last executing test programs: 31.384391023s ago: executing program 1 (id=1858): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdc, @loopback, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x4000) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x0, 0x2, 0x20001, 0x65}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 30.17384615s ago: executing program 1 (id=1861): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="003125000000250283755023b57d10f24e90014f0bebfa73c0cb7e39713bf6870babb816e59440f3fa"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/vbi#\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x598c8c40af2e9154]}, 0x33) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6}, './file0/file0\x00'}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 29.356773434s ago: executing program 1 (id=1867): msgget$private(0x0, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x4000000000000000}, 0x0) 29.260564849s ago: executing program 1 (id=1868): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000380)={0xff800000, 0x8000, 0x80, 0x6, 0x6, 0x3}) setpriority(0x2, 0x0, 0xa7ab) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1200}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0301000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x14040}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r4], 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x1, 0xfffffffc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x8000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0xc9f8, 0x5, 0xfffffffe, 0x5, 0x6, 0x3, 0x0, 0x8, 0x100, 0x9c8, 0xfffe, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x200000, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 26.073763377s ago: executing program 1 (id=1879): userfaultfd(0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0xfdef) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x1, 0x4, r7, 0x0}]) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x3ff, &(0x7f0000ffc000/0x3000)=nil, 0x6) io_getevents(r8, 0x7, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 25.656500359s ago: executing program 1 (id=1884): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x6, @random="13e4cf10e209"}, 0x4e, {0x2, 0x4e23, @rand_addr=0x64010100}, 'dvmrp1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x7ff}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/96, 0x60, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000f74ed23d0086dd606410a600080000fc0200000000ed000000000000000001ff02000000000000000000000000000132000000"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000340), 0x0, 0xc3, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0xffffffffffffff97) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf12, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc931, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8000000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230010) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x13, 0x0, @val=@tracing={r3, 0x8}}, 0x20) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x111}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2041}, 0x1}) 11.879573437s ago: executing program 2 (id=1950): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-@--{\\', 0x3a, '4$%', 0x3a, './debug/file0', 0x3a, [0x44, 0x43]}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x8040) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x40001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc46) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000100)={r3, 0xe8a}) 11.832071652s ago: executing program 2 (id=1951): syz_usb_connect(0x2, 0x3d, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYRES8, @ANYRESOCT, @ANYRES32], 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x50000) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) io_setup(0x8, &(0x7f00000000c0)=0x0) (async) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x1c7) io_submit(r3, 0x8, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000, r4, 0x0, 0x51, 0x801000}, &(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x0, 0x48f, r4, 0x0, 0x44, 0x0, 0x0, 0x0, r4}]) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r5 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048044}], 0x1, 0x20040045) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) (async) io_setup(0x3, &(0x7f0000000100)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_cancel(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, r2, &(0x7f0000000180)="8c3a50fbbca15346db752667fba0cbdad2785bd5a59157d7b68d525cded60606bc5633888f75e8eab4da3f4aedd39b7c6e790a3e9b2d3c4e9e65e4fe71703f1137932722e3fe133728185863ffe197237ddeb5c8180ad2ca81ac09ae3376ebe604f1e8aed55e438e9e990a51f3e645bfff44f743189cbed5c5f769c01391a15bc2814a2f1072fccfd7593cad412dc85bb848003bc3", 0x95, 0x5, 0x0, 0x0, r7}, &(0x7f00000003c0)) (async) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r8, &(0x7f0000000300)=""/176, 0xb0) (async) r9 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x5d5b, 0xc000, 0x4, 0xc1, 0x0, r8}) (async) r10 = fsopen(&(0x7f0000000040)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)) (async) r11 = fsmount(r10, 0x0, 0x0) close(r11) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRESDEC=r3, @ANYBLOB="000074fc7f992b61ca76caca55d3614af848040ffddd3af15dbb164659cfc9b533e25b8cfc94eb6fc4c20d26edd2a3099caa2aa98d87b6710f2c2edf571ba4918139da0b12c4d6d43b69e3033cbabb5b1cab9bd78bb20bd3798b902b225cfe39b06c0b9303fa267e0b73e82e3195ad111dbed244963189c2e512e37ba105991b1d4d6b17258cc2cd", @ANYRES32=r6, @ANYRES32=r7, @ANYRES16=r0, @ANYRES8=r8], 0x48) (async) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.257999507s ago: executing program 32 (id=1884): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x6, @random="13e4cf10e209"}, 0x4e, {0x2, 0x4e23, @rand_addr=0x64010100}, 'dvmrp1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x0, 0x0, 0xd, 0x0, 0x9, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x7ff}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/96, 0x60, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000f74ed23d0086dd606410a600080000fc0200000000ed000000000000000001ff02000000000000000000000000000132000000"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000340), 0x0, 0xc3, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0xffffffffffffff97) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf12, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc931, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8000000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230010) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x13, 0x0, @val=@tracing={r3, 0x8}}, 0x20) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x111}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2041}, 0x1}) 8.518353554s ago: executing program 2 (id=1966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x3c, 0x1a, 0x1, 0x2, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0xfd}, [@RTA_DST={0x8, 0x1d, @empty}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0xfffffffffffffef5}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="362aeb16e31bc8adddcabeffea4caf61d8da6293e66e30e33db60d6dbb4cd59e3433e02983088de8d1e1adb79edf72a4695f14d48c5aa5c8b6a99b6f31ca8c1c69c51c08929bd6b4681a3e78254dc13c1c95eea6bcceca2caba48efa3e92b0801a87d0a0a692445b07766a05a66c28899b63002c3a496a2e", 0x78}], 0x1, &(0x7f0000003180)="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", 0xfef, 0x40041}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r4, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffbffff4d44020500000000000000005800650000002f90780000000000000000248088a80000000010000800000086dd080088be0000000010070080010000000000000008002218eb0000000008002458fffffffd"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="540100001000010026bd700000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) 7.587583926s ago: executing program 4 (id=1967): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004080) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0220000004", @ANYRES32=0x0], 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.769441519s ago: executing program 4 (id=1969): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000027c0)="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", 0x2000, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c40)={0x90, 0x0, 0x1, {0x1, 0x1, 0x80000001, 0x0, 0xffffffc0, 0x4, {0x7ffffffffffffffb, 0x4, 0x30bd, 0x0, 0x5, 0x4a, 0x2000155, 0xe4, 0x1008, 0xa000, 0xff, r3, r2, 0xa, 0xb021}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000340)=@md0, r3, &(0x7f0000000380)='./file0/file1\x00') 6.646505708s ago: executing program 4 (id=1970): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000180)=""/141) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 6.390853904s ago: executing program 3 (id=1971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_io_uring_complete(0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4402}, {r4, 0x81e9}, {r1, 0x8410}], 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$sock_FIOSETOWN(r5, 0x7040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = gettid() syz_open_procfs(r7, &(0x7f0000000080)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') close(0x3) fchdir(r8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41c0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="782f3623490b5206213f3129475ee646457aec4b3e0232f88ee2f838947016edb48a8e237c2dc3598446425637b8c841a55698aa8fe63b7725f000eac3b541d4852dacd8685ce662c34571a0a436ebaf963427f607721ed80881196fde65a95afbf4adb5e6c28fec32e36540d69ecefcf0c2198376b5b0f0490f6af2815ad1e3ba54985e507f54fb7fac19b5f239a6c04f45e8048dfb33a2392e728f52eabf4d7f36a5f722f88a61c3d12a10defcb06320090407f0495f2cdb52131483e97bf5565e92ebf68310e4246ad3e45cdba592cb3c5256e6de0dc3783c56c29502f94e4fe7b413"], 0x8) 5.737499626s ago: executing program 4 (id=1973): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) io_setup(0x6, &(0x7f00000003c0)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101103, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x388, 0x2b8, 0x388, 0x1b8, 0x1b8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0xffff}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0x0, 0xff], [0x0, 0xffffffff], 'ip6erspan0\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="c3481b34e05a0b489b56f30c75d604919b414a857f3ed178c28808095e24d5d760f109bad0b6c878bd4dc8bd659fd56e47d505625400a84aaa7c0bb8a781d0441417b00e26c8ff2de6a0318c5f7c96e4ca87f3be907e9cf03a422a9302e13896b9a03aeb4db537b51f", @ANYRES16=r0, @ANYRESOCT=r0], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) (async) io_setup(0x6, &(0x7f00000003c0)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101103, 0x0) (async) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x388, 0x2b8, 0x388, 0x1b8, 0x1b8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0xffff}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0x0, 0xff], [0x0, 0xffffffff], 'ip6erspan0\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="c3481b34e05a0b489b56f30c75d604919b414a857f3ed178c28808095e24d5d760f109bad0b6c878bd4dc8bd659fd56e47d505625400a84aaa7c0bb8a781d0441417b00e26c8ff2de6a0318c5f7c96e4ca87f3be907e9cf03a422a9302e13896b9a03aeb4db537b51f", @ANYRES16=r0, @ANYRESOCT=r0], 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) (async) 5.475419051s ago: executing program 0 (id=1974): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="200b00000000900b2c009a93892110518f2873f9553e314024967a24c855bc292dbd43bdbae03083f108d8106d39bda7b83bdec0d4ad5365af4d39d1f9390c083cb958cd29167e059c75e76eae70bddec1f7e8c72ae1c5372f2c8f86c8866a9d131b690f0285a409f92230fb69a6b890002f6d2720bf50ce30d4bff9f843a41d9beebbb82e33a1c7cf7ef087bf1f25d5a8468700"/160], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)={0x20, 0x5, 0x4, "cb75c7a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.717446756s ago: executing program 2 (id=1975): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x00\x00\x00\x00\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x1aZ\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\x12\xc9\xc0\xd2\xf2\xd5\xd9\x9e\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xcb\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x84\xc2\bn\xd9CG*2\x88\x8aBi\x85\x18\xff\xf9\x1f`\x9a\x13\x03\xc7\xb05\xc5&\xe7GEU\x12\xda\xc9\x8e{\x02\x1ah\xb7\xbc\xec\"\xa2[&\xde\xa7\x10V\x99\xa3\xb1\\K\x00\x1e\xe0\x14J?\xc2\xe5\xcea5\xce/!\x98\x7f\v\xab\xa7\x8c\xf6u/\xaf\xde0WRz\xb04O\x7f\x02S\x9as\xb3\x17\xe1Fr:\xbaI', 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)=0x10) r2 = socket(0x1a, 0x6, 0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='\x00', 0x4c80, &(0x7f0000000100)={@_ha_fsid={[0x8, 0xb]}, {0x4, 0x6, 0xf3d8}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x101}) close$fd_v4l2_buffer(r3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e21007d250c49004e24000008000200e000000234000315b0c313004e230000060002004e2400000600013a4e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000ff03000000000000000284000e"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af0203010902", @ANYRESOCT], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 3.439257806s ago: executing program 5 (id=1955): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0xb3, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008e4086301400001020301090269000301099001080b01e50002203e090400000001012000092401290001090006090401"], &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0}) 2.776982191s ago: executing program 3 (id=1976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004080) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0220000004", @ANYRES32=0x0], 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x1) 2.436570877s ago: executing program 3 (id=1977): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xc3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x2b7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 2.207404591s ago: executing program 0 (id=1978): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x4100, &(0x7f0000000480)='|0', 0x5}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r6, r6, 0x6, 0xe68, 0x3}) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 2.207062872s ago: executing program 4 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25000000005a84ac17a75332aa102590987ad7ae825bb13077c98e69ff5ce43df5c97b2ce4473fc0fa8b4563228e92f52b3c9ab6698ca1a50b4c70ac7571074284c2f1c4c27d91d00aefb2551806cbbdcd7c947d282d7684cbab44561d0a5190ad2e1d7785c2f210859b9efc0455cda90495dfd1cfe6c2bc2ac97117d978a377e28f873ac0558387cef793c74f1526aa730a1db34039295f90e30628dcee66eb3b48e446107e5fc0c88d17f094e6837cf972ced7ceeeaabb4bfd297c9984d991b612901481c0ace42568a144dc504684d45450759cfc4946dbbf4e828bddcf1da31906dd56b1ba6df8989fc7546c900560264dfe7c39a3cc1ba8125a9626d7f4daba653deefac416", @ANYRES32=0x0, @ANYBLOB="000000000300000008001b00000000000800290041010000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4048801) openat$kvm(0xffffffffffffff9c, 0x0, 0x541500, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x400000000) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x18) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.095958499s ago: executing program 0 (id=1980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000200)=""/249, 0xf9}], 0x2, 0x800, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000004c5050f1f2734ced00015b00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2.023267717s ago: executing program 0 (id=1981): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0xa, 0x5, 0x0, 0x8, 'syz0\x00', 0xfffffffc}, 0x4, 0x10, 0x5, 0x0, 0x3, 0x369a, 'syz0\x00', &(0x7f0000000040)=['-*\x00', '\x00', '@\\\x00'], 0x7}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syzkaller0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x842cd95c, 0x53, 0xfffffffd, 0xfffffffc, 0x6, 0x7f, 0xf, 0x3, 0x401, 0x448fe505, 0xfffffe01, 0x0, 0x4, 0x9, 0x81, 0x0, 0x9, 0x7, 0x9, 0x1, 0x4, 0x1000}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) r5 = syz_open_pts(0xffffffffffffffff, 0x202000) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000300)=0x3) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0x11, 0xfa, 0x2, 0xb, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb9, 0x3, {0x6, 0x6c, 0x5, 0x5, 0x0, 0x3, 0x0, @in=@multicast2, @in=@remote}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x58}}, 0x40001) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x1407, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000580)={0x16, 0x1a1, 0x30a, 0x4, 0x8}) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048097}, 0x811) ioctl(r4, 0x15, &(0x7f0000000700)="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") ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001700)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001740)={0x73622a85, 0x1, 