last executing test programs: 13.466567881s ago: executing program 0 (id=228): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = gettid() waitid(0x2, r2, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402440) syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r4 = dup(r3) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) r7 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x30100, 0x0) sendmmsg(r5, 0x0, 0x0, 0x4000000) mq_open(&(0x7f0000000000)='*\xfd#^^\x00', 0x40, 0xe, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x44101) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000002c0)=0x3) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000300)=0x1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) 11.072258997s ago: executing program 4 (id=236): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0400000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r2 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r6 = eventfd2(0x0, 0x0) write$eventfd(r6, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/77, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r2, 0x6f50, 0x5) execveat(r2, 0x0, 0x0, 0x0, 0x800) pipe2$watch_queue(0x0, 0x80) 10.481781417s ago: executing program 3 (id=239): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x10, 0x40, 0x64, 0x0, 0xff, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x9, 0x4, 0x4, 0x4e21, 0x4e21, 0x1, 0x1}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8001}, {0x28, 0x1, 0x50, 0xfffff038}, {0x6, 0xfd, 0x4, 0x1579}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = timerfd_create(0x1, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0xd}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x6, 0x2, 0x20, 0xfc}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x401}}]}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000080)) 9.145003925s ago: executing program 0 (id=242): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340050e9e70000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018"], 0x34}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x5, 0x7}) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') rmdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=""/128) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000700)={0x5, @win={{0x5ed9, 0xf79c, 0x4, 0x4}, 0x3, 0x7, &(0x7f00000003c0)={{0x9, 0x9, 0x3, 0x4}, &(0x7f00000002c0)={{0x10000, 0x7, 0x7, 0x6}}}, 0xf0, &(0x7f0000000640)="6348122626a3e679511cfa591d0e13ff532d4b49f6d4a7a298ba22b7429b3f0e2d87cba143a495ee1a828ee7dbe31ff0f0d4158954600f6523779d0aa32fdaea3597cfaab915bc752894d776b7f4f4ff4b73c19c1381ee677dd7cb22b8707f7adf3f119769f3881d455ffdaf8c0cfe6f43ea823b0cf3768bdb50c3bc29f1d681bdd80cc5b308d004b0a7f6ea3e5eb2a0e42984ccc5cbf10171652b469f7d8ac1ff993ece16c867eaf8a1f52469820b3eed4aeb219bcdeb19", 0x8}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) dup(r7) 8.932423116s ago: executing program 4 (id=243): r0 = socket$netlink(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x3e, &(0x7f0000001700)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x1, 0x3, 0x64, 0x2, 0x4, 0x62, 0x9, @multicast2, @loopback}}}}}}, 0x0) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {r1, r2+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/4, 0x4}], 0x1, 0xffffffff, 0x7fff) r4 = socket(0x8, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x7, 0x0, 0x4, "372b2bd3fd68483bb42566de2130165bc440f7ad094ccf5d4d6ae3beda91669a", 0x47504a4d}) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(0x0, 0x0, 0x0, &(0x7f00000040c0)={0x77359400}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2400c890) 8.088219508s ago: executing program 4 (id=245): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) socket$inet6(0xa, 0x3, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x2, 0x1, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file1\x00', 0x0, 0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b80)={0x0, 0x4005, 0x2, {0x1, @win={{0x0, 0x8, 0x278e, 0x8}, 0x3, 0xfffffff8, 0x0, 0xfffffffc, 0x0}}}) unshare(0x400) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7d, &(0x7f0000000400)={0x0, 0x4}, 0x8) unshare(0x6a040000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c00000009060300000009000000000000000002340007800d000180080001407f0000010c00148008000140ac1e010106000440500000000600053a50640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x9, 0x9, 0x15, 0xffff2d77, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0xb71, 0x3c57, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0xfffffff9, 0x0, 0x1, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xee, 0xe, 0x2c2, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x100, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x7, 0x40, 0x7, 0x47, 0xe4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x8000042, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x4, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x1000555, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x8038, 0x200, 0x1fd, 0xa0e, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x5, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0xfff, 0x42, 0xf, 0xb9, 0xce4, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x7fe, 0x2000002, 0x150, 0x60a7, 0x20000006, 0x13, 0x1, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x6d19, 0xf, 0x7e, 0x9, 0x1, 0x5, 0xaf, 0x20000806, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x1fd, 0xb, 0xfff]}, 0x45c) 7.87363535s ago: executing program 1 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)}], 0x2}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x4070bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0) 6.03258278s ago: executing program 3 (id=249): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') read$eventfd(r6, &(0x7f00000002c0), 0x51) r7 = dup(r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x20000004) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r9 = syz_io_uring_setup(0x111, &(0x7f0000000400)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r9, 0x11, &(0x7f00000005c0)='n', 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000680), &(0x7f00000006c0), 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x20fb8b, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.614149116s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000000800)}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) mmap(&(0x7f0000883000/0x4000)=nil, 0x4000, 0x8, 0x110, r1, 0x322000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.54323246s ago: executing program 3 (id=252): ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) r3 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}], 0x1}}], 0x1, 0x4004040) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 5.192419297s ago: executing program 4 (id=253): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = gettid() waitid(0x2, r2, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402440) syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r4 = dup(r3) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) r7 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x30100, 0x0) sendmmsg(r5, 0x0, 0x0, 0x4000000) mq_open(&(0x7f0000000000)='*\xfd#^^\x00', 0x40, 0xe, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x44101) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000002c0)=0x3) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000300)=0x1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) 4.586373341s ago: executing program 1 (id=257): getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) modify_ldt$read(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000006c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x87, 0x0, 0x401000000000081, 0x2, 0x3e, 0xfffffff9, 0x6b, 0x40, 0x106, 0x3, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x2, 0x1, 0x3, 0x3, 0x18a5, 0xfff, 0x2, 0xf}, {0x6474e557, 0x3, 0x5, 0x9, 0x8000000000000001, 0xe, 0x100000000, 0x9}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0) close(r2) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 4.335568927s ago: executing program 1 (id=258): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x803}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.111131546s ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001500), 0x644001, 0x0) rt_sigpending(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002a80)=""/28, 0xfffffffffffffe20) syz_open_dev$usbfs(0x0, 0x204, 0x260203) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)) read$hidraw(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000029c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002a00)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000002a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r2 = socket(0xa, 0x3, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4076, 0xfec}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) sendmsg$inet6(r2, &(0x7f00000017c0)={&(0x7f0000001800)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001880)="671723d7c6012c", 0x7}, {&(0x7f00000018c0)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000001900)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000001940)="2bc4", 0x2}], 0x4}, 0x20008b88) 3.099450554s ago: executing program 3 (id=260): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 2.905842404s ago: executing program 0 (id=261): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4404c880) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@private1}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000a4714569a17d7064000a205b9f00000a05000000000000000000d90c7145dcb6eb7c6e5b0100fffc0900010073797a30000000002c000000030acd01000000000000000001000000090003007379551536fa1a7b12a7bd589841577a30000000000900010073797a300000000044000000060a01040000000020000000010000001c0004801800018007000100727400000c00028008000240003019ec64000b40000000000900010073797a300000000014000000110001"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file1\x00', 0x52aa8b2b46e3891c, 0x1) timer_gettime(r0, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 2.459096761s ago: executing program 2 (id=262): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)=""/117, 0x75}], 0x5, 0x7, 0x92, 0x1) r2 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x121000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) 1.701714925s ago: executing program 1 (id=263): syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "19fe0891", "0aa3b9dd5fe7a771"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "1c0000008000", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f00000005c0)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59eda", 0x4b}, {&(0x7f0000000680)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000740)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000800)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000840)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000001640)=0xffff1884, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000001780)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000017c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.686986833s ago: executing program 0 (id=264): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000db4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000003, 0x408a172, 0xffffffffffffffff, 0x2f62b000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x64}}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001400)=@file={0x0, './bus\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x200000e, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000001540)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x4000, @fd_index, 0x8001, &(0x7f00000015c0)=""/167, 0xa7, 0x1, 0x1, {0x1, 0x0, 0x3, '\x00', &(0x7f0000001680)={0x6, 0x5, 0x6c, &(0x7f00000016c0)="4519c05609b0ffad63e12c463ebe802283eb1f9515cda869b36471096cd0d7dfe9ce02507f54f2b01ff37eec9d02676d21c9ac0928338d21f8606587ecb41bd26dc8ecfce5f32335ce74d924aa133829430c7fa8a83dd5f793b5771dec7dfb64549614abbd6a7aaa3077c301", 0x3}, 0xffffffffffffffff}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001740)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf2508000100000000002955e1abd5926f05e70a45001cfb0dc4446378a7871adb372b87"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) 1.401680826s ago: executing program 2 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c) 1.229659599s ago: executing program 2 (id=266): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4404c880) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) quotactl_fd$Q_GETINFO(r2, 0x80000f01, r3, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000a4714569a17d7064000a205b9f00000a05000000000000000000d90c7145dcb6eb7c6e5b0100fffc0900010073797a30000000002c000000030acd01000000000000000001000000090003007379551536fa1a7b12a7bd589841577a30000000000900010073797a300000000044000000060a01040000000020000000010000001c0004801800018007000100727400000c00028008000240003019ec64000b40000000000900010073797a300000000014000000110001"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file1\x00', 0x52aa8b2b46e3891c, 0x1) timer_gettime(r0, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 1.157744311s ago: executing program 3 (id=267): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000db4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000003, 0x408a172, 0xffffffffffffffff, 0x2f62b000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x64}}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001400)=@file={0x0, './bus\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x200000e, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000001540)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x4000, @fd_index, 0x8001, &(0x7f00000015c0)=""/167, 0xa7, 0x1, 0x1, {0x1, 0x0, 0x3, '\x00', &(0x7f0000001680)={0x6, 0x5, 0x6c, &(0x7f00000016c0)="4519c05609b0ffad63e12c463ebe802283eb1f9515cda869b36471096cd0d7dfe9ce02507f54f2b01ff37eec9d02676d21c9ac0928338d21f8606587ecb41bd26dc8ecfce5f32335ce74d924aa133829430c7fa8a83dd5f793b5771dec7dfb64549614abbd6a7aaa3077c301", 0x3}, 0xffffffffffffffff}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001740)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf2508000100000000002955e1abd5926f05e70a45001cfb0dc4446378a7871adb372b87"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) 1.118251771s ago: executing program 4 (id=268): getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) modify_ldt$read(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000006c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x87, 0x0, 0x401000000000081, 0x2, 0x3e, 0xfffffff9, 0x6b, 0x40, 0x106, 0x3, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x2, 0x1, 0x3, 0x3, 0x18a5, 0xfff, 0x2, 0xf}, {0x6474e557, 0x3, 0x5, 0x9, 0x8000000000000001, 0xe, 0x100000000, 0x9}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0) close(r2) execve(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 1.011222729s ago: executing program 2 (id=269): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x803}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 895.652305ms ago: executing program 4 (id=270): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0x79, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x701, 0x107, 0xff, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x265, 0x3, 0x8, 0x4, 