.2.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.599860][T15593] Tainted: [L]=SOFTLOCKUP [ 779.599865][T15593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.599873][T15593] Call Trace: [ 779.599878][T15593] [ 779.599883][T15593] dump_stack_lvl+0x100/0x190 [ 779.599954][T15593] warn_alloc.cold+0x94/0xa8 [ 779.599976][T15593] ? __pfx_warn_alloc+0x10/0x10 [ 779.600010][T15593] ? kasan_save_stack+0x3f/0x50 [ 779.600027][T15593] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 779.600041][T15593] ? xskq_create+0x52/0x1d0 [ 779.600059][T15593] ? xsk_setsockopt+0x743/0xab0 [ 779.600071][T15593] ? do_sock_setsockopt+0xf3/0x1d0 [ 779.600091][T15593] ? __sys_setsockopt+0x119/0x190 [ 779.600107][T15593] ? __ia32_sys_setsockopt+0xbc/0x160 [ 779.600123][T15593] ? __do_fast_syscall_32+0xe7/0x970 [ 779.600142][T15593] ? do_fast_syscall_32+0x32/0x70 [ 779.600162][T15593] ? xskq_create+0xfb/0x1d0 [ 779.600178][T15593] __vmalloc_node_range_noprof+0x136c/0x1630 [ 779.600202][T15593] ? xskq_create+0xfb/0x1d0 [ 779.600226][T15593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 779.600247][T15593] ? kasan_save_track+0x14/0x30 [ 779.600262][T15593] ? __kasan_kmalloc+0xaa/0xb0 [ 779.600279][T15593] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 779.600292][T15593] ? xskq_create+0xfb/0x1d0 [ 779.600307][T15593] vmalloc_user_noprof+0x9e/0xe0 [ 779.600325][T15593] ? xskq_create+0xfb/0x1d0 [ 779.600341][T15593] xskq_create+0xfb/0x1d0 [ 779.600358][T15593] xsk_setsockopt+0x743/0xab0 [ 779.600371][T15593] ? __pfx_aa_sk_perm+0x10/0x10 [ 779.600410][T15593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.600424][T15593] ? find_held_lock+0x2b/0x80 [ 779.600448][T15593] ? aa_sock_opt_perm+0xfe/0x1b0 [ 779.600461][T15593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.600477][T15593] do_sock_setsockopt+0xf3/0x1d0 [ 779.600496][T15593] __sys_setsockopt+0x119/0x190 [ 779.600514][T15593] __ia32_sys_setsockopt+0xbc/0x160 [ 779.600529][T15593] ? __do_fast_syscall_32+0x98/0x970 [ 779.600546][T15593] ? lockdep_hardirqs_on+0x78/0x100 [ 779.600563][T15593] __do_fast_syscall_32+0xe7/0x970 [ 779.600581][T15593] do_fast_syscall_32+0x32/0x70 [ 779.600598][T15593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.600613][T15593] RIP: 0023:0xf704efec [ 779.600630][T15593] Code: Unable to access opcode bytes at 0xf704efc2. [ 779.600641][T15593] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 779.600652][T15593] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 779.600660][T15593] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 779.600667][T15593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.600675][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.600681][T15593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.600696][T15593] [ 779.600708][T15593] Mem-Info: [ 779.633421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.702179][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.717866][T15593] active_anon:16849 inactive_anon:8353 isolated_anon:0 [ 779.717866][T15593] active_file:12319 inactive_file:15057 isolated_file:0 [ 779.717866][T15593] unevictable:2047 dirty:324 writeback:0 [ 779.717866][T15593] slab_reclaimable:7427 slab_unreclaimable:56413 [ 779.717866][T15593] mapped:29262 shmem:17360 pagetables:1386 [ 779.717866][T15593] sec_pagetables:310 bounce:0 [ 779.717866][T15593] kernel_misc_reclaimable:0 [ 779.717866][T15593] free:36745 free_pcp:12951 free_cma:0 [ 779.754192][T15593] Node 0 active_anon:152kB inactive_anon:40kB active_file:80kB inactive_file:72kB unevictable:280kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1356kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 779.772133][T15593] Node 1 active_anon:67244kB inactive_anon:33372kB active_file:49196kB inactive_file:60156kB unevictable:7908kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:1292kB writeback:0kB shmem:69440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5312kB pagetables:4188kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 779.784309][T15593] Node 0 DMA free:1932kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:60kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:128kB free_cma:0kB [ 779.794569][T15593] lowmem_reserve[]: 0 280 280 280 280 [ 779.796397][T15593] Node 0 DMA32 free:15672kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152kB inactive_anon:40kB active_file:4kB inactive_file:12kB unevictable:280kB writepending:4kB zspages:0kB present:1032196kB managed:287068kB mlocked:280kB bounce:0kB free_pcp:10244kB local_pcp:3964kB free_cma:0kB [ 779.809913][T15593] lowmem_reserve[]: 0 0 0 0 0 [ 779.812074][T15593] Node 1 DMA32 free:129376kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67244kB inactive_anon:33372kB active_file:49196kB inactive_file:60156kB unevictable:7908kB writepending:1292kB zspages:1844kB present:1048432kB managed:948212kB mlocked:7908kB bounce:0kB free_pcp:41084kB local_pcp:2596kB free_cma:0kB [ 779.825967][T15593] lowmem_reserve[]: 0 0 0 0 0 [ 779.828148][T15593] Node 0 DMA: 73*4kB (U) 5*8kB (U) 2*16kB (UM) 11*32kB (UM) 11*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1932kB [ 779.834030][T15593] Node 0 DMA32: 10*4kB (E) 42*8kB (UE) 18*16kB (E) 137*32kB (UE) 38*64kB (UME) 12*128kB (UE) 4*256kB (UE) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 15672kB [ 779.840588][T15593] Node 1 DMA32: 4*4kB (UME) 752*8kB (UME) 427*16kB (UME) 419*32kB (UME) 253*64kB (UME) 103*128kB (UME) 72*256kB (UME) 42*512kB (UME) 9*1024kB (UM) 4*2048kB (M) 4*4096kB (UM) = 129376kB [ 779.848467][T15593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 779.852322][T15593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 779.856199][T15593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 779.860343][T15593] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 779.864724][T15593] 43335 total pagecache pages [ 779.867048][T15593] 1102 pages in swap cache [ 779.869063][T15593] Free swap = 117748kB [ 779.870974][T15593] Total swap = 124996kB [ 779.872967][T15593] 524155 pages RAM [ 779.875073][T15593] 0 pages HighMem/MovableOnly [ 779.877489][T15593] 211495 pages reserved [ 779.879414][T15593] 0 pages cma reserved [ 780.592177][ T1034] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 780.702152][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.743596][ T1034] usb 6-1: Using ep0 maxpacket: 8 [ 780.745745][ T1034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.749686][ T1034] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 780.753463][ T1034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.756553][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.761648][ T1034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.771522][ T1034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.778135][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.833599][T14993] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 780.995225][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.003034][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.009193][T14993] usb 8-1: Using ep0 maxpacket: 8 [ 781.012270][ T1034] usb 6-1: usb_control_msg returned -32 [ 781.014051][ T1034] usbtmc 6-1:16.0: can't read capabilities [ 781.018059][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.023863][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.029174][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.040981][T14993] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 781.044892][T14993] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 781.047988][T14993] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.052351][T14993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.055526][T14993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 781.058725][T14993] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.062941][T14993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.067611][T15596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.273703][T14993] usb 8-1: usb_control_msg returned -32 [ 781.275528][T14993] usbtmc 8-1:16.0: can't read capabilities [ 781.318231][T15604] lo speed is unknown, defaulting to 1000 [ 781.368977][T15603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1897'. [ 781.569448][T15604] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.574065][T15604] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.577583][T15604] bridge_slave_0: entered allmulticast mode [ 781.582187][T15604] bridge_slave_0: entered promiscuous mode [ 781.587906][T15604] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.591455][T15604] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.595018][T15604] bridge_slave_1: entered allmulticast mode [ 781.615074][T15604] bridge_slave_1: entered promiscuous mode [ 781.644562][T15610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1898'. [ 781.701622][T15604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.718350][T15604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.746958][T15604] team0: Port device team_slave_0 added [ 781.752364][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.754044][T15604] team0: Port device team_slave_1 added [ 781.783943][T15604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.786584][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.801824][T15604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.809105][T15604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.813015][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.972327][T15604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.033390][T15604] hsr_slave_0: entered promiscuous mode [ 782.036732][T15604] hsr_slave_1: entered promiscuous mode [ 782.040330][T15604] debugfs: 'hsr0' already exists in 'hsr' [ 782.043214][T15604] Cannot create hsr debugfs directory [ 782.623207][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 782.627438][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 782.716429][T15631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.734839][T15604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 782.738639][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.739415][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.744790][T15604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 782.749082][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.753727][T15604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 782.843575][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.845187][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.850475][T15604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 782.855319][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.939420][T15604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.964926][T15604] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.974266][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.977470][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.989026][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.992064][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.101958][ T64] Bluetooth: hci4: command tx timeout [ 783.319165][T14993] usb 6-1: USB disconnect, device number 32 [ 783.514983][T15604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.527998][ T1034] usb 8-1: USB disconnect, device number 36 [ 783.868377][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 783.917683][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.122399][T15604] veth0_vlan: entered promiscuous mode [ 784.138606][T15604] veth1_vlan: entered promiscuous mode [ 784.280458][T15604] veth0_macvtap: entered promiscuous mode [ 784.318045][T15604] veth1_macvtap: entered promiscuous mode [ 784.329447][T15661] lo speed is unknown, defaulting to 1000 [ 784.502564][T15604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.512534][T15604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.579903][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.597997][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.667152][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.677219][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.705717][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.709675][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.722253][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.727115][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.888554][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.942254][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.958751][T15676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 785.192213][ T64] Bluetooth: hci4: command tx timeout [ 785.416321][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.933013][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.051626][T15692] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 786.072708][T15692] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1905'. [ 786.170310][T15696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 786.172866][T15696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 786.176515][T15696] vhci_hcd vhci_hcd.0: Device attached [ 786.442735][ T5883] usb 42-1: SetAddress Request (18) to port 0 [ 786.446227][ T5883] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 786.483780][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.632260][T15612] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 786.793289][T15612] usb 9-1: Using ep0 maxpacket: 8 [ 786.801991][T15612] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.813382][T15612] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 786.824244][T15612] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.829646][T15697] vhci_hcd: connection reset by peer [ 786.837303][ T5855] vhci_hcd vhci_hcd.2: stop threads [ 786.840919][ T5855] vhci_hcd vhci_hcd.2: release socket [ 786.841264][T15612] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.850541][ T5855] vhci_hcd vhci_hcd.2: disconnect device [ 786.860752][T15612] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.888808][T15612] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.904963][T15612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.124796][T15612] usb 9-1: usb_control_msg returned -32 [ 787.126922][T15612] usbtmc 9-1:16.0: can't read capabilities [ 787.367337][ T64] Bluetooth: hci4: command tx timeout [ 787.491367][T15707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1907'. [ 787.512116][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.743777][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 787.747414][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 787.751838][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 787.755628][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 787.759923][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 787.763379][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.348506][T15712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.542162][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.958078][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 789.034499][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.094703][T15730] veth3: entered allmulticast mode [ 789.094953][T15733] fuse: Bad value for 'fd' [ 789.154514][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.159225][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.160440][T15730] bond0: (slave veth3): Enslaving as an active interface with an up link [ 789.199804][T15732] bond0 (unregistering): (slave veth3): Releasing backup interface [ 789.205893][T15732] bond0 (unregistering): Released all slaves [ 789.283745][T15735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1913'. [ 789.335404][T15240] usb 9-1: USB disconnect, device number 2 [ 789.368455][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.375612][T14700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.432482][ T64] Bluetooth: hci4: command tx timeout [ 789.662363][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.662635][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.430394][T15749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.664606][T15754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 790.754099][T15747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.103678][T15763] Unable to extract alua_access_type [ 791.104215][ T42] audit: type=1800 audit(1786346595.946:1294): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1919" name="alua_access_type" dev="configfs" ino=63938 res=0 errno=0 [ 791.511409][ T5883] usb 42-1: device descriptor read/8, error -110 [ 791.746826][T15240] net_ratelimit: 1 callbacks suppressed [ 791.746842][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.965539][ T5883] usb usb42-port1: attempt power cycle [ 792.005828][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 792.393741][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.417993][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 792.421863][ T60] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 792.431151][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 792.551567][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 792.556259][ T5883] usb usb42-port1: unable to enumerate USB device [ 792.561062][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 792.581936][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 792.584346][ T60] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 792.589403][ T60] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 792.593039][ T60] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.597014][ T60] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.601041][ T60] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 792.605559][ T60] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.611076][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.634891][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 792.641211][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 792.792173][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.862535][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 792.865847][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 793.045735][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 793.048867][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 793.360583][T15784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1923'. [ 793.381790][T14737] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 793.408416][ T60] usb 9-1: usb_control_msg returned -32 [ 793.541918][T14737] usb 6-1: Using ep0 maxpacket: 8 [ 793.547274][T14737] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 793.555441][T14737] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 793.560323][T14737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.570161][T14737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.578317][T14737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 