0x2}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r6) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r9, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xde5e, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9c5}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x2, 0x0, {0x2, 0x6, 0x0, 0x284, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x0, 0x9}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001900)={0x73622a85, 0x1}) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r6, 0x6f50, 0x5) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001940)={0x3, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x88) openat$mixer(0xffffffffffffff9c, &(0x7f0000001a00), 0x80002, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0xc4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xf7, 0x5, 0x70}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3, 0xf4}}]}}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x200, 0x1, 0x7, 0x2, 0x8}, 0x5, &(0x7f0000001ac0)={0x5, 0xf, 0x5}, 0x2, [{0xd3, &(0x7f0000001b00)=@string={0xd3, 0x3, "6eb3f3b415c7e8e1b808ea7bcf12e90f1f974060a2d1937cd12c5345e5e06aab3ef0423229ebd0cdab2d795abee1829cff64e465e6b59340d7c29677ca6ae6da80b9c4369f7e412d7e8c560a5d64e53af55fdae9ac829317390318602490816830d83ad35eeeb7eb90c190ffe410fbf7f543537c66b01576699ce87f95befc0d7d7cac725b2017ebd0abb1f8da73d300336d4ad09f56832542b8a73de56e9a56a068e6a43550b48dea0c48c6a73442bd3335eff6ea0c58fde8eafb7f367f30295a9bf39d40593df3b94761d50f07818ea2"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x41a}}]}) bind$inet(r6, &(0x7f0000001c80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000001cc0)={{0x2, 0x4e20, @multicast1}, {0x1}, 0x20, {0x2, 0x4e21, @broadcast}, 'batadv0\x00'}) 1.57589181s ago: executing program 3 (id=1982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write(r2, &(0x7f0000000040)='I', 0x1) landlock_restrict_self(r1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) renameat2(r0, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000180)='./file1/file3\x00', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"], 0x48) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000200)={0xc, r6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000180)={0x18}) mmap$KVM_VCPU(&(0x7f0000ac4000/0x2000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x416, &(0x7f0000000000)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}}) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x0, 0xffd, 0x245b1f2a, 0x7, 0x10000}, 0x18, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) 1.399389178s ago: executing program 2 (id=1983): userfaultfd(0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0xfdef) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x1, 0x4, r7, 0x0}]) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x3ff, &(0x7f0000ffc000/0x3000)=nil, 0x6) io_getevents(0x0, 0x7, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 1.088126838s ago: executing program 3 (id=1984): r0 = socket$packet(0x11, 0xa, 0x300) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x461f, @private=0xa010100}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x3, 'sed\x00', 0x1a, 0x6, 0x40057}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f0000000140)=ANY=[], 0x20) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) 981.097093ms ago: executing program 2 (id=1985): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700383a00fe880000000000000000000000000001ff02000000933c000000000000000001020090780000000060fd906300003a0000000000d20000000000000000000001000000000000000000000000000000013c000898650000"], 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800, 0x7100) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x800, 0x7100) r2 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000440)={0x2, @raw_data="5345999505ec82f20ce18b8a661f83260be887bc0100000000000000853f24816fddd13d5592d188f6ce47c060565b72f986a18ecba1be130a94baad0d7f305e6b6f77736d58e229140b65d4688864e1252b5698a136feffb979b17e37782cc7ce565866b68ed594eb482ca28019ae480b49604fb56d2a98479609a6f9cde725f9f7debdd679334eb3e443b08584a36f7a7f53d8000000020000000037c45831bde81551242e748bcfe5f3eb1139c329232b2faa44b28c758c58d7962f42a025c1bf00078d21d83d"}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x104) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26f, 0x0, 0x9000000000000000}]}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r10, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) (async) getsockopt$inet_int(r10, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r11, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) (async) writev(r11, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, r11, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200"], 0x0) 887.422405ms ago: executing program 3 (id=1986): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x100) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_usb_connect(0x5, 0x7f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081052401000309050904100000050f090582e64103060c0309050a033006070082090508b2c56732284b9759c71eecb06f4f7dde45b7ccfeef8485321e2cf78c2d29f9b24912ab4ec238adabee4552230523e7abd594ef8b7a22954029cd0b4c041ea5b8b51be7e09a376f810bdcb12652b2aa1677"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 762.389939ms ago: executing program 4 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f000000e000/0x2000)=nil}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="141b000002c42b512c80945cfcf427f97297c8887a0000000007000002"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) personality(0x500006) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x101, 0x1, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) sendfile(r7, r7, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c0007800800064000000fff0500050002000000050001000600000013000300686173683a6e65742c696661636500003c55e4fb8eee8a441cca15c84ca23fbe0600000000000000d19de9fedb00b4727721b8000f1ca3d15e0131ce139820287d72eb767e6ec3b49ba51967423593cd5825c70ded36e19e106b588c3fab122ddb93e74fd8e0c1f35c315f88827b2b04a52a1e9a348c82464b8b2bb0c743f57c7bbb3cbcfbf9090cc67a8047427d7365407847e7b89a5c994393e877ff40d12b4eed1bffeb9b2dc1efe0be08eb508641c53f16ef605cdfcb958b2cef0dab398be9b22b41d1f9283b3a4932fc1e693638fbf0ed6e01a5e41cca43e93aa2ae0f57eb491a93e3f329163394036d7dc30e881a316ed8da2c1c6377e8f8"], 0x58}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) 707.290442ms ago: executing program 0 (id=1988): r0 = msgget$private(0x0, 0x2) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000180)=""/205) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) msgget(0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xfffd7fff, 0x50323234, 0x0, 0xa, [{0x42, 0x5}, {0xc00, 0x5000000}, {0x21, 0x5de3}, {0x14, 0x4af}, {0x1009, 0x4000069a}, {0x7, 0x3}, {0x80081, 0x5}, {0x200, 0x2000017}], 0x7b, 0x2, 0x3, 0x2, 0x4}}) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) set_mempolicy(0x0, &(0x7f00000000c0)=0x9, 0x1) r4 = dup2(r3, r3) ioctl$MEMISLOCKED(r4, 0x80084d17, &(0x7f0000000040)={0x5, 0x7}) pipe2(&(0x7f0000000000), 0x4000) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x244500) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x0, 0x0}) 274.448742ms ago: executing program 5 (id=1989): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x75be3659}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) userfaultfd(0x80001) inotify_init1(0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0xfc, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x75be3659}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) userfaultfd(0x80001) (async) inotify_init1(0x80000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0xfc, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 0s ago: executing program 0 (id=1990): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r5}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) kernel console output (not intermixed with test programs): iptor of length 255, skipping remainder of the config [ 541.818354][ T9613] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 541.827851][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.827934][ T9613] usb 3-1: Product: syz [ 541.827976][ T9613] usb 3-1: Manufacturer: syz [ 541.828025][ T9613] usb 3-1: SerialNumber: syz [ 541.872987][ T9613] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 541.873043][ T9613] usb 3-1: no configuration chosen from 1 choice [ 542.100148][T12060] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 542.108361][T12060] netlink: 'syz.3.1546': attribute type 2 has an invalid length. [ 542.108379][T12060] netlink: 'syz.3.1546': attribute type 3 has an invalid length. [ 542.108389][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 542.189959][ T9612] usb 2-1: USB disconnect, device number 112 [ 542.197684][ T9612] usblp0: removed [ 542.273442][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 542.422478][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 542.436084][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 542.436248][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=ce.f6 [ 542.439668][ T25] usb 1-1: config 5 has an invalid interface number: 225 but max is 0 [ 542.439744][ T25] usb 1-1: config 5 has no interface number 0 [ 542.439844][ T25] usb 1-1: config 5 interface 225 has no altsetting 0 [ 542.448977][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.449040][ T25] usb 1-1: Product: syz [ 542.449081][ T25] usb 1-1: Manufacturer: syz [ 542.449125][ T25] usb 1-1: SerialNumber: syz [ 542.691692][ T25] ldusb 1-1:5.225: Interrupt in endpoint not found [ 542.714324][ T25] usb 1-1: USB disconnect, device number 5 [ 543.357146][T12077] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1552'. [ 543.357528][T12077] 0ªî{X¹¦: renamed from gretap0 [ 543.376535][T12077] 0ªî{X¹¦: entered allmulticast mode [ 543.385324][T12077] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 543.401872][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ba40c00: rx timeout, send abort [ 543.403115][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807ba40c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 543.721394][T12082] binder: BC_ACQUIRE_RESULT not supported [ 543.727567][T12082] binder: 12081:12082 ioctl c0306201 200000000000 returned -22 [ 543.998590][ T9612] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 544.039827][T12086] ip6tnl2: entered allmulticast mode [ 544.059508][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.092903][ T9590] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.107729][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.123117][ T9590] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.162937][ T9612] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 544.173726][ T9612] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 544.185118][ T9612] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 544.199798][ T9612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.208096][ T9612] usb 4-1: Product: syz [ 544.212904][ T9612] usb 4-1: Manufacturer: syz [ 544.212943][ T9612] usb 4-1: SerialNumber: syz [ 544.454353][ T9590] usb 3-1: USB disconnect, device number 109 [ 544.482636][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.493200][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.544185][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.553261][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.602502][ T9587] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.649546][T12093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.894634][ T9612] usb 4-1: USB disconnect, device number 95 [ 545.092426][ T9613] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 545.242288][ T9613] usb 3-1: Using ep0 maxpacket: 16 [ 545.259799][ T9613] usb 3-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00 [ 545.270603][T10653] udevd[10653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.290397][ T9613] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.290456][ T9613] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.290502][ T9613] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.290535][ T9613] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.290575][ T9613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.350817][ T9613] usb 3-1: config 0 descriptor?? [ 546.048104][T12112] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 546.147540][T12130] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 546.161510][T12130] netlink: 'syz.0.1564': attribute type 2 has an invalid length. [ 546.169570][T12130] netlink: 'syz.0.1564': attribute type 3 has an invalid length. [ 546.169588][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 547.082164][T12137] IPv6: addrconf: prefix option has invalid lifetime [ 547.504085][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055c4f800: rx timeout, send abort [ 547.513003][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888055c4f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.810860][ T9613] usbhid 3-1:0.0: can't add hid device: -71 [ 547.811142][ T9613] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.857006][ T9613] usb 3-1: USB disconnect, device number 110 [ 547.992458][ T9587] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 548.154573][ T9587] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 548.177345][ T9587] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 548.177414][ T9587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.236032][ T9587] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 548.372356][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 548.628747][T12159] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1571'. [ 548.709588][ T30] kauditd_printk_skb: 638 callbacks suppressed [ 548.709639][ T30] audit: type=1326 audit(1788949519.320:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.0.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 548.709713][ T30] audit: type=1326 audit(1788949519.320:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.0.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 548.709764][ T30] audit: type=1326 audit(1788949519.320:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.0.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 548.709813][ T30] audit: type=1326 audit(1788949519.320:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.0.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 548.709863][ T30] audit: type=1326 audit(1788949519.320:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.0.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 549.522221][ T9613] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 549.672229][ T9613] usb 2-1: Using ep0 maxpacket: 16 [ 549.675175][ T9613] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 549.679852][ T9613] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.679938][ T9613] usb 2-1: config 0 interface 0 has no altsetting 0 [ 549.680033][ T9613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.707198][ T9587] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 549.724921][ T9613] usb 2-1: config 0 descriptor?? [ 549.873160][ T9587] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 549.887713][ T9587] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.903056][ T9587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 549.913014][ T9587] usb 4-1: Product: syz [ 549.913069][ T9587] usb 4-1: Manufacturer: syz [ 550.138217][ T9587] usb 4-1: USB disconnect, device number 96 [ 550.202410][ T9612] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 550.372370][ T9612] usb 3-1: Using ep0 maxpacket: 8 [ 550.378387][ T9612] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 550.387551][ T9612] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 550.387606][ T9612] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.387631][ T9612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.387689][ T9612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 550.387715][ T9612] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.387761][ T9612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.633903][T12182] program syz.2.