0x0, @empty, @empty}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000780)={'wlan0\x00', @random="7cf1e97c9e4f"}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x62, 0x5, 0x380, 0x0, 0xe0, 0xffffffff, 0x2b0, 0x198, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv4=@multicast1, @icmp_id=0x64, @port=0x4e22}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x4e22, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = memfd_create(&(0x7f0000000c40)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB='user.iW.'], 0x0, 0x0, 0x0) fstat(r0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) 875.333665ms ago: executing program 2 (id=271): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4404c880) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) quotactl_fd$Q_GETINFO(r2, 0x80000f01, r3, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000a4714569a17d7064000a205b9f00000a05000000000000000000d90c7145dcb6eb7c6e5b0100fffc0900010073797a30000000002c000000030acd01000000000000000001000000090003007379551536fa1a7b12a7bd589841577a30000000000900010073797a300000000044000000060a01040000000020000000010000001c0004801800018007000100727400000c00028008000240003019ec64000b40000000000900010073797a300000000014000000110001"], 0xb8}}, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file1\x00', 0x52aa8b2b46e3891c, 0x1) timer_gettime(r0, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 517.235298ms ago: executing program 1 (id=272): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002580)={0x9, {"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", 0x1000}}, 0x1006) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000400)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffe28, &(0x7f0000002e00)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f00000005c0)=""/91, 0x5b}, {&(0x7f0000002ec0)=""/4087, 0xff7}, {&(0x7f0000002ac0)=""/27, 0x1b}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000280)=""/209, 0xd3}, {&(0x7f0000002c80)=""/176, 0xb0}, {&(0x7f0000000440)=""/181, 0xb2}], 0x8}, 0x9}], 0x400000000000272, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x407, 0x32314d4e, 0x7, 0x0, [{0x0, 0xfffffffe}, {0x0, 0x10}, {0x4}, {}, {}, {0x5, 0x4}, {0x0, 0x1411}], 0x4e, 0x38, 0x6}}) 455.459123ms ago: executing program 2 (id=273): socket$inet(0x2, 0x5, 0xe5) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000140)="3d3e489f992280d85f10065a3a14862e8a7b", 0x12, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0xa, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0xffffffff, 0x6, 0xfffffffffffffffe, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1007fa8, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000380)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e2a, @empty}, 0x10) r5 = accept(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f00000004c0)) recvfrom(r4, 0x0, 0x0, 0x4100, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000500)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c9754a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757", 0x71, 0x12, 0x0, 0x0) 335.764709ms ago: executing program 0 (id=274): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x98) fsopen(&(0x7f0000000280)='bpf\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10103c, 0x140) syz_open_dev$radio(&(0x7f0000000440), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000540)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000680)={0x2e, 0x5e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000740)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000001, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40000, 0x2, 0x2100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5008, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x3e3}}], 0x1, &(0x7f0000000a80)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[], 0xfc}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000f, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(&(0x7f0000000380), 0x10, 0x101000) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffff89e3b35ffffff0180c200000e86dd6000000800283afffe8000000000000000000000000000aaff0000000000002000000000018700907800000000ff02000000000000000000000000000187"], 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000200)={"2370491d", 0x0, 0xd, 0x2, 0x101, 0x0, "000064640000001503fe00", '\x00', "0f00", "00000002", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001b40), 0x50400, 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) 0s ago: executing program 3 (id=275): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') read$eventfd(r6, &(0x7f00000002c0), 0x51) r7 = dup(r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x20000004) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r9 = syz_io_uring_setup(0x111, &(0x7f0000000400)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r9, 0x11, &(0x7f00000005c0)='n', 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000680), 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x20fb8b, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): : unexpected cc 0x1001 length: 249 > 9 [ 76.903413][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.911462][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.911867][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.930998][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.931431][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.932169][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.934582][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.978036][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.034851][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.036808][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.044704][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.064219][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.065610][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.154105][ T5650] br_netfilter no longer supported in user namespaces [ 77.987145][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.987258][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.987389][ T5650] bridge_slave_0: entered allmulticast mode [ 78.006580][ T5650] bridge_slave_0: entered promiscuous mode [ 78.040317][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.040414][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.040527][ T5650] bridge_slave_1: entered allmulticast mode [ 78.042100][ T5650] bridge_slave_1: entered promiscuous mode [ 78.133712][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.133847][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.134069][ T5648] bridge_slave_0: entered allmulticast mode [ 78.135000][ T5648] bridge_slave_0: entered promiscuous mode [ 78.137735][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.137832][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.137954][ T5649] bridge_slave_0: entered allmulticast mode [ 78.139820][ T5649] bridge_slave_0: entered promiscuous mode [ 78.169277][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.198840][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.198943][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.199021][ T5648] bridge_slave_1: entered allmulticast mode [ 78.199942][ T5648] bridge_slave_1: entered promiscuous mode [ 78.214864][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.214967][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.215394][ T5649] bridge_slave_1: entered allmulticast mode [ 78.217146][ T5649] bridge_slave_1: entered promiscuous mode [ 78.236206][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.292702][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.292859][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.293082][ T5646] bridge_slave_0: entered allmulticast mode [ 78.293984][ T5646] bridge_slave_0: entered promiscuous mode [ 78.310685][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.310788][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.310914][ T5647] bridge_slave_0: entered allmulticast mode [ 78.313381][ T5647] bridge_slave_0: entered promiscuous mode [ 78.316853][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.316947][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.317112][ T5647] bridge_slave_1: entered allmulticast mode [ 78.319692][ T5647] bridge_slave_1: entered promiscuous mode [ 78.324952][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.343318][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.347058][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.385021][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.385174][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.385295][ T5646] bridge_slave_1: entered allmulticast mode [ 78.386977][ T5646] bridge_slave_1: entered promiscuous mode [ 78.391200][ T5650] team0: Port device team_slave_0 added [ 78.408573][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.410972][ T5649] team0: Port device team_slave_0 added [ 78.442763][ T5650] team0: Port device team_slave_1 added [ 78.474670][ T5649] team0: Port device team_slave_1 added [ 78.477043][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.512338][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.514508][ T5648] team0: Port device team_slave_0 added [ 78.531203][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.543978][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.543992][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.544013][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.547355][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.606674][ T5648] team0: Port device team_slave_1 added [ 78.617674][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.617687][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.617711][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.619638][ T5646] team0: Port device team_slave_0 added [ 78.630311][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.630323][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.630346][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.671726][ T5646] team0: Port device team_slave_1 added [ 78.672455][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.672466][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.672490][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.676455][ T5647] team0: Port device team_slave_0 added [ 78.728429][ T5647] team0: Port device team_slave_1 added [ 78.757574][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.757589][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.757613][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.824553][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.824569][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.824593][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.835232][ T5650] hsr_slave_0: entered promiscuous mode [ 78.836292][ T5650] hsr_slave_1: entered promiscuous mode [ 78.838852][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.838865][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.838888][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.886769][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.886785][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.886808][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.921685][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.921701][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.921726][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.938614][ T5635] Bluetooth: hci2: command tx timeout [ 78.942849][ T5649] hsr_slave_0: entered promiscuous mode [ 78.943820][ T5649] hsr_slave_1: entered promiscuous mode [ 78.944593][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 78.944679][ T5649] Cannot create hsr debugfs directory [ 78.946608][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.946620][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.946644][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.012013][ T5648] hsr_slave_0: entered promiscuous mode [ 79.012986][ T5648] hsr_slave_1: entered promiscuous mode [ 79.013750][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 79.013767][ T5648] Cannot create hsr debugfs directory [ 79.018664][ T5635] Bluetooth: hci0: command tx timeout [ 79.019882][ T5631] Bluetooth: hci3: command tx timeout [ 79.020026][ T5635] Bluetooth: hci1: command tx timeout [ 79.099505][ T5635] Bluetooth: hci4: command tx timeout [ 79.131870][ T5646] hsr_slave_0: entered promiscuous mode [ 79.132842][ T5646] hsr_slave_1: entered promiscuous mode [ 79.133328][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 79.133346][ T5646] Cannot create hsr debugfs directory [ 79.215881][ T5647] hsr_slave_0: entered promiscuous mode [ 79.216477][ T5647] hsr_slave_1: entered promiscuous mode [ 79.216916][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 79.216934][ T5647] Cannot create hsr debugfs directory [ 79.625814][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.633097][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.633954][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.649118][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.650543][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.661347][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.666055][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.674148][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.740694][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.743263][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.744508][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.750662][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.753937][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.761497][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.762331][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.773265][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.853301][ T5648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.865133][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.874749][ T5648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.880426][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.881251][ T5648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.889497][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.891730][ T5648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.903167][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.998958][ T5647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.006624][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.009919][ T5647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.019582][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.039323][ T5647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.043104][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.049114][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.060895][ T5647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.068948][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.122086][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.160844][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.160965][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.165649][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.202724][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.202826][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.224877][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.227300][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.229497][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.240881][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.243351][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.252224][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.263573][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.271162][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.285965][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.314099][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.314161][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.344669][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.344731][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.446155][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.504816][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.509400][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.544031][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.544126][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.574166][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.582740][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.582839][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.585673][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.601001][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.628837][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.628974][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.655307][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.655369][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.669849][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.709139][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.744504][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.744608][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.787976][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.788076][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.797567][ T5650] veth0_vlan: entered promiscuous mode [ 80.829346][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.835644][ T5649] veth0_vlan: entered promiscuous mode [ 80.869513][ T5650] veth1_vlan: entered promiscuous mode [ 80.892999][ T5649] veth1_vlan: entered promiscuous mode [ 80.951958][ T5646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.972970][ T5649] veth0_macvtap: entered promiscuous mode [ 80.996005][ T5649] veth1_macvtap: entered promiscuous mode [ 81.003458][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.017820][ T5635] Bluetooth: hci2: command tx timeout [ 81.020168][ T5650] veth0_macvtap: entered promiscuous mode [ 81.050679][ T5650] veth1_macvtap: entered promiscuous mode [ 81.055807][ T5648] veth0_vlan: entered promiscuous mode [ 81.079274][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.099090][ T5631] Bluetooth: hci3: command tx timeout [ 81.099121][ T5631] Bluetooth: hci0: command tx timeout [ 81.099246][ T5635] Bluetooth: hci1: command tx timeout [ 81.101780][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.125278][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.148954][ T5648] veth1_vlan: entered promiscuous mode [ 81.155011][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.177758][ T5635] Bluetooth: hci4: command tx timeout [ 81.181806][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211601][ T995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211666][ T995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212955][ T5647] veth0_vlan: entered promiscuous mode [ 81.219940][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.277938][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.277982][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.278016][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.278049][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324153][ T5647] veth1_vlan: entered promiscuous mode [ 81.341265][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.386999][ T342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.387024][ T342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.414103][ T5646] veth0_vlan: entered promiscuous mode [ 81.466969][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.466989][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.485949][ T5648] veth0_macvtap: entered promiscuous mode [ 81.500038][ T5646] veth1_vlan: entered promiscuous mode [ 81.532826][ T5648] veth1_macvtap: entered promiscuous mode [ 81.581916][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.581936][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.592314][ T5647] veth0_macvtap: entered promiscuous mode [ 81.603565][ T5647] veth1_macvtap: entered promiscuous mode [ 81.672312][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.673585][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.673602][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.700612][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.718858][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.790083][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.804598][ T5649] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.860157][ T5646] veth0_macvtap: entered promiscuous mode [ 81.903072][ T5646] veth1_macvtap: entered promiscuous mode [ 82.022533][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022738][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022774][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022809][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022843][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022877][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022911][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022945][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.100492][ T5733] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.160678][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.160700][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.191606][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.259691][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.297220][ T5736] mmap: syz.2.3 (5736) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.310773][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.310793][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.365619][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.365640][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399198][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.483670][ T342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.483691][ T342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.563994][ T5740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.643584][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644016][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644172][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644323][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.746445][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.746465][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.801687][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.801706][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.097702][ T5635] Bluetooth: hci2: command tx timeout [ 83.177750][ T5631] Bluetooth: hci3: command tx timeout [ 83.177836][ T4952] Bluetooth: hci0: command tx timeout [ 83.177901][ T5635] Bluetooth: hci1: command tx timeout [ 83.258455][ T5635] Bluetooth: hci4: command tx timeout [ 83.635488][ T5767] Zero length message leads to an empty skb [ 83.688525][ T5765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.178805][ T5630] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.331694][ T5630] usb 2-1: Using ep0 maxpacket: 8 [ 84.346107][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.346226][ T5630] usb 2-1: New USB device found: idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 84.369683][ T5630] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 84.369700][ T5630] usb 2-1: config 2 has no interface number 0 [ 84.369740][ T5630] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 84.369754][ T5630] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.369767][ T5630] usb 2-1: config 2 interface 232 has no altsetting 0 [ 84.375596][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.375610][ T5630] usb 2-1: Product: syz [ 84.375617][ T5630] usb 2-1: Manufacturer: syz [ 84.375625][ T5630] usb 2-1: SerialNumber: syz [ 84.449598][ T5770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.788284][ T5770] xt_hashlimit: max too large, truncated to 1048576 [ 85.178093][ T5635] Bluetooth: hci2: command tx timeout [ 85.258143][ T5631] Bluetooth: hci3: command tx timeout [ 85.258184][ T4952] Bluetooth: hci0: command tx timeout [ 85.258206][ T5635] Bluetooth: hci1: command tx timeout [ 85.297984][ T5633] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.337745][ T5635] Bluetooth: hci4: command tx timeout [ 85.444735][ T5630] usb 2-1: USB disconnect, device number 2 [ 85.460979][ T5633] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 85.462214][ T5633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.462242][ T5633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.466541][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.466559][ T5633] usb 3-1: Product: syz [ 85.466567][ T5633] usb 3-1: Manufacturer: syz [ 85.537785][ T5633] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 85.618875][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.944570][ T5633] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 86.789741][ T981] cfg80211: failed to load regulatory.db [ 87.329077][ T5809] process 'syz.0.14' launched './file0' with NULL argv: empty string added [ 87.707551][ T5719] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 87.868682][ T5719] usb 2-1: not running at top speed; connect to a high speed hub [ 87.868706][ T5719] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 87.872305][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.872365][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.919840][ T5719] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 88.030893][ T1225] usb 3-1: USB disconnect, device number 2 [ 88.084116][ T1225] mos7840 3-1:1.0: device disconnected [ 88.581646][ T5719] uvcvideo 2-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 88.582104][ T5719] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 88.582155][ T5719] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 88.583122][ T5719] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 88.682835][ T5719] usb 2-1: USB disconnect, device number 3 [ 89.654880][ T5837] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20'. [ 89.712116][ T5816] tipc: Started in network mode [ 89.712138][ T5816] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 89.712644][ T5816] tipc: Enabled bearer , priority 10 [ 90.260965][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.832514][ T5726] tipc: Node number set to 10070698 [ 92.057143][ T30] audit: type=1326 audit(1793327356.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.057176][ T30] audit: type=1326 audit(1793327356.224:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.117814][ T30] audit: type=1326 audit(1793327356.284:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.124226][ T30] audit: type=1326 audit(1793327356.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.188029][ T30] audit: type=1326 audit(1793327356.354:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.188062][ T30] audit: type=1326 audit(1793327356.354:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.188083][ T30] audit: type=1326 audit(1793327356.354:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.188103][ T30] audit: type=1326 audit(1793327356.354:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.188124][ T30] audit: type=1326 audit(1793327356.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.195197][ T30] audit: type=1326 audit(1793327356.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.4.23" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 92.704189][ T5630] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.898380][ T5630] usb 1-1: Using ep0 maxpacket: 8 [ 92.898916][ T5630] usb 1-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 92.901048][ T5630] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 92.901062][ T5630] usb 1-1: config 0 has no interface number 0 [ 92.949300][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.949316][ T5630] usb 1-1: Product: syz [ 92.949324][ T5630] usb 1-1: Manufacturer: syz [ 92.949331][ T5630] usb 1-1: SerialNumber: syz [ 92.997717][ T5630] usb 1-1: config 0 descriptor?? [ 93.041170][ T5630] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 93.309693][ T1225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.684348][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.685165][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.838066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.215792][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.259187][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.490366][ T5870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.662941][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.683688][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.803766][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.937950][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.938083][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.972012][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.972093][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.076887][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.113017][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.241993][ T5859] veth1_vlan: left promiscuous mode [ 96.246690][ T5859] veth0_vlan: left promiscuous mode [ 96.271318][ T5859] veth0_vlan: entered promiscuous mode [ 96.299038][ T5859] veth1_vlan: entered promiscuous mode [ 96.365201][ T5859] veth1_macvtap: left promiscuous mode [ 96.374245][ T5859] veth0_macvtap: left promiscuous mode [ 96.416230][ T5859] veth0_macvtap: entered promiscuous mode [ 96.435407][ T5859] veth1_macvtap: entered promiscuous mode [ 96.474318][ T5859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.491601][ T5859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.497780][ T5859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.523445][ T5859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.662309][ T5719] usb 1-1: USB disconnect, device number 3 [ 97.329858][ T5879] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 97.618615][ T5705] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.780921][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 97.809493][ T5888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.039014][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.039046][ T5705] usb 5-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 98.052029][ T5705] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.052056][ T5705] usb 5-1: can't read configurations, error -71 [ 98.399065][ T981] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.538359][ T981] usb 1-1: device descriptor read/64, error -71 [ 98.801004][ T981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.945784][ T981] usb 1-1: device descriptor read/64, error -71 [ 99.062056][ T981] usb usb1-port1: attempt power