793.586057][T14737] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.596413][T14737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.687899][ T60] usbtmc 9-1:16.0: can't read capabilities [ 793.761551][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 793.771815][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 793.818816][T14737] usb 6-1: GET_CAPABILITIES returned 0 [ 793.821032][T14737] usbtmc 6-1:16.0: can't read capabilities [ 793.822212][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.931866][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.008115][T15811] input: syz0 as /devices/virtual/input/input23 [ 794.059447][T15794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1925'. [ 794.101491][ T13] dvmrp1: left allmulticast mode [ 794.142471][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 794.312455][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 794.467308][T15811] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 794.492053][ T5818] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.516256][ T5818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.522028][ T5818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.563546][ T13] tipc: Left network mode [ 794.576838][ T24] usb 6-1: USB disconnect, device number 33 [ 794.612636][ T13] IPVS: stopping master sync thread 8577 ... [ 794.759896][T15827] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 794.762471][T15827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.773167][T15827] vhci_hcd vhci_hcd.0: Device attached [ 795.043090][T15612] usb 9-1: USB disconnect, device number 3 [ 795.135120][T15812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.182142][T15841] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1931'. [ 795.261104][T15841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1931'. [ 795.488083][T14737] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 795.624504][ T13] veth1_macvtap: left promiscuous mode [ 795.626805][ T13] veth0_macvtap: left promiscuous mode [ 795.813041][T15829] vhci_hcd: connection closed [ 795.827680][ T5855] vhci_hcd vhci_hcd.1: stop threads [ 795.835240][ T5855] vhci_hcd vhci_hcd.1: release socket [ 795.839803][ T5855] vhci_hcd vhci_hcd.1: disconnect device [ 795.996125][T14737] usb 39-1: enqueue for inactive port 0 [ 796.099537][ T13] team0 (unregistering): Port device dummy0 removed [ 796.130931][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 796.281271][T15612] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 796.391865][T14737] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 796.432401][T15612] usb 7-1: Using ep0 maxpacket: 8 [ 796.434554][T15612] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.438485][T15612] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 796.444454][T15612] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.463087][T15612] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.466354][T15612] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.469624][T15612] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.474732][T15612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.479491][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 796.682874][T15612] usb 7-1: usb_control_msg returned -32 [ 796.689954][T15612] usbtmc 7-1:16.0: can't read capabilities [ 797.017060][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 797.031785][ T5739] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 797.048624][T15856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1933'. [ 797.201833][ T5739] usb 8-1: Using ep0 maxpacket: 8 [ 797.203993][ T5739] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.209999][ T5739] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 797.212788][ T5739] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.221712][ T5739] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.224854][ T5739] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.227952][ T5739] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.229199][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 797.241732][ T5739] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.454566][ T5739] usb 8-1: usb_control_msg returned -32 [ 797.459374][ T5739] usbtmc 8-1:16.0: can't read capabilities [ 797.520980][T15902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'. [ 797.864052][T15883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1936'. [ 797.985774][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 797.989084][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 797.992109][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 797.995299][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 797.998500][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 798.001775][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 798.004957][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 798.008124][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 798.213164][ T13] IPVS: stop unused estimator thread 0... [ 798.922898][ T24] usb 7-1: USB disconnect, device number 34 [ 799.354258][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 799.497365][T15951] lo speed is unknown, defaulting to 1000 [ 800.036988][ T60] usb 8-1: USB disconnect, device number 37 [ 800.754750][T15967] Cannot find set identified by id 2 to match [ 800.923764][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 800.929477][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 800.938176][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 800.943526][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 800.946431][T15967] ceph: No mds server is up or the cluster is laggy [ 802.021694][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 802.311918][T15979] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 802.314033][T15979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 802.317193][T15979] vhci_hcd vhci_hcd.0: Device attached [ 802.584320][T15240] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 803.456537][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 803.572018][T15981] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 803.574510][T15980] vhci_hcd: connection closed [ 803.752661][T15843] vhci_hcd vhci_hcd.4: stop threads [ 803.767907][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1945'. [ 803.783284][T15843] vhci_hcd vhci_hcd.4: release socket [ 803.788281][T15843] vhci_hcd vhci_hcd.4: disconnect device [ 803.872894][T15991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1947'. [ 803.883287][T15988] lo speed is unknown, defaulting to 1000 [ 804.355553][T15996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.394495][T15996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 804.440159][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 804.713698][T15995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.383387][T15612] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 806.541749][T15612] usb 9-1: Using ep0 maxpacket: 8 [ 806.546455][T15612] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 806.560681][T15612] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 806.569831][T15612] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 806.593004][T15612] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 806.601596][T15612] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 806.613410][T15612] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.626476][T15612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.846813][T15612] usb 9-1: usb_control_msg returned -32 [ 806.848657][T15612] usbtmc 9-1:16.0: can't read capabilities [ 807.204972][T16021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1953'. [ 807.741875][T15240] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 808.232831][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.273828][T16043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.325540][T16043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 808.543278][T16042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.097244][T15612] usb 9-1: USB disconnect, device number 4 [ 809.160629][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 809.300653][T16051] lo speed is unknown, defaulting to 1000 [ 809.412542][T15240] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 809.581998][T15240] usb 8-1: Using ep0 maxpacket: 32 [ 809.582008][T15612] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 809.588673][T15240] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 809.595747][T15240] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 809.601337][T15240] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 809.604137][T15240] usb 8-1: Product: syz [ 809.605552][T15240] usb 8-1: Manufacturer: syz [ 809.607207][T15240] usb 8-1: SerialNumber: syz [ 809.615322][T15240] usb 8-1: config 0 descriptor?? [ 809.617906][T16055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 809.621632][T15240] hub 8-1:0.0: bad descriptor, ignoring hub [ 809.624081][T15240] hub 8-1:0.0: probe with driver hub failed with error -5 [ 809.742267][T15612] usb 9-1: Using ep0 maxpacket: 8 [ 809.745290][T15612] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 809.767431][T15612] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.770787][T15612] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 