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.646649][ T9612] usb 3-1: usb_control_msg returned -32 [ 550.646810][ T9612] usbtmc 3-1:16.0: can't read capabilities [ 550.688453][ T9612] usb 3-1: USB disconnect, device number 111 [ 550.820343][ T9591] usb 1-1: USB disconnect, device number 6 [ 551.312286][ T9591] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 551.462632][ T9591] usb 1-1: Using ep0 maxpacket: 32 [ 551.466343][ T9591] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 551.475824][ T9591] usb 1-1: config 123 interface 0 has no altsetting 0 [ 551.490873][ T9591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.490942][ T9591] usb 1-1: Product: syz [ 551.490980][ T9591] usb 1-1: Manufacturer: syz [ 551.491043][ T9591] usb 1-1: SerialNumber: syz [ 551.777298][ T9591] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 551.795097][ T9591] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.800223][ T9591] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 551.800371][ T9591] usb 1-1: media controller created [ 551.847759][ T9591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.934494][ T9591] set interface failed [ 551.935129][ T9591] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 551.962678][ T9591] error writing reg: 0xff, val: 0x00 [ 551.973046][ T9613] usbhid 2-1:0.0: can't add hid device: -71 [ 551.973185][ T9613] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 552.003126][ T9613] usb 2-1: USB disconnect, device number 113 [ 552.123470][ T9587] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 552.155426][ T9591] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 552.200335][ T9591] usb 1-1: USB disconnect, device number 7 [ 552.289783][ T9587] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 552.310843][ T9587] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.310942][ T9587] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.311086][ T9587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.331119][ T9587] usb 4-1: config 0 descriptor?? [ 552.582844][T12212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'. [ 553.393770][ T9591] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 553.522405][ T9591] usb 2-1: device descriptor read/64, error -71 [ 553.702854][ T25] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 553.742326][ T9613] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 553.762347][ T9591] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 553.852366][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 553.854911][ T25] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 553.858041][ T25] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 553.858142][ T25] usb 3-1: config 0 has no interface number 0 [ 553.858356][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.858493][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 553.867544][ T25] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 553.867682][ T25] usb 3-1: Product: syz [ 553.867955][ T25] usb 3-1: SerialNumber: syz [ 553.884369][ T25] usb 3-1: config 0 descriptor?? [ 553.893784][ T9591] usb 2-1: device descriptor read/64, error -71 [ 553.934123][ T9613] usb 5-1: Using ep0 maxpacket: 8 [ 553.939726][ T25] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 553.946715][ T9613] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 553.958379][ T9613] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 553.958452][ T9613] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.958497][ T9613] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.958532][ T9613] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.958562][ T9613] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.958611][ T9613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.971037][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input51 [ 554.004343][ T9591] usb usb2-port1: attempt power cycle [ 554.245053][T12234] program syz.4.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.258260][ T9613] usb 5-1: usb_control_msg returned -32 [ 554.258354][ T9613] usbtmc 5-1:16.0: can't read capabilities [ 554.281042][ T9613] usb 5-1: USB disconnect, device number 120 [ 554.305993][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 554.373651][ T9591] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 554.402989][ T9591] usb 2-1: device descriptor read/8, error -71 [ 554.642324][ T9591] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 554.662970][ T9591] usb 2-1: device descriptor read/8, error -71 [ 554.773123][ T9591] usb usb2-port1: unable to enumerate USB device [ 554.781126][ T9587] usbhid 4-1:0.0: can't add hid device: -71 [ 554.781495][ T9587] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.804550][ T9587] usb 4-1: USB disconnect, device number 97 [ 555.075034][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.075411][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.075748][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.076087][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.076597][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.077034][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.077361][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.077699][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.084611][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.085947][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 555.092947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 555.112364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 555.208333][ T9591] usb 3-1: USB disconnect, device number 112 [ 555.208612][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 555.256403][ T9591] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 555.879912][T12250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 555.891991][T12253] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 556.172857][ T9591] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 556.329330][ T9591] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 556.336370][ T9591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.336535][ T9591] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 556.336613][ T9591] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 556.336685][ T9591] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.336806][ T9591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.448641][T12268] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 556.603352][T12272] usb usb7: usbfs: process 12272 (syz.1.1599) did not claim interface 0 before use [ 556.665963][ T9587] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 556.813771][ T9587] usb 5-1: Using ep0 maxpacket: 16 [ 556.820761][ T9587] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.835905][ T9587] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 556.835975][ T9587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.869987][ T9587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.870072][ T9587] usb 5-1: Product: syz [ 556.870104][ T9587] usb 5-1: Manufacturer: syz [ 556.870124][ T9587] usb 5-1: SerialNumber: syz [ 556.906007][ T9587] usb 5-1: config 0 descriptor?? [ 556.929655][ T9587] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 556.942356][ T9587] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 557.252380][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 557.554182][ T9587] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 557.560880][ T9587] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 557.702434][ T9613] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 557.897738][ T9613] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 557.913159][ T9613] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.913223][ T9613] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.913306][ T9613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.965553][ T9613] usb 4-1: config 0 descriptor?? [ 558.134672][ T9591] gud 1-1:1.0: Failed to add properties (error=-71) [ 558.141666][ T9591] gud 1-1:1.0: probe with driver gud failed with error -71 [ 558.373123][ T9612] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 558.522735][ T9612] usb 3-1: Using ep0 maxpacket: 8 [ 558.531560][ T9612] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 558.552014][ T9612] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 558.554764][ T9612] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.554860][ T9612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.554939][ T9612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 558.555003][ T9612] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.555128][ T9612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.607272][ T9587] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 558.616403][ T9587] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 558.632672][ T9587] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 558.646284][ T9587] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 558.871075][T12281] program syz.2.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.903287][ T9612] usb 3-1: usb_control_msg returned -32 [ 558.903380][ T9612] usbtmc 3-1:16.0: can't read capabilities [ 558.970776][ T9612] usb 3-1: USB disconnect, device number 113 [ 559.311211][ T9587] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 559.358105][ T9591] usb 1-1: USB disconnect, device number 8 [ 559.377377][ T9587] usb 5-1: USB disconnect, device number 121 [ 560.364841][ T9613] usbhid 4-1:0.0: can't add hid device: -71 [ 560.365124][ T9613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 560.397691][ T9612] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 560.402880][ T9613] usb 4-1: USB disconnect, device number 98 [ 560.575763][ T9612] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.596194][ T9612] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.596254][ T9612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.596277][ T9612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.596431][ T9612] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.650835][ T9612] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.650907][ T9612] usb 5-1: Product: syz [ 560.650946][ T9612] usb 5-1: Manufacturer: syz [ 560.698999][ T9612] cdc_wdm 5-1:1.0: skipping garbage [ 560.699068][ T9612] cdc_wdm 5-1:1.0: skipping garbage [ 560.733848][ T9612] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 560.733909][ T9612] cdc_wdm 5-1:1.0: Unknown control protocol [ 560.935212][ T9612] usb 5-1: USB disconnect, device number 122 [ 561.537027][T12337] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 561.541308][T12337] ip6tnl0: Caught tx_queue_len zero misconfig [ 561.817209][ T9612] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 561.982476][ T9612] usb 2-1: Using ep0 maxpacket: 32 [ 561.984467][ T9612] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 561.987785][ T9612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.013324][ T9612] usb 2-1: config 0 descriptor?? [ 562.435872][ T9612] hid (null): report_id 1207967084 is invalid [ 562.436848][ T9612] hid (null): unknown global tag 0xe [ 562.463650][ T9613] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 562.474855][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.478531][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.478632][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.478717][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.478792][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.478878][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: unknown main item tag 0x0 [ 562.482800][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: report_id 1207967084 is invalid [ 562.482825][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: item 0 4 1 8 parsing failed [ 562.493754][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: parse failed (reason: -22) [ 562.494115][ T9612] hid-corsair-void 0003:1B1C:1B27.001A: probe with driver hid-corsair-void failed with error -22 [ 562.633230][ T9613] usb 1-1: Using ep0 maxpacket: 8 [ 562.636999][ T9613] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 562.648292][ T9613] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 562.648356][ T9613] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.648380][ T9613] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.648406][ T9613] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.648431][ T9613] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.648475][ T9613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.728198][ T9591] usb 2-1: USB disconnect, device number 118 [ 562.983472][T12347] program syz.0.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.025138][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.036714][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.045488][ T9613] usb 1-1: usb_control_msg returned -32 [ 563.045581][ T9613] usbtmc 1-1:16.0: can't read capabilities [ 563.096850][ T9613] usb 1-1: USB disconnect, device number 9 [ 563.242373][T12354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.702424][ T9590] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 563.863239][ T9590] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 563.875107][ T9590] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.875145][ T9590] usb 3-1: config 0 interface 0 has no altsetting 0 [ 563.875226][ T9590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.920564][ T9590] usb 3-1: config 0 descriptor?? [ 564.399896][T12370] xt_ipcomp: unknown flags 1D [ 564.618106][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 564.635328][T12374] Invalid argument reading file caps for ./file0 [ 565.069035][T12378] binder: BINDER_SET_CONTEXT_MGR already set [ 565.069080][T12378] binder: 12377:12378 ioctl 4018620d 200000004a80 returned -16 [ 565.080335][T12379] binder_alloc: binder_alloc_mmap_handler: 12377 200000ffe000-200001000000 already mapped failed -16 [ 565.433664][ T9591] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 565.485497][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 565.549210][T12386] bond15 (unregistering): Released all slaves [ 565.594660][ T9591] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 565.600996][ T9591] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.601202][ T9591] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.601317][ T9591] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.601384][ T9591] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.601567][ T9591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.650534][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1625'. [ 565.736102][T12389] SET target dimension over the limit! [ 565.908291][T12398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.969280][T12401] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 566.101160][T12405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1630'. [ 566.111410][T12405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1630'. [ 566.322607][ T9591] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 566.446502][ T9590] usbhid 3-1:0.0: can't add hid device: -71 [ 566.446646][ T9590] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 566.466692][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 566.484404][ T9590] usb 3-1: USB disconnect, device number 114 [ 566.493017][ T9591] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 566.505829][ T9591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.505890][ T9591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.505973][ T9591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.565301][ T9591] usb 2-1: config 0 descriptor?? [ 566.602311][ T25] usb 1-1: device descriptor read/64, error -71 [ 566.832636][ T1220] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 566.842250][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 566.972703][ T25] usb 1-1: device descriptor read/64, error -71 [ 566.985453][T12404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.994402][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 567.000397][ T1220] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 567.011466][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.011512][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.011574][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.058458][T12404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.075588][ T1220] usb 4-1: config 0 descriptor?? [ 567.082648][ T25] usb usb1-port1: attempt power cycle [ 567.295926][T12404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.299041][T12404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.376474][ T9591] hid-led 0003:27B8:01ED.001B: probe with driver hid-led failed with error -71 [ 567.390450][ T9591] usb 2-1: USB disconnect, device number 119 [ 567.422282][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 567.443182][ T25] usb 1-1: device descriptor read/8, error -71 [ 567.498859][T12424] fuse: Bad value for 'fd' [ 567.663704][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.673095][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.684541][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 567.698880][ T30] audit: type=1326 audit(1788949538.300:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.699011][ T30] audit: type=1326 audit(1788949538.310:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.699086][ T30] audit: type=1326 audit(1788949538.310:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.699163][ T30] audit: type=1326 audit(1788949538.310:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724095][ T30] audit: type=1326 audit(1788949538.310:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724182][ T30] audit: type=1326 audit(1788949538.310:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724227][ T30] audit: type=1326 audit(1788949538.310:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724296][ T30] audit: type=1326 audit(1788949538.310:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724343][ T30] audit: type=1326 audit(1788949538.310:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.724394][ T30] audit: type=1326 audit(1788949538.310:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.1634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2399e159 code=0x7ffc0000 [ 567.825638][ T25] usb 1-1: device descriptor read/8, error -71 [ 567.951011][ T25] usb usb1-port1: unable to enumerate USB device [ 567.965392][ T1220] apple 0003:05AC:024B.001C: unknown global tag 0xe [ 567.972201][ T1220] apple 0003:05AC:024B.001C: item 0 1 1 14 parsing failed [ 567.980470][ T1220] apple 0003:05AC:024B.001C: parse failed [ 567.986617][ T1220] apple 0003:05AC:024B.001C: probe with driver apple failed with error -22 [ 568.737547][ T9612] usb 5-1: USB disconnect, device number 123 [ 569.175071][ T9613] usb 4-1: USB disconnect, device number 99 [ 569.532376][ T25] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 569.684169][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 569.694882][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 569.694929][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 569.694958][ T25] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 569.694986][ T25] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 569.695028][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.756081][T12455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.832754][ T9612] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 569.863919][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.864375][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.995898][ T9612] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 570.005691][ T9612] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.005728][ T9612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.005766][ T9612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.037522][ T9612] usb 4-1: config 0 descriptor?? [ 570.044608][ T9591] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.082630][ T1220] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 570.202361][ T9591] usb 1-1: Using ep0 maxpacket: 32 [ 570.217930][ T9591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 570.218143][ T9591] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 570.237591][ T1220] usb 5-1: device descriptor read/64, error -71 [ 570.257343][ T9591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.266440][ T9591] usb 1-1: Product: syz [ 570.266466][ T9591] usb 1-1: Manufacturer: syz [ 570.266484][ T9591] usb 1-1: SerialNumber: syz [ 570.325153][ T9591] usb 1-1: selecting invalid altsetting 1 [ 570.334042][ T25] ims_pcu 3-1:1.0: GET_INFO command failed, error: -71 [ 570.342266][ T25] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -71 [ 570.363202][ T9591] usb 1-1: selecting invalid altsetting 1 [ 570.384697][ T9591] usb 1-1: selecting invalid altsetting 1 [ 570.483874][ T1220] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 570.515842][T10692] udevd[10692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.550004][ T9613] usb 1-1: USB disconnect, device number 14 [ 570.622237][ T1220] usb 5-1: device descriptor read/64, error -71 [ 570.736010][ T1220] usb usb5-port1: attempt power cycle [ 571.083156][ T1220] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 571.114555][ T1220] usb 5-1: device descriptor read/8, error -71 [ 571.197232][T12480] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 571.352320][ T1220] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 571.380566][ T1220] usb 5-1: device descriptor read/8, error -71 [ 571.484411][ T1220] usb usb5-port1: unable to enumerate USB device [ 572.084943][ T9613] usb 3-1: USB disconnect, device number 115 [ 572.414398][ T9612] usbhid 4-1:0.0: can't add hid device: -71 [ 572.414560][ T9612] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 572.439281][ T9612] usb 4-1: USB disconnect, device number 100 [ 572.972589][ T9612] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 573.133060][ T9612] usb 4-1: Using ep0 maxpacket: 32 [ 573.144199][ T9612] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 573.154616][ T9612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.168941][ T9612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.169000][ T9612] usb 4-1: Product: syz [ 573.169020][ T9612] usb 4-1: Manufacturer: syz [ 573.169037][ T9612] usb 4-1: SerialNumber: syz [ 573.203593][ T9612] usb 4-1: config 0 descriptor?? [ 573.221915][ T9612] cdc_ether 4-1:0.0: missing cdc header descriptor [ 573.232997][ T9612] usb 4-1: unsupported MDLM descriptors [ 573.430429][ T9612] usb 4-1: USB disconnect, device number 101 [ 573.534467][T12507] kvm: pic: non byte write [ 574.797679][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 574.870750][T12526] bond9 (unregistering): Released all slaves [ 574.909944][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'. [ 575.025535][T12530] SET target dimension over the limit! [ 575.154714][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1666'. [ 575.163986][ T9612] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 575.175612][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 575.203754][T12535] ipvlan2: entered allmulticast mode [ 575.209265][T12535] erspan0: entered allmulticast mode [ 575.323167][ T9612] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 575.324639][ T9612] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.324700][ T9612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 575.324742][ T9612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.361324][ T9612] usb 1-1: config 0 descriptor?? [ 575.582648][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 575.742580][ T9] usb 2-1: device descriptor read/64, error -71 [ 575.794413][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.807620][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.982223][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 576.022421][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 576.122255][ T9] usb 2-1: device descriptor read/64, error -71 [ 576.142412][ T1220] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 576.152229][ T25] usb 5-1: device descriptor read/64, error -71 [ 576.242726][ T9] usb usb2-port1: attempt power cycle [ 576.273460][ T1220] usb 4-1: device descriptor read/64, error -71 [ 576.353421][ T9591] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 576.393040][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 576.502228][ T9591] usb 3-1: Using ep0 maxpacket: 16 [ 576.508122][ T9591] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 576.519514][ T1220] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 576.527428][ T25] usb 5-1: device descriptor read/64, error -71 [ 576.531806][ T9591] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 576.531910][ T9591] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.533498][ T9591] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.533581][ T9591] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.533658][ T9591] usb 3-1: config 0 interface 0 has no altsetting 0 [ 576.550436][ T9591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.550527][ T9591] usb 3-1: Product: syz [ 576.550571][ T9591] usb 3-1: Manufacturer: syz [ 576.550617][ T9591] usb 3-1: SerialNumber: syz [ 576.589804][ T9591] usb 3-1: config 0 descriptor?? [ 576.607528][T12567] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 576.632852][ T25] usb usb5-port1: attempt power cycle [ 576.652297][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 576.662444][ T1220] usb 4-1: device descriptor read/64, error -71 [ 576.675203][ T9] usb 2-1: device descriptor read/8, error -71 [ 576.772828][ T1220] usb usb4-port1: attempt power cycle [ 576.817622][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.820440][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.850011][ T9591] usb 3-1: Can not set alternate setting to 1, error: -71 [ 576.850111][ T9591] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 576.881078][ T9591] usb 3-1: USB disconnect, device number 116 [ 576.894586][T10692] udevd[10692]: setting owner of /dev/bus/usb/003/116 to uid=0, gid=0 failed: No such file or directory [ 576.922451][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 576.953502][ T9] usb 2-1: device descriptor read/8, error -71 [ 576.972367][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 576.993002][ T25] usb 5-1: device descriptor read/8, error -71 [ 577.072863][ T9] usb usb2-port1: unable to enumerate USB device [ 577.112361][ T1220] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 577.133774][ T1220] usb 4-1: device descriptor read/8, error -71 [ 577.232397][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 577.253186][ T25] usb 5-1: device descriptor read/8, error -71 [ 577.362690][ T25] usb usb5-port1: unable to enumerate USB device [ 577.372445][ T1220] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 577.393192][ T1220] usb 4-1: device descriptor read/8, error -71 [ 577.502680][ T1220] usb usb4-port1: unable to enumerate USB device [ 577.539714][T12570] program syz.2.1674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.540320][T12570] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 577.777993][ T9612] usbhid 1-1:0.0: can't add hid device: -71 [ 577.785755][ T9612] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 577.805668][ T9612] usb 1-1: USB disconnect, device number 15 [ 577.995687][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 578.016798][T12574] veth1_to_team: entered promiscuous mode [ 578.026870][T12574] debugfs: 'hsr1' already exists in 'hsr' [ 578.033373][T12574] Cannot create hsr debugfs directory [ 578.038955][T12574] hsr1: entered promiscuous mode [ 580.623267][ T1220] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 580.704818][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 580.810562][ T1220] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 580.816427][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.022861][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 581.022920][T12605] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1683'. [ 581.030153][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 581.118472][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 581.187154][T12613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.751425][T12614] syzkaller0: entered promiscuous mode [ 581.761441][T12614] syzkaller0: entered allmulticast mode [ 581.963334][ C1] usb 5-1: NFC: Received an invalid frame [ 582.016756][ T1220] usb 5-1: NFC: Unable to get FW version [ 582.049405][ T1220] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -5 [ 582.093642][ T9612] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 582.273606][ T9612] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 582.302820][ T9612] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 582.302857][ T9612] usb 4-1: config 0 has an invalid interface number: 10 but max is 2 [ 582.302909][ T9612] usb 4-1: config 0 has no interface number 0 [ 582.302933][ T9612] usb 4-1: config 0 has no interface number 1 [ 582.302991][ T9612] usb 4-1: too many endpoints for config 0 interface 10 altsetting 48: 48, using maximum allowed: 30 [ 582.303030][ T9612] usb 4-1: config 0 interface 10 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 582.303061][ T9612] usb 4-1: config 0 interface 10 has no altsetting 0 [ 582.303103][ T9612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.384264][ T9612] usb 4-1: config 0 descriptor?? [ 584.315307][ T9612] usb 4-1: Could not set interface, error -71 [ 584.338117][ T9612] usb 4-1: string descriptor 0 read error: -71 [ 584.370894][ T9612] usb 4-1: USB disconnect, device number 106 [ 586.870141][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'. [ 589.574097][ T9612] usb 5-1: USB disconnect, device number 6 [ 589.648756][T12685] ip6gre2: entered promiscuous mode [ 589.654219][T12685] ip6gre2: entered allmulticast mode [ 589.820508][T12696] netlink: 'syz.1.1718': attribute type 29 has an invalid length. [ 589.836592][T12696] netlink: 'syz.1.1718': attribute type 29 has an invalid length. [ 590.652005][T12720] netlink: 'syz.2.1727': attribute type 9 has an invalid length. [ 590.661421][T12720] netlink: 'syz.2.1727': attribute type 7 has an invalid length. [ 590.670343][T12720] netlink: 'syz.2.1727': attribute type 8 has an invalid length. [ 590.998246][T12730] bond0: entered allmulticast mode [ 591.039381][T12730] ip6gretap1: entered allmulticast mode [ 591.047244][T12730] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 591.309116][T12736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.933343][T12754] syzkaller0: entered promiscuous mode [ 591.933400][T12754] syzkaller0: entered allmulticast mode [ 592.217440][T12762] kvm: pic: non byte read [ 592.228904][T12762] kvm: pic: non byte read [ 592.248137][T12762] kvm: pic: single mode not supported [ 592.248334][T12762] kvm: pic: level sensitive irq not supported [ 592.258735][T12762] kvm: pic: non byte read [ 592.265720][T12762] kvm: pic: level sensitive irq not supported [ 592.265901][T12762] kvm: pic: non byte read [ 592.266432][T12762] kvm: pic: single mode not supported [ 592.266568][T12762] kvm: pic: non byte read [ 592.275728][T12762] kvm: pic: non byte read [ 592.276356][T12762] kvm: pic: non byte read [ 592.284741][T12762] kvm: pic: non byte read [ 592.285354][T12762] kvm: pic: single mode not supported [ 592.285386][T12762] kvm: pic: level sensitive irq not supported [ 592.285524][T12762] kvm: pic: non byte read [ 595.700972][T12820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.715458][T12787] gretap3: entered promiscuous mode [ 599.054506][ T30] kauditd_printk_skb: 1723 callbacks suppressed [ 599.054556][ T30] audit: type=1326 audit(1788949569.670:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.1.1767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42d119e159 code=0x0 [ 601.520199][T12933] futex_wake_op: syz.4.1798 tries to shift op by -1; fix this program [ 601.651163][T12935] ip6gre2: entered promiscuous mode [ 601.651217][T12935] ip6gre2: entered allmulticast mode [ 602.348003][ T30] audit: type=1800 audit(1788949572.960:3741): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1811" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 602.694542][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 602.697133][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 602.732859][ T9612] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 603.034273][ T9612] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 603.492513][ T9612] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 604.098162][T13042] bond7 (unregistering): Released all slaves [ 604.176784][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 604.277008][T13053] SET target dimension over the limit! [ 605.198628][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 605.472457][ T9613] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 605.602241][ T9591] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 605.624597][ T9613] usb 4-1: not running at top speed; connect to a high speed hub [ 605.624656][ T9613] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 605.630388][ T9613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.659981][ T9613] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 605.752783][ T9591] usb 5-1: Using ep0 maxpacket: 16 [ 605.759024][ T9591] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 605.782457][ T9591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.782509][ T9591] usb 5-1: Product: syz [ 605.782563][ T9591] usb 5-1: Manufacturer: syz [ 605.790701][ T9591] usb 5-1: SerialNumber: syz [ 605.806289][ T1220] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 605.822022][ T9591] usb 5-1: config 0 descriptor?? [ 605.834917][ T9591] usb 5-1: selecting invalid altsetting 1 [ 605.841039][ T9591] technisat-usb2: could not set alternate setting to 0 [ 605.964659][ T1220] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.977255][ T1220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.977333][ T1220] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.977384][ T1220] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 606.016781][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.016832][ T1220] usb 3-1: Product: syz [ 606.016899][ T1220] usb 3-1: Manufacturer: syz [ 606.016923][ T1220] usb 3-1: SerialNumber: syz [ 606.059975][ T9591] technisat-usb2: firmware version: 0.0 [ 606.065952][ T9591] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 606.142380][T13076] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 606.294565][ T1220] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 606.322944][ T1220] usb 3-1: USB disconnect, device number 117 [ 606.470254][ T9591] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 606.480671][ T9591] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 606.490132][ T9591] usb 5-1: media controller created [ 606.495924][ T9591] technisat-usb2: i2c-error: out failed 53 = -22 [ 606.509094][ T9591] dvb-usb: MAC address reading failed. [ 606.529418][ T9591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 606.600162][ T9591] DVB: Unable to find symbol stv090x_attach() [ 606.664981][ T9591] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 606.778585][ T9612] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 606.809462][T13091] ip6gre1: entered promiscuous mode [ 606.815056][T13091] ip6gre1: entered allmulticast mode [ 606.825293][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.828510][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.852484][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 606.858288][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.876212][T13073] syz.4.1855: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 606.876498][T13073] CPU: 0 UID: 0 PID: 13073 Comm: syz.4.