cycle [ 99.235538][ T5899] input: syz0 as /devices/virtual/input/input5 [ 99.250263][ T5719] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.401258][ T5719] usb 3-1: New USB device found: idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 99.402808][ T5719] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 99.402824][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.402834][ T5719] usb 3-1: config 0 has no interface number 0 [ 99.402856][ T5719] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.445481][ T981] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.475453][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.475470][ T5719] usb 3-1: Product: syz [ 99.475477][ T5719] usb 3-1: Manufacturer: syz [ 99.475485][ T5719] usb 3-1: SerialNumber: syz [ 99.503678][ T981] usb 1-1: device descriptor read/8, error -71 [ 99.522644][ T5719] usb 3-1: config 0 descriptor?? [ 99.737649][ T981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.761397][ T981] usb 1-1: device descriptor read/8, error -71 [ 99.868010][ T981] usb usb1-port1: unable to enumerate USB device [ 101.287601][ T5705] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.347525][ T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.444823][ T5705] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 101.470298][ T5719] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 101.470454][ T5719] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 101.486056][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 101.486079][ T5705] usb 1-1: Product: syz [ 101.486093][ T5705] usb 1-1: SerialNumber: syz [ 101.517516][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 101.523382][ T981] usb 2-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 101.551888][ T5705] usb 1-1: config 0 descriptor?? [ 101.552998][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.553040][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.553082][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.613258][ T5719] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 101.613328][ T5719] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 101.613490][ T5719] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 101.671854][ T981] mdc800 2-1:1.0: probe fails -> wrong Interface [ 101.684985][ T5719] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 101.734431][ T5719] usb 3-1: USB disconnect, device number 4 [ 101.806629][ T5719] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 101.821938][ T5719] keyspan 3-1:0.133: device disconnected [ 102.011829][ T5712] usb 2-1: USB disconnect, device number 4 [ 102.060332][ T1019] IPVS: starting estimator thread 0... [ 102.168220][ T5908] IPVS: using max 52 ests per chain, 124800 per kthread [ 102.485240][ T5705] usb 1-1: USB disconnect, device number 8 [ 102.847604][ T981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.957632][ T5712] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.009209][ T981] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 103.010705][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.010749][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.050783][ T981] usb 3-1: config 0 descriptor?? [ 103.129872][ T5712] usb 4-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 103.156252][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 103.156268][ T5712] usb 4-1: Product: syz [ 103.156276][ T5712] usb 4-1: SerialNumber: syz [ 103.186108][ T5712] usb 4-1: config 0 descriptor?? [ 103.299900][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 103.300027][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.331188][ T981] usb 3-1: USB disconnect, device number 5 [ 103.475219][ T62] IPVS: starting estimator thread 0... [ 103.557543][ T5923] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.868594][ T981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.890202][ T5712] usb 4-1: USB disconnect, device number 2 [ 104.037579][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 104.038112][ T981] usb 3-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=0.40 [ 104.039286][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.039316][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.062516][ T981] usb 3-1: config 0 descriptor?? [ 104.094793][ T981] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.114059][ T981] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.462081][ T5929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.629097][ T981] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.758137][ T981] usb 1-1: device descriptor read/64, error -71 [ 105.000932][ T981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 105.091382][ T5936] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 105.128574][ T981] usb 1-1: device descriptor read/64, error -71 [ 105.193187][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 105.238237][ T981] usb usb1-port1: attempt power cycle [ 105.273959][ T5705] usb 3-1: USB disconnect, device number 6 [ 105.320934][ T5705] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 105.346808][ T5941] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 105.577569][ T981] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 105.604879][ T981] usb 1-1: device descriptor read/8, error -71 [ 105.837763][ T981] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.867642][ T981] usb 1-1: device descriptor read/8, error -71 [ 105.985100][ T981] usb usb1-port1: unable to enumerate USB device [ 106.877857][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.46'. [ 107.008758][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.165807][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.226781][ T5961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.302944][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.47'. [ 107.771439][ T5965] Invalid argument reading file caps for ./file0 [ 108.086445][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 108.086458][ T30] audit: type=1326 audit(1793327372.254:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.122068][ T30] audit: type=1326 audit(1793327372.254:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.166124][ T30] audit: type=1326 audit(1793327372.334:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.166154][ T30] audit: type=1326 audit(1793327372.334:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.173399][ T30] audit: type=1326 audit(1793327372.344:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.175809][ T30] audit: type=1326 audit(1793327372.344:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.176073][ T30] audit: type=1326 audit(1793327372.344:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.178983][ T30] audit: type=1326 audit(1793327372.354:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.180090][ T30] audit: type=1326 audit(1793327372.354:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 108.182202][ T30] audit: type=1326 audit(1793327372.354:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.50" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 109.058243][ T5705] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.229531][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 109.231172][ T5705] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 109.254434][ T5705] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.254449][ T5705] usb 5-1: config 1 has no interface number 0 [ 109.254474][ T5705] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 109.306711][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.306730][ T5705] usb 5-1: Product: syz [ 109.306737][ T5705] usb 5-1: Manufacturer: syz [ 109.306745][ T5705] usb 5-1: SerialNumber: syz [ 109.987714][ T5719] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 110.154636][ T5719] usb 2-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 110.180480][ T5719] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 110.180496][ T5719] usb 2-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 110.180506][ T5719] usb 2-1: config 0 has no interface number 0 [ 110.180528][ T5719] usb 2-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.262454][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.262480][ T5719] usb 2-1: Product: syz [ 110.262518][ T5719] usb 2-1: Manufacturer: syz [ 110.262532][ T5719] usb 2-1: SerialNumber: syz [ 110.307709][ T5719] usb 2-1: config 0 descriptor?? [ 110.327372][ T5719] redrat3 2-1:0.83: Couldn't find all endpoints [ 110.823151][ T5705] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.044515][ T5705] usb 5-1: USB disconnect, device number 4 [ 111.149503][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.334833][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'. [ 111.461383][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 112.869215][ T6008] could not allocate digest TFM handle sha256-avx [ 113.559176][ T5630] usb 2-1: USB disconnect, device number 5 [ 114.441209][ T6026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.451712][ T6026] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 114.477861][ T5726] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.599356][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.630587][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 114.644419][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.644482][ T5726] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 114.665029][ T5726] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.665053][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.665095][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.665119][ T5726] usb 2-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 114.718439][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.718462][ T5726] usb 2-1: Product: syz [ 114.718469][ T5726] usb 2-1: Manufacturer: syz [ 114.718477][ T5726] usb 2-1: SerialNumber: syz [ 114.759158][ T6026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.759179][ T6026] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 114.809887][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 114.811252][ T981] usb 4-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 114.817543][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.817563][ T981] usb 4-1: config 0 has no interface number 0 [ 114.859296][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.859347][ T981] usb 4-1: Product: syz [ 114.859362][ T981] usb 4-1: Manufacturer: syz [ 114.859375][ T981] usb 4-1: SerialNumber: syz [ 114.898119][ T981] usb 4-1: config 0 descriptor?? [ 114.901341][ T6026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.902038][ T6026] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 114.932772][ T981] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 114.932794][ T981] usb 4-1: selecting invalid altsetting 1 [ 114.932803][ T981] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.007847][ T981] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.008145][ T981] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.008178][ T981] usb 4-1: media controller created [ 115.015243][ T6026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.015261][ T6026] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 115.103128][ T6026] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.104623][ T6026] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 115.131531][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.317097][ T6034] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 115.365098][ T5726] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 115.365178][ T5726] cdc_ncm 2-1:1.0: bind() failure [ 115.410122][ T5726] usb 2-1: USB disconnect, device number 6 [ 115.457576][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.612865][ T29] usb 3-1: New USB device found: idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 115.614963][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.615013][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 115.616319][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.616346][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 115.639211][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.639240][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 115.639263][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.714656][ T29] usb 3-1: config 0 descriptor?? [ 116.300962][ T981] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.305164][ T981] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.597605][ T5705] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.756399][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.756430][ T5705] usb 5-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 116.757348][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.757370][ T5705] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.757401][ T5705] usb 5-1: config 1 interface 1 has no altsetting 0 [ 116.821671][ T5705] usb 5-1: string descriptor 0 read error: -22 [ 116.821756][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.119818][ T5705] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 117.243316][ T981] usb 4-1: USB disconnect, device number 3 [ 117.646752][ T5719] usb 3-1: USB disconnect, device number 7 [ 117.868953][ T6052] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 118.458961][ T5719] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 118.611978][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.612597][ T5719] usb 4-1: not running at top speed; connect to a high speed hub [ 118.612628][ T5719] usb 4-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 118.614546][ T5719] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 118.614562][ T5719] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 118.614572][ T5719] usb 4-1: config 5 has no interface number 0 [ 118.614595][ T5719] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.614609][ T5719] usb 4-1: config 5 interface 246 has no altsetting 0 [ 118.689204][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.689230][ T5719] usb 4-1: Product: syz [ 118.689244][ T5719] usb 4-1: Manufacturer: syz [ 118.689257][ T5719] usb 4-1: SerialNumber: syz [ 118.747875][ T5630] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.900132][ T5630] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 118.903130][ T5630] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.937063][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.937088][ T5630] usb 1-1: Product: syz [ 118.937102][ T5630] usb 1-1: Manufacturer: syz [ 118.937116][ T5630] usb 1-1: SerialNumber: syz [ 118.977106][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.996039][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.016995][ T6073] netlink: 164 bytes leftover after parsing attributes in process `syz.2.71'. [ 119.054590][ T5719] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 119.071065][ T5719] usb 4-1: USB disconnect, device number 4 [ 119.072111][ T62] usb 4-1: Failed to submit usb control message: -19 [ 119.072130][ T62] usb 4-1: unable to send the bmi data to the device: -19 [ 119.072156][ T62] usb 4-1: unable to get target info from device [ 119.072171][ T62] usb 4-1: could not get target info (-19) [ 119.072294][ T62] usb 4-1: could not probe fw (-19) [ 119.237173][ T5630] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.290805][ T5630] usb 1-1: USB disconnect, device