809.778017][T15612] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 809.794561][T15612] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 809.798411][T15612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.828832][T15612] hub 9-1:1.0: bad descriptor, ignoring hub [ 809.830770][T15612] hub 9-1:1.0: probe with driver hub failed with error -5 [ 809.833704][T15612] cdc_wdm 9-1:1.0: skipping garbage [ 809.835369][T15612] cdc_wdm 9-1:1.0: skipping garbage [ 809.838876][T15612] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 809.840770][T15612] cdc_wdm 9-1:1.0: Unknown control protocol [ 810.011838][T15240] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 810.205811][T15240] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 810.220330][T15240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.272699][T16055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.368184][T16055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.672149][T15612] usb 9-1: USB disconnect, device number 5 [ 812.931991][T15612] usb 8-1: USB disconnect, device number 38 [ 813.111854][T16066] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 813.445200][T15612] usb 6-1: USB disconnect, device number 34 [ 813.448762][ T64] Bluetooth: hci3: Reading Intel version command failed (-71) [ 814.265215][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.282337][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.289652][T16118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.300421][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.311296][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.314682][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.437587][T16123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 814.487397][T16126] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 814.490088][T16126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 814.511897][T16126] vhci_hcd vhci_hcd.0: Device attached [ 814.582811][T16117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.830966][ T5883] usb 40-1: SetAddress Request (10) to port 0 [ 814.899681][ T5883] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 814.988539][T16116] lo speed is unknown, defaulting to 1000 [ 815.456104][T16149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.527001][T16149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.558782][T16116] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.581586][T16116] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.597837][T16116] bridge_slave_0: entered allmulticast mode [ 815.601070][T16128] vhci_hcd: connection reset by peer [ 815.612327][T15843] vhci_hcd vhci_hcd.1: stop threads [ 815.614038][T15843] vhci_hcd vhci_hcd.1: release socket [ 815.619912][T15843] vhci_hcd vhci_hcd.1: disconnect device [ 815.622229][T16116] bridge_slave_0: entered promiscuous mode [ 815.626069][T16116] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.628622][T16116] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.631040][T16116] bridge_slave_1: entered allmulticast mode [ 815.633854][T16116] bridge_slave_1: entered promiscuous mode [ 815.649339][T16116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.654646][T16116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.669310][T16116] team0: Port device team_slave_0 added [ 815.673104][T16116] team0: Port device team_slave_1 added [ 815.686640][T16116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.688857][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.698728][T16116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.704625][T16116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.707426][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.717935][T16116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.757370][T16116] hsr_slave_0: entered promiscuous mode [ 815.760299][T16116] hsr_slave_1: entered promiscuous mode [ 815.763157][T16116] debugfs: 'hsr0' already exists in 'hsr' [ 815.765380][T16116] Cannot create hsr debugfs directory [ 815.877921][T16116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 815.882431][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.885264][T16116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 815.890223][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.893214][T16116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 815.898404][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.901453][T16116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 815.909211][T16116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.925959][T16116] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.928349][T16116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.930846][T16116] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.933126][T16116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.986112][T16116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.999304][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.002396][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.014614][T16116] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.023653][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.026833][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.035322][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.038238][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.369639][T16116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.381967][ T5735] Bluetooth: hci3: command tx timeout [ 816.552254][T15314] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 816.559810][T16177] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 816.783652][T15314] usb 6-1: Using ep0 maxpacket: 8 [ 816.797407][T16177] bond3: entered promiscuous mode [ 816.842143][T15314] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 817.001171][T15314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.009618][T15314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 817.038127][T15314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 817.073888][T15314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 817.092801][T15314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.173204][T15314] hub 6-1:1.0: bad descriptor, ignoring hub [ 817.246753][T15314] hub 6-1:1.0: probe with driver hub failed with error -5 [ 817.293148][T15314] cdc_wdm 6-1:1.0: skipping garbage [ 817.310107][T15314] cdc_wdm 6-1:1.0: skipping garbage [ 817.404137][T15314] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 817.420341][T15314] cdc_wdm 6-1:1.0: Unknown control protocol [ 818.462101][ T5735] Bluetooth: hci3: command tx timeout [ 819.502269][T15612] usb 6-1: USB disconnect, device number 35 [ 819.752342][ T42] audit: type=1326 audit(1786346624.276:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 820.062641][ T5883] usb 40-1: device descriptor read/8, error -110 [ 820.542434][ T5735] Bluetooth: hci3: command tx timeout [ 820.649409][ T5883] usb usb40-port1: attempt power cycle [ 821.012733][ T42] audit: type=1326 audit(1786346624.276:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.029639][ T42] audit: type=1326 audit(1786346624.286:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.043095][ T42] audit: type=1326 audit(1786346624.286:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.056787][ T42] audit: type=1326 audit(1786346624.296:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.072204][ T42] audit: type=1326 audit(1786346624.296:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.087416][ T42] audit: type=1326 audit(1786346624.296:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.109110][ T42] audit: type=1326 audit(1786346624.296:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.116248][ T42] audit: type=1326 audit(1786346624.296:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.124064][ T42] audit: type=1326 audit(1786346624.306:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf707efec code=0x7ffc0000 [ 821.135747][T16116] veth0_vlan: entered promiscuous mode [ 821.155403][T16116] veth1_vlan: entered promiscuous mode [ 821.190196][T16116] veth0_macvtap: entered promiscuous mode [ 821.201540][T16116] veth1_macvtap: entered promiscuous mode [ 821.239257][T16116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.266585][T16116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.292616][ T5883] usb usb40-port1: unable to enumerate USB device [ 821.397315][T15809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.409201][T15809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.416547][T15809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.434854][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.438593][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.468394][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.472867][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.504284][ T5855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.676058][ T5735] Bluetooth: hci3: command tx timeout [ 822.681315][T15314] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 822.888206][T15314] usb 8-1: Using ep0 maxpacket: 8 [ 822.893925][T15314] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.952217][T15314] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 823.097242][T15314] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 823.105930][T15314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 