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.876635][T13073] Tainted: [L]=SOFTLOCKUP [ 606.876660][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.876709][T13073] Call Trace: [ 606.876750][T13073] [ 606.876778][T13073] dump_stack_lvl+0xe8/0x150 [ 606.876953][T13073] warn_alloc+0x24d/0x270 [ 606.877075][T13073] ? __lock_acquire+0x747/0x2de0 [ 606.877193][T13073] ? __pfx_warn_alloc+0x10/0x10 [ 606.877312][T13073] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 606.877557][T13073] __vmalloc_node_range_noprof+0x127/0x1540 [ 606.877675][T13073] ? __pfx___mutex_trylock_common+0x10/0x10 [ 606.877817][T13073] ? rcu_is_watching+0x16/0xb0 [ 606.877909][T13073] ? trace_contention_end+0x3d/0x140 [ 606.877997][T13073] ? __mutex_lock+0x30b/0x1550 [ 606.878171][T13073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 606.878348][T13073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 606.878446][T13073] ? dvb_demux_do_ioctl+0x320/0x540 [ 606.878561][T13073] ? __pfx___mutex_lock+0x10/0x10 [ 606.878635][T13073] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 606.878740][T13073] vmalloc_noprof+0xb2/0xe0 [ 606.878841][T13073] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 606.878941][T13073] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 606.879063][T13073] dvb_demux_do_ioctl+0x45d/0x540 [ 606.879170][T13073] dvb_usercopy+0x199/0x2e0 [ 606.879263][T13073] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 606.879352][T13073] ? __pfx_dvb_usercopy+0x10/0x10 [ 606.879497][T13073] ? __fget_files+0x3a2/0x420 [ 606.879628][T13073] ? __fget_files+0x2a/0x420 [ 606.879727][T13073] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 606.879817][T13073] dvb_demux_ioctl+0x29/0x40 [ 606.879912][T13073] __se_sys_ioctl+0xfc/0x170 [ 606.880000][T13073] do_syscall_64+0x166/0x520 [ 606.880070][T13073] ? trace_irq_disable+0x3b/0x140 [ 606.880165][T13073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.880260][T13073] ? clear_bhb_loop+0x70/0xc0 [ 606.880344][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.880416][T13073] RIP: 0033:0x7f4c8a19e159 [ 606.880487][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.880558][T13073] RSP: 002b:00007f4c8afc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.880641][T13073] RAX: ffffffffffffffda RBX: 00007f4c8a425fa0 RCX: 00007f4c8a19e159 [ 606.880691][T13073] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 606.880738][T13073] RBP: 00007f4c8a23503b R08: 0000000000000000 R09: 0000000000000000 [ 606.880788][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.880845][T13073] R13: 00007f4c8a426038 R14: 00007f4c8a425fa0 R15: 00007f4c8a54fa48 [ 606.880954][T13073] [ 606.901016][T13073] Mem-Info: [ 606.901129][T13073] active_anon:38106 inactive_anon:12 isolated_anon:0 [ 606.901129][T13073] active_file:4323 inactive_file:57215 isolated_file:0 [ 606.901129][T13073] unevictable:27 dirty:60 writeback:0 [ 606.901129][T13073] slab_reclaimable:11249 slab_unreclaimable:107400 [ 606.901129][T13073] mapped:33072 shmem:32795 pagetables:1479 [ 606.901129][T13073] sec_pagetables:0 bounce:0 [ 606.901129][T13073] kernel_misc_reclaimable:0 [ 606.901129][T13073] free:1235782 free_pcp:13368 free_cma:0 [ 606.901341][T13073] Node 0 active_anon:152424kB inactive_anon:48kB active_file:17292kB inactive_file:228660kB unevictable:108kB isolated(anon):0kB isolated(file):0kB mapped:132288kB dirty:240kB writeback:0kB shmem:131180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14412kB pagetables:5756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.901570][T13073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.901776][T13073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.905619][T13073] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 606.905838][T13073] Node 0 DMA32 free:979260kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:152424kB inactive_anon:48kB active_file:17292kB inactive_file:228660kB unevictable:108kB writepending:340kB zspages:340kB present:3129332kB managed:2546668kB mlocked:108kB bounce:0kB free_pcp:49340kB local_pcp:22872kB free_cma:0kB [ 606.906054][T13073] lowmem_reserve[]: 0 0 0 0 0 [ 606.908288][T13073] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.908514][T13073] lowmem_reserve[]: 0 0 0 0 0 [ 606.908683][T13073] Node 1 Normal free:3948508kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4128kB local_pcp:32kB free_cma:0kB [ 606.908923][T13073] lowmem_reserve[]: 0 0 0 0 0 [ 606.909084][T13073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.909734][T13073] Node 0 DMA32: 1874*4kB (UME) 1368*8kB (UME) 881*16kB (UME) 297*32kB (UME) 176*64kB (UME) 98*128kB (UME) 40*256kB (M) 24*512kB (UM) 4*1024kB (M) 1*2048kB (E) 216*4096kB (UM) = 979256kB [ 606.918218][T13073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 606.918446][T13073] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 5*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 4*2048kB (UM) 961*4096kB (UM) = 3948508kB [ 606.919067][T13073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.919166][T13073] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.919224][T13073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.919276][T13073] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 606.919374][T13073] 94342 total pagecache pages [ 606.919404][T13073] 13 pages in swap cache [ 606.919426][T13073] Free swap = 124816kB [ 606.919449][T13073] Total swap = 124996kB [ 606.919480][T13073] 2097051 pages RAM [ 606.919548][T13073] 0 pages HighMem/MovableOnly [ 606.919577][T13073] 428768 pages reserved [ 606.919599][T13073] 0 pages cma reserved [ 606.924959][ T9591] rc_core: IR keymap rc-technisat-usb2 not found [ 606.924978][ T9591] Registered IR keymap rc-empty [ 606.926317][ T9591] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 606.940223][ T9612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.963923][ T9612] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.963965][ T9612] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.963988][ T9612] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 607.039876][ T9612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.040015][ T9612] usb 3-1: Product: syz [ 607.040058][ T9612] usb 3-1: Manufacturer: syz [ 607.040205][ T9612] usb 3-1: SerialNumber: syz [ 607.151428][ T9591] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input52 [ 607.333411][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 607.666867][ T9591] dvb-usb: schedule remote query interval to 100 msecs. [ 607.695594][ T9591] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 607.708220][ T9591] usb 5-1: USB disconnect, device number 7 [ 607.761473][ T9591] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 607.893124][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 607.969123][T13098] bond15 (unregistering): Released all slaves [ 607.994278][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'. [ 608.037836][T13102] SET target dimension over the limit! [ 608.153492][ T9612] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 608.187568][ T9612] usb 3-1: USB disconnect, device number 118 [ 608.232221][ T9591] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 608.280096][ T9613] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 608.302037][ T9613] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 608.335771][ T9613] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 608.392923][ T9591] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 608.401206][ T9613] usb 4-1: USB disconnect, device number 107 [ 608.414964][ T9591] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 608.428111][ T9591] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.441545][ T9591] usb 5-1: config 0 interface 0 has no altsetting 0 [ 608.441713][ T9591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.487583][ T9591] usb 5-1: config 0 descriptor?? [ 608.496328][T13104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 608.554430][ T9613] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 608.637377][ T9613] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 608.656415][ T9613] mos7720 4-1:1.0: device disconnected [ 608.996740][ T9591] cypress 0003:04B4:DE61.001D: ignoring exceeding usage max [ 609.009758][ T9591] cypress 0003:04B4:DE61.001D: unknown main item tag 0x2 [ 609.017489][ T9591] cypress 0003:04B4:DE61.001D: unknown global tag 0xd [ 609.025136][ T9591] cypress 0003:04B4:DE61.001D: item 0 2 1 13 parsing failed [ 609.035600][ T9591] cypress 0003:04B4:DE61.001D: parse failed [ 609.041999][ T9591] cypress 0003:04B4:DE61.001D: probe with driver cypress failed with error -22 [ 609.112280][ T1220] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 609.196242][ T9613] usb 5-1: USB disconnect, device number 8 [ 609.432977][ T1220] usb 2-1: device descriptor read/64, error -71 [ 609.485985][T13136] ip6gre1: entered promiscuous mode [ 609.493240][T13136] ip6gre1: entered allmulticast mode [ 609.673526][ T1220] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 609.823893][ T1220] usb 2-1: device descriptor read/64, error -71 [ 609.854571][ T9613] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 609.933591][ T1220] usb usb2-port1: attempt power cycle [ 610.013927][ T9613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 610.024719][ T9613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.034964][ T9613] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 610.044875][ T9613] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.061175][ T9613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.061244][ T9613] usb 4-1: Product: syz [ 610.068274][ T9613] usb 4-1: Manufacturer: syz [ 610.068348][ T9613] usb 4-1: SerialNumber: syz [ 610.094291][ T9613] hub 4-1:1.0: bad descriptor, ignoring hub [ 610.095983][ T9613] hub 4-1:1.0: probe with driver hub failed with error -5 [ 610.242318][ T9591] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 610.275684][ T1220] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 610.296235][ T9613] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 610.322736][ T1220] usb 2-1: device descriptor read/8, error -71 [ 610.389368][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 610.447730][ T9591] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 610.463351][ T9591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.463429][ T9591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.491583][ T9591] usb 5-1: config 0 descriptor?? [ 610.519426][ T9591] pwc: Askey VC010 type 2 USB webcam detected. [ 610.582410][ T1220] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 610.618038][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.624513][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.722045][ T1220] usb 2-1: device descriptor read/8, error -71 [ 610.832777][ T1220] usb usb2-port1: unable to enumerate USB device [ 610.916451][ T9591] pwc: recv_control_msg error -32 req 02 val 2b00 [ 610.924579][ T9591] pwc: recv_control_msg error -32 req 02 val 2700 [ 610.935755][ T9591] pwc: recv_control_msg error -32 req 02 val 2c00 [ 610.953058][ T9591] pwc: recv_control_msg error -32 req 04 val 1000 [ 610.961338][ T9591] pwc: recv_control_msg error -32 req 04 val 1300 [ 610.985526][ T9591] pwc: recv_control_msg error -32 req 04 val 1400 [ 611.027550][ T9591] pwc: recv_control_msg error -32 req 02 val 2000 [ 611.036721][ T9591] pwc: recv_control_msg error -32 req 02 val 2100 [ 611.061819][ T9591] pwc: recv_control_msg error -32 req 04 val 1500 [ 611.070290][ T9591] pwc: recv_control_msg error -32 req 02 val 2500 [ 611.078232][ T9591] pwc: recv_control_msg error -32 req 02 val 2400 [ 611.092355][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.110698][ T9591] pwc: recv_control_msg error -32 req 02 val 2600 [ 611.496038][ T9591] pwc: recv_control_msg error -71 req 02 val 2800 [ 611.503653][ T9591] pwc: recv_control_msg error -71 req 04 val 1100 [ 611.510590][ T9591] pwc: recv_control_msg error -71 req 04 val 1200 [ 611.512480][ T9613] usb 4-1: USB disconnect, device number 108 [ 611.545359][ T9591] pwc: Registered as video103. [ 611.557613][ T9613] usblp0: removed [ 611.557637][ T9591] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 611.609050][ T9591] usb 5-1: USB disconnect, device number 9 [ 611.730997][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 612.120080][T13186] usb usb8: usbfs: process 13186 (syz.4.1881) did not claim interface 0 before use [ 612.382375][ T9613] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 612.532414][ T9613] usb 5-1: Using ep0 maxpacket: 32 [ 612.534360][ T9613] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 612.537180][ T9613] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.537260][ T9613] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 612.537328][ T9613] usb 5-1: config 0 interface 0 has no altsetting 0 [ 612.543908][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.543984][ T9613] usb 5-1: Product: syz [ 612.544028][ T9613] usb 5-1: Manufacturer: syz [ 612.544073][ T9613] usb 5-1: SerialNumber: syz [ 612.564592][ T9613] usb 5-1: config 0 descriptor?? [ 612.759188][T13205] bridge0: port 1(vlan2) entered blocking state [ 612.759319][T13205] bridge0: port 1(vlan2) entered forwarding state [ 612.760015][T13204] No such timeout policy "syz1" [ 612.784024][T13205] bridge0: entered promiscuous mode [ 613.007216][ T9613] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 613.431652][ T9613] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 613.784979][ T9613] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 613.947197][ T9613] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 613.988429][ T9613] usb 5-1: USB disconnect, device number 10 [ 614.396867][T13245] loop5: detected capacity change from 0 to 7 [ 614.409596][T13245] Dev loop5: unable to read RDB block 7 [ 614.419809][T13245] loop5: unable to read partition table [ 614.428192][T13245] loop5: partition table beyond EOD, truncated [ 614.428852][T13245] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 614.635249][T13255] syzkaller0: entered promiscuous mode [ 614.641042][T13255] syzkaller0: entered allmulticast mode [ 614.655592][T13255] tipc: Enabled bearer , priority 0 [ 614.667157][T13255] tipc: Resetting bearer [ 614.687064][T13254] tipc: Resetting bearer [ 614.734604][T13254] tipc: Disabling bearer [ 614.752240][ T1220] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 614.913087][ T1220] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.927533][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.927568][ T1220] usb 3-1: Product: syz [ 614.927592][ T1220] usb 3-1: Manufacturer: syz [ 614.927607][ T1220] usb 3-1: SerialNumber: syz [ 615.370397][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 615.370551][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 615.502401][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 616.706486][ T30] audit: type=1326 audit(1788949587.320:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.732335][ T30] audit: type=1326 audit(1788949587.320:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.733229][ T30] audit: type=1326 audit(1788949587.350:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.733283][ T30] audit: type=1326 audit(1788949587.350:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.733330][ T30] audit: type=1326 audit(1788949587.350:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.734857][ T30] audit: type=1326 audit(1788949587.350:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.739394][ T30] audit: type=1326 audit(1788949587.350:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.740399][ T30] audit: type=1326 audit(1788949587.350:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.751008][ T30] audit: type=1326 audit(1788949587.350:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.751174][ T30] audit: type=1326 audit(1788949587.350:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.0.1908" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e0b9e159 code=0x7ffc0000 [ 616.764146][T13289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1908'. [ 616.764218][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1908'. [ 