number 13 [ 119.294458][ T981] usb 5-1: USB disconnect, device number 5 [ 119.393294][ T5630] usblp0: removed [ 121.475076][ T6099] Invalid argument reading file caps for ./file0 [ 121.670974][ T6103] lo: entered promiscuous mode [ 121.687175][ T6103] tunl0: entered promiscuous mode [ 121.710987][ T6103] gre0: entered promiscuous mode [ 121.740668][ T6103] gretap0: entered promiscuous mode [ 121.764536][ T6103] erspan0: entered promiscuous mode [ 121.780169][ T6103] ip_vti0: entered promiscuous mode [ 121.798104][ T6103] ip6_vti0: entered promiscuous mode [ 121.810651][ T6103] sit0: entered promiscuous mode [ 121.835658][ T6103] ip6tnl0: entered promiscuous mode [ 121.853823][ T6103] ip6gre0: entered promiscuous mode [ 121.875727][ T6103] syz_tun: entered promiscuous mode [ 121.906827][ T6107] syz.3.78: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.909776][ T6103] ip6gretap0: entered promiscuous mode [ 121.911358][ T6107] [ 121.911385][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.3.78 Not tainted syzkaller #0 PREEMPT(full) [ 121.911410][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.911429][ T6107] Call Trace: [ 121.911438][ T6107] [ 121.911447][ T6107] dump_stack_lvl+0xe8/0x150 [ 121.911497][ T6107] warn_alloc+0x24d/0x270 [ 121.911521][ T6107] ? stack_depot_save_flags+0x404/0x810 [ 121.911553][ T6107] ? __pfx_warn_alloc+0x10/0x10 [ 121.911575][ T6107] ? kasan_save_track+0x4f/0x80 [ 121.911599][ T6107] ? __kasan_kmalloc+0x93/0xb0 [ 121.911625][ T6107] ? xsk_init_queue+0x8a/0xe0 [ 121.911644][ T6107] ? xsk_setsockopt+0x52a/0x960 [ 121.911664][ T6107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.911698][ T6107] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 121.911752][ T6107] ? rcu_is_watching+0x16/0xb0 [ 121.911789][ T6107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.911812][ T6107] ? __kmalloc_cache_noprof+0x31c/0x600 [ 121.911839][ T6107] ? __kmalloc_cache_noprof+0x148/0x600 [ 121.911863][ T6107] ? xskq_create+0x56/0x220 [ 121.911889][ T6107] xskq_create+0x148/0x220 [ 121.911911][ T6107] ? xsk_init_queue+0x8a/0xe0 [ 121.911933][ T6107] xsk_init_queue+0x8a/0xe0 [ 121.911956][ T6107] xsk_setsockopt+0x52a/0x960 [ 121.911984][ T6107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.912006][ T6107] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.912046][ T6107] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 121.912070][ T6107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.912092][ T6107] do_sock_setsockopt+0x17c/0x1b0 [ 121.912118][ T6107] __x64_sys_setsockopt+0x13d/0x1b0 [ 121.912145][ T6107] do_syscall_64+0x166/0x520 [ 121.912168][ T6107] ? trace_irq_disable+0x3b/0x140 [ 121.912196][ T6107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.912216][ T6107] ? clear_bhb_loop+0x70/0xc0 [ 121.912242][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.912262][ T6107] RIP: 0033:0x7f8df3d9f559 [ 121.912290][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.912315][ T6107] RSP: 002b:00007f8df4cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.912337][ T6107] RAX: ffffffffffffffda RBX: 00007f8df4025fa0 RCX: 00007f8df3d9f559 [ 121.912352][ T6107] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 121.912365][ T6107] RBP: 00007f8df3e36b20 R08: 0000000000000029 R09: 0000000000000000 [ 121.912378][ T6107] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.912391][ T6107] R13: 00007f8df4026038 R14: 00007f8df4025fa0 R15: 00007f8df414fa48 [ 121.912424][ T6107] [ 121.912903][ T6107] Mem-Info: [ 121.912914][ T6107] active_anon:25642 inactive_anon:0 isolated_anon:0 [ 121.912914][ T6107] active_file:0 inactive_file:62432 isolated_file:0 [ 121.912914][ T6107] unevictable:0 dirty:538 writeback:0 [ 121.912914][ T6107] slab_reclaimable:11097 slab_unreclaimable:95221 [ 121.912914][ T6107] mapped:46020 shmem:19953 pagetables:1405 [ 121.912914][ T6107] sec_pagetables:0 bounce:0 [ 121.912914][ T6107] kernel_misc_reclaimable:0 [ 121.912914][ T6107] free:1282593 free_pcp:10281 free_cma:0 [ 121.912976][ T6107] Node 0 active_anon:102568kB inactive_anon:0kB active_file:0kB inactive_file:249524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184080kB dirty:2148kB writeback:0kB shmem:79812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12288kB pagetables:5484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.913048][ T6107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.913166][ T6107] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.913227][ T6107] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 121.913265][ T6107] Node 0 DMA32 free:1188256kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:102568kB inactive_anon:0kB active_file:0kB inactive_file:249524kB unevictable:0kB writepending:2148kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:34680kB local_pcp:21976kB free_cma:0kB [ 121.913906][ T6107] lowmem_reserve[]: 0 0 1 1 1 [ 121.917378][ T6107] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 122.275759][ T6107] lowmem_reserve[]: 0 0 0 0 0 [ 122.275802][ T6107] Node 1 Normal free:3926756kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6440kB local_pcp:6440kB free_cma:0kB [ 122.276644][ T6107] lowmem_reserve[]: 0 0 0 0 0 [ 122.276683][ T6107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.276891][ T6107] Node 0 DMA32: 860*4kB (U) 628*8kB (UM) 2200*16kB (UM) 825*32kB (UME) 298*64kB (UME) 87*128kB (UME) 8*256kB (UM) 1*512kB (U) 1*1024kB (U) 3*2048kB (ME) 263*4096kB (UM) = 1187248kB [ 122.277071][ T6107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.277196][ T6107] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 2*16kB (M) 2*32kB (M) 12*64kB (UM) 7*128kB (UM) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 958*4096kB (M) = 3926808kB [ 122.277387][ T6107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.277403][ T6107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.277452][ T6107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.277491][ T6107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.277507][ T6107] 82526 total pagecache pages [ 122.277520][ T6107] 0 pages in swap cache [ 122.277527][ T6107] Free swap = 124996kB [ 122.277534][ T6107] Total swap = 124996kB [ 122.277541][ T6107] 2097051 pages RAM [ 122.277548][ T6107] 0 pages HighMem/MovableOnly [ 122.277556][ T6107] 434240 pages reserved [ 122.277563][ T6107] 0 pages cma reserved [ 122.322131][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.322752][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.348825][ T6103] bridge0: entered promiscuous mode [ 122.648493][ T6103] vcan0: entered promiscuous mode [ 122.673945][ T6103] bond0: entered promiscuous mode [ 122.673959][ T6103] bond_slave_0: entered promiscuous mode [ 122.674141][ T6103] bond_slave_1: entered promiscuous mode [ 122.705281][ T6103] team0: entered promiscuous mode [ 122.705296][ T6103] team_slave_0: entered promiscuous mode [ 122.705412][ T6103] team_slave_1: entered promiscuous mode [ 122.743244][ T6103] dummy0: entered promiscuous mode [ 122.760631][ T6103] nlmon0: entered promiscuous mode [ 122.761644][ T6103] batadv0: entered promiscuous mode [ 122.785957][ T6103] vxcan0: entered promiscuous mode [ 122.796450][ T6103] vxcan1: entered promiscuous mode [ 122.797009][ T6103] veth0: entered promiscuous mode [ 122.834903][ T6103] veth1: entered promiscuous mode [ 122.860314][ T6103] wg0: entered promiscuous mode [ 122.868319][ T6103] wg1: entered promiscuous mode [ 122.890555][ T6103] wg2: entered promiscuous mode [ 122.895571][ T6103] veth0_to_bridge: entered promiscuous mode [ 122.934426][ T6103] veth1_to_bridge: entered promiscuous mode [ 122.968356][ T6103] veth0_to_bond: entered promiscuous mode [ 122.994781][ T6103] veth1_to_bond: entered promiscuous mode [ 123.008932][ T6103] veth0_to_team: entered promiscuous mode [ 123.042834][ T6103] veth1_to_team: entered promiscuous mode [ 123.069758][ T6103] veth0_to_batadv: entered promiscuous mode [ 123.088014][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.088049][ T6103] batadv_slave_0: entered promiscuous mode [ 123.112313][ T6103] veth1_to_batadv: entered promiscuous mode [ 123.129712][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.149965][ T6103] batadv_slave_1: entered promiscuous mode [ 123.166146][ T6103] xfrm0: entered promiscuous mode [ 123.187070][ T6103] veth0_to_hsr: entered promiscuous mode [ 123.213219][ T6103] veth1_to_hsr: entered promiscuous mode [ 123.253346][ T6103] hsr0: entered promiscuous mode [ 123.270532][ T6103] veth1_virt_wifi: entered promiscuous mode [ 123.294356][ T6103] veth0_virt_wifi: entered promiscuous mode [ 123.309902][ T6103] virt_wifi0: entered promiscuous mode [ 123.342981][ T6103] vlan0: entered promiscuous mode [ 123.361206][ T6103] tipc: Resetting bearer [ 123.361896][ T6103] vlan1: entered promiscuous mode [ 123.402957][ T6103] macvlan0: entered promiscuous mode [ 123.426993][ T6103] macvlan1: entered promiscuous mode [ 123.460112][ T6103] ipvlan0: entered promiscuous mode [ 123.466610][ T6103] ipvlan1: entered promiscuous mode [ 123.516803][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 123.545880][ T6120] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5649] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6120] [ 123.554238][ T6103] macvtap0: entered promiscuous mode [ 123.593778][ T6103] macsec0: entered promiscuous mode [ 123.617047][ T6103] geneve0: entered promiscuous mode [ 123.662663][ T6103] geneve1: entered promiscuous mode [ 123.704009][ T6103] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 123.727314][ T6103] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 123.777872][ T6103] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 123.813889][ T6103] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 123.895245][ T6103] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 123.993906][ T6103] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 124.019756][ T6103] bond1: entered promiscuous mode [ 124.028468][ T6096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.203715][ T6124] sctp: [Deprecated]: syz.2.82 (pid 6124) Use of int in max_burst socket option. [ 124.203715][ T6124] Use struct sctp_assoc_value instead [ 124.523395][ T6096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.523424][ T6096] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.523442][ T6096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.690343][ T6097] IPVS: starting estimator thread 0... [ 124.787519][ T6133] IPVS: using max 28 ests per chain, 67200 per kthread [ 125.312641][ T6150] Invalid argument reading file caps for ./file0 [ 125.328528][ T6149] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 125.442770][ T6147] input: syz1 as /devices/virtual/input/input7 [ 125.546954][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.547328][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.050763][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.086221][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.451011][ T6162] No memory to map [ 126.549078][ T43] IPVS: starting estimator thread 0... [ 126.637536][ T6164] IPVS: using max 33 ests per chain, 79200 per kthread [ 126.978277][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.003026][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.037354][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.141002][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.141090][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.166175][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.166240][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.251237][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.284621][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.367372][ T6147] veth1_vlan: left promiscuous mode [ 127.381543][ T6147] veth0_vlan: left promiscuous mode [ 127.396593][ T6147] veth0_vlan: entered promiscuous mode [ 127.426217][ T6147] veth1_vlan: entered promiscuous mode [ 127.469196][ T6147] veth1_macvtap: left promiscuous mode [ 127.482674][ T6147] veth0_macvtap: left promiscuous mode [ 127.483905][ T6147] veth0_macvtap: entered promiscuous mode [ 127.507289][ T6147] veth1_macvtap: entered promiscuous mode [ 127.565967][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.566622][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.589238][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.590248][ T6147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.750930][ T6167] lo: entered promiscuous mode [ 127.764816][ T6167] tunl0: entered promiscuous mode [ 127.766713][ T6167] gre0: entered promiscuous mode [ 127.805124][ T6167] gretap0: entered promiscuous mode [ 127.820813][ T6167] erspan0: entered promiscuous mode [ 127.835173][ T6167] ip_vti0: entered promiscuous mode [ 127.844549][ T6167] ip6_vti0: entered promiscuous mode [ 127.857967][ T6167] sit0: entered promiscuous mode [ 127.861425][ T6167] ip6tnl0: entered promiscuous mode [ 127.881634][ T6167] ip6gre0: entered promiscuous mode [ 127.910667][ T6167] syz_tun: entered promiscuous mode [ 127.931837][ T6167] ip6gretap0: entered promiscuous mode [ 127.950286][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.951552][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.976359][ T6167] bridge0: entered promiscuous mode [ 127.995397][ T6167] vcan0: entered promiscuous mode [ 128.002621][ T6167] bond0: entered promiscuous mode [ 128.002633][ T6167] bond_slave_0: entered promiscuous mode [ 128.002758][ T6167] bond_slave_1: entered promiscuous mode [ 128.032383][ T6167] team0: entered promiscuous mode [ 128.032395][ T6167] team_slave_0: entered promiscuous mode [ 128.032502][ T6167] team_slave_1: entered promiscuous mode [ 128.063723][ T6167] dummy0: entered promiscuous mode [ 128.079182][ T6167] nlmon0: entered promiscuous mode [ 128.083172][ T6167] batadv0: entered promiscuous mode [ 128.104338][ T6167] vxcan0: entered promiscuous mode [ 128.105121][ T6167] vxcan1: entered promiscuous mode [ 128.119674][ T6167] veth0: entered promiscuous mode [ 128.133597][ T6167] veth1: entered promiscuous mode [ 128.149714][ T6167] wg0: entered promiscuous mode [ 128.164221][ T6167] wg1: entered promiscuous mode [ 128.180338][ T6167] wg2: entered promiscuous mode [ 128.191120][ T6167] veth0_to_bridge: entered promiscuous mode [ 128.212947][ T6167] veth1_to_bridge: entered promiscuous mode [ 128.233549][ T6167] veth0_to_bond: entered promiscuous mode [ 128.252401][ T6167] veth1_to_bond: entered promiscuous mode [ 128.266884][ T6167] veth0_to_team: entered promiscuous mode [ 128.290526][ T6167] veth1_to_team: entered promiscuous mode [ 128.319414][ T6167] veth0_to_batadv: entered promiscuous mode [ 128.333131][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.333165][ T6167] batadv_slave_0: entered promiscuous mode [ 128.356388][ T6167] veth1_to_batadv: entered promiscuous mode [ 128.372566][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.372599][ T6167] batadv_slave_1: entered promiscuous mode [ 128.395966][ T6167] xfrm0: entered promiscuous mode [ 128.411581][ T6167] veth0_to_hsr: entered promiscuous mode [ 128.436480][ T6167] veth1_to_hsr: entered promiscuous mode [ 128.475545][ T6167] hsr0: entered promiscuous mode [ 128.499640][ T6167] veth1_virt_wifi: entered promiscuous mode [ 128.520425][ T6167] veth0_virt_wifi: entered promiscuous mode [ 128.544890][ T6167] virt_wifi0: entered promiscuous mode [ 128.592513][ T6167] vlan0: entered promiscuous mode [ 128.609944][ T6167] vlan1: entered promiscuous mode [ 128.632840][ T6167] macvlan0: entered promiscuous mode [ 128.650166][ T6167] macvlan1: entered promiscuous mode [ 128.668364][ T6167] ipvlan0: entered promiscuous mode [ 128.668537][ T6167] ipvlan1: entered promiscuous mode [ 128.733122][ T6167] macvtap0: entered promiscuous mode [ 128.749814][ T6167] macsec0: entered promiscuous mode [ 128.761439][ T6167] geneve0: entered promiscuous mode [ 128.764785][ T6167] geneve1: entered promiscuous mode [ 128.785374][ T6167] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 128.797305][ T6167] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 128.814794][ T6167] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 128.831121][ T6167] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 128.865171][ T6167] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 128.897364][ T6167] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 128.950947][ T995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.009904][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 129.148814][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.148841][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.148859][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.272120][ T6174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.302998][ T6174] UHID_CREATE from different security context by process 89 (syz.4.96), this is not allowed. [ 129.551717][ T6190] netlink: 184 bytes leftover after parsing attributes in process `syz.2.100'. [ 129.947956][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.968874][ T6203] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 130.118792][ T981] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 130.119825][ T981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.119866][ T981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.119878][ T981] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.119889][ T981] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.119912][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.147720][ T29] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 130.327514][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 130.336185][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.336245][ T29] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 130.364769][ T29] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 130.364794][ T29] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 130.364814][ T29] usb 1-1: config 14 has no interface number 0 [ 130.364830][ T29] usb 1-1: config 14 has no interface number 1 [ 130.364881][ T29] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 130.364894][ T29] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 130.364905][ T29] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 130.364922][ T29] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.364945][ T29] usb 1-1: config 14 interface 57 has no altsetting 0 [ 130.364963][ T29] usb 1-1: config 14 interface 228 has no altsetting 0 [ 130.480204][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.480230][ T29] usb 1-1: Product: syz [ 130.480244][ T29] usb 1-1: Manufacturer: syz [ 130.480257][ T29] usb 1-1: SerialNumber: syz [ 130.569336][ T981] usb 3-1: USB disconnect, device number 8 [ 131.936173][ T29] legousbtower 1-1:14.57: interrupt endpoints not found [ 131.971135][ T29] legousbtower 1-1:14.228: interrupt endpoints not found [ 132.004588][ T29] usb 1-1: USB disconnect, device number 14 [ 132.861212][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.861261][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223933][ T6220] batman_adv: batadv0: Adding interface: dummy0 [ 133.223952][ T6220] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.223990][ T6220] batman_adv: batadv0: Interface activated: dummy0 [ 133.674544][ T6220] batadv0: mtu less than device minimum [ 133.676240][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.677156][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.678082][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.678822][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.679605][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.680383][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.681150][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.681889][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.682676][ T6220] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 134.332380][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 134.332399][ T30] audit: type=1800 audit(1793327398.504:319): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.112" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 134.657512][ T24] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 134.817487][ T24] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.826441][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.826459][ T24] usb 2-1: config 0 has no interface number 0 [ 134.826481][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 134.826495][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 134.826518][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.886795][ T24] usb 2-1: config 0 descriptor?? [ 134.897582][ T6241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.994682][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.211452][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 135.228541][ T29] usb 2-1: USB disconnect, device number 7 [ 135.347950][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.511234][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.511271][ T24] usb 3-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 135.514064][ T24] usb 3-1: config 254 has an invalid interface number: 213 but max is 0 [ 135.514089][ T24] usb 3-1: config 254 has no interface number 0 [ 135.514118][ T24] usb 3-1: config 254 interface 213 has no altsetting 0 [ 135.559348][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.559379][ T24] usb 3-1: Product: syz [ 135.559394][ T24] usb 3-1: Manufacturer: syz [ 135.559408][ T24] usb 3-1: SerialNumber: syz [ 136.224745][ T6268] deleting an unspecified loop device is not supported. [ 136.255949][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 136.580160][ T24] usb_ehset_test 3-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 136.604547][ T24] usb 3-1: USB disconnect, device number 9 [ 137.109424][ T5630] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 137.261093][ T5630] usb 1-1: Using ep0 maxpacket: 8 [ 137.261811][ T5630] usb 1-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 137.286603][ T5630] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 137.286627][ T5630] usb 1-1: Product: syz [ 137.286640][ T5630] usb 1-1: Manufacturer: syz [ 137.286654][ T5630] usb 1-1: SerialNumber: syz [ 137.322607][ T5630] usb 1-1: config 0 descriptor?? [ 137.339708][ T5630] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 137.655099][ T6279] netlink: 112 bytes leftover after parsing attributes in process `syz.2.122'. [ 137.825652][ T6272] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.849593][ T5630] gspca_zc3xx: reg_w_i err -110 [ 137.849648][ T5630] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 137.930066][ T6272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 137.969210][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.971648][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.122429][ T1225] usb 1-1: USB disconnect, device number 15 [ 138.249066][ T6284] tipc: Started in network mode [ 138.249089][ T6284] tipc: Node identity ac14140f, cluster identity 4711 [ 138.249874][ T6284] tipc: New replicast peer: 255.255.255.255 [ 138.250297][ T6284] tipc: Enabled bearer , priority 10 [ 138.997617][ T981] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.148231][ T981] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 139.153037][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.153052][ T981] usb 3-1: Product: syz [ 139.153060][ T981] usb 3-1: Manufacturer: syz [ 139.153067][ T981] usb 3-1: SerialNumber: syz [ 139.289100][ T24] tipc: Node number set to 2886997007 [ 139.304791][ T5633] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.729593][ T5630] usb 3-1: USB disconnect, device number 10 [ 140.037749][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.199737][ T24] usb 4-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 140.204403][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.204420][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 140.244405][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.244421][ T24] usb 4-1: Product: syz [ 140.244428][ T24] usb 4-1: Manufacturer: syz [ 140.244435][ T24] usb 4-1: SerialNumber: syz [ 140.377961][ T5633] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 140.378894][ T5633] ath9k_htc: Failed to initialize the device [ 140.381923][ T5630] usb 3-1: ath9k_htc: USB layer deinitialized [ 140.720049][ T5630] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.870204][ T5630] usb 3-1: Using ep0 maxpacket: 8 [ 140.876621][ T5630] usb 3-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 140.898066][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 140.898091][ T5630] usb 3-1: Product: syz [ 140.898104][ T5630] usb 3-1: Manufacturer: syz [ 140.898118][ T5630] usb 3-1: SerialNumber: syz [ 140.943197][ T5630] usb 3-1: config 0 descriptor?? [ 141.028495][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.052160][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.097999][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.252967][ T29] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 141.302921][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.302939][ T29] usb 2-1: Product: syz [ 141.302946][ T29] usb 2-1: Manufacturer: syz [ 141.302954][ T29] usb 2-1: SerialNumber: syz [ 141.333146][ T29] usb 2-1: config 0 descriptor?? [ 141.358753][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 141.411397][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.426581][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.426635][ T29] usb 2-1: media controller created [ 141.478047][ T5630] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 141.478408][ T5630] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 141.558523][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.649228][ T6298] fuse: Bad value for 'fd' [ 141.653519][ T24] kaweth 4-1:1.0: Firmware present in device. [ 141.654056][ T24] kaweth 4-1:1.0: Error reading configuration (-71), no net device created [ 141.654208][ T24] kaweth 4-1:1.0: probe with driver kaweth failed with error -5 [ 141.715229][ T24] usb 4-1: USB disconnect, device number 5 [ 141.731546][ T6303] loop7: detected capacity change from 0 to 7 [ 141.842698][ T29] DVB: Unable to find symbol mt352_attach() [ 141.875542][ T6301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.040460][ T6303] Dev loop7: unable to read RDB block 7 [ 142.040506][ T6303] loop7: unable to read partition table [ 142.045477][ T6303] loop7: partition table beyond EOD, truncated [ 142.055127][ T6303] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 142.078574][ T29] DVB: Unable to find symbol nxt6000_attach() [ 142.078596][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 142.084470][ T6298] netlink: 116 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.124456][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 142.151727][ T6298] dvb-usb: bulk message failed: -22 (7/0) [ 142.175334][ T24] usb 3-1: USB disconnect, device number 11 [ 142.227948][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 142.227962][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 142.227997][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 142.228006][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 142.292197][ T29] usb 2-1: USB disconnect, device number 8 [ 142.599509][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 143.205272][ T6325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.243802][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.260936][ T5719] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.337833][ T1225] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.408001][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 143.408672][ T5719] usb 3-1: New USB device found: idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 143.448369][ T5719] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 143.448396][ T5719] usb 3-1: config 0 has no interface number 0 [ 143.448436][ T5719] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 143.448460][ T5719] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 143.466057][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.466072][ T5719] usb 3-1: Product: syz [ 143.466079][ T5719] usb 3-1: Manufacturer: syz [ 143.466087][ T5719] usb 3-1: SerialNumber: syz [ 143.487057][ T5719] usb 3-1: config 0 descriptor?? [ 143.487565][ T1225] usb 1-1: Using ep0 maxpacket: 16 [ 143.498398][ T1225] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 143.521155][ T1225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.521200][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.521216][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.521227][ T1225] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.521238][ T1225] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.588864][ T1225] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.588880][ T1225] usb 1-1: Manufacturer: syz [ 143.645273][ T1225] usb 1-1: config 0 descriptor?? [ 143.734250][ T5719] radio-si470x 3-1:0.35: this is not a si470x device. [ 143.907454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 144.030617][ T6329] x_tables: ip_tables: ah match: only valid for protocol 51 [ 144.278060][ T5719] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 144.492595][ T5719] usb 3-1: USB disconnect, device number 12 [ 144.593598][ T30] audit: type=1326 audit(1793327408.764:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.625709][ T30] audit: type=1326 audit(1793327408.794:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.651837][ T30] audit: type=1326 audit(1793327408.804:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.680206][ T30] audit: type=1326 audit(1793327408.854:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.680448][ T30] audit: type=1326 audit(1793327408.854:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.680754][ T30] audit: type=1326 audit(1793327408.854:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.711689][ T30] audit: type=1326 audit(1793327408.854:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.711724][ T30] audit: type=1326 audit(1793327408.874:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.736199][ T30] audit: type=1326 audit(1793327408.894:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.835199][ T30] audit: type=1326 audit(1793327409.004:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb39779f559 code=0x7ffc0000 [ 144.959042][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.959440][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.731231][ T6341] fuse: Bad value for 'fd' [ 146.507703][ T1225] rc_core: IR keymap rc-hauppauge not found [ 146.507721][ T1225] Registered IR