823.124852][T15314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 823.139812][T15314] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.162689][T15314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.493681][T16225] xt_connbytes: Forcing CT accounting to be enabled [ 823.496139][T16225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 823.532049][ T60] libceph: connect (1)[c::]:6789 error -101 [ 823.542321][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 823.560060][T15314] usb 8-1: usb_control_msg returned -32 [ 823.561914][T15314] usbtmc 8-1:16.0: can't read capabilities [ 823.576287][T16225] ceph: No mds server is up or the cluster is laggy [ 823.656844][T16230] netlink: 'syz.5.1983': attribute type 1 has an invalid length. [ 823.659626][T16230] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1983'. [ 823.665021][T16230] netlink: 'syz.5.1983': attribute type 1 has an invalid length. [ 823.667621][T16230] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1983'. [ 823.674660][T16230] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1983'. [ 823.922397][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1980'. [ 824.147474][T16238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.156365][T15809] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 824.160861][T15809] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.194607][T15809] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 824.273652][T16242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 824.405528][T15809] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 824.413194][T15809] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.418881][T15809] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 824.433571][T16237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.518059][T15809] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 824.525434][T15809] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.529669][T15809] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 824.777065][T15809] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 824.780389][T15809] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.783983][T15809] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 824.932000][T15843] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.971282][ T13] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.095335][T15809] pim6reg: left allmulticast mode [ 825.299409][ T5839] usb 8-1: USB disconnect, device number 39 [ 826.594080][T15809] bond0 (unregistering): Released all slaves [ 826.611069][T15809] bond1 (unregistering): Released all slaves [ 826.653415][ T5855] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.668170][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 826.695700][ T5855] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.775940][T15809] tipc: Left network mode [ 827.414757][T16308] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 827.417165][T16308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 827.436983][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 827.447885][T16308] vhci_hcd vhci_hcd.0: Device attached [ 827.741807][T15314] usb 44-1: SetAddress Request (14) to port 0 [ 827.743823][T15314] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 828.980737][T16309] vhci_hcd: connection reset by peer [ 828.986430][ T5855] vhci_hcd vhci_hcd.3: stop threads [ 828.988494][ T5855] vhci_hcd vhci_hcd.3: release socket [ 828.993654][ T5855] vhci_hcd vhci_hcd.3: disconnect device [ 829.083461][T15809] veth1_macvtap: left promiscuous mode [ 829.085750][T15809] veth0_macvtap: left promiscuous mode [ 829.162758][T16320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.395035][T16320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 829.488375][T16330] xt_connbytes: Forcing CT accounting to be enabled [ 829.491296][T16330] xt_TPROXY: Can be used only with -p tcp or -p udp [ 829.536665][ T60] libceph: connect (1)[c::]:6789 error -101 [ 829.545540][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 829.583393][T16330] ceph: No mds server is up or the cluster is laggy [ 829.587663][T16319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.500135][T16348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.722296][T16351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 832.206068][T16345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.714226][T15612] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 832.777872][T16364] binder: Unknown parameter 'hash' [ 832.792704][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2002'. [ 832.814166][T16364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2002'. [ 832.814978][ T42] kauditd_printk_skb: 142 callbacks suppressed [ 832.815015][ T42] audit: type=1804 audit(1786346637.586:1447): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2002" name="/newroot/491/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=61172 res=1 errno=0 [ 832.892340][ T42] audit: type=1800 audit(1786346637.596:1448): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2002" name="iface_name" dev="configfs" ino=61172 res=0 errno=0 [ 833.005683][T15612] usb 10-1: Using ep0 maxpacket: 32 [ 833.007880][T15314] usb 44-1: device descriptor read/8, error -110 [ 833.058272][T15612] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 833.158863][T15612] usb 10-1: config 0 has no interfaces? [ 833.229236][T15612] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 833.268303][T15612] usb 10-1: Product: syz [ 833.303892][T15612] usb 10-1: Manufacturer: syz [ 833.330879][T15612] usb 10-1: SerialNumber: syz [ 833.558189][T15612] usb 10-1: config 0 descriptor?? [ 833.844308][T16373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2003'. [ 833.846937][T15314] usb usb44-port1: attempt power cycle [ 834.151776][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 834.484931][T16386] tipc: Cannot configure node identity twice [ 834.504651][T16386] overlayfs: overlapping lowerdir path [ 834.664372][T15612] usb 10-1: USB disconnect, device number 2 [ 834.757054][T15809] IPVS: stop unused estimator thread 0... [ 834.818139][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 835.017725][T16400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.085852][T16400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 835.152390][T16399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.635777][T15314] usb usb44-port1: unable to enumerate USB device [ 835.992241][ T5938] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 836.172484][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 836.184888][ T5938] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 836.197040][ T5938] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 836.202793][ T5938] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.207181][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.216150][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 836.220477][ T5938] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.229312][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.229842][T16430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.379768][T16432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 836.505976][ T5938] usb 6-1: usb_control_msg returned -32 [ 836.518731][ T5938] usbtmc 6-1:16.0: can't read capabilities [ 836.884878][T16434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2009'. [ 837.228164][T16428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.835262][T16444] ip6t_REJECT: ECHOREPLY is not supported [ 837.841922][ T5938] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 837.892021][T16444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 837.904667][T16444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.921699][T16444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.923772][T16444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 837.946104][T16447] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 837.993502][ T5938] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 837.998866][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 838.003331][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 838.011498][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.016214][ T5938] usb 8-1: Product: syz [ 838.017823][ T5938] usb 8-1: Manufacturer: syz [ 838.019546][ T5938] usb 8-1: SerialNumber: syz [ 838.023427][ T5938] usb 8-1: config 0 descriptor?? [ 838.030015][ T5938] hub 8-1:0.0: bad descriptor, ignoring hub [ 838.033445][ T5938] hub 8-1:0.0: probe with driver hub failed with error -5 [ 838.039341][ T5938] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input26 [ 838.114705][T16444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 838.161829][T16444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 838.167256][T16444] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 838.213520][T16444] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 838.728653][ T5938] usb 6-1: USB disconnect, device number 36 [ 838.913715][ T42] audit: type=1804 audit(1786346643.756:1449): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2017" name="/newroot/28/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=67396 res=1 errno=0 [ 838.926340][ T42] audit: type=1800 audit(1786346643.766:1450): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2017" name="iface_name" dev="configfs" ino=67396 res=0 errno=0 [ 838.934757][T16461] binder: Unknown