617.612515][ T9587] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 617.752661][ T9587] usb 4-1: device descriptor read/64, error -71 [ 617.992527][ T9587] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 618.063814][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 618.063897][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 618.063952][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 618.078072][ T1220] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 618.117159][ T1220] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 618.125526][ T9587] usb 4-1: device descriptor read/64, error -71 [ 618.153731][ T1220] usb 3-1: USB disconnect, device number 119 [ 618.232690][ T9587] usb usb4-port1: attempt power cycle [ 618.572283][ T9587] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 618.602995][ T9587] usb 4-1: device descriptor read/8, error -71 [ 618.842502][ T9587] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 618.863800][ T9587] usb 4-1: device descriptor read/8, error -71 [ 618.972760][ T9587] usb usb4-port1: unable to enumerate USB device [ 619.074065][ T6691] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 619.242203][ T6691] usb 3-1: Using ep0 maxpacket: 8 [ 619.244340][ T6691] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 619.249671][ T6691] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 619.250011][ T6691] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.250084][ T6691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.250158][ T6691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.250229][ T6691] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.250349][ T6691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.536866][T13309] program syz.2.1914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.550686][ T6691] usb 3-1: usb_control_msg returned -32 [ 619.550773][ T6691] usbtmc 3-1:16.0: can't read capabilities [ 619.578586][ T6691] usb 3-1: USB disconnect, device number 120 [ 619.917934][T13323] syzkaller0: entered promiscuous mode [ 619.917975][T13323] syzkaller0: entered allmulticast mode [ 619.982377][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 620.054848][T13328] IPv6: Can't replace route, no match found [ 620.301797][T13333] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 620.302041][T13333] netlink: 'syz.0.1920': attribute type 2 has an invalid length. [ 620.303296][T13333] netlink: 'syz.0.1920': attribute type 3 has an invalid length. [ 620.303597][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 620.802318][ T1220] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 620.876281][T13349] fuse: Bad value for 'fd' [ 620.952202][ T1220] usb 1-1: Using ep0 maxpacket: 32 [ 620.959984][ T1220] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 620.971148][ T1220] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7 [ 620.985816][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.002313][ T1220] usb 1-1: Product: syz [ 621.006805][ T1220] usb 1-1: Manufacturer: syz [ 621.006829][ T1220] usb 1-1: SerialNumber: syz [ 621.258468][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.269584][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.458915][T13352] kvm: pic: non byte write [ 621.553217][ T1220] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 621.588746][ T1220] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 621.763532][ T1220] usb 1-1: USB disconnect, device number 17 [ 621.891884][T13096] udevd[13096]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.388619][T13370] netlink: 'syz.0.1929': attribute type 4 has an invalid length. [ 622.388673][T13370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1929'. [ 622.446981][T13370] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 622.722593][ T6691] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 622.885767][ T6691] usb 1-1: Using ep0 maxpacket: 16 [ 622.892370][ T6691] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.901109][ T6691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.901183][ T6691] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.920513][ T6691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.920588][ T6691] usb 1-1: Product: syz [ 622.920640][ T6691] usb 1-1: Manufacturer: syz [ 622.920681][ T6691] usb 1-1: SerialNumber: syz [ 622.947462][T13382] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1931'. [ 622.986934][ T6691] usb 1-1: 0:2 : does not exist [ 623.164676][T13370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1929'. [ 623.219502][ T6691] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 623.370074][ T6691] usb 1-1: USB disconnect, device number 18 [ 623.446389][T13096] udevd[13096]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.182295][ T1220] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 624.192240][ T9587] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 624.332196][ T1220] usb 1-1: Using ep0 maxpacket: 16 [ 624.339856][ T1220] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 4.02 [ 624.350549][ T9587] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 624.366005][ T9587] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.366047][ T9587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 624.366120][ T9587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.381384][ T1220] usb 1-1: config 255 has too many interfaces: 236, using maximum allowed: 32 [ 624.381407][ T1220] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 236 [ 624.419500][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 624.419540][ T1220] usb 1-1: SerialNumber: syz [ 624.436803][ T9587] usb 5-1: config 0 descriptor?? [ 624.453737][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.453816][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.486034][ T1220] ftdi_sio 1-1:255.0: FTDI USB Serial Device converter detected [ 624.536509][ T1220] ftdi_sio ttyUSB0: unknown device type: 0x402 [ 624.772888][ T9591] usb 1-1: USB disconnect, device number 19 [ 624.786265][ T9591] ftdi_sio 1-1:255.0: device disconnected [ 625.226419][T13423] sctp: [Deprecated]: syz.2.1944 (pid 13423) Use of int in maxseg socket option. [ 625.226419][T13423] Use struct sctp_assoc_value instead [ 625.545379][T13434] fuse: Bad value for 'fd' [ 626.242529][ T9613] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 626.858738][ T9587] usbhid 5-1:0.0: can't add hid device: -71 [ 626.858879][ T9587] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 626.880564][ T9587] usb 5-1: USB disconnect, device number 11 [ 627.228481][T13463] syzkaller0: entered promiscuous mode [ 627.228560][T13463] syzkaller0: entered allmulticast mode [ 627.967758][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.989973][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.001311][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.010950][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.023954][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.107941][T13471] fuse: Bad value for 'fd' [ 628.166614][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.178366][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.187275][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.219509][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.233938][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.405416][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'. [ 629.218395][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.218731][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.219254][T13473] bridge_slave_0: entered allmulticast mode [ 629.249252][T13473] bridge_slave_0: entered promiscuous mode [ 629.272731][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.273158][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.273669][T13473] bridge_slave_1: entered allmulticast mode [ 629.297317][T13473] bridge_slave_1: entered promiscuous mode [ 629.399334][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.412488][ T9591] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 629.445977][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.563420][ T9591] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 629.565508][ T9591] usb 5-1: config 102 has too many interfaces: 103, using maximum allowed: 32 [ 629.565584][ T9591] usb 5-1: config 102 has 0 interfaces, different from the descriptor's value: 103 [ 629.587375][ T9591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.587458][ T9591] usb 5-1: Product: syz [ 629.587500][ T9591] usb 5-1: Manufacturer: syz [ 629.587530][ T9591] usb 5-1: SerialNumber: syz [ 629.629892][T13473] team0: Port device team_slave_0 added [ 629.645792][T13473] team0: Port device team_slave_1 added [ 629.718946][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.719060][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.719092][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.750089][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.750145][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.750279][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.843443][ T9591] usb 5-1: USB disconnect, device number 12 [ 629.926846][T13507] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 630.083244][T13473] hsr_slave_0: entered promiscuous mode [ 630.091206][T13473] hsr_slave_1: entered promiscuous mode [ 630.091740][T13473] debugfs: 'hsr0' already exists in 'hsr' [ 630.091755][T13473] Cannot create hsr debugfs directory [ 630.372362][ T52] Bluetooth: hci5: command tx timeout [ 631.715847][T13473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.775156][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.785328][T13473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.866442][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.876998][T13473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.915139][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.930837][T13473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 631.984617][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.132385][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.452223][ T52] Bluetooth: hci5: command tx timeout [ 632.632973][ T1220] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 632.743457][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.796846][ T1220] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 632.809973][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.810041][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.810137][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.821276][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 632.852521][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.877037][ T1220] usb 5-1: config 0 descriptor?? [ 632.890598][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 632.890656][ T30] audit: type=1326 audit(1788949603.500:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.1971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2399e159 code=0x0 [ 632.929389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.936329][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.984844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.985176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.004911][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 633.023222][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.023279][ T9] usb 1-1: Product: syz [ 633.023318][ T9] usb 1-1: Manufacturer: syz [ 633.023340][ T9] usb 1-1: SerialNumber: syz [ 633.252416][ T9587] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 633.326614][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.326691][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.326742][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.326848][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.326954][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.327037][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.327114][ T1220] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 633.421302][ T1220] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 633.435021][ T9587] usb 4-1: Using ep0 maxpacket: 8 [ 633.464384][ T9587] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 633.479805][ T9587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.479913][ T9587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.538125][ T9587] usb 4-1: config 0 descriptor?? [ 633.548532][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 633.587755][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 633.613891][T13551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1975'. [ 633.613982][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 633.614431][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 633.614764][T13551] netlink: 'syz.2.1975': attribute type 3 has an invalid length. [ 633.767551][ T9587] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 633.798304][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.891652][T13473] veth0_vlan: entered promiscuous mode [ 633.908541][T13473] veth1_vlan: entered promiscuous mode [ 633.966806][T13473] veth0_macvtap: entered promiscuous mode [ 633.973670][ T9591] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 634.001907][T13473] veth1_macvtap: entered promiscuous mode [ 634.038034][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.065926][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.103309][ T9591] usb 3-1: device descriptor read/64, error -71 [ 634.138693][T13543] xt_NFQUEUE: number of queues (65535) out of range (got 98302) [ 634.145962][T13257] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.147239][T13257] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.147314][T13257] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.147353][T13257] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.342412][ T9591] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 634.348773][ T1220] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 634.348933][ T1220] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 634.361762][T11722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.361824][T11722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.389787][ T1220] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -32 [ 634.448935][T13256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.448998][T13256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.475054][ T9591] usb 3-1: device descriptor read/64, error -71 [ 634.533046][ T52] Bluetooth: hci5: command tx timeout [ 634.582619][ T9591] usb usb3-port1: attempt power cycle [ 634.709582][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.712520][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.741186][T13560] xt_NFQUEUE: number of queues (65535) out of range (got 98302) [ 634.892582][ T5697] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 634.923386][ T9591] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 634.944497][ T9591] usb 3-1: device descriptor read/8, error -71 [ 635.022307][ T5697] usb 6-1: device descriptor read/64, error -71 [ 635.043964][ T9598] usb 4-1: USB disconnect, device number 113 [ 635.183261][ T9591] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 635.208275][ T9591] usb 3-1: device descriptor read/8, error -71 [ 635.233927][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 635.246381][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 635.246859][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 635.246918][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 635.260802][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 635.264470][ T5697] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 635.303818][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 635.312971][ T9591] usb usb3-port1: unable to enumerate USB device [ 635.331884][ T9] usb 1-1: USB disconnect, device number 21 [ 635.412639][ T5697] usb 6-1: device descriptor read/64, error -71 [ 635.522876][ T5697] usb usb6-port1: attempt power cycle [ 635.807948][ T1220] usb 5-1: USB disconnect, device number 13 [ 635.862644][ T5697] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 635.884852][ T5697] usb 6-1: device descriptor read/8, error -71 [ 635.980431][T13577] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1980'. [ 636.122260][ T5697] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 636.142912][ T5697] usb 6-1: device descriptor read/8, error -71 [ 636.223155][ T1220] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 636.252915][ T5697] usb usb6-port1: unable to enumerate USB device [ 636.312663][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 636.374009][ T1220] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 636.378989][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.474833][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 636.474893][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 636.496318][ T9] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 636.496378][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 636.520141][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.520190][ T9] usb 1-1: Product: syz [ 636.520229][ T9] usb 1-1: Manufacturer: К [ 636.520252][ T9] usb 1-1: SerialNumber: syz [ 636.549345][T13579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 636.612296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.612544][ T52] Bluetooth: hci5: command tx timeout [ 636.678568][ T1220] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 636.697523][T13582] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 636.697594][T13582] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 636.739295][ T1220] usb 5-1: USB disconnect, device number 14 [ 636.800375][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 5 proto 3 vid 0x0525 pid 0xA4A8 [ 636.816971][ T9] usb 1-1: USB disconnect, device number 22 [ 636.848523][ T9] usblp0: removed [ 636.995612][T13587] netlink: 'syz.3.1984': attribute type 2 has an invalid length. [ 636.995674][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 637.024088][T13587] syzkaller0: left promiscuous mode [ 637.029624][T13587] syzkaller0: left allmulticast mode [ 637.350850][T13589] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 637.367078][T13589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.432452][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 637.442449][T13589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.502835][T13589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 637.523855][T13589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.602699][T13589] veth0_to_team: entered promiscuous mode [ 637.679224][T13589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.785021][ T5697] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 637.936812][ T5697] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 637.951503][ T5697] usb 3-1: config 144 has an invalid descriptor of length 0, skipping remainder of the config [ 637.951578][ T5697] usb 3-1: config 144 has no interfaces? [ 637.992936][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.993029][ T5697] usb 3-1: Product: syz [ 637.993072][ T5697] usb 3-1: Manufacturer: syz [ 637.993092][ T5697] usb 3-1: SerialNumber: syz [ 638.239490][T11722] bridge0: port 2(veth0) entered blocking state [ 638.239734][T11722] bridge0: port 2(veth0) entered forwarding state [ 638.256689][T11722] bridge0: port 3(veth1) entered blocking state [ 638.256964][T11722] bridge0: port 3(veth1) entered forwarding state [ 638.267192][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.270405][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.270907][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.271337][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.271781][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.272258][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.449101][ T9613] usb 3-1: USB disconnect, device number 127 [ 638.552377][ C1] net_ratelimit: 581 callbacks suppressed [ 638.552439][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.553469][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.554431][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.555347][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.556295][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.557514][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.558311][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.558686][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.559080][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 638.559431][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 639.472125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 639.562111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 639.582108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 643.300279][ T9] usb 4-1: device descriptor read/64, error -110 [ 643.562150][ C0] net_ratelimit: 14215 callbacks suppressed [ 643.562183][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.562399][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 643.562584][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.562805][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 643.563031][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.563222][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 643.563475][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.563664][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 643.563876][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.564069][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 643.619467][ C1] sched: DL replenish lagged too much [ 645.420912][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 648.572305][ C0] net_ratelimit: 23729 callbacks suppressed [ 648.572332][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.572343][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 648.572705][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.572752][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 648.573086][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.573152][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 648.573457][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.573556][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 648.573831][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.573996][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 653.582372][ C0] net_ratelimit: 23287 callbacks suppressed [ 653.582400][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.582506][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 653.582848][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.582924][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 653.583271][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.583389][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 653.583711][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.583845][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 653.584145][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.584275][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 658.592209][ C0] net_ratelimit: 23126 callbacks suppressed [ 658.592270][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.592345][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 658.592680][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.592826][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 658.593099][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.593249][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 658.593507][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.593709][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 658.593915][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.594130][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 663.602159][ C0] net_ratelimit: 23648 callbacks suppressed [ 663.602221][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.602475][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 663.602639][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.602900][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 663.603044][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.603315][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 663.603458][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.603761][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 663.603845][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.604194][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 664.787372][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 668.612261][ C0] net_ratelimit: 24131 callbacks suppressed [ 668.612286][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.612472][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 668.612672][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.612892][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 668.613047][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.613323][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 668.613464][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.613736][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 668.613848][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.614159][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 669.258731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.622380][ C0] net_ratelimit: 23185 callbacks suppressed [ 673.622398][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 673.622405][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.622788][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 673.622906][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.623194][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 673.623349][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.623578][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 673.623783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.624008][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 673.624255][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.617959][ T9] usb 4-1: device descriptor read/64, error -32 [ 678.632162][ C1] net_ratelimit: 23589 callbacks suppressed [ 678.632189][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 678.632334][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.632609][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 678.632765][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.633015][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 678.633261][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.633468][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 678.633689][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.633870][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 678.634161][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.787016][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 682.748776][ T9] usb usb4-port1: attempt power cycle [ 683.642231][ C1] net_ratelimit: 23345 callbacks suppressed [ 683.642292][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 683.642363][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.642709][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 683.642758][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.643105][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.643154][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 683.643533][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.643589][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 683.643929][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.644013][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 688.652262][ C1] net_ratelimit: 25296 callbacks suppressed [ 688.652287][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 688.652409][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.652690][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 688.652789][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.653127][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.653173][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 688.653503][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.653564][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 688.653881][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.653969][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 693.662217][ C0] net_ratelimit: 25237 callbacks suppressed [ 693.662251][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.662393][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 693.662668][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.662806][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 693.663103][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.663236][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 693.663534][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.663634][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 693.664004][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.664031][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.663052][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 697.693513][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.672109][ C1] net_ratelimit: 23306 callbacks suppressed [ 698.672134][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 698.672249][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.672533][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 698.672668][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.672935][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 698.673075][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.673368][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 698.673528][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.673757][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 698.673933][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.682271][ C1] net_ratelimit: 24768 callbacks suppressed [ 703.682297][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 703.682316][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.682695][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 703.682738][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.683089][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 703.683213][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.683489][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 703.683591][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.683900][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 703.683980][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.692120][ C1] net_ratelimit: 23783 callbacks suppressed [ 708.692146][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 708.692222][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.692542][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 708.692604][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.692953][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 708.692984][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.693332][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.693383][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 708.693704][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.693775][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 713.702268][ C1] net_ratelimit: 23490 callbacks suppressed [ 713.702315][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.702331][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 713.702728][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 713.702783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.703135][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.703194][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 713.703524][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.703683][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 713.703901][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.704109][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 718.712254][ C0] net_ratelimit: 24184 callbacks suppressed [ 718.712309][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.712490][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 718.712692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.712941][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 718.713068][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.713389][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 718.713745][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.714112][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 718.714258][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.714672][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 723.722110][ C1] net_ratelimit: 24467 callbacks suppressed [ 723.722125][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.722139][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 723.722624][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.722653][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 723.723123][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 723.723132][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.723554][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 723.723680][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.723991][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 723.724191][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.732512][ C0] net_ratelimit: 24125 callbacks suppressed [ 728.732543][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.732560][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 728.733087][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.733108][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 728.733538][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 728.733647][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.734010][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 728.734129][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.734479][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 728.734674][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.980200][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 733.742253][ C1] net_ratelimit: 24313 callbacks suppressed [ 733.742304][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 733.742308][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.742658][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.742736][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 733.743033][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.743130][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 733.743411][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.743517][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 733.743793][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.743907][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.119759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.752216][ C0] net_ratelimit: 25805 callbacks suppressed [ 738.752228][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 738.752241][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.752608][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 738.752655][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.752991][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.753052][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 738.753360][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.753445][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 738.753738][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.753859][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.232054][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 743.356299][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13197/1:b..l [ 743.364357][ C0] rcu: (detected by 0, t=10515 jiffies, g=121613, q=2082 ncpus=2) [ 743.372320][ C0] task:syz.1.1884 state:R running task stack:25328 pid:13197 tgid:13193 ppid:5632 task_flags:0x40044c flags:0x00080003 [ 743.385884][ C0] Call Trace: [ 743.389203][ C0] [ 743.392165][ C0] __schedule+0x17db/0x58f0 [ 743.396846][ C0] ? __pfx___schedule+0x10/0x10 [ 743.401779][ C0] preempt_schedule_irq+0x4b/0x90 [ 743.406871][ C0] irqentry_exit+0x14f/0x910 [ 743.411532][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.416616][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 743.422693][ C0] RIP: 0010:unwind_next_frame+0x19d8/0x2550 [ 743.428676][ C0] Code: 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 10 0f b6 04 18 <84> c0 0f 85 7b 08 00 00 40 b5 01 8b 44 24 5c 41 39 06 4c 8b 6c 24 [ 743.448418][ C0] RSP: 0018:ffffc9001a45f500 EFLAGS: 00000202 [ 743.454576][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 743.462596][ C0] RDX: ffffc9001a45f5e8 RSI: dffffc0000000000 RDI: ffffc9001a45fa30 [ 743.470705][ C0] RBP: 1ffffffff2243887 R08: ffffc9001a45fa30 R09: 0000000000000000 [ 743.478732][ C0] R10: ffffc9001a45f5f8 R11: fffff5200348bec1 R12: dffffc0000000000 [ 743.486753][ C0] R13: ffffffff9121c43d R14: ffffc9001a45f5a8 R15: ffffc9001a45f5f0 [ 743.494801][ C0] ? __fput+0x418/0xa50 [ 743.499029][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.504206][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.510459][ C0] arch_stack_walk+0x11b/0x150 [ 743.515301][ C0] ? task_work_run+0x1d9/0x270 [ 743.520181][ C0] stack_trace_save+0xa9/0x100 [ 743.525020][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 743.531027][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 743.536564][ C0] save_stack+0x122/0x230 [ 743.540988][ C0] ? __pfx_save_stack+0x10/0x10 [ 743.546157][ C0] ? free_pages_prepare+0x9eb/0xaf0 [ 743.551414][ C0] ? __free_contig_range_common+0x174/0x340 [ 743.557365][ C0] ? free_pages_bulk+0x48/0x120 [ 743.562266][ C0] ? vfree+0x231/0x490 [ 743.566387][ C0] ? kcov_close+0x28/0x50 [ 743.570780][ C0] ? __fput+0x418/0xa50 [ 743.574998][ C0] ? page_ext_put+0x97/0xc0 [ 743.579566][ C0] __reset_page_owner+0x71/0x1f0 [ 743.584554][ C0] free_pages_prepare+0x9eb/0xaf0 [ 743.589643][ C0] ? __free_contig_range_common+0x137/0x340 [ 743.595601][ C0] __free_contig_range_common+0x174/0x340 [ 743.601391][ C0] free_pages_bulk+0x48/0x120 [ 743.606105][ C0] vfree+0x231/0x490 [ 743.610062][ C0] ? __pfx_kcov_close+0x10/0x10 [ 743.614967][ C0] kcov_close+0x28/0x50 [ 743.619173][ C0] __fput+0x418/0xa50 [ 743.623224][ C0] task_work_run+0x1d9/0x270 [ 743.627872][ C0] ? __pfx_task_work_run+0x10/0x10 [ 743.633033][ C0] ? do_exit+0x735/0x2360 [ 743.637423][ C0] ? kmem_cache_free+0x182/0x650 [ 743.642415][ C0] ? put_net+0x191/0x260 [ 743.646715][ C0] do_exit+0x73a/0x2360 [ 743.650921][ C0] ? lock_acquire+0x115/0x350 [ 743.655682][ C0] ? __pfx_do_exit+0x10/0x10 [ 743.660330][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 743.665427][ C0] do_group_exit+0x22d/0x2f0 [ 743.670050][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.675282][ C0] get_signal+0x121b/0x12c0 [ 743.679870][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 743.685587][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 743.691814][ C0] ? __x64_sys_recvmmsg+0x198/0x250 [ 743.697113][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 743.702535][ C0] ? rcu_is_watching+0x16/0xb0 [ 743.707362][ C0] do_syscall_64+0x328/0x520 [ 743.712009][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.717080][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.723197][ C0] ? clear_bhb_loop+0x70/0xc0 [ 743.727936][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.733877][ C0] RIP: 0033:0x7f42d119e159 [ 743.738335][ C0] RSP: 002b:00007f42d205d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 743.746780][ C0] RAX: 0000000000010106 RBX: 00007f42d1426090 RCX: 00007f42d119e159 [ 743.754847][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 743.762610][ C1] net_ratelimit: 23342 callbacks suppressed [ 743.762662][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.763731][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 743.764834][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.765819][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 743.766941][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.767926][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 743.768927][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.769916][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 743.770886][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 743.771881][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 743.880000][ C0] RBP: 00007f42d123503b R08: 0000000000000000 R09: 0000000000000000 [ 743.888002][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 743.896036][ C0] R13: 00007f42d1426128 R14: 00007f42d1426090 R15: 00007f42d154fa48 [ 743.904122][ C0] [ 743.907188][ C0] rcu: rcu_preempt kthread starved for 1082 jiffies! g121613 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 743.918249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 743.928302][ C0] rcu: RCU grace-period kthread stack dump: [ 743.934319][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 743.947881][ C0] Call Trace: [ 743.951265][ C0] [ 743.954239][ C0] __schedule+0x17db/0x58f0 [ 743.958836][ C0] ? __pfx___schedule+0x10/0x10 [ 743.963747][ C0] ? lock_acquire+0x115/0x350 [ 743.968488][ C0] ? schedule+0x90/0x2b0 [ 743.972796][ C0] schedule+0x164/0x2b0 [ 743.977017][ C0] schedule_timeout+0x152/0x2c0 [ 743.981922][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 743.987357][ C0] ? __pfx_process_timeout+0x10/0x10 [ 743.992711][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 743.998584][ C0] ? prepare_to_swait_event+0x322/0x350 [ 744.004384][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 744.009311][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 744.015533][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 744.020871][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 744.026126][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 744.032005][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 744.036696][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.041953][ C0] ? __kthread_parkme+0x71/0x1f0 [ 744.046967][ C0] ? __kthread_parkme+0x199/0x1f0 [ 744.052056][ C0] kthread+0x38b/0x480 [ 744.056176][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.061433][ C0] ? __pfx_kthread+0x10/0x10 [ 744.066080][ C0] ret_from_fork+0x514/0xb70 [ 744.070726][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 744.075902][ C0] ? __switch_to+0xc89/0x1420 [ 744.080648][ C0] ? __pfx_kthread+0x10/0x10 [ 744.085285][ C0] ret_from_fork_asm+0x1a/0x30 [ 744.090126][ C0] [ 744.093176][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 744.099535][ C0] Sending NMI from CPU 0 to CPUs 1: [ 744.104802][ C1] NMI backtrace for cpu 1 [ 744.104825][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.104858][ C1] Tainted: [L]=SOFTLOCKUP [ 744.104865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.104878][ C1] RIP: 0010:check_preemption_disabled+0x6/0xd0 [ 744.104908][ C1] Code: c7 c6 60 94 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 db dd af 07 65 48 8b 0d ab dd af 07 85 c9 74 0c 5b 41 5e [ 744.104926][ C1] RSP: 0018:ffffc90000a179f0 EFLAGS: 00000203 [ 744.104945][ C1] RAX: 0000000000000001 RBX: ffffc90000a17b58 RCX: 0000000000000102 [ 744.104959][ C1] RDX: ffffffff91bd7301 RSI: ffffffff8c6d9460 RDI: ffffffff8c6d9420 [ 744.104974][ C1] RBP: 1ffffffff237ae01 R08: ffffc900001a7e48 R09: 0000000000000000 [ 744.104988][ C1] R10: ffffc90000a17b98 R11: fffff52000142f75 R12: ffffc900001a0000 [ 744.105003][ C1] R13: ffffffff8177f1df R14: ffffffff8ed5c760 R15: ffffc900001a7e48 [ 744.105019][ C1] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 744.105035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.105049][ C1] CR2: 00005555917c94e8 CR3: 0000000050d48000 CR4: 00000000003526f0 [ 744.105067][ C1] Call Trace: [ 744.105074][ C1] [ 744.105085][ C1] rcu_is_watching+0x16/0xb0 [ 744.105111][ C1] lock_release+0x4b/0x3c0 [ 744.105133][ C1] ? unwind_next_frame+0x8f/0x2550 [ 744.105157][ C1] unwind_next_frame+0x1baa/0x2550 [ 744.105182][ C1] ? pv_native_safe_halt+0xf/0x20 [ 744.105211][ C1] ? unwind_next_frame+0x8f/0x2550 [ 744.105234][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 744.105266][ C1] arch_stack_walk+0x11b/0x150 [ 744.105291][ C1] ? default_idle+0x9/0x20 [ 744.105313][ C1] stack_trace_save+0xa9/0x100 [ 744.105343][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 744.105377][ C1] ? __lock_acquire+0x747/0x2de0 [ 744.105397][ C1] kasan_save_track+0x3e/0x80 [ 744.105417][ C1] ? kasan_save_track+0x3e/0x80 [ 744.105435][ C1] ? kasan_save_free_info+0x40/0x50 [ 744.105475][ C1] ? __kasan_slab_free+0x5c/0x80 [ 744.105495][ C1] ? kmem_cache_free+0x182/0x650 [ 744.105514][ C1] ? skb_release_head_state+0x274/0x370 [ 744.105545][ C1] ? __kfree_skb+0x24/0x210 [ 744.105565][ C1] ? ip6_mc_input+0x878/0xc80 [ 744.105676][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 744.105752][ C1] ? nf_hook_slow+0xc5/0x220 [ 744.105823][ C1] ? NF_HOOK+0x21f/0x3c0 [ 744.105843][ C1] ? netif_receive_skb+0x278/0xbf0 [ 744.105918][ C1] ? NF_HOOK+0xa4/0x3a0 [ 744.105969][ C1] ? br_handle_frame_finish+0x1136/0x1950 [ 744.105994][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 744.106018][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 744.106045][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 744.106072][ C1] ? br_handle_frame+0x127f/0x1510 [ 744.106096][ C1] ? __netif_receive_skb_core+0x989/0x30c0 [ 744.106147][ C1] ? process_backlog+0x727/0x18b0 [ 744.106164][ C1] ? __napi_poll+0xaa/0x330 [ 744.106192][ C1] ? net_rx_action+0x61d/0xf50 [ 744.106209][ C1] ? handle_softirqs+0x226/0x860 [ 744.106234][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 744.106258][ C1] ? irq_exit_rcu+0x9/0x30 [ 744.106281][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 744.106310][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.106331][ C1] ? pv_native_safe_halt+0xf/0x20 [ 744.106378][ C1] ? skb_release_head_state+0x274/0x370 [ 744.106399][ C1] kasan_save_free_info+0x40/0x50 [ 744.106427][ C1] __kasan_slab_free+0x5c/0x80 [ 744.106449][ C1] kmem_cache_free+0x182/0x650 [ 744.106472][ C1] ? __skb_ext_put+0x221/0x2f0 [ 744.106525][ C1] skb_release_head_state+0x274/0x370 [ 744.106549][ C1] __kfree_skb+0x24/0x210 [ 744.106574][ C1] ip6_mc_input+0x878/0xc80 [ 744.106605][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 744.106631][ C1] ? ip6_rcv_finish+0x265/0x280 [ 744.106653][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 744.106675][ C1] ip_sabotage_in+0x1e1/0x270 [ 744.106699][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 744.106725][ C1] nf_hook_slow+0xc5/0x220 [ 744.106756][ C1] NF_HOOK+0x21f/0x3c0 [ 744.106779][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 744.106800][ C1] ? NF_HOOK+0x9e/0x3c0 [ 744.106820][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.106841][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 744.106869][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 744.106894][ C1] ? netif_receive_skb+0x102/0xbf0 [ 744.106923][ C1] netif_receive_skb+0x278/0xbf0 [ 744.106950][ C1] ? lock_acquire+0x115/0x350 [ 744.106970][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 744.107000][ C1] ? br_netif_receive_skb+0x126/0x190 [ 744.107028][ C1] NF_HOOK+0xa4/0x3a0 [ 744.107051][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 744.107077][ C1] ? NF_HOOK+0xfa/0x3a0 [ 744.107100][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.107126][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 744.107154][ C1] ? br_pass_frame_up+0x275/0x420 [ 744.107181][ C1] br_handle_frame_finish+0x1136/0x1950 [ 744.107212][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 744.107238][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 744.107298][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 744.107328][ C1] ? nf_hook_slow+0x176/0x220 [ 744.107359][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 744.107384][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 744.107409][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 744.107445][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 744.107471][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 744.107497][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 744.107523][ C1] ? lock_acquire+0x115/0x350 [ 744.107544][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 744.107572][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 744.107601][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 744.107629][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 744.107656][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 744.107685][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 744.107713][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 744.107742][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 744.107766][ C1] br_handle_frame+0x127f/0x1510 [ 744.107796][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 744.107820][ C1] ? __lock_acquire+0x747/0x2de0 [ 744.107840][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 744.107876][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 744.107900][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 744.107940][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 744.107969][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 744.108009][ C1] ? process_backlog+0x3de/0x18b0 [ 744.108027][ C1] ? process_backlog+0x3de/0x18b0 [ 744.108047][ C1] process_backlog+0x727/0x18b0 [ 744.108068][ C1] ? process_backlog+0x3de/0x18b0 [ 744.108093][ C1] __napi_poll+0xaa/0x330 [ 744.108123][ C1] net_rx_action+0x61d/0xf50 [ 744.108148][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 744.108177][ C1] ? lapic_next_event+0x11/0x20 [ 744.108209][ C1] handle_softirqs+0x226/0x860 [ 744.108236][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 744.108264][ C1] __irq_exit_rcu+0xcb/0x220 [ 744.108289][ C1] irq_exit_rcu+0x9/0x30 [ 744.108313][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 744.108343][ C1] [ 744.108352][ C1] [ 744.108359][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.108380][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 744.108412][ C1] Code: dc 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 e1 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 744.108429][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 744.108447][ C1] RAX: 0000000000cda357 RBX: ffffffff819baa50 RCX: 8000000000000001 [ 744.108462][ C1] RDX: 0000000000000001 RSI: ffffffff8e474d47 RDI: ffffffff8c6d9480 [ 744.108476][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 744.108491][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 744.108505][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 744.108523][ C1] ? do_idle+0x2e0/0x540 [ 744.108557][ C1] default_idle+0x9/0x20 [ 744.108577][ C1] default_idle_call+0x72/0xb0 [ 744.108598][ C1] do_idle+0x2e0/0x540 [ 744.108628][ C1] ? __pfx_do_idle+0x10/0x10 [ 744.108662][ C1] cpu_startup_entry+0x43/0x60 [ 744.108691][ C1] start_secondary+0x101/0x110 [ 744.108721][ C1] common_startup_64+0x13e/0x157 [ 744.108755][ C1]