keymap rc-empty [ 146.508111][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.530789][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.549157][ T1225] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.570450][ T1225] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 146.589428][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.626537][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.637661][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.673145][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.688314][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.707554][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.727645][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.766787][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.777738][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.802793][ T1225] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.826860][ T1225] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 146.826875][ T1225] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.856887][ T1225] usb 1-1: USB disconnect, device number 16 [ 147.880866][ T6364] vimc link validate: Sensor B:src:640x16 (0x33424752, 1, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.847606][ T5633] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.998740][ T5633] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.000050][ T5633] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.000080][ T5633] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.000117][ T5633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.052926][ T6370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.090237][ T5633] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.478648][ T5633] usb 5-1: USB disconnect, device number 7 [ 149.934391][ T6373] fuse: Bad value for 'fd' [ 150.852240][ T6398] ALSA: mixer_oss: invalid OSS volume '' [ 151.919731][ T5633] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.956447][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 151.986220][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'. [ 152.078500][ T5633] usb 4-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 152.081821][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.081834][ T5633] usb 4-1: Product: syz [ 152.081842][ T5633] usb 4-1: Manufacturer: syz [ 152.081850][ T5633] usb 4-1: SerialNumber: syz [ 152.087156][ T5633] usb 4-1: config 0 descriptor?? [ 152.946469][ T6421] netlink: 'syz.3.149': attribute type 39 has an invalid length. [ 153.294823][ T995] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 153.296699][ T6410] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 153.864255][ T5633] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 153.864284][ T5633] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 153.864299][ T5633] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 153.892212][ T5633] usb 4-1: USB disconnect, device number 6 [ 154.047520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 154.877992][ T6434] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 155.876531][ T6434] nvme nvme0: failed to connect socket: -111 [ 155.925002][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.102890][ T6464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.033548][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.619578][ T6348] syz.0.145 (6348) used greatest stack depth: 18664 bytes left [ 159.539574][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.695439][ T29] usb 3-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 159.709893][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.729565][ T29] usb 3-1: config 0 descriptor?? [ 160.008094][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 160.264144][ T29] usb 3-1: Cannot read MAC address [ 160.264290][ T29] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 160.295816][ T29] usb 3-1: USB disconnect, device number 13 [ 160.602561][ T6491] syzkaller0: entered promiscuous mode [ 160.602576][ T6491] syzkaller0: entered allmulticast mode [ 160.761921][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 161.237949][ T1225] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 161.272316][ T6515] __vm_enough_memory: pid: 6515, comm: syz.4.171, bytes: 4503599627366400 not enough memory for the allocation [ 161.390977][ T1225] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.396308][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.434096][ T1225] usb 2-1: config 0 descriptor?? [ 161.457088][ T1225] cp210x 2-1:0.0: cp210x converter detected [ 161.584344][ T6519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.684458][ T1225] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 162.684501][ T1225] cp210x 2-1:0.0: querying part number failed [ 162.748754][ T1225] usb 2-1: cp210x converter now attached to ttyUSB0 [ 162.987153][ T29] usb 2-1: USB disconnect, device number 9 [ 163.005395][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.043093][ T29] cp210x 2-1:0.0: device disconnected [ 163.077552][ T981] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.228030][ T981] usb 1-1: New USB device found: idVendor=1a34, idProduct=f705, bcdDevice=0.00 [ 163.229255][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.229293][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.236617][ T981] usb 1-1: config 0 descriptor?? [ 163.430542][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 163.430555][ T30] audit: type=1326 audit(1793327427.604:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.433145][ T30] audit: type=1326 audit(1793327427.604:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.434337][ T30] audit: type=1326 audit(1793327427.604:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.434381][ T30] audit: type=1326 audit(1793327427.604:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.434403][ T30] audit: type=1326 audit(1793327427.604:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.434423][ T30] audit: type=1326 audit(1793327427.604:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.434443][ T30] audit: type=1326 audit(1793327427.604:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.435392][ T30] audit: type=1326 audit(1793327427.604:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.507638][ T30] audit: type=1326 audit(1793327427.604:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3d9f559 code=0x7ffc0000 [ 163.667433][ T30] audit: type=1326 audit(1793327427.834:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.3.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8df3d5fd8e code=0x7ffc0000 [ 163.899366][ T981] acrux 0003:1A34:F705.0001: unknown main item tag 0x6 [ 163.932128][ T981] acrux 0003:1A34:F705.0001: Force Feedback for ACRUX game controllers by Sergei Kolzun [ 163.951406][ T981] input: HID 1a34:f705 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1A34:F705.0001/input/input11 [ 164.009718][ T1225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.038793][ T981] acrux 0003:1A34:F705.0001: input,hidraw0: USB HID v0.00 Joystick [HID 1a34:f705] on usb-dummy_hcd.0-1/input0 [ 164.177735][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 164.182668][ T1225] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.206488][ T1225] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 164.206512][ T1225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.206530][ T1225] usb 4-1: config 0 has no interface number 0 [ 164.206574][ T1225] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.250759][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.250782][ T1225] usb 4-1: Product: syz [ 164.250797][ T1225] usb 4-1: Manufacturer: syz [ 164.250811][ T1225] usb 4-1: SerialNumber: syz [ 164.293205][ T1225] usb 4-1: config 0 descriptor?? [ 164.314640][ T1225] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.353076][ T29] usb 1-1: USB disconnect, device number 17 [ 164.616962][ T6531] fido_id[6531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 166.743541][ T1225] usb 4-1: qt2_attach - failed to power on unit: -71 [ 166.743635][ T1225] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 166.769246][ T1225] usb 4-1: USB disconnect, device number 7 [ 167.630144][ T6570] could not allocate digest TFM handle sha256-avx [ 168.503553][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.917868][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.067619][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 169.068959][ T24] usb 5-1: New USB device found: idVendor=0419, idProduct=0600, bcdDevice=0.00 [ 169.079616][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 169.079653][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.116048][ T24] usb 5-1: config 0 descriptor?? [ 169.707796][ T981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.764871][ T6586] tipc: Disabling bearer [ 169.863949][ T981] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 169.866472][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.911770][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 169.911798][ T981] usb 2-1: Product: syz [ 169.911812][ T981] usb 2-1: Manufacturer: syz [ 169.911826][ T981] usb 2-1: SerialNumber: syz [ 170.131318][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 170.131392][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.203229][ T981] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.207203][ T24] usb 5-1: USB disconnect, device number 8 [ 170.282140][ T981] usb 2-1: USB disconnect, device number 10 [ 170.306829][ T981] usblp0: removed [ 171.195527][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.192'. [ 172.864991][ T6634] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 173.854855][ T6666] syzkaller0: entered promiscuous mode [ 173.854870][ T6666] syzkaller0: entered allmulticast mode [ 174.143798][ T6675] capability: warning: `syz.4.197' uses deprecated v2 capabilities in a way that may be insecure [ 175.379417][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.551440][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 175.553958][ T29] usb 5-1: New USB device found: idVendor=0b05, idProduct=18c6, bcdDevice=0.00 [ 175.567582][ T29] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.567612][ T29] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.567636][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.567668][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.613565][ T29] usb 5-1: config 0 descriptor?? [ 175.981954][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 176.615118][ T29] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0B05:18C6.0002/input/input12 [ 176.992952][ T29] asus 0003:0B05:18C6.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.4-1/input0 [ 177.814069][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 177.862148][ T29] usb 5-1: USB disconnect, device number 9 [ 178.067968][ T6719] could not allocate digest TFM handle sha256-avx [ 179.117882][ T5719] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.267883][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 179.272070][ T5719] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 179.273527][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.273549][ T5719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.292089][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.292117][ T5719] usb 5-1: Product: syz [ 179.292138][ T5719] usb 5-1: Manufacturer: syz [ 179.292152][ T5719] usb 5-1: SerialNumber: syz [ 179.371537][ T5719] usb 5-1: 0:2 : does not exist [ 179.608964][ T6752] libceph: resolve 'c' (ret=-3): failed [ 179.736317][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.881773][ T6781] syzkaller0: entered promiscuous mode [ 181.881815][ T6781] syzkaller0: entered allmulticast mode [ 182.414593][ T5719] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 182.626456][ T5719] usb 5-1: USB disconnect, device number 10 [ 182.781846][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.864925][ T6790] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5648] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6790] [ 183.437520][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.567598][ T981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.588081][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 183.591012][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.591043][ T24] usb 3-1: New USB device found: idVendor=0e41, idProduct=4248, bcdDevice=0.40 [ 183.593048][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 183.635451][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.635467][ T24] usb 3-1: Product: syz [ 183.635475][ T24] usb 3-1: Manufacturer: syz [ 183.635482][ T24] usb 3-1: SerialNumber: syz [ 183.737542][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 183.738254][ T981] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 183.739636][ T981] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 183.739681][ T981] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 183.739706][ T981] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.739732][ T981] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 183.744403][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.744426][ T981] usb 5-1: Product: syz [ 183.744439][ T981] usb 5-1: Manufacturer: syz [ 183.744453][ T981] usb 5-1: SerialNumber: syz [ 183.885527][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 183.931036][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.931069][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 183.958141][ T981] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input13 [ 184.107545][ T981] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 184.107565][ T981] (id 0x00) [ 184.205485][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 184.205512][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 184.269129][ T981] rc_core: IR keymap rc-imon-pad not found [ 184.269146][ T981] Registered IR keymap rc-empty [ 184.269256][ T981] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 184.269272][ T981] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 184.284754][ T24] usb 3-1: USB disconnect, device number 14 [ 184.374924][ T6802] netlink: 552 bytes leftover after parsing attributes in process `syz.0.213'. [ 184.403833][ T981] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 184.428187][ T981] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input14 [ 184.457282][ T981] imon 5-1:155.0: iMON device (15c2:ffdc) on usb<5:11> initialized [ 184.543239][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.843929][ T6808] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 185.180884][ T6811] netlink: 96 bytes leftover after parsing attributes in process `syz.2.217'. [ 185.863699][ T6819] imon:send_packet: task interrupted [ 185.863797][ T6819] imon:send_packet: packet tx failed (-512) [ 185.864184][ T6819] imon:vfd_write: send packet #3 failed [ 185.936699][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 185.961662][ T24] usb 5-1: USB disconnect, device number 11 [ 186.062827][ T6827] syz.0.219: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 186.064392][ T6827] CPU: 0 UID: 0 PID: 6827 Comm: syz.0.