parameter 'hash' [ 838.937844][T16461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2017'. [ 838.940681][T16461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2017'. [ 839.014303][T16465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.054134][T16465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 839.121943][T15314] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 839.125218][T16464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.271788][T15314] usb 10-1: Using ep0 maxpacket: 8 [ 839.274342][T15314] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 839.278658][T15314] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 839.282112][T15314] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.285448][T15314] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 839.288869][T15314] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.292119][T15314] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.296187][T15314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.504948][T15314] usb 10-1: usb_control_msg returned -32 [ 839.506935][T15314] usbtmc 10-1:16.0: can't read capabilities [ 839.859438][T16462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2016'. [ 839.911777][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 839.911860][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 839.981844][ T5735] Bluetooth: hci4: command 0x0c1a tx timeout [ 840.221946][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 840.481928][ T5938] usb 8-1: USB disconnect, device number 40 [ 840.674758][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.746536][T16485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 841.525751][T16481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.841924][T15314] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 841.881200][T14700] usb 10-1: USB disconnect, device number 3 [ 842.061770][ T5735] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.064354][T15314] usb 6-1: Using ep0 maxpacket: 8 [ 842.067008][T15314] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.075369][T15314] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 842.080656][T15314] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.090172][T16508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.097690][T15314] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.104828][T15314] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.132727][T15314] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.167317][T15314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.301763][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 842.377275][T16508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 842.480004][T15314] usb 6-1: usb_control_msg returned -32 [ 842.482075][T15314] usbtmc 6-1:16.0: can't read capabilities [ 842.493608][T16507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.840841][T16502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2025'. [ 843.436317][T16531] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 843.439106][T16531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 843.448963][T16531] vhci_hcd vhci_hcd.0: Device attached [ 843.731787][T15314] usb 46-1: SetAddress Request (2) to port 0 [ 843.737400][T15314] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 843.979862][T16532] vhci_hcd: connection reset by peer [ 843.983506][T15843] vhci_hcd vhci_hcd.4: stop threads [ 843.985422][T15843] vhci_hcd vhci_hcd.4: release socket [ 843.987375][T15843] vhci_hcd vhci_hcd.4: disconnect device [ 844.143167][ T5735] Bluetooth: hci4: command 0x0c1a tx timeout [ 844.371823][T14700] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 844.391793][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 844.531473][ T55] usb 6-1: USB disconnect, device number 37 [ 844.533917][T14700] usb 8-1: Using ep0 maxpacket: 8 [ 844.546738][T14700] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 844.560054][T14700] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 844.566479][T14700] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.574096][T14700] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 844.577280][T14700] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.609871][T14700] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.624022][T14700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.726468][T16553] Invalid logical block size (4) [ 844.856771][T16550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 844.859594][T14700] usb 8-1: usb_control_msg returned -32 [ 844.859653][T14700] usbtmc 8-1:16.0: can't read capabilities [ 845.221445][T16545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2034'. [ 845.563974][T16546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.586740][T16582] Cannot find set identified by id 2 to match [ 846.635836][ T60] libceph: connect (1)[c::]:6789 error -101 [ 846.638989][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 846.672608][T16582] ceph: No mds server is up or the cluster is laggy [ 847.119734][ T5739] usb 8-1: USB disconnect, device number 41 [ 847.551837][ T5739] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 847.701787][ T5739] usb 8-1: Using ep0 maxpacket: 32 [ 847.706357][ T5739] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 847.712917][ T5739] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.722362][ T5739] usb 8-1: config 0 descriptor?? [ 847.731299][ T5739] as10x_usb: device has been detected [ 847.736199][ T5739] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 847.762849][ T5739] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 847.799443][ T5739] as10x_usb: error during firmware upload part1 [ 847.805802][ T5739] Registered device nBox DVB-T Dongle [ 847.946950][T14700] usb 8-1: USB disconnect, device number 42 [ 847.960140][T14700] Unregistered device nBox DVB-T Dongle [ 847.961216][T14700] as10x_usb: device has been disconnected [ 848.161738][ T55] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 848.331921][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 848.339285][ T55] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 848.348687][ T55] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 848.353313][ T55] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.358945][ T55] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 848.365435][ T55] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 848.368838][ T55] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.375008][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.605719][ T55] usb 9-1: usb_control_msg returned -32 [ 848.607469][ T55] usbtmc 9-1:16.0: can't read capabilities [ 848.781864][T15314] usb 46-1: device descriptor read/8, error -110 [ 848.978159][T16615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2044'. [ 849.258852][T16636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 849.529664][T15314] usb usb46-port1: attempt power cycle [ 849.668003][T16642] bond1: entered promiscuous mode [ 850.196799][T16634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.888107][ T24] usb 9-1: USB disconnect, device number 6 [ 851.042031][ T55] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 851.072654][T15314] usb usb46-port1: unable to enumerate USB device [ 851.206058][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 851.225347][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 851.242874][ T55] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 851.245690][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 851.248832][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 851.252423][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 851.257930][ T55] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.264078][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.480467][ T55] usb 6-1: usb_control_msg returned -32 [ 851.482506][ T55] usbtmc 6-1:16.0: can't read capabilities [ 851.852594][T16666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2051'. [ 852.365306][T16688] ip6t_REJECT: ECHOREPLY is not supported [ 852.426527][T16688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 852.430194][T16688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.446931][T16688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 852.450424][T16688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 852.450560][T16690] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 853.715981][T16706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 854.006755][T14993] usb 6-1: USB disconnect, device number 38 [ 854.461883][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 854.464007][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 854.466176][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 854.468359][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 854.732798][T16700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.618809][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 855.668407][T16737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 855.670482][T16737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.673966][T16737] vhci_hcd vhci_hcd.0: Device attached [ 855.681214][T16739] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 855.683434][T16739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.698643][T16739] vhci_hcd vhci_hcd.0: Device attached [ 855.883340][T16724] lo speed is unknown, defaulting to 1000 [ 855.961974][T15314] usb 44-1: SetAddress Request (18) to port 0 [ 855.962075][T15314] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 855.982156][T15240] usb 48-1: SetAddress Request (2) to port 0 [ 855.982195][T15240] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 856.139019][T16749] rdma_rxe: rxe_newlink: failed to add wg2 [ 856.712085][T16738] vhci_hcd: connection reset by peer [ 856.714729][T15809] vhci_hcd vhci_hcd.3: stop threads [ 856.718584][T15809] vhci_hcd vhci_hcd.3: release socket [ 856.726634][T15809] vhci_hcd vhci_hcd.3: disconnect device [ 856.756741][T16741] vhci_hcd: connection reset by peer [ 856.759273][T15809] vhci_hcd vhci_hcd.5: stop threads [ 856.760991][T15809] vhci_hcd vhci_hcd.5: release socket [ 856.768466][T15809] vhci_hcd vhci_hcd.5: disconnect device [ 856.794292][T16756] Cannot find set identified by id 2 to match [ 856.813167][ T60] libceph: connect (1)[c::]:6789 error -101 [ 856.815232][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 856.818402][ T60] libceph: connect (1)[c::]:6789 error -101 [ 856.823309][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 856.865622][T16756] ceph: No mds server is up or the cluster is laggy [ 857.092852][ T60] libceph: connect (1)[c::]:6789 error -101 [ 857.098861][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 857.886216][T16768] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 858.093676][ T60] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 858.302256][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 858.511955][ T60] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 858.539964][ T60] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 858.548736][ T60] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.566386][ T60] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.599945][ T60] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 858.626755][ T60] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.661207][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.904824][T16768] bond0: entered promiscuous mode [ 858.963347][ T60] usb 8-1: usb_control_msg returned -32 [ 858.965194][ T60] usbtmc 8-1:16.0: can't read capabilities [ 858.985216][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 859.110952][T16778] lo speed is unknown, defaulting to 1000 [ 859.525943][T16785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 859.556241][T16783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'. [ 860.353609][T16779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.021826][T15240] usb 48-1: device descriptor read/8, error -110 [ 861.024529][T15314] usb 44-1: device descriptor read/8, error -110 [ 861.413179][T15240] usb usb48-port1: attempt power cycle [ 861.415804][T15314] usb usb44-port1: attempt power cycle [ 861.440367][T15612] usb 8-1: USB disconnect, device number 43 [ 861.982569][T15240] usb usb48-port1: unable to enumerate USB device [ 861.988319][T15314] usb usb44-port1: unable to enumerate USB device [ 862.893794][ T42] audit: type=1800 audit(1786346667.736:1451): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2077" name="zoned" dev="configfs" ino=69027 res=0 errno=0 [ 862.907889][ T42] audit: type=1800 audit(1786346667.746:1452): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2077" name="memory_backed" dev="configfs" ino=69029 res=0 errno=0 [ 862.916400][ T42] audit: type=1800 audit(1786346667.746:1453): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2077" name="zone_nr_conv" dev="configfs" ino=69030 res=0 errno=0 [ 862.916779][T16811] null_blk: nullb1: using native zone append [ 862.925822][ T42] audit: type=1800 audit(1786346667.746:1454): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2077" name="power" dev="configfs" ino=69031 res=0 errno=0 [ 863.073139][T16811] null_blk: disk nullb1 created [ 863.139966][T16819] block device autoloading is deprecated and will be removed. [ 863.219741][T16825] Cannot find set identified by id 2 to match [ 863.417633][T16825] ceph: No mds server is up or the cluster is laggy [ 863.417917][T15240] libceph: connect (1)[c::]:6789 error -101 [ 863.427615][T15240] libceph: mon0 (1)[c::]:6789 connect error [ 863.682493][T15240] libceph: connect (1)[c::]:6789 error -101 [ 863.687426][T15240] libceph: mon0 (1)[c::]:6789 connect error [ 864.484709][T16841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 867.993837][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 868.158383][T16834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.355625][T16858] lo speed is unknown, defaulting to 1000 [ 868.512184][T15612] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 868.684885][T15612] usb 6-1: Using ep0 maxpacket: 8 [ 868.702468][T15612] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 868.727360][T15612] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 868.737318][T15612] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.755295][T15612] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.773570][T15612] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.786219][T15612] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.804322][T15612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.066991][T15612] usb 6-1: usb_control_msg returned -32 [ 869.075178][T15612] usbtmc 6-1:16.0: can't read capabilities [ 869.438006][T16864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2083'. [ 869.664548][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.780965][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 870.793434][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 870.798114][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 870.801352][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 870.807654][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 871.226255][T15240] usb 6-1: USB disconnect, device number 39 [ 871.269325][T16886] bond2 (unregistering): Released all slaves [ 871.420342][T16872] lo speed is unknown, defaulting to 1000 [ 871.529277][T16892] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 871.988742][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.998710][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.006390][T16872] bridge_slave_0: entered allmulticast mode [ 872.014392][T16872] bridge_slave_0: entered promiscuous mode [ 872.021373][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.028142][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.034289][T16872] bridge_slave_1: entered allmulticast mode [ 872.041505][T16872] bridge_slave_1: entered promiscuous mode [ 872.076081][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.088730][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.133116][T16872] team0: Port device team_slave_0 added [ 872.142319][T16872] team0: Port device team_slave_1 added [ 872.187799][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.193863][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.213580][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.225803][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.231837][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.253831][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.312831][T16872] hsr_slave_0: entered promiscuous mode [ 872.316847][T16872] hsr_slave_1: entered promiscuous mode [ 872.319673][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 872.322246][T16872] Cannot create hsr debugfs directory [ 872.871966][ T5735] Bluetooth: hci0: command tx timeout [ 873.048300][T16872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.053651][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.057084][T16872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.063938][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.067510][T16872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.075528][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 873.078875][T16872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 873.083696][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 873.139172][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.150913][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.168198][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.170807][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.185701][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.188772][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.480966][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.718199][T16872] veth0_vlan: entered promiscuous mode [ 873.746080][T16872] veth1_vlan: entered promiscuous mode [ 873.778694][T16872] veth0_macvtap: entered promiscuous mode [ 873.786744][T16872] veth1_macvtap: entered promiscuous mode [ 873.804761][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.819780][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.843680][T15809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.851412][T15809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.912359][T15809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.134394][T15809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.654326][T16952] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 874.942119][ T5735] Bluetooth: hci0: command tx timeout [ 875.158664][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.161293][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.401539][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.404663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.732447][T16963] Invalid logical block size (4) [ 876.995648][T16962] smpboot: CPU 1 is now offline [ 877.032523][ T5735] Bluetooth: hci0: command tx timeout [ 879.112231][ T5735] Bluetooth: hci0: command tx timeout [ 879.520863][T16977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.538743][T16977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 879.692864][T16969] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 879.727024][T16969] bond2: entered promiscuous mode [ 881.485336][T16962] smpboot: CPU 3 is now offline [ 881.567416][ T5839] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 881.602431][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.798765][ T5839] usb 8-1: Using ep0 maxpacket: 8 [ 881.814889][ T5839] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 882.099792][ T5839] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 882.102921][ T5839] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.111701][ T5839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.121888][ T5839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.131721][ T5839] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.141118][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.251959][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 882.431742][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 882.434779][ T24] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 882.445831][ T24] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 882.452767][ T24] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.461540][ T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.477754][ T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.485498][ T24] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.496609][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.901532][ T24] usb 11-1: usb_control_msg returned -32 [ 882.915796][ T24] usbtmc 11-1:16.0: can't read capabilities [ 883.036201][T17009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2097'. [ 883.219093][ T5839] usb 8-1: usb_control_msg returned -32 [ 883.221524][ T5839] usbtmc 8-1:16.0: can't read capabilities [ 883.299373][T16999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2102'. [ 884.298925][ T24] usb 8-1: USB disconnect, device number 44 [ 884.880163][ T24] usb 11-1: USB disconnect, device number 2 [ 885.507607][T17023] Cannot find add_set index 0 as target [ 885.562167][T15612] libceph: connect (1)[c::]:6789 error -101 [ 885.585898][T15612] libceph: mon0 (1)[c::]:6789 connect error [ 885.609527][T17023] ceph: No mds server is up or the cluster is laggy [ 886.052137][T17022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.150080][T17014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 886.152750][T15612] libceph: connect (1)[c::]:6789 error -101 [ 886.159502][T15612] libceph: mon0 (1)[c::]:6789 connect error [ 886.218125][T17012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.481524][T17044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.466950][ T42] audit: type=1326 audit(1786346693.296:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.487912][T17051] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 888.495341][ T42] audit: type=1326 audit(1786346693.296:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.530004][ T42] audit: type=1326 audit(1786346693.296:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.560307][T17051] 8021q: adding VLAN 0 to HW filter on device bond4 [ 888.574206][ T42] audit: type=1326 audit(1786346693.306:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.603915][ T42] audit: type=1326 audit(1786346693.306:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.625085][ T42] audit: type=1326 audit(1786346693.306:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.660276][ T42] audit: type=1326 audit(1786346693.306:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.722081][ T42] audit: type=1326 audit(1786346693.306:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.757447][ T42] audit: type=1326 audit(1786346693.306:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 888.789772][ T42] audit: type=1326 audit(1786346693.306:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.3.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 889.193919][T17043] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 889.198935][T17043] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ec: 0000 [#1] SMP KASAN NOPTI [ 889.203682][T17043] KASAN: null-ptr-deref in range [0x0000000000000760-0x0000000000000767] [ 889.206565][T17043] CPU: 2 UID: 0 PID: 17043 Comm: syz.6.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.210759][T17043] Tainted: [L]=SOFTLOCKUP [ 889.212521][T17043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 889.216383][T17043] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 889.218837][T17043] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 6a 47 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 889.226470][T17043] RSP: 0000:ffffc90003767860 EFLAGS: 00010202 [ 889.228943][T17043] RAX: dffffc0000000000 RBX: ffff88804f3c8840 RCX: ffffc900076d1000 [ 889.232109][T17043] RDX: 00000000000000ec RSI: ffffffff81551cd6 RDI: 0000000000000760 [ 889.235295][T17043] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 889.237940][T17043] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804f3c88a0 [ 889.241069][T17043] R13: 0000000000000006 R14: ffff88804f3c86a0 R15: ffff888025f5c528 [ 889.244194][T17043] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f543db40 [ 889.247774][T17043] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 889.250429][T17043] CR2: 00000000f7fca190 CR3: 000000004e892000 CR4: 0000000000352ef0 [ 889.253597][T17043] Call Trace: [ 889.254963][T17043] [ 889.256170][T17043] uvc_function_bind+0x136e/0x1939 [ 889.258198][T17043] ? __pfx_uvc_function_bind+0x10/0x10 [ 889.258813][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.260405][T17043] usb_add_function+0x219/0x890 [ 889.262920][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.264284][T17043] ? composite_dev_prepare+0x261/0x420 [ 889.268695][T17043] configfs_composite_bind+0xd83/0x1960 [ 889.270924][T17043] ? kernfs_create_link+0x1bd/0x240 [ 889.273017][T17043] gadget_bind_driver+0x28c/0xbf0 [ 889.275044][T17043] ? __pfx_gadget_bind_driver+0x10/0x10 [ 889.277203][T17043] really_probe+0x241/0xa60 [ 889.278718][T17043] __driver_probe_device+0x20e/0x450 [ 889.280842][T17043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 889.283292][T17043] driver_probe_device+0x4a/0x140 [ 889.285351][T17043] __driver_attach+0x21f/0x5b0 [ 889.287291][T17043] ? __pfx___driver_attach+0x10/0x10 [ 889.289428][T17043] bus_for_each_dev+0x13e/0x1d0 [ 889.291377][T17043] ? __pfx_bus_for_each_dev+0x10/0x10 [ 889.293303][T17043] ? bus_add_driver+0x2b5/0x5b0 [ 889.295203][T17043] bus_add_driver+0x305/0x5b0 [ 889.296799][T17043] driver_register+0x1e2/0x360 [ 889.298633][T17043] usb_gadget_register_driver_owner+0x132/0x210 [ 889.301148][T17043] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 889.303437][T17043] configfs_write_iter+0x302/0x4e0 [ 889.305523][T17043] vfs_write+0x6ac/0x1050 [ 889.307285][T17043] ? __pfx_configfs_write_iter+0x10/0x10 [ 889.309548][T17043] ? __pfx_vfs_write+0x10/0x10 [ 889.311212][T17043] ? find_held_lock+0x2b/0x80 [ 889.312957][T17043] ksys_write+0x12a/0x250 [ 889.314716][T17043] ? __pfx_ksys_write+0x10/0x10 [ 889.316690][T17043] __do_fast_syscall_32+0xe7/0x970 [ 889.318752][T17043] do_fast_syscall_32+0x32/0x70 [ 889.320714][T17043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 889.323233][T17043] RIP: 0023:0xf704efec [ 889.324874][T17043] Code: Unable to access opcode bytes at 0xf704efc2. [ 889.327522][T17043] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 889.330809][T17043] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 889.333933][T17043] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 889.337058][T17043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.340187][T17043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 889.343081][T17043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.346064][T17043] [ 889.347319][T17043] Modules linked in: [ 889.349547][T17043] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 889.681061][T17043] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 889.683072][T17043] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 6a 47 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 889.688880][T17043] RSP: 0000:ffffc90003767860 EFLAGS: 00010202 [ 889.690776][T17043] RAX: dffffc0000000000 RBX: ffff88804f3c8840 RCX: ffffc900076d1000 [ 889.695203][T17043] RDX: 00000000000000ec RSI: ffffffff81551cd6 RDI: 0000000000000760 [ 889.697729][T17043] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 889.700134][T17043] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804f3c88a0 [ 889.703903][T17043] R13: 0000000000000006 R14: ffff88804f3c86a0 R15: ffff888025f5c528 [ 889.706344][T17043] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f543db40 [ 889.709006][T17043] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 889.711056][T17043] CR2: 00007f60adb0cb20 CR3: 000000004e892000 CR4: 0000000000352ef0 [ 889.713900][T17043] Kernel panic - not syncing: Fatal exception [ 889.716663][T17043] Kernel Offset: disabled [ 889.718074][T17043] Rebooting in 86400 seconds..