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.064420][ T6827] Tainted: [L]=SOFTLOCKUP [ 186.064427][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.064439][ T6827] Call Trace: [ 186.064447][ T6827] [ 186.064456][ T6827] dump_stack_lvl+0xe8/0x150 [ 186.064510][ T6827] warn_alloc+0x24d/0x270 [ 186.064535][ T6827] ? stack_depot_save_flags+0x33/0x810 [ 186.064568][ T6827] ? __pfx_warn_alloc+0x10/0x10 [ 186.064590][ T6827] ? kasan_save_track+0x4f/0x80 [ 186.064616][ T6827] ? __kasan_kmalloc+0x93/0xb0 [ 186.064644][ T6827] ? xsk_init_queue+0x8a/0xe0 [ 186.064662][ T6827] ? xsk_setsockopt+0x52a/0x960 [ 186.064682][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.064713][ T6827] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 186.064762][ T6827] ? rcu_is_watching+0x16/0xb0 [ 186.064800][ T6827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.064821][ T6827] ? __kmalloc_cache_noprof+0x31c/0x600 [ 186.064846][ T6827] ? __kmalloc_cache_noprof+0x148/0x600 [ 186.064869][ T6827] ? xskq_create+0x56/0x220 [ 186.064893][ T6827] xskq_create+0x148/0x220 [ 186.064915][ T6827] ? xsk_init_queue+0x8a/0xe0 [ 186.064938][ T6827] xsk_init_queue+0x8a/0xe0 [ 186.064961][ T6827] xsk_setsockopt+0x52a/0x960 [ 186.064984][ T6827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.065004][ T6827] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.065050][ T6827] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 186.065077][ T6827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.065099][ T6827] do_sock_setsockopt+0x17c/0x1b0 [ 186.065124][ T6827] __x64_sys_setsockopt+0x13d/0x1b0 [ 186.065151][ T6827] do_syscall_64+0x166/0x520 [ 186.065173][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.065194][ T6827] ? clear_bhb_loop+0x70/0xc0 [ 186.065220][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.065240][ T6827] RIP: 0033:0x7fb39779f559 [ 186.065259][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.065277][ T6827] RSP: 002b:00007fb398589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.065297][ T6827] RAX: ffffffffffffffda RBX: 00007fb397a25fa0 RCX: 00007fb39779f559 [ 186.065312][ T6827] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 186.065350][ T6827] RBP: 00007fb397836b20 R08: 0000000000000029 R09: 0000000000000000 [ 186.065363][ T6827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.065375][ T6827] R13: 00007fb397a26038 R14: 00007fb397a25fa0 R15: 00007fb397b4fa48 [ 186.065409][ T6827] [ 186.065445][ T6827] Mem-Info: [ 186.065456][ T6827] active_anon:20852 inactive_anon:0 isolated_anon:0 [ 186.065456][ T6827] active_file:0 inactive_file:60661 isolated_file:0 [ 186.065456][ T6827] unevictable:390 dirty:427 writeback:0 [ 186.065456][ T6827] slab_reclaimable:11614 slab_unreclaimable:94698 [ 186.065456][ T6827] mapped:45184 shmem:15179 pagetables:1463 [ 186.065456][ T6827] sec_pagetables:0 bounce:0 [ 186.065456][ T6827] kernel_misc_reclaimable:0 [ 186.065456][ T6827] free:1283732 free_pcp:13888 free_cma:0 [ 186.065537][ T6827] Node 0 active_anon:83408kB inactive_anon:0kB active_file:0kB inactive_file:242440kB unevictable:1560kB isolated(anon):0kB isolated(file):0kB mapped:180736kB dirty:1704kB writeback:0kB shmem:60716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12572kB pagetables:5716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 186.065624][ T6827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 186.065707][ T6827] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.065816][ T6827] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 186.065924][ T6827] Node 0 DMA32 free:1191408kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:83408kB inactive_anon:0kB active_file:0kB inactive_file:242440kB unevictable:1560kB writepending:1704kB zspages:0kB present:3129332kB managed:2523120kB mlocked:1560kB bounce:0kB free_pcp:50472kB local_pcp:12468kB free_cma:0kB [ 186.066154][ T6827] lowmem_reserve[]: 0 0 1 1 1 [ 186.066191][ T6827] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 186.067121][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 186.067160][ T6827] Node 1 Normal free:3928160kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:0kB free_cma:0kB [ 186.067327][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 186.284954][ T6827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.293930][ T6827] Node 0 DMA32: 909*4kB (UME) 3658*8kB (UME) 2194*16kB (UME) 1069*32kB (UME) 472*64kB (UME) 125*128kB (UME) 22*256kB (UME) 9*512kB (ME) 3*1024kB (UM) 4*2048kB (UME) 249*4096kB (UM) = 1189828kB [ 186.296722][ T6827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 186.297044][ T6827] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 13*16kB (UM) 18*32kB (UM) 12*64kB (UM) 6*128kB (UM) 1*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 958*4096kB (M) = 3928160kB [ 186.417935][ T6827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.417954][ T6827] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 186.417970][ T6827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.432205][ T6827] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 186.432227][ T6827] 76227 total pagecache pages [ 186.432234][ T6827] 0 pages in swap cache [ 186.432241][ T6827] Free swap = 124996kB [ 186.432248][ T6827] Total swap = 124996kB [ 186.432257][ T6827] 2097051 pages RAM [ 186.432264][ T6827] 0 pages HighMem/MovableOnly [ 186.432271][ T6827] 434240 pages reserved [ 186.432278][ T6827] 0 pages cma reserved [ 190.490805][ T6868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.668731][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 190.838746][ T5633] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.000362][ T5633] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.032958][ T5633] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.032977][ T5633] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.032989][ T5633] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.101223][ T5633] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.101254][ T5633] usb 1-1: Product: syz [ 191.101269][ T5633] usb 1-1: Manufacturer: syz [ 191.101283][ T5633] usb 1-1: SerialNumber: syz [ 191.131793][ T5633] usb 1-1: config 0 descriptor?? [ 191.177164][ T5633] usb 1-1: selecting invalid altsetting 0 [ 191.677752][ T6862] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 191.911855][ T6886] Invalid argument reading file caps for ./file0 [ 193.064816][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 193.135291][ T6910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.577621][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.739788][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 193.744536][ T24] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 193.765695][ T24] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 193.765719][ T24] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.765733][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 193.791308][ T6914] Invalid argument reading file caps for ./file0 [ 193.826514][ T24] usb 4-1: string descriptor 0 read error: -22 [ 193.826590][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.879416][ T6909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.985529][ T24] usb 1-1: USB disconnect, device number 18 [ 194.300750][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300806][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468701][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 195.327502][ T981] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 195.477762][ T981] usb 1-1: device descriptor read/64, error -71 [ 195.717518][ T981] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 195.765341][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.858609][ T981] usb 1-1: device descriptor read/64, error -71 [ 195.976693][ T24] usb 4-1: USB disconnect, device number 8 [ 195.977870][ T981] usb usb1-port1: attempt power cycle [ 196.367683][ T981] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 196.393625][ T981] usb 1-1: device descriptor read/8, error -71 [ 196.630371][ T981] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 196.665874][ T981] usb 1-1: device descriptor read/8, error -71 [ 196.773129][ T981] usb usb1-port1: unable to enumerate USB device [ 198.111670][ T6962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.847318][ T6976] Invalid argument reading file caps for ./file0 [ 198.956062][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 199.037522][ T981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 199.082584][ T6980] tipc: Enabling of bearer rejected, failed to enable media [ 199.188395][ T981] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.205825][ T981] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.205845][ T981] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.205857][ T981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.221908][ T981] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.221925][ T981] usb 5-1: Product: syz [ 199.221932][ T981] usb 5-1: Manufacturer: syz [ 199.221940][ T981] usb 5-1: SerialNumber: syz [ 199.242563][ T981] usb 5-1: config 0 descriptor?? [ 199.294310][ T981] usb 5-1: selecting invalid altsetting 0 [ 200.960489][ T6987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.688856][ T6987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 202.136691][ T5633] usb 5-1: USB disconnect, device number 12 [ 202.308867][ T7010] Invalid argument reading file caps for ./file0 [ 202.338330][ T7012] tipc: Enabling of bearer rejected, failed to enable media [ 202.444649][ T30] kauditd_printk_skb: 557 callbacks suppressed [ 202.444667][ T30] audit: type=1326 audit(1793327466.614:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.445925][ T30] audit: type=1326 audit(1793327466.614:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.508250][ T30] audit: type=1326 audit(1793327466.684:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.510205][ T30] audit: type=1326 audit(1793327466.684:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.512453][ T30] audit: type=1326 audit(1793327466.684:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.515526][ T30] audit: type=1326 audit(1793327466.684:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.515806][ T30] audit: type=1326 audit(1793327466.684:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.519664][ T30] audit: type=1326 audit(1793327466.694:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.520603][ T30] audit: type=1326 audit(1793327466.694:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 202.529864][ T30] audit: type=1326 audit(1793327466.704:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa11cd9f559 code=0x7ffc0000 [ 203.177618][ T5633] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.327558][ T5633] usb 5-1: Using ep0 maxpacket: 16 [ 203.328782][ T5633] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 203.367789][ T7029] [ 203.370140][ T7029] ============================================ [ 203.376280][ T7029] WARNING: possible recursive locking detected [ 203.382420][ T7029] syzkaller #0 Tainted: G L [ 203.388465][ T7029] -------------------------------------------- [ 203.394609][ T7029] syz.1.272/7029 is trying to acquire lock: [ 203.400498][ T7029] ffff888027db9368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 203.411238][ T7029] [ 203.411238][ T7029] but task is already holding lock: [ 203.418325][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.418349][ T5633] usb 5-1: Product: syz [ 203.418362][ T5633] usb 5-1: Manufacturer: syz [ 203.418376][ T5633] usb 5-1: SerialNumber: syz [ 203.439782][ T7029] ffff888027db9368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 203.450199][ T7029] [ 203.450199][ T7029] other info that might help us debug this: [ 203.458236][ T7029] Possible unsafe locking scenario: [ 203.458236][ T7029] [ 203.465691][ T7029] CPU0 [ 203.468960][ T7029] ---- [ 203.472218][ T7029] lock(&sb->s_type->i_mutex_key#10); [ 203.477661][ T7029] lock(&sb->s_type->i_mutex_key#10); [ 203.483100][ T7029] [ 203.483100][ T7029] *** DEADLOCK *** [ 203.483100][ T7029] [ 203.491220][ T7029] May be due to missing lock nesting notation [ 203.491220][ T7029] [ 203.499517][ T7029] locks held by syz.1.272/7029: 1, last CPU#1: [ 203.505648][ T7029] #0: ffff888027db9368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 203.516503][ T7029] [ 203.516503][ T7029] stack backtrace: [ 203.522378][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.1.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.533203][ T7029] Tainted: [L]=SOFTLOCKUP [ 203.537504][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.547554][ T7029] Call Trace: [ 203.550815][ T7029] [ 203.553730][ T7029] dump_stack_lvl+0xe8/0x150 [ 203.558309][ T7029] print_deadlock_bug+0x27a/0x290 [ 203.563321][ T7029] __lock_acquire+0x25db/0x2de0 [ 203.568181][ T7029] ? __lock_acquire+0x747/0x2de0 [ 203.573110][ T7029] lock_acquire+0x115/0x350 [ 203.577597][ T7029] ? blkdev_buffered_write+0xd7/0x160 [ 203.582986][ T7029] down_read+0x45/0x320 [ 203.587128][ T7029] ? blkdev_buffered_write+0xd7/0x160 [ 203.592482][ T7029] blkdev_buffered_write+0xd7/0x160 [ 203.597664][ T7029] blkdev_write_iter+0x6d5/0x810 [ 203.602584][ T7029] iter_file_splice_write+0xa31/0x1240 [ 203.608029][ T7029] ? __pfx_iter_file_splice_write+0x10/0x10 [ 203.613902][ T7029] ? rcu_is_watching+0x16/0xb0 [ 203.618655][ T7029] ? __pfx_iter_file_splice_write+0x10/0x10 [ 203.624530][ T7029] direct_splice_actor+0x101/0x160 [ 203.629623][ T7029] splice_direct_to_actor+0x57b/0xcb0 [ 203.634982][ T7029] ? __pfx_direct_splice_actor+0x10/0x10 [ 203.640591][ T7029] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 203.646464][ T7029] do_splice_direct+0x195/0x290 [ 203.651295][ T7029] ? __pfx_do_splice_direct+0x10/0x10 [ 203.656649][ T7029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 203.662525][ T7029] ? bpf_lsm_file_permission+0x9/0x20 [ 203.667876][ T7029] ? security_file_permission+0x75/0x260 [ 203.673487][ T7029] ? rw_verify_area+0x203/0x4c0 [ 203.678317][ T7029] ? fdget+0x1ac/0x250 [ 203.682363][ T7029] do_sendfile+0x52e/0x7c0 [ 203.686758][ T7029] ? __pfx_do_sendfile+0x10/0x10 [ 203.691672][ T7029] ? __se_sys_futex+0x3a8/0x450 [ 203.696500][ T7029] __se_sys_sendfile64+0x144/0x1a0 [ 203.701590][ T7029] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 203.707208][ T7029] do_syscall_64+0x166/0x520 [ 203.711782][ T7029] ? trace_irq_disable+0x3b/0x140 [ 203.716800][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.722855][ T7029] ? clear_bhb_loop+0x70/0xc0 [ 203.727526][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.733418][ T7029] RIP: 0033:0x7f309659f559 [ 203.737836][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.757428][ T7029] RSP: 002b:00007f30947f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 203.765842][ T7029] RAX: ffffffffffffffda RBX: 00007f3096826090 RCX: 00007f309659f559 [ 203.773793][ T7029] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 203.781743][ T7029] RBP: 00007f3096636b20 R08: 0000000000000000 R09: 0000000000000000 [ 203.789691][ T7029] R10: 00000001002000ff R11: 0000000000000246 R12: 0000000000000000 [ 203.797653][ T7029] R13: 00007f3096826128 R14: 00007f3096826090 R15: 00007f309694fa48 [ 203.805616][ T7029] [ 204.709012][ T5633] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 204.709507][ T5633] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 204.740058][ T5633] usb 5-1: USB disconnect, device number 13 [ 204.765278][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory